last executing test programs: 16m57.031819328s ago: executing program 1 (id=411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x8100}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 16m56.958976358s ago: executing program 1 (id=413): r0 = socket(0x15, 0x5, 0x0) unshare(0x20000400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a50fffffffc44000000080a010100000000000000000a0000070900020073797a31000000000900010073797a31"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000000000000000007000002050005000200000005000400000000000c000780080012400ffffffc14000300686173683a69702c706f72742c6970000500010007000000090002"], 0x58}}, 0x8000) 16m56.793522496s ago: executing program 1 (id=414): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(0x0, 0xfff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0xffa1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 16m54.263860399s ago: executing program 1 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_PARMS={0x18, 0x1, {0xb899, 0x1, 0x0, 0x4, 0x400}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x5}) r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x9, 0x800) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x238) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r1, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x103, 0x1d, 0x100, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c964dbd5236c1ed50a30d651df5b2b00000000000000000000080000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x16, &(0x7f0000000980)=@raw=[@generic={0x8, 0x2, 0x1, 0x6, 0x7}, @call={0x85, 0x0, 0x0, 0x28}, @ldst={0x0, 0x2, 0x6, 0x8, 0x1, 0xfffffffffffffff8, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0xb, 0x3, 0x0, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x16, &(0x7f0000000980)=@raw=[@generic={0x8, 0x2, 0x1, 0x6, 0x7}, @call={0x85, 0x0, 0x0, 0x28}, @ldst={0x0, 0x2, 0x6, 0x8, 0x1, 0xfffffffffffffff8, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0xb, 0x3, 0x0, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) read(r7, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000640)="e889d3d425551303876b350c690040000000000000e486dbd639bc9a47d672ee2c6e9e7fdf64d2ac67889974f412bd3c3e01f646d3", 0x35}, {&(0x7f0000000880)="4a4c48f1eae92b5a33e9b13992e8e22a95c7e4d51a02f3b820572bbbe592dd6098242f1c4f728807aaf6732703d86e427eb7d11e07661971e80acb1d318fb17290ceba246040a381dbcb9c0dcfe52d42ad2de84952a48b6cf277ec5bea9e8c38777214a3aa9d5eec11ebd159c5a2ddf5955a06128d2b187c503ae0991eb5008dd9ceaf79480241880a3074d3f7ed291916a63de8e5f12bdade906680a1f700fda701a4538980958d507af187393913ac0eb426eaa3354d5915a139f083a8d2126cb0b18ecc2219ee9fe216762c83f3693f827d9786a54e63db43eefa3445", 0xde}, {&(0x7f00000007c0)="f7c42ced158757c977854fea679525dc206d8d023ba63db079bcb6e22922fa8d75469431f93289032570b3876d77e5a930e92eca8b06a602e1d1ec406b58de398c8ba16d03c64c3afb8df7e02fa35954937b39561c6ae742d4e79f21cbd1d205642df5649a1f4de46d8dbf2693a4df25ac95f63978787dd760e20b3092a6761d202cd02ffa", 0x85}, {&(0x7f0000000700)="27dbdf452c8cfaa059bae50bb09dd4b3ae08fa3cedf213356a0bc1614e86ddd3b3c3bba2794fb965aebecd62742375097f7f1380567daa45e25b1fbd29d204632f5e6874d1d50c78aa7515e6986b9c1826d21b6fd9c41f66f0695df734cfa10aa7e6d0540000000000", 0x69}], 0x4) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r6, 0x0, 0x200000000622c, 0x0) (async) splice(r2, 0x0, r6, 0x0, 0x200000000622c, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x8b, &(0x7f0000000100)=""/139, 0x40f00}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x8b, &(0x7f0000000100)=""/139, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000001c0)='/dev/fb0\x00', 0x4) 16m53.980431989s ago: executing program 1 (id=423): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}], 0x40000cf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) 16m53.165634068s ago: executing program 1 (id=427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14ff920026000100000000000000000006"], 0x14}], 0x1}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16m52.592692008s ago: executing program 32 (id=427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14ff920026000100000000000000000006"], 0x14}], 0x1}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m43.368092197s ago: executing program 3 (id=3086): r0 = semget$private(0x0, 0x6, 0x431) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x801) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, {[@lsrr={0x83, 0x7, 0xd0, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) sendmmsg$inet6(r5, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="b481678b7eb1576a06d23428f6a97a768f18e62d7c25899d1eaa790e6e23885932eab98406eb430c46d872078f14d09bf2ad9a6247dbbb422dab8b60fc120a8451802bf73ceacbdf3cd83888adbb526d5671c737c6ead282d72d1dc1250120cfa7f80698aa01772d9de3614cc6243e0b8def623f5fd6325a9a5430dab4ab824e3facf68e0b4e0ae8180485b8dae1ea0f0faa5c1444858182e26e4eb3", 0x9c}, {&(0x7f0000000500)="d2c3159c5f14748c485ab682341671f77746eb9ebc654f199070ebb7bcaf2f348ef2315f65a1724e06fdda42b67f6de20b18ae15a1508ff54964eb852a8bea1c7bc8157159d5637c87571d38883e1290c9d128ccde33d9c79ba519192b6dbd0dfd7c35367c20b86ac1d9fd15d89ea63ed2869f7bdd481ac683fb1a055467e6c98e4e91a6a85d5e9b7cfaf1c60bb369f416636f02f526e5941575ad", 0x9b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000600)="04a2bc22ffe8d179a95ce775a3ed255e2ecdc9eb72c6016bd2905d469bfea340a0d242c93729bca1e1a0c0d873757dbc4d3f148002b3601e7ee61d093911c5a335987987866e22a75e5d1b333a49035621e8e94ac7178b8f868791caa1887949d43616495c197a92472ad4c65c30697e1f144455bbe9653ba8794ba3e9bb6612d0a590bda52a57af5b8b07174b4589ef4660586ff4e89527cc556432c1c1eb2e25c165e2b6667e", 0xa7}, {&(0x7f00000006c0)="99f897af6b14f7521c85c501d59db19f8f0de1194919ded7f179c82e5512992e8ea9d2f3fba4daccca3eee", 0x2b}, {&(0x7f0000000bc0)="b4f28cd0e38d2150a0ca5968242b1bce6af9258cd57432b87ac47d3721ef0f25b80647628f623529465c78bd2e097953f9178b241ad38d7dc67f28050c9c2370b0d5573cb640a2a6c5b94b7b43dccdd3a0fb8706c1118dbb27ce4f6752d547661bf00fe361cca86776d24600c30ef93991857632d9d503723d97e05442c89bcd33bf5a2d3dbf9a83811825d416a65363c80f354c1c0edeeb110cfd011cdff1a7b0094fd6e62bd76185b7bf45cde987499cf5406fe1f54955740f0466f000c5abe03540b399998435e5d46ba67adc009aad852f461cd1d0968a3a06eb643948ec3f5783f7946a7381b1576690110e5b8b20e6b60004586034b89a3d4192589e40c956debedd61e62c03406d3c8cf59fdc9e6a71fab2efa6cf65411ae85e6e90075394850fa8503d482ad399e1b4a9462d5e414559f358345ef6248f5285c9ae926d248549311750c3b4429fe06fce7621858874fd7a89c64122a2026642c6d7e7d9f4636dd04f601f62d02bad02ced0392d26a479d77830176a6bf92c95d984a7beec1606eb887d0814f9b9df3c1442442a1a34fd1b621dc9504b03979b171226f42655d04bbf4f7fbd53d5352ad981d34870e2c34c64e825a19a37c1f82d080530bafe7a80a6987eeeed978bd513a72409fb687afd9df0a61ecf1e32be056c87213e4fd0ce961aa5cda1836205decb9017141edf27fde99296f5ac227a774904056b89a0bc6a6b30da4858e26cea08f9ccd16d290367502c8d5caf6225211c6c32039c33bb9e1dcb91cb23d14fdc5f3432ed8c1cbf1465359a46595ee28946f8ccee4e26723c721235e89e5780dbdc48c1fcce583d2dbb2b8f7e808e83722a2a131259578b9bd9660c7c0a26925d9442e0fe8038e20208dbe3df084d9c12f4883f748933db0da17673e22927350e2d7dbe4a1130da780543873dffc67c5f84f31a8157ea3ebd09e2839cc6467468ebb2217b2d16e2d97b764e0dbb270a71409dc45853448ff4cc5ef8e79bfbd0f2679a8ba7ecd8508419d515ce42d95371e1dae36329a639972071be44a334d912693496568b6cdfad812cb1cba2a042f7867c9967eb050aff5f6e49553b7a0c02c0e5f946da6b9505c0e040dfaf48e23195e82f0d8407c3889c3600f802293e25bbcaf1614ab9048b35a80597b7880a98c89f8bb5e521863295168d01d76a6c3e1566de82ef537fd2712aac722931b01e1ca59fa0baacba235abf6bfdbb0c84224fc995840c0c47316b3fa8266568942264e8d6650d2989204b32ae7cc0bcf6e33f52ca84cd7c8c0f6b989b0334aef1e4a19aa2449343482b3cb985271e6f94f2800a7c8e7fd17404ff2b858503080d4c4fc4a684e9fd6642f8dd4779babef6daaa6dc468d12bbcc00b36caf11430d455992587a2add761ce8c2ecfcfae7eee96b60bf518614409576171bdc2dc3e4ceb385e5bec27d62b2f2d3f7f8600cd7ac4caceec7c2a3769f3240008811734a71508f09ff8c05b122d83afced76a845c89569ee4988881a4b32ebb061f2bc12fabacdd084132194f1f30024a89fabc66d628e0b4aa940c1e70c42b0c3a2452e2b5421bd26822abbeeb034b730455951bb918e8760dc9bd130b50e81b1b60e02ea18e81cc32b8c7ab65fdfc0bccf8b445f45697d56382cc3eee55e67908dba3453cdb0c4019ab3fb9ff21a080395bb48acd2d6296709dd1710356cb3806b6a1e1be1d931cd5e60a6d4d6b0ba790ab9566a18e2fc226bdcb006f1ddbbc4fc656d0ea63eae24d9cac385e367f18f4184a3e01d3587098d288506711146cce962add7289d08d4c039f021239e40d840850a7379d59da880309afa7a67b4c3bae0a3fba618e2740c0ba2b35521ce8a37de8260faf94988cd111e02b02997d10b1bef53e633a020d3ec219c525ecffaa5404d399e0433493ad11c6d04ce1cded2a3cb3ed52c2479faf9f0c7dde0e8148b43154a29b3c61acd3b8b17fcb432a224d37c7b1a247f6fb158d46af4151e11e459f06ea6b80e217ebbc53e00e0393c254034c0e94e24cbb8409fed305e2e8507347e15ba3ba8f2f6d2b122b2ace13aa6a0cd3a672cc02511c57f5cbc3c2c9f4123ac33088b21829e22d3bd88d13320cf940b7cb896595d05046eb4ba2cc587d0bbc39103d2e6fb0ca28bca3f6d2824da30a2edf9c759c04db1bb38c21973b8a3d2a1d5e7c055e0c1e77a4013ebf69108d159df6fb43dec385694ba884edf506f9a5e5ea2825f7f86b7c7a366b1c0dfcd4523dbf343736456333df6c5ad2692b8f9f54ac495952635248197a36e3aedbe9a0f00bf73b2f5b6ad940f410cc68cdbba4017ebc3f3e71d71892307ee790997c5c465d933b352208e5e5352e9a1b95a6aac11e5086df7e7db940746b48700cdf744ab3c774c114303bdc83e3588c8e7fbbd975ee488ce1c7a379c3ff121c0ca255fd24767523b2db2b1615769dd3683f86c5eb8ee9dacc0f306245b3dedd29d541dc52b154e5d0f08d9239d598df2ac13e350e625fc9179c8e3541321bd4332051f9151c7e471bef8428de44770bde022dd75b4232e63ad54c1f09585a9df22b1ee93af299db44178bc50f0de64f15a6f3b72c25be6a9b8f86d96983403cbc5dc98f48d50b7393a5a3dab1b68411264612531017a5cf09ceb49af181c6a0ff566d12dd7cd7a55602555a525e4467b72c90d78d65d1c332641980e76f5c0717d8fa5f620de380fe2b024ee44d668a0d81a36bf6f12bc70633e811e8cfababcd539ce8245852931e40967f66616bf2c411b30e2af6fc076f26f60c2865b046b7ca33a82c3735e83b80d42057d1815ad13df7f89960d722f66a8caae259a1bf20a00737673385e5ef5a55e0a49794fd22c8db2b47d2946bd08d436ea13c685b342d0d4cc9f0ae1a4e209b623a241a6c477b01ad9ccfabadb44602af52ac582175ead5d34a2845840391ca18e2cc224eb02cef4f71ed0ac2bd72526452233ff248565dbe4092ba8ebbe27bd27b36dcbd487997d9cd7645bb3dbc6147d08338d2b43175f2f086b4a9ab248141bc88bd50dd2973cb8ee3dbe4c3cda6579911c855f5cdca86d2d14395499cb0c105d4656300bcbde5888804dbec7aa639ba015b635f5fbf629f2d27712b3a12556bba38d73a6ca749327eabb5e6665911b6491047dc6401be05652657724967eb1cf5ce7e015cccb2656c76a7bf5413049f3e611ad62d84548cd495fa2adc50c2d87c753666cb612588ee120362a99bc94bed08a1dc97138ef3bb94a99c0b6ac751f9c9f6daef07823a127c90e2f19a5f624d41260e9d79252311f25d89e05c1825ef80c061fcb0c0623402129333f410ccc1a94b23f1084100c6d2dbb24b058c3aeb036ab3868b6b21a05bd22b4917bd04970a10de9a72adf64bbe60abc1e43f8b488e17d4e109d135226cee7ff8438b991626af7cfc13aebd27be20fb4f92b6647f61defbe985f7ac913cde24cf751945451121c0ca4c06ba93fb9880905558ef3e1282aa71b3cf7a45fc303fdfd403d6315b372da77e85c6092301b83bc1ac70fbb1c7746c3c8f23d72959bc8cca4e5b78fce557fbbb2ebf48ec75d3c2a2f85105c96f9c79987a45b89c9c2d13ee38918427428903b3867edb823144f828012ab6dfccb390a53d85efc303d09218932d024080c10e9833ba70fab811b612f130e3a7126406951286fb33e9c8168a3e71c7afa061693418f3e719f26ce81398a861becc14fe1c50149532a368f6b9a6c8a3463797c1d3555bd0bbaaf2c7ac52e11e03528cdf470f7ca1f973a6ad7137ece3690401a9b553f97aa66f804a102557bb64d6dc6b4b859cc8ea7c924eb4e5daa372a93559a8c6896620f7c1a0a1f1502203599a58a3197dff4f3855e2d726db2811c7b32064a3562feea854c120918c94823861a0730d68a1ede7ce5f935abe3850a6953ef30f61676c72f56c4dcf23c0dcfca215e044b7c424d9f079fc5cfaad6928ce5bdc38a86d29c7d740685af3c95b61ae314ce504299068979d0adf4b3afdbc31b44eaba3ab46354c377e3488fb8141dc8ec0fda03117ba0c24bbb13092fd7e3fe95a21e71cf55ec618d863bbe7fd166cc28ebc0606eb7b9b07b15e85b0029b63278d100ca83eceafd2be0ba0919a21269f440d67d8609d9b8c260e9f234512ef05056a206fff825303c697266ca4ca01b26a1788fc8d3aa3745adde7000787c8e5ad4c4c6fa39dc797daeed0dd0d262fc0c5c966e5384b41d85da6885a32e1f30d059a643b5ffafa3a22636e6a3fe5a8bcf199c6c31d6da0984cbaa7b243fe35754f303527c1e8376116f7da1f174c8f1a359fa09d4691426b86931434e29cc6ee1b9bd8b25da56945d2ec9b0d2f149a812b577da59e69a7ac433f8b4e0188092db712ef282a49a4594a7adafc0271286d447282cc0503c11686d9ad84e1d83d98bd80458da6eb7daf1d0db7fa019af7d864a0d983b92271b4516ae7e329871a1f490d9789382f74c409dc15657cb62b096513ffcfac0e61c765eb0de0115c2fbed3fe7e62907154ae7e57f14636aa1885188c665459c799de42375ed60d053335cb5effa1eff922b60d033ea5cd1c86e535c2e17e120b93813ea2911614a5e702162199218f2b13ee2a3fc48badbec13a1c823b5eaf06a86c710e46d76f418f5d10eb146d339eb7b0bea4760c891f6a81faebf91fa35436eb46f09b4cc84ca637e1bf06c0950731e45cd6b5188d7df56a07999a27ebb287416bad15acd4e234fe2581866c4df22bc73dd0d30e8762297c3a20b4dc0ff9a837b308b22ba398b01b7ca5d9ef3ffb6f0fe5a999898183ee1edd744469669665790c17ba2023d0f5d4100c0e034a9062d90e45334244d7b867054e3628f1d0cd7ea354171321ae6a7ab408bf4605f946dffbede68e21eeeaf0bc732f961d9d96105fafeaefc4769373a600a85cb21fdf7142fd1f5bec79c8c2f2d265ea1d8a01d31593b34140304414f5426a204dc2de518cde332b373b442b107ef9f9bf2bb839fcc9620a9e9dc4c7a53df13ae003096e03977beba270f4fa7598e8a1a7d612128da5a57d94510418cd465a9cbc6aeb10da16cea973f80d6b0047a43e0cd7df8e8ae531e8fa818afa046cd5fa21e6ecaaa4da1854927d9f2698ec44a4d9ed8b7882e482160cbcd778ad704776c5465abf2f8e28ca7732b3e6ba1d431f808267f6a3fade7c26477109b9b526a10fd0db3766a724e935bd52202b8db1ac6df13ca6199a9334cb4e05707af4766172962918f87d5119854a1cafec37d4c449c70fccb9a972c8675e86a7700100d6819a4db31d16a9ec89bc4ef7147f83627f24d431db29e048e3069912d0895b9d1a924e0bb02af930f76c39a927f412162eae89443d9abe458767fa182a8fe18a6b14d93691ee1099b4b722dd530b924b0279e24ba6616e89f1d6a6bf59743ad79ac98c2016cc4a729a1a363adaafc56da850ec2ab26c2ce34e5afb238c9969336a1fc50acd4f70dfa7bbbba77d40ca8400ca525db9eab2889622dbaf11ac597742919e491cf8f10b36773ed263a68febcafc32a0afcadaf0161d6994a5c0ddd927b266c3cd59136bf91bb279a353dc1154961147e57b54f9cc69bc77a2b1f9fe9f98b97976eca81b97f4ca40902ed1855a1acedd20aba8f4b235669855c62614bfb9d6f5765232f34b557d631bb56b676ce61459cbd737ccbc7f905e032283cef2e2fee3760f6c25209b6d9e6006b24d6de811f260c73e1bdf62e6eeb1e63b170f748e85312429e0337257b68b5a25fe28012438e67cded50f472ac9ddfc67446b", 0x1000}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="044c234860cedb3da29665ac8680df054414254ff2fcd59c5fdb3cbdbc40fa32ae3bbd46734e71fa1a1c65206ed112759364450241c607b3ea668181ca545fcbd4b4096f2b03cf49942d545a981cd63e006504", 0x53}, {&(0x7f0000002c40)="dea2cf07f6b14d91484d501f44", 0xd}, {&(0x7f0000002c80)="241e4d7f9d7cb328693055c0556e2d048dbf35fd27601bda72f4dcdf38904d6454cbbdb15dd9f2133862981e69f76ced4b3b6ccbbf1b721b45347c8be076529fe980117b", 0x44}], 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000380000000000000029000000370000001d0300000000000005020006050207e7040103c910ff020000000000000000000000000001000000140000000000000029000000080000000c00000000000000"], 0x1d8}}, {{&(0x7f0000003080)={0xa, 0x4e20, 0x56, @mcast1, 0x2}, 0x1c, &(0x7f0000003280)=[{&(0x7f00000030c0)="ba9d48954674d9f44636d2e7b8362ea98b4b17a555ccf4c5d42a369e69ca2b9bc4a43ff878f629991a8d787c13e5417c9ae65e9a81861da16bfd5ab32acd574e0268aa19879186c683267c470561fee4fe97700cc8dbacbf90765a2bdd3407a414ef82ac518ee7321716e92b58d1cb99620b41c35f70065fb181a5a02369c2a0f44cda066a938ea6d2cf03e6f2cc101df5a140ad9fcccf7ec76a23474e1d68f814b2ac58001b83458bf80751870a0f8041793036a0132211989d731fd29211b0ed010ae62e338c6490bc9bb46d88440036c148c7", 0xd4}, {&(0x7f00000031c0)="80cfec2930becb5374cde5bca7c7cfc0e97d595ce037839a1d8e64a83ddb279171e68f3a608da40af1312848da51320fb5600e5de145b29a7b26e168cf7a13cb25b807b030359ac38ebc18cf803a695f0df8f0a2e8577e9494930a93cdc30296c3251fda16f255e73905d14c617e8012e6e073a8c6e9965274e7132a7ff45a043a8450817fd621a921f9337db09a747251879f0883092c6fbe3bcacb48", 0x9d}], 0x2, &(0x7f00000032c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x595}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x29, 0x6, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x60}}, {{&(0x7f0000003340)={0xa, 0x4e22, 0x1ff, @private1, 0x4}, 0x1c, &(0x7f0000003880)=[{&(0x7f0000003380)="0e17586a7eb30259c7f364c499e43d91d74d56e6d76cb35246ea28be771031e9c415efa9d6a2536f488f14a8e26dda87cd4ce8f9d4065046d08f4c9861f59a7d97d5889b6fd2a5fedcb2726d37e9389680fda609b47f8c652ac7ebeef7c158c5dfb34813ee43dccc495e1d46f2dc4ac66092db550bf8189e17ac49110854bc73790cc5acf16dd36a0d1130a970f4cd4f4b7056383ab505ca356c10d9d37d8e39477cbd3e714d35c734637ac3433ffb505fae20c31a6d4f822a5bb300a9a1", 0xbe}, {&(0x7f0000003440)="fbd004b0ef5dc298f7954b1d3f55b6a0aaf0261b7f6f6c5844e4f3ced6974edc479fb9df8814d03e931307d3475d10eae4432ea03bbdb7ffdc6f99e3b7aa42a0e65c74df4a2e059d0796f2df7fb6e990de1b3e5d4bc41f4e6833116466b4bb5942709e35f5d5ac66", 0x68}, {0x0}, {&(0x7f0000003580)="32371ea696efe2c95b3ef7488745d5bf757f8936b56f548888fba8157e29b45d02dca396ee4641d2aaab21144078448f3af12c6ffc3c2990668bc1958d4249e9d57c5022c20bf7d30c095f5cd88a8d7eb731ebca3ca7cb320d65048bf363b4a8b8f16d7e7a53e0bcf0cf9e44c2d09c3a5d6ff439af", 0x75}, {&(0x7f0000003640)="e4f4a2f3259f73310fd4bc2046865b0952901666beeff00b51de999a62941e91fc5e06bc54fe437cd119eb5bce", 0x2d}, {&(0x7f0000003680)="b0475733e2e6cb9ee226897056e9c8fca03a0795e9a14233f6d39a1cd75519fcb7fc485d23d97997a2e400035cb1e95b193ff0ae5bd507fa39a35b723c33526c02bc4f7a4a0de973bc2b287985e924d10c365150d5942fce0d6c34d10cb16a3b9d2e6ac7899504c1b14fe4da5491080dc78f009129662401075ffc776594131b7c906592bbc170f8d32b3686cca39bd4daec2dd7f405378b29f68ec165ad2d6a861da388f51e6ed81678b3851bbc8418863ce44e9610b91e52fdb578273c0694408ecda0a1244dbf325f0d50c94e9854ad504813a6a5c2f1077c60712029bd9a6f85daff6805eaa1", 0xe8}, {&(0x7f0000003780)="5213260612f3e36e31a51b3bb42b9f47cdacc6fad34d55a1765a89f41928381283dc8d8e395f2504747413c77d7293e849bba0df58e8bfa5c69db5095b342aa4344f9eea9cfcc650b89a2bd1903dd782fc3db01c711480ad16862455dafb6cb3df06f3fad4ae45f560a4957fc76d17d92fd5a702928db9271e8db84432d8ddab29f66febcfae71b6d46d7b380c0f423e5eda7715c800cfe12219983b9d958ead380879d1f1b7aec7833851b152c12f6a2dcf53e971934f6cb70eaa748c14b2f137d6e4d7e2c788f9471ee464b0abc023d4995b34c9a7", 0xd6}], 0x7, &(0x7f0000003900)=[@hopopts={{0x160, 0x29, 0x36, {0x88, 0x28, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xad, "a2d925d3648233dde34c8e2414e164fc138d72432777487de258ca5e267c7a96d5f6a24c5053636b5401e026bed3b5fca9b8ac584e3de63b05eb149265fa8dd3d32af49c2f9d0afaa8634401731a2e50abcdc44c8bb3cb6610e6192ff04beabbaba83d2d122c0ea88a36226fd671e4915c4218cf1a3c0115c9a027f3e7c881dbaadbab1c0678d8466f3362edf78730189ea4a2cd954f10c0cfec3b0573fa837f106ca3cbf6ced9aee612daf110"}, @calipso={0x7, 0x30, {0x3, 0xa, 0xb, 0x8, [0x9, 0x0, 0x4, 0x5, 0x10]}}, @generic={0x3c, 0x49, "84fee841207410325082dc23a516ff8f9b7866a268fb58a8525777e2955441ab30ee0c21d0fae0e2a7c5de335c0470c9c535104976b312003c7738156e7684b2d547112a7d138fe7b0"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x3, [0x5]}}]}}}, @hoplimit_2292={{0x14}}, @dstopts={{0x28, 0x29, 0x37, {0x9d, 0x1, '\x00', [@jumbo, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x1d0}}, {{&(0x7f0000003b00)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000005680)=[{&(0x7f0000004500)="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", 0x400}, {&(0x7f0000005500)="1477b1cb88f1f3e9738129eca0a10fb9145428b12f561f4d62d127d17429a15ea777b2097a8859735cc4d754ec21bfc773b817228c2fae3b75608afcbd3d6ea1df32b1c8442f3221ad4f092bfae714b00a2d8aa736698faa", 0x58}, {&(0x7f0000005580)="a6c3bfa7551382fd8207cc0dd9097106150a8a284f57671aaad9c7eac90b2d9bb46508574dad21981622edfbd30af57240e75684255c8fbee2cc768fb2f2dde1d137ad679c39b4161737c1d4fc5ec2ef", 0x50}, {&(0x7f0000005640)="4d643c2d578af46c889b4c2ea7e5", 0xe}], 0x4, &(0x7f00000056c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x20, 0x29, 0x36, {0x33, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x38}}], 0x5, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2/../file0\x00', 0x2028, 0x150) 4m42.344352398s ago: executing program 3 (id=3090): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) socket$kcm(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x2000001c}) dup3(r2, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLINK(r8, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0xc000) landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x1008, r1}, 0x0) 4m41.184345564s ago: executing program 3 (id=3093): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x4) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000780)=0x9a0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd54, 0xffffffffffffffff}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03", @ANYRESHEX=r0], 0xd8) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000080)={0x0, 0x7}) 4m39.930002854s ago: executing program 3 (id=3097): syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macsec0\x00'}) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090000070000000000001c140000fe000001000000000800010000000400"], 0x24}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090000070000000000001c140000fe000001000000000800010000000400"], 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0x7, 0x9, 0x3ff}, 0x3c) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010700000000000000000b0000000e0001"], 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010700000000000000000b0000000e0001"], 0x34}}, 0x0) 4m36.843785379s ago: executing program 3 (id=3108): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3e, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0xfffffff5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m35.86115402s ago: executing program 3 (id=3112): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r1}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="48008c001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 4m35.454400158s ago: executing program 33 (id=3112): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r1}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="48008c001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 10.893138398s ago: executing program 4 (id=4114): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b000400"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd54, 0xffffffffffffffff}, 0x78) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) r7 = memfd_create(0x0, 0x1) write$binfmt_elf32(r7, 0x0, 0xd8) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r6, 0x4008586f, 0x0) 9.687970072s ago: executing program 4 (id=4119): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000006f00008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = open(0x0, 0x406142, 0x122) fcntl$notify(r6, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00', {}, {}, 0xc002}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) io_uring_setup(0x483b, &(0x7f0000002fc0)={0x0, 0x6d28, 0x2, 0x0, 0x11f}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.664604082s ago: executing program 4 (id=4129): remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000) r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x9, 0xffffffff, 0x821e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x3}, [@RTA_PRIORITY={0x8, 0x6, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x30000001}, 0x24040844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x8000000, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x6, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_get_self_attr(0x66, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r4}, 0xc) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="2006cd"], 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003fe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='$\x00') 6.658876788s ago: executing program 0 (id=4137): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1a, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 5.333992983s ago: executing program 5 (id=4143): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x7f, 0xfffff034}, {0x6, 0x2}]}, 0x10) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a67}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48051}, 0x20008040) 4.834047057s ago: executing program 0 (id=4145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000140)={0x1, 0xd, "377bcda29ddcd56db465630eb9"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0x560c89bb) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x20) read$FUSE(r5, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = getpid() r8 = openat$cgroup_freezer_state(r4, &(0x7f0000002b00), 0x2, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x4, 0xc483, r7}) io_uring_setup(0xfffffffd, &(0x7f0000000300)={0x0, 0xc8a2, 0xc000, 0x8, 0x8c4}) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r1, &(0x7f0000002b40)={r3, r8, 0xd0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x5, 0xa, 0x3, 0x8}, {0x7fff, 0x42, 0x0, 0x7}, {0xf5a0, 0x5, 0x3, 0x3}]}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000380)=[{0x6, 0xfb, 0x5, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000100)={r11, 0x0, r10, 0x0, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000180)={r11, 0x2, r1, 0x3, 0x80000}) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket(0x10, 0x3, 0x0) listen(r5, 0x2af) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x642000, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r14, @ANYRES32=r0, @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x4c805}, 0x0) read(r14, 0x0, 0x0) setsockopt$sock_int(r12, 0x1, 0x1d, 0x0, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.648040041s ago: executing program 5 (id=4147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x5e55b37311de6d89, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 4.64561866s ago: executing program 4 (id=4149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x045\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000002c0)="c3", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x700}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$inet6(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="6e520aa2b06e63fe6a7f7b0fe06b670ad79cb3e35fa8e7d730f496ca053e2b9a4e7d7c621f4e596e8428591c35dfb000be7a8a674825aafe63dcccf7e68660b2a74b", 0x42}], 0x1}, 0x4000880) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r7, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) 4.484677089s ago: executing program 5 (id=4150): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/225, &(0x7f0000000140)=0xe1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0xf}, 0xff}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0xf}, 0xff}}}, 0x7) lseek(0xffffffffffffffff, 0x4, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @loopback}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f0000000580)) (async) pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 3.616629611s ago: executing program 4 (id=4151): io_setup(0x66, &(0x7f0000000400)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket(0x2b, 0x1, 0x1) r3 = memfd_create(0x0, 0x3) pwrite64(r3, &(0x7f0000000180), 0x0, 0x100004) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x8) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x78d9c8c660a6aed2, 0x2}}}, 0x17) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c70000fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3.289286316s ago: executing program 5 (id=4153): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, r1, 0x180000000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0x6, 0x6, 0x1, 0x7ff, 0xe2, r0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x100, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xec, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x43, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc, 0x7, {0xf000}}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x100}}, 0x0) 3.26344391s ago: executing program 0 (id=4154): open(&(0x7f0000000080)='./file0\x00', 0x400, 0x1) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/124, 0x7c}, 0x4}], 0x1, 0x0, &(0x7f0000001580)={r3, r4+10000000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0xb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) finit_module(0xffffffffffffffff, 0x0, 0x0) 2.602810088s ago: executing program 6 (id=4156): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x7000000}) 2.561659655s ago: executing program 2 (id=4157): sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, r0, 0x1, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = socket(0x840000000002, 0x3, 0x103) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001500)={'ip6gre0\x00', &(0x7f0000001480)={'syztnl2\x00', 0x0, 0x29, 0x4d, 0xe, 0x1, 0x25, @private0, @mcast1, 0x7, 0x80, 0x7, 0x4}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001880)={r2, 0x58, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001dc0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000100)="64ad91725440579d1943d5ae63423d63ee2318ac56b25bc116bd62e1d2a029089089333279c5b0e4e36124c73474ad0d493ad3c52109b05c0dbbe1500fd54bf3b4cd419a03aa6d4ce90c0ce6b4a815add23ea3de6004154339c6c7aa968c24e31029f5f11a1975ef49ac234337c809bc043da04c76d3882d2243d71bb3586e56615e23890beaed6170", 0x89}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="da65ac66a593b6cf7bdec86c24f6", 0xe}], 0x3, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000001380)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001440)=[{&(0x7f00000013c0)="ddd2f1a1b9ca17d9268fa16b3031d6a83c334f85e5a0bfdc69dd4d7bd30d60076976cce18406bb78e9d45f349b8e1af964b5918023f93599f465f7c15a6e63f61d", 0x41}], 0x1, &(0x7f0000001ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x10}}], 0x80}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001600)="68651f9249bf634a7c03438a93d921bfa626c2f33190024ec78e552f68868a4105bb20f48d3bdf07db6a4e0ef55220dcfdfb51f0b8a127da1a67e3dda368054d47c81cca467868fc", 0x48}, {&(0x7f0000001680)="0af608f7c19162e9d7cb18dd3419f7d9b2c0bbf5758722f39390508f452643325bed7a15cf9be5f6be2e822c43381e94d3b40ca03477eb12bd3c9060c18501cc241fb73f947174f1d81139799a523e45342fd3ac36b82c532cda6617522dca2c727a756b514aa4b817a6838225b5db5ae0c0990820518f08c473c46a4480794fdf2cb9ed9cbc2f93969d4171ac2900916b17180437f2aebf162713927f", 0x9d}, {&(0x7f0000001740)="1705d181b617db4f5b2b362e917236d19c501ca98cb7f8dcbb67d63b220fe3518bb9385685dd8068f29033fb387e03964f238df7464ea12dbb1379cf413dd7e59e12e3bcddde21eff98043b776c3943ff7", 0x51}], 0x3, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @empty}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001900)="6de95efad939cc033daff72431f9eb0e7ea33f575471c5f165eb5fb887cba40320a00e801b0e338d1b78e30c004d7a50d9acb9d9444da7a5f6d1adcc55d13e9476a386ee3690662413df2109e8e1b5cea2c32bd5ef", 0x55}, {&(0x7f0000001980)="06a7263a3b6d81c9faabb17936ee5525aad954a6", 0x14}, {&(0x7f00000019c0)="da475b7dd9f532fd8648516333d7ba87975048fd632587ea82d96c66221dc00031501d995f0f3524c3733c8fc3f34e758842d5e59bfda28f8f39e40bfe357cc632ede6a713e3082e94037440b7532a062f11dad51268b76708fa9eb29279f47f6659afea18a2b7721111941c9d95da79396eda2b992f7328b68916d8cd3d07e1306b89a4421c2ba511d384fbf42ca4aa4b973bf4339d422d927dd5a7edf65b516598f77d381c98dff2c531e1882680c17a63ad0cc6e29677801159799a978ea60f522e9561a1f70b2fdf0c308434da67e234b64f21df92956fc2c018253452d70d31819a8ee5", 0xe6}, {&(0x7f0000001ac0)="0eebaa39e71cfaada85484e6cb64373807993876ca8094c5fb55992b8f058a3b1b6807d7d205b5056e1a10897a2aaae898058df494994089647567b5a3baf95e73b27e9f9bb8133e77854d6d0b45ee5017a017f6db467c3fb5b4505b074fec3348508b8e815b31a18dcea7401c0359bd9cc8e8052298aa807ff1068eff0573969c903bf404251e80f8c4c7031cdaa920d028bc3030142c358a85dffc1be58a0305e5410ffbcf7a170207dac0eca9e39dee8fecd1304eb38d9d22f42c89221fadfb6f66dae82ed955fc", 0xc9}, {&(0x7f0000001bc0)="3063e7802081445a5868", 0xa}, {&(0x7f0000001c00)="02c0f083c074986f0bdabc510e523b4e49c081307561933794a8caffa0637ae3ae2a48e60cefd8cdf05329fb96a745f6907c73c8b2fa5f79060fdc32d32a7950e8acd95890569c236652bf416f84b4650ad6b43ac292a5b3ff7507244d558eb1", 0x60}, {&(0x7f0000001c80)="d721d0a0ba45d2e3c6d22eb72ceb649d450adf0d3e95bc66805087b501a25b3d1d2159f5f83ddb52645d0f76eb662e864a5d75960c9cf74d0b673678fd0aa89d731a8aa20f00fbc0c0a930fbc87d542b16ea884c03", 0x55}], 0x7, &(0x7f0000001d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x4, 0x0) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) 2.47182562s ago: executing program 6 (id=4158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa808000000000000000000f8210d0000aaa8fa017242ba9380d424000000000000002900000002200000", 0xfe60) 2.448242522s ago: executing program 2 (id=4159): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 2.417293742s ago: executing program 6 (id=4160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x18}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) 2.329921557s ago: executing program 5 (id=4161): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) socket$netlink(0x10, 0x3, 0x4) socket$inet(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.329288573s ago: executing program 6 (id=4162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000840000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000171c000180090001006d617371000000000c000280080002400000000814000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 2.27217782s ago: executing program 0 (id=4163): syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0, 0x0, 0x4000000, 0x1000000}]) 2.255390317s ago: executing program 2 (id=4164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000003f01000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2.206623985s ago: executing program 6 (id=4165): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) ftruncate(r0, 0x200002) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r3, r2, 0x0, 0x80001d00c0d0) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) (async) ftruncate(r0, 0x200002) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) (async) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) sendfile(r3, r2, 0x0, 0x80001d00c0d0) (async) 1.755809165s ago: executing program 2 (id=4166): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_usb_disconnect(r0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="b7", @ANYRES8], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/123, 0x7b}], 0x1) syz_usb_disconnect(r2) 1.741294627s ago: executing program 6 (id=4167): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100070000000000000006"], 0x14}], 0x1}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.588336987s ago: executing program 0 (id=4168): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x20000000, 0x0, 0x2804}, 0x0) 560.020224ms ago: executing program 4 (id=4169): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132404030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="4008dd000000dd0e180a181c4a4565393e819400d8cd7c5ba77c325f0e15725e18545393317259c5332fb914c703a90e2e5aac51564c54899f9d69eaf5ff42294e673d9c8dbdc854e1e8f194b5baf07add453bfe6da62bb3a48b9942e450ab4cce1fe7fc10c4c56c62ecd84b6a3ac40c906d22d3e09f6f60543466e11e03dcfcac953477792cac85493fa8dfe9fc76f4697b0bed40098702a25c44011cece0bd573bc6df46314a71dab76173c52dd464536fb3970beb856c55d9b96456124dbd7b47423d678d65a806a39cf017d2c3986e5574fd05bb649ae533de646fc809219160"], &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0009630000007abad206c0658985307f3339e8e29e16db1efea2b4b3914bba9d9566c52b03cf25c44b7e5951e625d57fdef7264352476984b6e7c943abcf4e0697afd3344f714f1e8d7ddfa84381020f327e530b862e9ba81dda760c08561b3626eade095a085ac4c0"], &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x10}}) r2 = dup3(r1, r1, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x20d, 0x0, 0x4}]}) socket(0x2, 0x80805, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x2, 0x10001, 0x0, 0x0, 0x9}) ioctl$int_in(r3, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r7, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x2c, @private=0xa010102, 0x4e21, 0x2, 'lblc\x00', 0x20, 0x8000, 0x7e}, {@rand_addr=0x64010101, 0x4e22, 0x1, 0x4, 0x0, 0xc}}, 0x44) r8 = socket(0xa, 0x2, 0xfd) close(r8) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f00000010c0)=@ll={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x475}}], 0x18}, 0x20004004) r9 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r9}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x24, 0x0, &(0x7f0000000300)="259a00f271a76d1708e70fd0e342768e1c35e5d9a9ef430195fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 195.001522ms ago: executing program 2 (id=4170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc, 0x7, {0x8000000}}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}}, 0x0) 165.507401ms ago: executing program 5 (id=4171): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) socket$kcm(0x10, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x60}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x101, 0x7, 0x8008, 0x2, 0x4, 0x1, 0x9, 0x6bf639bc}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090300000000000000002e"], 0x14}, 0x1, 0x0, 0xa6ff}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000340)={0x8e, 0x1, &(0x7f0000000180)=[0x4], 0x0, &(0x7f0000000200), &(0x7f0000000300)}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000854) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x66, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) 31.720643ms ago: executing program 2 (id=4172): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) rt_sigpending(&(0x7f0000000180), 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f00000002c0)) sendmmsg$inet6(r0, &(0x7f0000003880)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x805}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)='^', 0x1}], 0x1}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 0s ago: executing program 0 (id=4173): socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$full(0xffffff9c, 0x0, 0x8002, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d, 0x0, r0}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000500)) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000840)="940dca275864688a28f8834e4e9f299d3f16664ec6636a30fabda424c19871b6a9aafc446d724b2d5019f44ccff54f2cb6585ee3b942eddea8e5ff91412bbdc70285e06f12c902f87f5f40c55a45b6c8457822c3b150ddf078cfcb6cf449ed87d4494ab742490000", 0x68}, {0x0}, {&(0x7f0000000540)="275656041201fbcb74727943403908cb7df8b693700fe7ebedfdd1b6fee95058a55e24c1f5e2abf639a685dab392a337d15820dd4d8b99c00aa303893354ecb0f718d183b3130b3363bbf7a506", 0x4d}, {&(0x7f00000005c0)="ac5ecba7d921e968ebd97370a291ce1dfc5a2be891ed556c8f28063585acf94af4be2f5934fa2ae28d2e133383c0ab9b347f384c3b5af8f588e0ddb50524feb17550b431adc363dd577171ca4b4eb49c7adfc52883d7415234ec3c4794877c8f619a776c6b523ae68c7a8598e40d182d922c594a5cab96d9872da2ba9b0d4da157f70ae025d055d758f7db84146571c29b", 0x91}, {&(0x7f0000000680)="0b2cb4abea02dc3277862ed53ef69f67aac07373f875bcb837601c392d08f7c4084fe6a05cb275a4157db422757b2b7440a32e3dd6ffd350c1355a8f3cb6a081aa81a22901216b4be285f85cf18ae3830f598b5e359975f0a77181d8deb7", 0x5e}], 0x5) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) getrlimit(0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) kernel console output (not intermixed with test programs): et 64 out of bounds [ 1030.210680][T32324] tc action pedit offset 64 out of bounds [ 1030.216410][T32324] tc action pedit offset 64 out of bounds [ 1030.222120][T32324] tc action pedit offset 64 out of bounds [ 1030.227823][T32324] tc action pedit offset 64 out of bounds [ 1030.233547][T32324] tc action pedit offset 64 out of bounds [ 1030.239269][T32324] tc action pedit offset 64 out of bounds [ 1030.244997][T32324] tc action pedit offset 64 out of bounds [ 1030.250721][T32324] tc action pedit offset 64 out of bounds [ 1030.256451][T32324] tc action pedit offset 64 out of bounds [ 1030.262187][T32324] 0: reclassify loop, rule prio 0, protocol 800 [ 1030.268715][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.275913][ C1] bridge0: topology change detected, propagating [ 1030.282500][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.289704][ C1] bridge0: topology change detected, propagating [ 1030.525847][T32343] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1030.763707][T32345] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3553'. [ 1030.981612][T32351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.027729][T32351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.043256][T32364] netlink: 'syz.5.3556': attribute type 1 has an invalid length. [ 1031.054972][T32348] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1031.133651][T32364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.258367][ T5792] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1031.396944][T32364] vlan3: entered allmulticast mode [ 1031.405287][T32364] bond2: entered allmulticast mode [ 1031.433541][ T5792] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1031.441812][ T5792] usb 5-1: config 1 has no interface number 0 [ 1031.470804][ T5792] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1031.500036][ T5792] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.515124][ T5792] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1031.525570][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.539994][ T5792] usb 5-1: Product: syz [ 1031.549465][ T5792] usb 5-1: Manufacturer: syz [ 1031.639988][ T5792] usb 5-1: SerialNumber: syz [ 1031.671111][T32352] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1031.717676][ T5792] usb 5-1: Error in usbnet_get_endpoints (-22) [ 1031.867858][T32438] netlink: 'syz.0.3561': attribute type 3 has an invalid length. [ 1031.883513][T32438] netlink: 'syz.0.3561': attribute type 3 has an invalid length. [ 1031.891461][T32438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1031.946520][T32351] ucma_write: process 321 (syz.4.3555) changed security contexts after opening file descriptor, this is not allowed. [ 1031.968876][ T5792] usb 5-1: USB disconnect, device number 115 [ 1031.978282][T13037] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1032.151979][T13037] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1032.182226][T13037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.206791][T13037] usb 3-1: Product: syz [ 1032.222327][T13037] usb 3-1: Manufacturer: syz [ 1032.234912][T13037] usb 3-1: SerialNumber: syz [ 1032.259992][T13037] usb 3-1: config 0 descriptor?? [ 1032.283020][T13037] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 013 [ 1032.460143][T32451] netem: incorrect ge model size [ 1032.474399][T32451] netem: change failed [ 1032.858289][T32464] binder: 32463:32464 ioctl c0306201 200000000080 returned -14 [ 1032.894382][T32464] binder: 32463:32464 ioctl c0306201 2000000003c0 returned -14 [ 1032.955785][T13037] i2c i2c-1: connected i2c-tiny-usb device [ 1033.153588][ T5797] usb 3-1: USB disconnect, device number 13 [ 1033.298045][ T30] audit: type=1400 audit(2313.231:1811): avc: denied { read } for pid=32467 comm="syz.0.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1034.141508][ T30] audit: type=1800 audit(2314.141:1812): pid=32500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.3571" name="/newroot/85/file0" dev="tmpfs" ino=473 res=0 errno=0 [ 1035.671936][ T30] audit: type=1400 audit(2315.671:1813): avc: denied { ioctl } for pid=32524 comm="syz.6.3576" path="socket:[76782]" dev="sockfs" ino=76782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1035.697478][T32525] vxcan1: tx drop: invalid sa for name 0x4000000000000000 [ 1035.781024][ T30] audit: type=1400 audit(2315.691:1814): avc: denied { bind } for pid=32524 comm="syz.6.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1036.197585][T32530] openvswitch: netlink: EtherType 50a is less than min 600 [ 1036.733227][T32535] input: syz0 as /devices/virtual/input/input42 [ 1036.740144][T32543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=32543 comm=syz.2.3580 [ 1036.821047][ T30] audit: type=1400 audit(2316.811:1815): avc: denied { create } for pid=32542 comm="syz.2.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1036.888383][T32539] dvmrp1: entered allmulticast mode [ 1037.225944][ T30] audit: type=1400 audit(2316.841:1816): avc: denied { bind } for pid=32542 comm="syz.2.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1037.245347][T32539] dvmrp1: left allmulticast mode [ 1037.301280][ T30] audit: type=1400 audit(2316.841:1817): avc: denied { listen } for pid=32542 comm="syz.2.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1037.345238][T32557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1037.784085][T32570] netlink: 'syz.6.3583': attribute type 1 has an invalid length. [ 1038.074242][T32570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1038.220533][T14188] Bluetooth: hci1: link tx timeout [ 1038.232625][T14188] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1038.378089][ T5792] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1038.545873][ T5792] usb 3-1: config index 0 descriptor too short (expected 5668, got 36) [ 1038.554647][ T5792] usb 3-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1038.581512][ T5792] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1038.611366][ T5792] usb 3-1: config 3 has no interface number 0 [ 1038.622950][ T5792] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1038.642986][ T5792] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid maxpacket 8224, setting to 64 [ 1038.668062][ T5792] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1038.707973][T24818] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1038.717142][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.751258][ T5792] usb 3-1: Product: syz [ 1038.755479][ T5792] usb 3-1: Manufacturer: syz [ 1038.777090][ T5792] usb 3-1: SerialNumber: syz [ 1038.815753][T32610] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.889326][T24818] usb 1-1: Using ep0 maxpacket: 16 [ 1038.907362][T32570] vlan4: entered allmulticast mode [ 1038.913746][T32570] bond4: entered allmulticast mode [ 1038.920253][T24818] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1038.932959][T24818] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1038.976923][T24818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.022962][T24818] usb 1-1: Product: syz [ 1039.042701][T24818] usb 1-1: Manufacturer: syz [ 1039.066992][T24818] usb 1-1: SerialNumber: syz [ 1039.081618][ T5792] usb-storage 3-1:3.20: USB Mass Storage device detected [ 1039.111358][T24818] usb 1-1: config 0 descriptor?? [ 1039.145660][T24818] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1039.153844][ T5792] usb-storage 3-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1039.182086][T24818] usb 1-1: Detected FT232R [ 1039.194472][ T5792] scsi host1: usb-storage 3-1:3.20 [ 1039.244517][ T5792] usb 3-1: USB disconnect, device number 14 [ 1039.345485][T24818] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1039.375045][T24818] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1039.429504][T24818] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1039.448651][T24818] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1039.474338][T24818] usb 1-1: USB disconnect, device number 21 [ 1039.490103][T24818] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1039.510042][T24818] ftdi_sio 1-1:0.0: device disconnected [ 1039.875894][T32678] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1040.316260][T14188] Bluetooth: hci1: command 0x0406 tx timeout [ 1040.391008][T24818] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1041.388214][T32708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.396939][T32708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.438497][ T30] audit: type=1400 audit(2321.331:1818): avc: denied { read } for pid=32673 comm="syz.2.3590" lport=46117 faddr=::ffff:10.1.1.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1041.551058][ T30] audit: type=1400 audit(2321.501:1819): avc: denied { create } for pid=32702 comm="syz.6.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1041.589327][ T30] audit: type=1400 audit(2321.501:1820): avc: denied { ioctl } for pid=32702 comm="syz.6.3594" path="socket:[77445]" dev="sockfs" ino=77445 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1042.154773][T32734] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1042.213045][T32734] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1042.374838][T32734] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1042.464811][T32734] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1042.591398][T32734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1042.669098][T32734] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1042.790521][ T30] audit: type=1400 audit(2322.791:1821): avc: denied { write } for pid=32680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.969604][T32757] netlink: 'syz.0.3595': attribute type 13 has an invalid length. [ 1043.393635][T24818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1043.462314][T24818] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1043.487187][T24818] usb 3-1: can't read configurations, error -71 [ 1043.571973][ T30] audit: type=1400 audit(2323.561:1822): avc: denied { write } for pid=32766 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.651002][ T303] netlink: 'syz.4.3597': attribute type 2 has an invalid length. [ 1043.769332][T32734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1043.793815][T32734] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1043.849234][ T314] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 1044.018018][ T5718] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1044.193046][ T314] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.628928][ T345] block nbd0: server does not support multiple connections per device. [ 1044.645110][ T345] block nbd0: shutting down sockets [ 1045.388326][ T30] audit: type=1400 audit(2324.611:1823): avc: denied { ioctl } for pid=357 comm="syz.6.3601" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1046.129482][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 1046.136152][ T5718] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1046.147886][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.169012][ T372] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3602'. [ 1046.204038][ T5718] usb 5-1: config 0 descriptor?? [ 1046.239748][ T30] audit: type=1400 audit(2326.241:1824): avc: denied { setopt } for pid=376 comm="syz.5.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1046.262360][ T5718] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1046.287505][ T5718] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 1046.297278][ T30] audit: type=1400 audit(2326.241:1825): avc: denied { append } for pid=376 comm="syz.5.3603" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1046.331903][ T5718] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1046.376688][ T30] audit: type=1400 audit(2326.241:1826): avc: denied { map } for pid=376 comm="syz.5.3603" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1046.405806][ T5718] usb-storage 5-1:0.0: device ignored [ 1046.413001][ T30] audit: type=1400 audit(2326.241:1827): avc: denied { write execute } for pid=376 comm="syz.5.3603" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1046.443151][ T306] 9p: Bad value for 'rfdno' [ 1046.454096][ T30] audit: type=1400 audit(2582.443:1828): avc: denied { append } for pid=302 comm="syz.4.3597" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1046.486370][ T314] vlan7: entered allmulticast mode [ 1046.510834][ T391] netlink: 'syz.6.3605': attribute type 1 has an invalid length. [ 1046.520994][ T314] bond6: entered allmulticast mode [ 1046.953651][ T30] audit: type=1400 audit(2582.953:1829): avc: denied { write } for pid=315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.075881][ T391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1047.130989][ T30] audit: type=1400 audit(2583.113:1830): avc: denied { write } for pid=444 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.222961][ T402] vlan5: entered allmulticast mode [ 1047.230240][ T402] bond5: entered allmulticast mode [ 1047.258126][ T5718] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1047.402193][ T30] audit: type=1326 audit(2583.403:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=302 comm="syz.4.3597" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f017479cdd9 code=0x0 [ 1047.471323][ T5718] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1047.503892][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.563195][ T5718] usb 6-1: Product: syz [ 1047.574868][ T5718] usb 6-1: Manufacturer: syz [ 1047.588694][ T5718] usb 6-1: SerialNumber: syz [ 1047.616231][ T5718] usb 6-1: config 0 descriptor?? [ 1047.630826][ T5697] usb 5-1: USB disconnect, device number 116 [ 1047.645731][ T5718] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 032 [ 1047.865985][ T30] audit: type=1400 audit(2583.863:1832): avc: denied { write } for pid=448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.890678][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.911949][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.174986][ T30] audit: type=1400 audit(2584.173:1833): avc: denied { write } for pid=482 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.639082][ T5718] i2c i2c-1: failure reading functionality [ 1048.663466][ T5718] i2c i2c-1: connected i2c-tiny-usb device [ 1048.692940][ T5718] usb 6-1: USB disconnect, device number 32 [ 1048.714048][ T30] audit: type=1400 audit(2584.713:1834): avc: denied { write } for pid=492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.736695][T13037] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1048.780085][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.886007][ T531] tmpfs: Bad value for 'mpol' [ 1048.915553][T13037] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.968214][ T30] audit: type=1400 audit(2584.963:1835): avc: denied { read write } for pid=529 comm="syz.0.3616" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1049.098175][T13037] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1049.107531][T13037] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1049.123524][T13037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.184889][ T30] audit: type=1400 audit(2584.963:1836): avc: denied { open } for pid=529 comm="syz.0.3616" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1049.789581][ T30] audit: type=1400 audit(2585.163:1837): avc: denied { write } for pid=528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.841130][T13037] usb 5-1: config 0 descriptor?? [ 1050.958037][ T5718] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1051.127996][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 1051.143141][ T577] Cannot find del_set index 0 as target [ 1051.150164][ T5718] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1051.166820][ T5718] usb 3-1: config 0 has no interface number 0 [ 1051.181923][ T5718] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1051.207679][ T5718] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1051.235131][ T5718] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1051.254490][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.267041][ T5718] usb 3-1: Product: syz [ 1051.271607][ T5718] usb 3-1: Manufacturer: syz [ 1051.315693][ T5718] usb 3-1: SerialNumber: syz [ 1051.322821][ T5718] usb 3-1: config 0 descriptor?? [ 1051.849447][ T5718] radio-si470x 3-1:0.35: this is not a si470x device. [ 1052.588391][ T5718] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1052.651966][ T5718] usb 5-1: USB disconnect, device number 117 [ 1052.693602][ T5792] usb 3-1: USB disconnect, device number 17 [ 1053.239112][ T624] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3629'. [ 1053.492103][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1053.492118][ T30] audit: type=1400 audit(2589.493:1842): avc: denied { write } for pid=575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.632224][ T30] audit: type=1400 audit(2589.633:1843): avc: denied { write } for pid=635 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.273560][ T30] audit: type=1400 audit(2590.273:1844): avc: denied { append } for pid=639 comm="syz.0.3631" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1055.253798][ T650] netlink: 'syz.2.3633': attribute type 3 has an invalid length. [ 1055.416450][ T650] netlink: 'syz.2.3633': attribute type 3 has an invalid length. [ 1055.887793][ T650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1057.119321][ T30] audit: type=1400 audit(2593.123:1845): avc: denied { unmount } for pid=24164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1057.356669][ T686] fuse: Unknown parameter '0xffffffffffffffff' [ 1057.378737][ T686] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1057.386946][ T30] audit: type=1400 audit(2593.383:1846): avc: denied { map } for pid=682 comm="syz.0.3639" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1057.402519][ T684] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3639'. [ 1057.451237][ T30] audit: type=1400 audit(2593.383:1847): avc: denied { write } for pid=661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.583530][ T30] audit: type=1400 audit(2593.583:1848): avc: denied { write } for pid=697 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.660895][ T3101] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 1057.769476][ T5711] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1057.896488][ T3101] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1057.914817][ T3101] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1057.960003][ T3101] usb 5-1: can't read configurations, error -71 [ 1058.023002][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1058.117029][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.277201][ T5711] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1058.389473][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.432070][ T5711] usb 7-1: config 0 descriptor?? [ 1059.164792][ T5711] aquacomputer_d5next 0003:0C70:F0B6.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 1059.593436][ T5711] usb 7-1: USB disconnect, device number 21 [ 1059.664130][ T748] veth7: entered promiscuous mode [ 1059.744969][ T30] audit: type=1400 audit(2595.743:1849): avc: denied { write } for pid=710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.784540][ T748] veth7: entered allmulticast mode [ 1059.841246][ T750] fido_id[750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1059.893818][ T30] audit: type=1400 audit(2595.883:1850): avc: denied { write } for pid=781 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1060.373435][ T795] blktrace: Concurrent blktraces are not allowed on loop5 [ 1060.515020][ T810] netlink: 'syz.6.3651': attribute type 6 has an invalid length. [ 1060.543227][ T800] netlink: 'syz.6.3651': attribute type 6 has an invalid length. [ 1060.718260][ T5697] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1060.798006][ T5711] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1060.826709][ T824] netem: incorrect ge model size [ 1060.841081][ T824] netem: change failed [ 1060.890931][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 1060.904525][ T5697] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1060.915211][ T825] Cannot find add_set index 0 as target [ 1060.921460][ T5697] usb 3-1: config 0 has no interface number 0 [ 1060.928715][ T5697] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1060.941022][ T5697] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1060.954633][ T5697] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1060.964504][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.974475][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 1060.987487][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1061.018022][ T5697] usb 3-1: Product: syz [ 1061.022717][ T5697] usb 3-1: Manufacturer: syz [ 1061.027676][ T5697] usb 3-1: SerialNumber: syz [ 1061.035625][ T5711] usb 1-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 1061.045594][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.075220][ T5697] usb 3-1: config 0 descriptor?? [ 1061.080810][ T5711] usb 1-1: Product: syz [ 1061.086036][ T5711] usb 1-1: Manufacturer: syz [ 1061.101383][ T5711] usb 1-1: SerialNumber: syz [ 1061.289316][ T5697] radio-si470x 3-1:0.35: this is not a si470x device. [ 1061.329305][ T5697] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1061.371872][ T5697] usb 3-1: USB disconnect, device number 18 [ 1061.427481][ T5711] usb 1-1: USB disconnect, device number 22 [ 1061.503044][T14717] udevd[14717]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.056211][ T878] netlink: 'syz.2.3661': attribute type 4 has an invalid length. [ 1062.065734][ T878] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1062.103058][ T878] .`: renamed from bond0 (while UP) [ 1062.118148][ T30] audit: type=1400 audit(2599.115:1851): avc: denied { execute } for pid=875 comm="syz.2.3661" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1063.639469][ T895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1065.266309][ T906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1065.535421][ T912] block nbd0: server does not support multiple connections per device. [ 1065.545590][ T912] block nbd0: shutting down sockets [ 1066.269660][ T922] vlan6: entered allmulticast mode [ 1066.276759][ T922] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1066.323309][ T922] bridge0: port 3(vlan6) entered blocking state [ 1066.335550][ T922] bridge0: port 3(vlan6) entered disabled state [ 1066.405191][ T922] vlan6: entered promiscuous mode [ 1066.442667][ T922] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1066.502399][ T922] bridge0: port 3(vlan6) entered blocking state [ 1066.508780][ T922] bridge0: port 3(vlan6) entered forwarding state [ 1067.169451][T24818] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1067.179877][ T970] netlink: 'syz.0.3676': attribute type 4 has an invalid length. [ 1067.187750][ T970] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1067.252021][ T970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1067.694372][ T973] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1067.703553][ T973] IPv6: Can't replace route, no match found [ 1067.839240][ T30] audit: type=1400 audit(2860.829:1852): avc: denied { write } for pid=976 comm="syz.0.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1067.864513][ T983] netlink: 'syz.6.3679': attribute type 1 has an invalid length. [ 1067.874997][T24818] usb 6-1: Using ep0 maxpacket: 8 [ 1068.179975][T24818] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 1068.237985][T24818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.271576][T24818] usb 6-1: Product: syz [ 1068.285937][T24818] usb 6-1: Manufacturer: syz [ 1068.308479][T24818] usb 6-1: SerialNumber: syz [ 1068.418449][T24818] usb 6-1: config 0 descriptor?? [ 1068.439244][T24818] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1069.011777][T24818] usb 6-1: USB disconnect, device number 33 [ 1069.233738][ T1014] PKCS8: Unsupported PKCS#8 version [ 1069.272874][ T1014] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.3683'. [ 1069.282233][ T1014] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1069.537031][ T1024] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 1069.553702][ T1028] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 1070.044719][ T1040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3688'. [ 1070.378260][ T3101] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1071.428921][ T3101] usb 5-1: device descriptor read/64, error -71 [ 1071.699170][ T3101] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1071.727428][ T1085] netem: incorrect ge model size [ 1071.746977][ T1085] netem: change failed [ 1071.858693][ T3101] usb 5-1: device descriptor read/64, error -71 [ 1071.977548][ T1104] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1071.992454][ T3101] usb usb5-port1: attempt power cycle [ 1072.347964][ T3101] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1072.383725][ T3101] usb 5-1: device descriptor read/8, error -71 [ 1073.008507][ T5792] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1073.078023][ T3101] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1073.308783][ T5792] usb 3-1: Using ep0 maxpacket: 32 [ 1073.316148][ T3101] usb 5-1: device descriptor read/8, error -71 [ 1073.335971][ T5792] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1073.362561][ T5792] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1073.380679][ T5792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 161, changing to 11 [ 1073.411089][ T5792] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1073.434577][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.451804][ T5792] usb 3-1: Product: syz [ 1073.458375][ T3101] usb usb5-port1: unable to enumerate USB device [ 1073.466442][ T5792] usb 3-1: Manufacturer: syz [ 1073.476652][ T5792] usb 3-1: SerialNumber: syz [ 1073.484617][ T1145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3705'. [ 1073.498609][ T1126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.521629][ T1145] openvswitch: netlink: Flow actions attr not present in new flow. [ 1074.184047][ T30] audit: type=1400 audit(2867.179:1853): avc: denied { create } for pid=1125 comm="syz.2.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1074.240156][ T1155] openvswitch: netlink: EtherType 50a is less than min 600 [ 1074.487993][ T3101] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1074.638065][ T3101] usb 5-1: Using ep0 maxpacket: 16 [ 1074.645205][ T3101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1074.659720][ T3101] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1074.673503][ T3101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.682759][ T3101] usb 5-1: Product: syz [ 1074.687678][ T3101] usb 5-1: Manufacturer: syz [ 1074.700550][ T3101] usb 5-1: SerialNumber: syz [ 1074.715024][ T3101] usb 5-1: config 0 descriptor?? [ 1074.749919][ T3101] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1074.769386][ T3101] usb 5-1: Detected FT232R [ 1074.951340][ T3101] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1075.177748][ T3101] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1075.336597][ T1189] fuse: Unknown parameter 'group_id00000000000000000000' [ 1075.685907][ T1199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3713'. [ 1076.139006][ T5718] usb 5-1: USB disconnect, device number 124 [ 1076.202997][ T5718] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1076.216879][ T5718] ftdi_sio 5-1:0.0: device disconnected [ 1076.254833][ T5792] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1076.565517][ T1233] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1076.718898][ T5718] IPVS: starting estimator thread 0... [ 1077.252587][ T1234] IPVS: using max 38 ests per chain, 91200 per kthread [ 1077.614427][ T5792] usb 3-1: USB disconnect, device number 19 [ 1077.670216][ T30] audit: type=1400 audit(2870.629:1854): avc: denied { ioctl } for pid=1245 comm="syz.4.3718" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1077.851112][T14122] udevd[14122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.942751][ T30] audit: type=1400 audit(2870.939:1855): avc: denied { ioctl } for pid=1276 comm="syz.6.3722" path="socket:[79886]" dev="sockfs" ino=79886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1078.016253][ T1278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 1078.039143][ T1278] openvswitch: netlink: Flow actions attr not present in new flow. [ 1078.088096][ T5792] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1078.178132][T24818] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1078.251391][ T5792] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1078.260958][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.269197][ T5792] usb 3-1: Product: syz [ 1078.273470][ T5792] usb 3-1: Manufacturer: syz [ 1078.278911][ T5792] usb 3-1: SerialNumber: syz [ 1078.285200][ T5792] usb 3-1: config 0 descriptor?? [ 1078.295129][ T5792] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 020 [ 1078.337937][T24818] usb 7-1: Using ep0 maxpacket: 32 [ 1078.344597][T24818] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1078.355818][T24818] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1078.362623][T24818] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1078.371879][T24818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.382744][T24818] usb 7-1: config 0 descriptor?? [ 1078.449124][ T5697] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1078.484205][ T30] audit: type=1400 audit(2871.479:1856): avc: denied { append } for pid=1305 comm="syz.4.3726" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1078.525574][ T1258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.536641][ T30] audit: type=1400 audit(2871.479:1857): avc: denied { map } for pid=1305 comm="syz.4.3726" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1078.563400][ T1258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.580785][ T30] audit: type=1400 audit(2871.479:1858): avc: denied { execute } for pid=1305 comm="syz.4.3726" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1078.619341][ T5697] usb 6-1: Using ep0 maxpacket: 16 [ 1078.626315][ T5697] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1078.648625][ T5697] usb 6-1: config 0 has no interface number 0 [ 1078.662532][ T5697] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1078.674017][ T5697] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1078.684526][ T5697] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1078.696736][ T5697] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1078.707406][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.717636][ T5697] usb 6-1: Product: syz [ 1078.724312][ T5697] usb 6-1: Manufacturer: syz [ 1078.733017][ T5697] usb 6-1: SerialNumber: syz [ 1078.750529][ T5697] usb 6-1: config 0 descriptor?? [ 1078.756196][ T1295] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1078.764014][ T1295] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1078.915014][ T1277] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1078.921539][ T1277] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1078.941420][ T1277] vhci_hcd vhci_hcd.0: Device attached [ 1079.057381][ T1295] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1079.105290][ T1295] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1079.229262][ T5752] usb 46-1: SetAddress Request (2) to port 0 [ 1079.270674][ T5752] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1079.329049][ T5792] i2c i2c-1: connected i2c-tiny-usb device [ 1079.584047][ T1345] block nbd0: server does not support multiple connections per device. [ 1079.594862][ T1345] block nbd0: shutting down sockets [ 1079.631658][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.743350][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.809755][T24818] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 1080.065765][ T30] audit: type=1400 audit(2872.929:1859): avc: denied { mount } for pid=1293 comm="syz.5.3725" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1080.094153][ T1332] vhci_hcd: connection reset by peer [ 1080.103242][T14749] vhci_hcd vhci_hcd.6: stop threads [ 1080.113015][T14749] vhci_hcd vhci_hcd.6: release socket [ 1080.119100][T14749] vhci_hcd vhci_hcd.6: disconnect device [ 1080.193543][ T5792] usb 3-1: USB disconnect, device number 20 [ 1080.461354][T24818] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -110 [ 1080.492906][ T5697] sr9700 6-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet, b6:19:fa:8c:e3:61 [ 1080.596298][T24818] usb 7-1: USB disconnect, device number 22 [ 1080.615381][ T5697] usb 6-1: USB disconnect, device number 34 [ 1080.656255][ T5697] sr9700 6-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet [ 1080.731490][ T1405] blktrace: Concurrent blktraces are not allowed on loop5 [ 1080.948543][ T1422] netlink: 'syz.0.3733': attribute type 6 has an invalid length. [ 1081.027664][ T1418] netlink: 'syz.0.3733': attribute type 6 has an invalid length. [ 1081.318693][ T1433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1081.380308][ T1433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.401726][ T1433] ipvlan1: entered allmulticast mode [ 1081.440041][ T1433] bond0: entered allmulticast mode [ 1081.505575][ T1477] bridge11: entered allmulticast mode [ 1081.516621][ T1481] xt_hashlimit: size too large, truncated to 1048576 [ 1081.553107][ T1477] bond0: (slave bridge11): Enslaving as an active interface with an up link [ 1081.568060][ T5697] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1081.625370][ T1483] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1081.771056][ T5697] usb 7-1: Using ep0 maxpacket: 32 [ 1081.788768][ T1486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1081.801665][ T5697] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1081.831498][ T5697] usb 7-1: config 0 has no interface number 0 [ 1081.844565][ T1486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1081.859146][ T5697] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1081.914550][ T5697] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1081.932199][ T30] audit: type=1400 audit(2874.929:1860): avc: denied { ioctl } for pid=1478 comm="syz.5.3741" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1081.937710][ T5697] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1081.967529][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.978120][ T5697] usb 7-1: Product: syz [ 1082.008405][ T5697] usb 7-1: Manufacturer: syz [ 1082.021020][ T30] audit: type=1400 audit(2874.959:1861): avc: denied { map } for pid=1478 comm="syz.5.3741" path="socket:[79347]" dev="sockfs" ino=79347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1082.057561][ T5697] usb 7-1: SerialNumber: syz [ 1082.086495][ T5697] usb 7-1: config 0 descriptor?? [ 1082.111709][ T1490] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 1082.383709][ T5697] radio-si470x 7-1:0.35: this is not a si470x device. [ 1082.492798][ T1498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1082.728582][ T5697] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1082.841053][ T5697] usb 7-1: USB disconnect, device number 23 [ 1082.864259][ T30] audit: type=1400 audit(2875.859:1862): avc: denied { accept } for pid=1497 comm="syz.5.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1082.900380][ T1498] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1083.840870][ T1530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1083.900640][ T1530] openvswitch: netlink: Flow actions attr not present in new flow. [ 1084.119001][ T1554] netlink: 'syz.4.3752': attribute type 4 has an invalid length. [ 1084.126824][ T1554] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3752'. [ 1084.183173][ T1554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3752'. [ 1084.275515][ T5792] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1084.378079][ T5752] usb 46-1: device descriptor read/8, error -110 [ 1084.769778][ T5752] usb usb46-port1: attempt power cycle [ 1085.230048][ T1564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 1085.349511][ T5792] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1085.378158][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.391876][ T5792] usb 7-1: config 0 descriptor?? [ 1085.851116][ T1580] openvswitch: netlink: Key type 5382 is out of range max 32 [ 1085.898949][ T5752] usb usb46-port1: unable to enumerate USB device [ 1085.939148][ T30] audit: type=1400 audit(3134.938:1863): avc: denied { accept } for pid=1536 comm="syz.6.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1086.138056][ T1585] PKCS8: Unsupported PKCS#8 version [ 1086.302206][ T1588] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1086.311646][ T1588] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1086.478079][ T5792] usb 7-1: Cannot read MAC address [ 1086.525458][ T5792] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1086.537461][ T30] audit: type=1400 audit(3135.518:1864): avc: denied { getopt } for pid=1594 comm="syz.4.3759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1086.705598][ T5792] usb 7-1: USB disconnect, device number 24 [ 1087.270278][ T1612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3763'. [ 1087.272628][ T1613] fuse: Bad value for 'user_id' [ 1087.300969][ T1613] fuse: Bad value for 'user_id' [ 1087.359221][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1087.376253][ T1615] openvswitch: netlink: Flow actions attr not present in new flow. [ 1087.472710][ T1624] netlink: 'syz.4.3766': attribute type 1 has an invalid length. [ 1087.831235][ T1631] netem: incorrect ge model size [ 1087.836629][ T1631] netem: change failed [ 1087.970220][ T1636] openvswitch: netlink: EtherType 50a is less than min 600 [ 1087.981586][ T1640] x_tables: unsorted entry at hook 1 [ 1087.991630][ T1640] xt_socket: unknown flags 0x50 [ 1088.009008][ T1640] netlink: 'syz.5.3770': attribute type 5 has an invalid length. [ 1088.120844][ T1659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3774'. [ 1088.152399][ T30] audit: type=1400 audit(3137.148:1865): avc: denied { accept } for pid=1655 comm="syz.5.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1088.153366][ T5697] Process accounting resumed [ 1088.238303][T24818] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1088.366746][ T1668] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3776'. [ 1088.397982][T24818] usb 7-1: Using ep0 maxpacket: 16 [ 1088.404426][ T30] audit: type=1400 audit(3137.398:1866): avc: denied { lock } for pid=1667 comm="syz.2.3776" path="socket:[80391]" dev="sockfs" ino=80391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1088.440124][T24818] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1088.466314][ T30] audit: type=1400 audit(3137.458:1867): avc: denied { map } for pid=1682 comm="syz.0.3780" path="socket:[79631]" dev="sockfs" ino=79631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1088.497027][ T1685] netlink: 'syz.2.3781': attribute type 3 has an invalid length. [ 1088.501435][T24818] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1088.506100][ T1685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1088.516236][T24818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.531406][ T30] audit: type=1400 audit(3137.458:1868): avc: denied { read } for pid=1682 comm="syz.0.3780" path="socket:[79631]" dev="sockfs" ino=79631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1088.554906][T24818] usb 7-1: Product: syz [ 1088.559580][T24818] usb 7-1: Manufacturer: syz [ 1088.564200][T24818] usb 7-1: SerialNumber: syz [ 1088.571464][T24818] usb 7-1: config 0 descriptor?? [ 1088.583243][T24818] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1088.595450][T24818] usb 7-1: Detected FT232R [ 1088.650251][ T30] audit: type=1400 audit(3137.648:1869): avc: granted { setsecparam } for pid=1694 comm="syz.2.3784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1088.778650][T24818] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1088.938331][ T5697] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1088.995014][T24818] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1089.057842][ T1704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=1704 comm=syz.4.3787 [ 1089.119527][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1089.132328][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1089.143525][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1089.155629][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1089.170140][ T5697] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1089.179587][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.196109][ T5697] usb 3-1: config 0 descriptor?? [ 1089.269098][ T5718] usb 7-1: USB disconnect, device number 25 [ 1089.294113][ T5718] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1089.324594][ T5718] ftdi_sio 7-1:0.0: device disconnected [ 1089.754856][ T1746] random: crng reseeded on system resumption [ 1090.073611][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.098293][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.105829][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.107752][ T30] audit: type=1400 audit(3139.028:1870): avc: denied { listen } for pid=1696 comm="syz.2.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1090.113798][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.186430][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.190628][ T1749] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1090.196488][ T1738] bridge0: port 3(vlan6) entered disabled state [ 1090.213876][ T1749] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1090.217389][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.232456][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.233131][ T1751] netlink: 'syz.5.3791': attribute type 1 has an invalid length. [ 1090.279644][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.295017][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.305980][ T5697] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1090.314501][ T1749] netlink: 'syz.4.3792': attribute type 5 has an invalid length. [ 1090.327753][ T5697] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1090.356947][ T5697] usb 3-1: USB disconnect, device number 21 [ 1090.366310][ T1749] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1090.844775][ T1767] fido_id[1767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1091.819571][ T30] audit: type=1400 audit(3140.758:1871): avc: denied { bind } for pid=1782 comm="syz.6.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1092.004737][ T30] audit: type=1326 audit(3140.998:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1798 comm="syz.0.3801" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe76d39cdd9 code=0x0 [ 1092.206771][ T1799] openvswitch: netlink: EtherType 50a is less than min 600 [ 1092.458487][T24818] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1092.618727][T24818] usb 6-1: Using ep0 maxpacket: 16 [ 1092.664408][T24818] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1092.766205][T24818] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1092.866014][T24818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.992422][T24818] usb 6-1: Product: syz [ 1093.049069][T24818] usb 6-1: Manufacturer: syz [ 1093.123332][T24818] usb 6-1: SerialNumber: syz [ 1093.219898][ T1816] netlink: 'syz.2.3804': attribute type 4 has an invalid length. [ 1093.228102][ T1816] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1093.429002][ T1817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1093.928540][T24818] usb 6-1: config 0 descriptor?? [ 1093.939769][T24818] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1093.959524][T24818] usb 6-1: Detected FT232R [ 1093.973632][ T1828] netlink: 'syz.6.3805': attribute type 1 has an invalid length. [ 1093.984156][ T1825] fuse: Bad value for 'user_id' [ 1093.989191][ T1825] fuse: Bad value for 'user_id' [ 1094.150944][T24818] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1095.328369][T24818] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1095.363701][ T30] audit: type=1326 audit(3144.358:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.4.3808" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f017479cdd9 code=0x0 [ 1096.012714][ T5697] usb 6-1: USB disconnect, device number 35 [ 1096.034448][ T5697] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1096.051804][ T5697] ftdi_sio 6-1:0.0: device disconnected [ 1096.270327][ T1872] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3812'. [ 1097.225308][ T1901] netlink: 'syz.6.3820': attribute type 1 has an invalid length. [ 1097.793165][ T1910] openvswitch: netlink: EtherType 50a is less than min 600 [ 1097.850424][ T1913] lo speed is unknown, defaulting to 1000 [ 1097.856401][ T1913] lo speed is unknown, defaulting to 1000 [ 1097.870173][ T1913] lo speed is unknown, defaulting to 1000 [ 1097.879879][ T1913] smbdirect: ib_dev[sy0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1097.894143][ T1913] smbdirect: ib_dev[sy0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1097.911126][ T1913] smbdirect: ib_dev[sy0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1097.965969][ T1913] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 1098.069769][ T1914] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1098.122370][ T1913] lo speed is unknown, defaulting to 1000 [ 1098.145314][ T1913] lo speed is unknown, defaulting to 1000 [ 1098.152627][ T1913] lo speed is unknown, defaulting to 1000 [ 1098.159087][ T1913] lo speed is unknown, defaulting to 1000 [ 1098.165459][ T1913] lo speed is unknown, defaulting to 1000 [ 1098.171917][ T1913] lo speed is unknown, defaulting to 1000 [ 1098.242389][ T1926] netlink: 'syz.2.3824': attribute type 49 has an invalid length. [ 1098.635473][T24818] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1098.698254][ T5752] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1098.859229][T24818] usb 5-1: Using ep0 maxpacket: 16 [ 1098.877941][ T5752] usb 7-1: Using ep0 maxpacket: 16 [ 1098.885047][T24818] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1098.911644][ T5752] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1098.933012][ T5752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.950590][ T5752] usb 7-1: Product: syz [ 1098.960156][ T5752] usb 7-1: Manufacturer: syz [ 1098.971931][ T5752] usb 7-1: SerialNumber: syz [ 1098.979341][T24818] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1098.994800][ T5752] usb 7-1: config 0 descriptor?? [ 1099.000289][ T1949] overlayfs: failed to resolve './file0': -2 [ 1099.011561][T24818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.024824][ T5752] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1099.042203][T24818] usb 5-1: Product: syz [ 1099.051455][T24818] usb 5-1: Manufacturer: syz [ 1099.061454][T24818] usb 5-1: SerialNumber: syz [ 1099.076576][T24818] usb 5-1: config 0 descriptor?? [ 1099.095080][T24818] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1099.104512][T24818] usb 5-1: Detected FT232R [ 1099.191588][ T1894] comedi comedi3: pcl818: I/O base address or length out of range [ 1099.304086][T24818] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1099.698425][ T5752] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 1099.754600][T24818] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1099.872768][T13037] usb 7-1: USB disconnect, device number 26 [ 1100.313065][T24818] usb 5-1: USB disconnect, device number 125 [ 1100.424672][T24818] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1100.588766][T24818] ftdi_sio 5-1:0.0: device disconnected [ 1100.758305][ T2012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2012 comm=syz.6.3837 [ 1101.641632][ T2027] openvswitch: netlink: Key type 5894 is out of range max 32 [ 1101.807238][ T30] audit: type=1400 audit(3150.748:1874): avc: denied { listen } for pid=2029 comm="syz.2.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1102.059751][ T2016] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1102.489718][ T2017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.845078][ T2048] netlink: 'syz.2.3845': attribute type 1 has an invalid length. [ 1103.667936][ T30] audit: type=1400 audit(3152.658:1875): avc: denied { write } for pid=2061 comm="syz.4.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1103.685152][ T2064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3851'. [ 1103.721722][ T2064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.729009][ T2064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.208102][ T5697] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1106.248237][T13037] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1106.653044][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 1106.858424][T13037] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.933666][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1106.943907][T13037] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1106.960123][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.973871][T13037] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1106.983457][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.993106][T13037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.006040][ T5697] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 1107.021428][T13037] usb 7-1: config 0 descriptor?? [ 1107.032336][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.041238][ T5697] usb 3-1: Product: syz [ 1107.045472][ T5697] usb 3-1: Manufacturer: 镈ୌ劂ﱊ抹谛䏙鑀裤丑ꑴ뚣뮐۔㳙ቐ迬㔯ኵ杨ﹳ十䧠㞚巋㨦绂Ⱔ徸徿̟ࡵй풆⪧뙐뷷憧᳘焋싌緅⧼蝄䣢ࣹ衋晀쟷兆Ꟗత䤽⒲ᯫ踶兂痍๧ [ 1107.084316][ T5697] usb 3-1: SerialNumber: syz [ 1107.465728][ T30] audit: type=1400 audit(3156.458:1876): avc: denied { accept } for pid=2159 comm="syz.0.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1107.496808][ T5697] usb 3-1: unit 5 not found! [ 1107.591569][ T5697] usb 3-1: USB disconnect, device number 22 [ 1108.387966][ T3101] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1108.455194][ T30] audit: type=1400 audit(3157.448:1877): avc: denied { unmount } for pid=10421 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1109.001182][ T3101] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 1109.011654][ T3101] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1109.021243][ T3101] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1109.022687][T24818] usb 7-1: USB disconnect, device number 27 [ 1109.053823][ T3101] usb 6-1: config 3 has no interface number 0 [ 1109.064453][ T3101] usb 6-1: config 3 interface 20 altsetting 29 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1109.086309][ T3101] usb 6-1: config 3 interface 20 altsetting 29 endpoint 0x82 has invalid maxpacket 8224, setting to 64 [ 1109.106194][ T3101] usb 6-1: config 3 interface 20 has no altsetting 0 [ 1109.119236][ T3101] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1109.129797][ T3101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.138450][ T3101] usb 6-1: Product: syz [ 1109.143038][ T3101] usb 6-1: Manufacturer: syz [ 1109.147686][ T3101] usb 6-1: SerialNumber: syz [ 1109.163310][ T2225] netlink: 'syz.0.3880': attribute type 10 has an invalid length. [ 1109.173304][ T2225] bridge0: port 4(vlan4) entered disabled state [ 1109.179717][ T2225] bridge0: port 3(team0) entered disabled state [ 1109.186480][ T2225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.193888][ T2225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.220782][ T2179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1109.301330][ T2225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.350370][ T2225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.440539][ T2239] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3883'. [ 1109.940809][ T3101] usb-storage 6-1:3.20: USB Mass Storage device detected [ 1109.947424][ T2255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1109.975745][ T3101] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1110.052825][ T3101] scsi host1: usb-storage 6-1:3.20 [ 1110.072840][ T3101] usb 6-1: USB disconnect, device number 36 [ 1110.127193][ T30] audit: type=1400 audit(3159.118:1878): avc: denied { bind } for pid=2269 comm="syz.2.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1110.156745][ T30] audit: type=1400 audit(3159.148:1879): avc: denied { name_bind } for pid=2269 comm="syz.2.3887" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1110.222032][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.341705][ T30] audit: type=1400 audit(3159.148:1880): avc: denied { node_bind } for pid=2269 comm="syz.2.3887" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1110.854376][ T2288] fuse: Bad value for 'fd' [ 1110.954035][ T2268] input: syz1 as /devices/virtual/input/input43 [ 1110.960320][ T2268] input: failed to attach handler leds to device input43, error: -6 [ 1112.123858][ T30] audit: type=1400 audit(3160.058:1881): avc: denied { ioctl } for pid=2285 comm="syz.6.3888" path="socket:[81433]" dev="sockfs" ino=81433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1112.293127][ T2301] overlayfs: failed to resolve './file0': -2 [ 1112.494509][ T2315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.546379][ T2315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.554503][ T30] audit: type=1800 audit(3161.508:1882): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3892" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1112.582492][ T2315] vcan0: tx address claim with different name [ 1112.591840][ T2325] vcan0: tx address claim with different name [ 1112.732906][ T30] audit: type=1400 audit(3161.728:1883): avc: denied { shutdown } for pid=2300 comm="syz.0.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1112.753206][T13037] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1112.833078][ T2334] comedi comedi4: bad chanlist[0]=0xffff7fff chan=32767 range length=1 [ 1112.941946][T13037] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1112.960760][T13037] usb 7-1: config 114 has an invalid interface number: 240 but max is 0 [ 1112.978292][T13037] usb 7-1: config 114 has no interface number 0 [ 1113.002359][T13037] usb 7-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1113.029844][T13037] usb 7-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1113.063161][T13037] usb 7-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1113.080662][T13037] usb 7-1: config 114 interface 240 has no altsetting 0 [ 1113.093491][T13037] usb 7-1: string descriptor 0 read error: -22 [ 1113.101304][T13037] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1113.110607][T13037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.159939][ T2313] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1113.168032][ T2313] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1113.185789][ T30] audit: type=1400 audit(3162.178:1884): avc: denied { create } for pid=2330 comm="syz.4.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1113.215950][T13037] ir_usb 7-1:114.240: IR Dongle converter detected [ 1113.288902][ T30] audit: type=1400 audit(3162.248:1885): avc: denied { create } for pid=2330 comm="syz.4.3899" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1113.357651][ T30] audit: type=1400 audit(3162.248:1886): avc: denied { mounton } for pid=2330 comm="syz.4.3899" path="/168/file0" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1113.424187][T13037] usb 7-1: IRDA class descriptor not found, device not bound [ 1113.481632][T13037] usb 7-1: USB disconnect, device number 28 [ 1113.736531][ T30] audit: type=1400 audit(3162.728:1887): avc: denied { mount } for pid=2393 comm="syz.5.3904" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1113.759912][ T2396] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1113.775802][ T30] audit: type=1400 audit(3162.758:1888): avc: denied { mounton } for pid=2393 comm="syz.5.3904" path="/127/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1113.798550][ T30] audit: type=1400 audit(3162.768:1889): avc: denied { read } for pid=2393 comm="syz.5.3904" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1113.820075][ T30] audit: type=1400 audit(3162.768:1890): avc: denied { open } for pid=2393 comm="syz.5.3904" path="/127/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1114.083135][ T30] audit: type=1400 audit(3163.078:1891): avc: denied { unlink } for pid=26579 comm="syz-executor" name="file0" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1114.580400][ T2410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.890210][ T2414] netlink: 'syz.6.3908': attribute type 4 has an invalid length. [ 1114.898427][ T2414] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3908'. [ 1115.015302][ T2417] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3908'. [ 1117.424919][ T2433] netem: incorrect ge model size [ 1117.439478][ T2433] netem: change failed [ 1119.108497][ T5718] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1119.441029][ T2476] bridge6: port 1(erspan0) entered disabled state [ 1119.519690][ T5718] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.550499][ T5718] usb 6-1: New USB device found, idVendor=0745, idProduct=0001, bcdDevice=86.70 [ 1119.573739][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.592192][ T5718] usb 6-1: Product: syz [ 1119.603521][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.610972][ T5718] usb 6-1: Manufacturer: syz [ 1119.615554][ T5718] usb 6-1: SerialNumber: syz [ 1119.697945][T24818] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1119.731564][ T2512] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3926'. [ 1119.753426][T28253] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.785964][T28253] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.814402][T28253] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.846909][T28253] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.862862][T24818] usb 5-1: Using ep0 maxpacket: 32 [ 1119.879915][T24818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.900652][T24818] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1119.937380][T24818] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1119.966753][T24818] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1119.981362][ T2526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1120.003175][T24818] usb 5-1: Product: syz [ 1120.046729][ T2526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1120.056042][T24818] usb 5-1: Manufacturer: syz [ 1120.072665][T24818] usb 5-1: SerialNumber: syz [ 1121.046884][T24818] usb 5-1: config 0 descriptor?? [ 1121.063545][T24818] hub 5-1:0.0: bad descriptor, ignoring hub [ 1121.072746][T24818] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1121.924684][T24818] usb 5-1: USB disconnect, device number 126 [ 1122.499229][ T2555] binder: 2550:2555 ioctl c0306201 200000000080 returned -14 [ 1122.511356][ T2555] binder: 2550:2555 ioctl c0306201 2000000003c0 returned -14 [ 1122.567975][T24818] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1122.738404][T24818] usb 5-1: Using ep0 maxpacket: 8 [ 1122.756339][T24818] usb 5-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 1122.793272][T24818] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1122.823843][T24818] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1122.851835][T24818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.869324][ T2576] syzkaller0: entered promiscuous mode [ 1122.874923][ T2576] syzkaller0: entered allmulticast mode [ 1122.878768][T24818] usb 5-1: Product: syz [ 1122.893787][ T2576] tcf_pedit_act: 7 callbacks suppressed [ 1122.893807][ T2576] tc action pedit offset 64 out of bounds [ 1122.896117][T24818] usb 5-1: Manufacturer: syz [ 1122.900649][ T2576] tc action pedit offset 64 out of bounds [ 1122.900689][ T2576] tc action pedit offset 64 out of bounds [ 1122.900700][ T2576] tc action pedit offset 64 out of bounds [ 1122.927025][T24818] usb 5-1: SerialNumber: syz [ 1122.928977][ T2576] tc action pedit offset 64 out of bounds [ 1122.928991][ T2576] tc action pedit offset 64 out of bounds [ 1122.929003][ T2576] tc action pedit offset 64 out of bounds [ 1122.929013][ T2576] tc action pedit offset 64 out of bounds [ 1122.929023][ T2576] tc action pedit offset 64 out of bounds [ 1122.929033][ T2576] tc action pedit offset 64 out of bounds [ 1122.967893][ T2576] 0: reclassify loop, rule prio 0, protocol 800 [ 1123.852149][ T5718] pl2303 6-1:2.0: required endpoints missing [ 1123.874127][ T5718] usb 6-1: USB disconnect, device number 37 [ 1123.876496][T24818] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1124.353450][T24818] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1124.386128][ T2618] netlink: 'syz.6.3937': attribute type 1 has an invalid length. [ 1124.413615][T24818] usb 5-1: USB disconnect, device number 127 [ 1124.425268][ T2618] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3937'. [ 1124.537715][T14717] udevd[14717]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1124.578355][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1124.578393][ T30] audit: type=1400 audit(3173.548:1895): avc: denied { remount } for pid=2622 comm="syz.0.3939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1125.050546][ T30] audit: type=1800 audit(3174.048:1896): pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.3939" name="/newroot/217/file0" dev="tmpfs" ino=1189 res=0 errno=0 [ 1125.157933][ T5718] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1125.208075][ T5697] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1125.307974][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 1125.334829][ T5711] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1125.350272][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.361662][ T5697] usb 7-1: Using ep0 maxpacket: 16 [ 1125.380933][ T5697] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1125.390345][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.400304][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1125.409432][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1125.423077][ T5697] usb 7-1: Product: syz [ 1125.427253][ T5697] usb 7-1: Manufacturer: syz [ 1125.432027][ T5697] usb 7-1: SerialNumber: syz [ 1125.436729][ T5718] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1125.448250][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.457310][ T5697] usb 7-1: config 0 descriptor?? [ 1125.474465][ T5718] usb 6-1: config 0 descriptor?? [ 1125.540822][ T5711] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 1125.559228][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.587095][ T5711] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1125.685986][ T2644] vlan7: entered promiscuous mode [ 1125.696241][ T2644] bridge0: entered promiscuous mode [ 1125.729757][ T5752] usb 7-1: USB disconnect, device number 29 [ 1125.737392][ T2686] SET target dimension over the limit! [ 1125.800847][ T5711] pwc: Failed to set LED on/off time (-71) [ 1125.825608][ T5711] pwc: send_video_command error -71 [ 1125.832554][ T5711] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1125.846732][ T5711] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71 [ 1125.866768][ T5711] usb 5-1: USB disconnect, device number 2 [ 1125.911759][ T5718] hid_parser_main: 5 callbacks suppressed [ 1125.911778][ T5718] zydacron 0003:13EC:0006.001F: unknown main item tag 0x7 [ 1125.938470][ T5718] zydacron 0003:13EC:0006.001F: unknown main item tag 0x6 [ 1125.947318][ T5718] zydacron 0003:13EC:0006.001F: item fetching failed at offset 36/37 [ 1125.964619][ T5718] zydacron 0003:13EC:0006.001F: parse failed [ 1125.975362][ T5718] zydacron 0003:13EC:0006.001F: probe with driver zydacron failed with error -22 [ 1126.038599][ T2735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'. [ 1126.063396][ T2735] netlink: 'syz.2.3949': attribute type 22 has an invalid length. [ 1126.083304][ T2735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3949'. [ 1126.604969][ T2743] dummy0: entered promiscuous mode [ 1126.633436][ T2743] macvlan2: entered promiscuous mode [ 1126.646346][ T2743] dummy0: left promiscuous mode [ 1126.654239][ T30] audit: type=1400 audit(3175.638:1897): avc: denied { bind } for pid=2747 comm="syz.4.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1126.670934][ T2736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.687349][ T2736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.792353][ T2766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3954'. [ 1126.913605][ T2766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1126.977696][ T2787] ipvlan2: entered allmulticast mode [ 1126.999450][ T2787] bond3: entered allmulticast mode [ 1127.063912][ T2814] bridge2: entered allmulticast mode [ 1127.085690][ T2814] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1127.102644][ T30] audit: type=1400 audit(3176.098:1898): avc: denied { shutdown } for pid=2818 comm="syz.6.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1127.468708][ T5718] usb 6-1: USB disconnect, device number 38 [ 1127.517580][ T2860] fuse: Bad value for 'rootmode' [ 1127.540854][ T30] audit: type=1400 audit(3176.538:1899): avc: denied { append } for pid=2871 comm="syz.2.3962" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1127.666135][ T2887] netem: incorrect ge model size [ 1127.687225][ T2887] netem: change failed [ 1127.840409][ T2873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1127.852672][ T2874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1128.494133][ T2907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3968'. [ 1128.519852][ T2907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3968'. [ 1128.792475][ T2923] netlink: 'syz.4.3970': attribute type 4 has an invalid length. [ 1128.800524][ T2923] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1128.844009][ T2923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1129.718044][T24818] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1129.922696][T24818] usb 7-1: Using ep0 maxpacket: 16 [ 1129.992898][T24818] usb 7-1: config 0 has an invalid interface number: 172 but max is 0 [ 1130.065320][T24818] usb 7-1: config 0 has no interface number 0 [ 1130.141849][T24818] usb 7-1: config 0 interface 172 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1130.250037][T24818] usb 7-1: config 0 interface 172 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 1130.250966][ T2929] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1130.277987][ T2931] : renamed from vlan0 [ 1130.283041][T24818] usb 7-1: config 0 interface 172 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 1130.300835][T24818] usb 7-1: config 0 interface 172 has no altsetting 0 [ 1130.349191][T24818] usb 7-1: New USB device found, idVendor=0e66, idProduct=400c, bcdDevice=18.8e [ 1130.375708][T24818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.528466][T24818] usb 7-1: Product: syz [ 1130.541125][T24818] usb 7-1: Manufacturer: syz [ 1130.559761][T24818] usb 7-1: SerialNumber: syz [ 1130.578746][T24818] usb 7-1: config 0 descriptor?? [ 1130.594092][ T2913] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1130.601525][ T2913] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1130.603447][ T2940] FAULT_INJECTION: forcing a failure. [ 1130.603447][ T2940] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.623075][ T2940] CPU: 1 UID: 0 PID: 2940 Comm: syz.0.3974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.623100][ T2940] Tainted: [L]=SOFTLOCKUP [ 1130.623107][ T2940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1130.623116][ T2940] Call Trace: [ 1130.623122][ T2940] [ 1130.623130][ T2940] dump_stack_lvl+0x100/0x190 [ 1130.623154][ T2940] should_fail_ex.cold+0x5/0xa [ 1130.623178][ T2940] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1130.623201][ T2940] should_failslab+0xc2/0x120 [ 1130.623220][ T2940] __kmalloc_noprof+0xe0/0x850 [ 1130.623245][ T2940] ? kfree+0x1dd/0x6c0 [ 1130.623271][ T2940] tomoyo_realpath_from_path+0xb6/0x690 [ 1130.623299][ T2940] tomoyo_path_number_perm+0x23c/0x580 [ 1130.623319][ T2940] ? tomoyo_path_number_perm+0x22e/0x580 [ 1130.623340][ T2940] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1130.623385][ T2940] ? find_held_lock+0x2b/0x80 [ 1130.623402][ T2940] ? __fget_files+0x215/0x3d0 [ 1130.623422][ T2940] ? hook_file_ioctl_common+0x149/0x410 [ 1130.623446][ T2940] ? __fget_files+0x215/0x3d0 [ 1130.623472][ T2940] ? __fget_files+0x21f/0x3d0 [ 1130.623495][ T2940] security_file_ioctl+0xd3/0x230 [ 1130.623517][ T2940] __x64_sys_ioctl+0xb7/0x210 [ 1130.623537][ T2940] do_syscall_64+0x10b/0xf80 [ 1130.623556][ T2940] ? clear_bhb_loop+0x40/0x90 [ 1130.623578][ T2940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.623596][ T2940] RIP: 0033:0x7fe76d39cdd9 [ 1130.623612][ T2940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.623626][ T2940] RSP: 002b:00007fe76e1ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.623644][ T2940] RAX: ffffffffffffffda RBX: 00007fe76d615fa0 RCX: 00007fe76d39cdd9 [ 1130.623655][ T2940] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 1130.623666][ T2940] RBP: 00007fe76e1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.623676][ T2940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.623686][ T2940] R13: 00007fe76d616038 R14: 00007fe76d615fa0 R15: 00007ffe0a5be258 [ 1130.623713][ T2940] [ 1130.624607][ T2940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1131.348030][ T5752] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1131.397955][ T5718] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1131.516071][ T5752] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1131.530207][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.548477][ T5752] usb 6-1: Product: syz [ 1131.562286][ T5718] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1131.563599][ T5752] usb 6-1: Manufacturer: syz [ 1131.585380][ T5752] usb 6-1: SerialNumber: syz [ 1131.590942][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.601973][ T5752] usb 6-1: config 0 descriptor?? [ 1131.605557][ T5718] usb 3-1: Product: syz [ 1131.613063][ T5718] usb 3-1: Manufacturer: syz [ 1131.619235][ T5718] usb 3-1: SerialNumber: syz [ 1131.634818][ T5752] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 039 [ 1131.656476][ T5718] usb 3-1: config 0 descriptor?? [ 1131.669434][ T5718] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 023 [ 1131.840907][ T2946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.850368][ T3101] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1131.861350][ T2946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.911472][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.922973][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.020116][ T3101] usb 1-1: Using ep0 maxpacket: 16 [ 1132.027114][T24818] pegasus 7-1:0.172: Missing or invalid endpoints [ 1132.046280][ T3101] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1132.070533][T24818] usb 7-1: USB disconnect, device number 30 [ 1132.085027][ T3101] usb 1-1: config 4 has an invalid interface number: 16 but max is 0 [ 1132.191386][ T3101] usb 1-1: config 4 has an invalid interface number: 140 but max is 0 [ 1132.480923][ T3101] usb 1-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 1132.507185][ T3101] usb 1-1: config 4 has no interface number 0 [ 1132.523905][ T3101] usb 1-1: config 4 has no interface number 1 [ 1132.546036][ T3101] usb 1-1: config 4 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1132.588777][ T3101] usb 1-1: config 4 interface 16 altsetting 0 endpoint 0xA has invalid maxpacket 2782, setting to 64 [ 1132.613185][ T3101] usb 1-1: config 4 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 1132.627999][ T3101] usb 1-1: config 4 interface 16 altsetting 0 endpoint 0xE has invalid maxpacket 1272, setting to 64 [ 1132.662610][ T3101] usb 1-1: config 4 interface 16 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1132.680134][ T2998] fuse: Bad value for 'rootmode' [ 1132.691375][ T3101] usb 1-1: config 4 interface 16 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1132.718597][ T5752] i2c i2c-1: connected i2c-tiny-usb device [ 1132.733995][ T3101] usb 1-1: config 4 interface 16 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1132.750920][ T3101] usb 1-1: config 4 interface 16 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 16 [ 1132.773617][ T3101] usb 1-1: too many endpoints for config 4 interface 140 altsetting 23: 212, using maximum allowed: 30 [ 1132.798967][ T5718] i2c i2c-2: connected i2c-tiny-usb device [ 1132.813278][ T3101] usb 1-1: config 4 interface 140 altsetting 23 has a duplicate endpoint with address 0x3, skipping [ 1132.835111][ T3101] usb 1-1: config 4 interface 140 altsetting 23 has a duplicate endpoint with address 0x5, skipping [ 1132.860488][ T3101] usb 1-1: config 4 interface 140 altsetting 23 has 2 endpoint descriptors, different from the interface descriptor's value: 212 [ 1132.875286][ T3012] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1132.883892][ T3101] usb 1-1: config 4 interface 140 has no altsetting 0 [ 1132.900173][ T3101] usb 1-1: New USB device found, idVendor=12d1, idProduct=31f6, bcdDevice=6e.ee [ 1132.918357][ T3101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.938027][ T3101] usb 1-1: Product: syz [ 1132.942246][ T3101] usb 1-1: Manufacturer: syz [ 1132.946865][ T3101] usb 1-1: SerialNumber: syz [ 1133.018756][ T2963] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1133.032270][ T2963] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1133.069200][T24817] usb 6-1: USB disconnect, device number 39 [ 1133.143296][ T5752] usb 3-1: USB disconnect, device number 23 [ 1133.313230][ T3101] option 1-1:4.16: GSM modem (1-port) converter detected [ 1133.346193][ T3101] usb 1-1: USB disconnect, device number 23 [ 1133.384299][ T3101] option 1-1:4.16: device disconnected [ 1133.550851][ T3059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1134.153559][ T3074] fuse: Bad value for 'rootmode' [ 1134.506331][ T3080] FAULT_INJECTION: forcing a failure. [ 1134.506331][ T3080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.782324][ T3080] CPU: 0 UID: 0 PID: 3080 Comm: syz.6.3989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.782352][ T3080] Tainted: [L]=SOFTLOCKUP [ 1134.782359][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1134.782370][ T3080] Call Trace: [ 1134.782376][ T3080] [ 1134.782383][ T3080] dump_stack_lvl+0x100/0x190 [ 1134.782409][ T3080] should_fail_ex.cold+0x5/0xa [ 1134.782434][ T3080] _copy_to_user+0x32/0xd0 [ 1134.782460][ T3080] simple_read_from_buffer+0xcb/0x170 [ 1134.782484][ T3080] proc_fail_nth_read+0x1af/0x230 [ 1134.782504][ T3080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.782532][ T3080] ? rw_verify_area+0xce/0x6d0 [ 1134.782547][ T3080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.782567][ T3080] vfs_read+0x1e4/0xb30 [ 1134.782590][ T3080] ? __pfx_vfs_read+0x10/0x10 [ 1134.782607][ T3080] ? __fget_files+0x215/0x3d0 [ 1134.782635][ T3080] ? __fget_files+0x21f/0x3d0 [ 1134.782665][ T3080] ksys_read+0x12a/0x250 [ 1134.782684][ T3080] ? __pfx_ksys_read+0x10/0x10 [ 1134.782706][ T3080] ? rcu_is_watching+0x12/0xc0 [ 1134.782736][ T3080] do_syscall_64+0x10b/0xf80 [ 1134.782756][ T3080] ? clear_bhb_loop+0x40/0x90 [ 1134.782778][ T3080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.782796][ T3080] RIP: 0033:0x7f987055d60e [ 1134.782811][ T3080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1134.782828][ T3080] RSP: 002b:00007f98713bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1134.782846][ T3080] RAX: ffffffffffffffda RBX: 00007f98713bd6c0 RCX: 00007f987055d60e [ 1134.782857][ T3080] RDX: 000000000000000f RSI: 00007f98713bd0a0 RDI: 0000000000000004 [ 1134.782867][ T3080] RBP: 00007f98713bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.782877][ T3080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.782887][ T3080] R13: 00007f9870816038 R14: 00007f9870815fa0 R15: 00007ffca24641b8 [ 1134.782909][ T3080] [ 1135.168254][ T3098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3993'. [ 1135.177723][ T30] audit: type=1400 audit(3184.158:1900): avc: denied { read } for pid=3097 comm="syz.6.3993" path="socket:[82778]" dev="sockfs" ino=82778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1135.201204][ T30] audit: type=1400 audit(3184.158:1901): avc: denied { write } for pid=3097 comm="syz.6.3993" path="socket:[82778]" dev="sockfs" ino=82778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1135.224824][ T3098] netlink: 75 bytes leftover after parsing attributes in process `syz.6.3993'. [ 1135.665771][ T30] audit: type=1326 audit(3184.658:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3115 comm="syz.5.3998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4055f9cdd9 code=0x0 [ 1135.708230][ T3119] netlink: 'syz.2.3999': attribute type 11 has an invalid length. [ 1135.729481][ T3119] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1135.806291][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1135.868153][ T3119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1135.920134][ T3133] siw: device registration error -23 [ 1136.275586][ T3119] macsec1: entered promiscuous mode [ 1136.298387][ T3119] batadv0: entered promiscuous mode [ 1136.307086][ T3119] macsec1: entered allmulticast mode [ 1136.320194][ T3119] batadv0: entered allmulticast mode [ 1136.337766][ T3119] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1136.369795][ T5752] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1136.549725][ T5752] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1136.616213][ T5752] usb 6-1: not running at top speed; connect to a high speed hub [ 1136.652899][ T5752] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 1136.681305][ T5752] usb 6-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 1136.706754][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.742995][ T5752] usb 6-1: Product: syz [ 1136.765207][ T5752] usb 6-1: Manufacturer: 耶庾⊡뢗鴪謦䫢噕뺴 [ 1136.901691][ T5752] usb 6-1: SerialNumber: syz [ 1137.244558][ T3141] comedi comedi3: pcl818: I/O base address or length out of range [ 1137.330607][ T3162] netlink: 'syz.4.4007': attribute type 11 has an invalid length. [ 1137.345815][ T3166] fuse: Unknown parameter '0xffffffffffffffff' [ 1137.358757][ T3166] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1137.516365][ T3179] netlink: 'syz.6.4010': attribute type 4 has an invalid length. [ 1137.524294][ T3179] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4010'. [ 1137.550668][ T3178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1137.579986][ T3178] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1137.591561][ T3178] netlink: 'syz.4.4009': attribute type 5 has an invalid length. [ 1137.603487][ T3178] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1137.628412][ T5718] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 1138.573308][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1138.594084][ T5718] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1138.616844][ T5718] usb 1-1: can't read configurations, error -71 [ 1138.621261][ T5752] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1138.629927][ T5752] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1138.693815][ T5752] usb 6-1: USB disconnect, device number 40 [ 1138.779303][T14717] udevd[14717]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.840126][ T3101] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1138.999803][ T3101] usb 5-1: Using ep0 maxpacket: 8 [ 1139.037474][ T3101] usb 5-1: config 13 has an invalid interface number: 245 but max is 0 [ 1139.050329][ T3101] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.103230][ T3101] usb 5-1: config 13 has no interface number 0 [ 1139.130394][ T3101] usb 5-1: config 13 interface 245 has no altsetting 0 [ 1139.186098][ T3101] usb 5-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice=27.04 [ 1139.197935][ T5752] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1139.226916][ T3101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.265041][ T3101] usb 5-1: Product: syz [ 1139.293199][ T3101] usb 5-1: Manufacturer: syz [ 1139.326917][ T3101] usb 5-1: SerialNumber: syz [ 1139.371484][ T5752] usb 6-1: Using ep0 maxpacket: 8 [ 1139.403545][ T5752] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1139.486462][ T5752] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1139.568670][ T5752] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1139.738764][ T5752] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1139.861676][ T5752] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.978878][ T5752] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1140.030420][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.403106][ T3101] usb-storage 5-1:13.245: USB Mass Storage device detected [ 1140.507053][ T3101] usb 5-1: USB disconnect, device number 3 [ 1140.596876][ T5752] usb 6-1: usb_control_msg returned -32 [ 1140.608121][ T5752] usbtmc 6-1:16.0: can't read capabilities [ 1140.646136][ T3269] openvswitch: netlink: EtherType 50a is less than min 600 [ 1141.298257][ T5718] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1141.298301][ T3101] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1141.394955][ T3294] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1141.488726][ T3304] netlink: 'syz.4.4022': attribute type 4 has an invalid length. [ 1141.496548][ T3304] __nla_validate_parse: 1 callbacks suppressed [ 1141.496566][ T3304] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4022'. [ 1141.517698][ T5718] usb 7-1: Using ep0 maxpacket: 16 [ 1141.523128][ T3101] usb 1-1: config index 0 descriptor too short (expected 5668, got 36) [ 1141.548198][ T5718] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1141.563403][ T3304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4022'. [ 1141.614403][ T29] usb 6-1: USB disconnect, device number 41 [ 1141.633820][ T5718] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1141.695675][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.783244][ T5718] usb 7-1: Product: syz [ 1141.823972][ T5718] usb 7-1: Manufacturer: syz [ 1141.870752][ T5718] usb 7-1: SerialNumber: syz [ 1141.969997][ T5718] usb 7-1: config 0 descriptor?? [ 1142.036450][ T5718] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1142.096268][ T5718] usb 7-1: Detected FT232R [ 1142.237793][ T5718] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1142.277375][ T3101] usb 1-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1142.286177][ T3101] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1142.298716][ T3101] usb 1-1: config 3 has no interface number 0 [ 1142.304878][ T3101] usb 1-1: config 3 interface 20 altsetting 63 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1142.318247][ T3101] usb 1-1: config 3 interface 20 altsetting 63 endpoint 0x82 has invalid maxpacket 8224, setting to 64 [ 1142.329426][ T3101] usb 1-1: config 3 interface 20 has no altsetting 0 [ 1142.342954][ T3101] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1142.352387][ T3101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.363795][ T3101] usb 1-1: Product: syz [ 1142.368072][ T3101] usb 1-1: Manufacturer: syz [ 1142.370062][ T3320] syzkaller0: entered promiscuous mode [ 1142.372751][ T3101] usb 1-1: SerialNumber: syz [ 1142.391441][ T3280] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1142.406550][ T3320] syzkaller0: entered allmulticast mode [ 1142.493709][ T5718] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1142.725885][ T5752] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1142.944074][ T3101] usb-storage 1-1:3.20: USB Mass Storage device detected [ 1142.959014][ T3101] usb-storage 1-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1142.968539][ T3101] scsi host1: usb-storage 1-1:3.20 [ 1142.979696][ T5752] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1142.989754][ T29] usb 7-1: USB disconnect, device number 31 [ 1142.996867][ T3101] usb 1-1: USB disconnect, device number 26 [ 1143.004727][ T5752] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1143.027931][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.081271][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1143.090726][ T5718] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1143.091871][ T5752] usb 6-1: config 0 descriptor?? [ 1144.087882][ T29] ftdi_sio 7-1:0.0: device disconnected [ 1144.310184][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.343712][ T3398] netlink: 'syz.6.4035': attribute type 4 has an invalid length. [ 1144.351591][ T3398] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4035'. [ 1144.404807][ T5718] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1144.430807][ T3400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4035'. [ 1144.531925][ T5718] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1144.599468][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.666060][ T5718] usb 3-1: Product: syz [ 1144.707627][ T5718] usb 3-1: Manufacturer: syz [ 1144.742948][ T5718] usb 3-1: SerialNumber: syz [ 1144.875302][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.034106][ T5718] usb 3-1: config 0 descriptor?? [ 1145.133122][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.140762][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.148296][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.155495][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.162741][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.169963][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.181537][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.184806][ T3397] lo speed is unknown, defaulting to 1000 [ 1145.190215][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.204172][ T5752] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 1145.221309][ T5752] logitech 0003:046D:C29C.0020: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 1145.235778][ T5752] logitech 0003:046D:C29C.0020: no inputs found [ 1145.260124][ T5752] usb 6-1: USB disconnect, device number 42 [ 1145.335626][ T3429] fido_id[3429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1145.378095][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1145.538243][ T29] usb 5-1: device descriptor read/64, error -71 [ 1145.978079][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1146.078419][ T5718] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 1146.100381][ T30] audit: type=1400 audit(3195.088:1903): avc: denied { setattr } for pid=3463 comm="syz.5.4039" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1146.168897][ T29] usb 5-1: device descriptor read/64, error -71 [ 1146.218120][ T5718] usb 1-1: device descriptor read/64, error -71 [ 1146.289414][ T29] usb usb5-port1: attempt power cycle [ 1146.478001][ T5718] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 1146.628396][ T5718] usb 1-1: device descriptor read/64, error -71 [ 1146.649158][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1146.746700][ T29] usb 5-1: device descriptor read/8, error -71 [ 1146.833283][ T5718] usb usb1-port1: attempt power cycle [ 1147.078333][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1147.109602][ T29] usb 5-1: device descriptor read/8, error -71 [ 1147.231951][ T29] usb usb5-port1: unable to enumerate USB device [ 1147.237015][ T3480] bridge2: entered promiscuous mode [ 1147.243686][ T3480] bridge2: entered allmulticast mode [ 1147.288006][ T5718] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 1147.350117][T24817] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1147.478198][ T5711] usb 3-1: USB disconnect, device number 24 [ 1147.562632][T24817] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 52, changing to 4 [ 1147.614815][T24817] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 56, setting to 0 [ 1147.634642][T24817] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 1147.680049][T24817] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1147.708691][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1147.719980][T24817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.741523][T24817] usb 7-1: Manufacturer: ᮃѭ鋤忚അ鵗ᆒ⩪㬮甫擁밨囋阘ꭧś⃞ [ 1148.332294][T24817] usb 7-1: low speed audio streaming not supported [ 1148.339076][T24817] usb 7-1: low speed audio streaming not supported [ 1148.469011][ T3497] netem: change failed [ 1148.528646][T24817] usb 7-1: USB disconnect, device number 32 [ 1149.155954][ T3497] kvm: pic: non byte read [ 1149.188382][ T3497] kvm: pic: level sensitive irq not supported [ 1149.188461][ T3497] kvm: pic: non byte read [ 1149.288146][ T3536] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1149.438515][ T30] audit: type=1400 audit(3198.438:1904): avc: denied { write } for pid=3530 comm="syz.4.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1149.499531][ T30] audit: type=1400 audit(3198.488:1905): avc: denied { connect } for pid=3530 comm="syz.4.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1149.796240][ T3497] kvm: pic: level sensitive irq not supported [ 1149.809461][ T3497] kvm: pic: non byte read [ 1151.621117][ T3580] netlink: 'syz.2.4056': attribute type 4 has an invalid length. [ 1151.629021][ T3580] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4056'. [ 1151.637910][T24817] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1151.700880][ T3580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4056'. [ 1152.389979][ T5718] usb 1-1: device descriptor read/8, error -110 [ 1152.625173][T24817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.772174][ T5718] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 1152.844865][ T3585] block nbd0: server does not support multiple connections per device. [ 1152.855477][ T3585] block nbd0: shutting down sockets [ 1152.948655][ T5718] usb 1-1: device descriptor read/8, error -32 [ 1153.166271][ T5718] usb usb1-port1: unable to enumerate USB device [ 1153.630397][ T3590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1153.768901][T24817] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1153.811442][T24817] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1153.828020][T24817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.838334][T24817] usb 7-1: Product: syz [ 1153.843085][T24817] usb 7-1: Manufacturer: syz [ 1153.851873][T24817] usb 7-1: SerialNumber: syz [ 1154.211536][T24817] usb 7-1: config 0 descriptor?? [ 1154.325885][ T3605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4059'. [ 1154.750336][ T5797] usb 7-1: USB disconnect, device number 33 [ 1155.427651][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'. [ 1156.675251][ T3642] netlink: 'syz.0.4068': attribute type 4 has an invalid length. [ 1156.683075][ T3642] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4068'. [ 1156.873955][ T3653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4068'. [ 1157.452350][ T3673] NILFS (nullb0): couldn't find nilfs on the device [ 1158.322691][ T5797] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1158.527525][ T5797] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1158.787164][ T5797] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1158.826643][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.851839][ T5797] usb 3-1: Product: syz [ 1158.872647][ T5797] usb 3-1: Manufacturer: syz [ 1158.886149][ T5797] usb 3-1: SerialNumber: syz [ 1158.906500][ T5797] usb 3-1: config 0 descriptor?? [ 1158.958242][ T3688] fuse: Unknown parameter 'user_i00000000000000000000' [ 1159.201548][ T3696] netlink: 'syz.6.4080': attribute type 4 has an invalid length. [ 1159.209480][ T3696] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4080'. [ 1159.313402][ T3698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4080'. [ 1160.328018][ T3705] x_tables: unsorted entry at hook 1 [ 1160.336934][ T3703] program syz.5.4076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.346558][ T3705] xt_socket: unknown flags 0x50 [ 1160.352748][ T3705] netlink: 'syz.4.4081': attribute type 5 has an invalid length. [ 1160.365806][ T30] audit: type=1400 audit(3209.368:1906): avc: denied { accept } for pid=3702 comm="syz.5.4076" laddr=::ffff:172.20.20.28 lport=37247 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1160.522752][ T3716] openvswitch: netlink: Flow actions attr not present in new flow. [ 1160.738044][ T5697] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1160.796216][ T3725] comedi comedi3: pcl818: I/O base address or length out of range [ 1160.935150][ T5697] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 1160.965059][ T5697] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1160.992796][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.013647][ T5697] usb 7-1: Product: 㰊 [ 1161.030118][ T5697] usb 7-1: SerialNumber: syz [ 1161.044692][ T3742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4087'. [ 1161.054927][ T3742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4087'. [ 1161.543981][ T5697] usb 7-1: 1:1 : bogus bTerminalLink 67 [ 1161.567247][ T5718] usb 3-1: USB disconnect, device number 25 [ 1161.824577][ T5697] usb 7-1: USB disconnect, device number 34 [ 1161.927792][T13818] udevd[13818]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1162.073606][ T3791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=3791 comm=syz.5.4091 [ 1162.260087][ T3798] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1162.498924][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4095'. [ 1162.980519][ T3818] openvswitch: netlink: Flow actions attr not present in new flow. [ 1163.044723][ T3829] loop4: detected capacity change from 0 to 2640 [ 1163.058018][ T5718] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1163.063387][ T3829] buffer_io_error: 249 callbacks suppressed [ 1163.063399][ T3829] Buffer I/O error on dev loop4, logical block 0, async page read [ 1163.090174][ T3829] Buffer I/O error on dev loop4, logical block 0, async page read [ 1163.101551][ T3832] overlayfs: failed to clone upperpath [ 1163.117259][ T3829] loop4: unable to read partition table [ 1163.130115][ T3829] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1163.144922][ T3833] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 1163.166381][ T3833] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 1163.206766][ T3833] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 1163.224114][ T5718] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1163.233733][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.235209][ T3833] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 1163.243276][ T5718] usb 7-1: Product: syz [ 1163.255178][ T3833] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 1163.264071][T24817] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1163.264097][ T5718] usb 7-1: Manufacturer: syz [ 1163.276798][ T5718] usb 7-1: SerialNumber: syz [ 1163.278496][ T3835] fuse: Unknown parameter '0xffffffffffffffff' [ 1163.287953][ T3833] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 1163.295589][ T5718] usb 7-1: config 0 descriptor?? [ 1163.299203][ T3833] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 1163.307140][ T5718] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 035 [ 1163.315071][ T3833] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 1163.432395][T24817] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1163.442215][T24817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.451379][T24817] usb 5-1: Product: syz [ 1163.455579][T24817] usb 5-1: Manufacturer: syz [ 1163.460395][T24817] usb 5-1: SerialNumber: syz [ 1163.466784][T24817] usb 5-1: config 0 descriptor?? [ 1163.475038][T24817] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 008 [ 1163.512774][ T3811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.521937][ T3811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.738174][ T5797] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1163.759141][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.784972][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.897968][ T5797] usb 6-1: Using ep0 maxpacket: 32 [ 1163.935718][ T5797] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1163.966029][ T30] audit: type=1400 audit(3212.858:1907): avc: denied { bind } for pid=3851 comm="syz.0.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1164.083367][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.274067][ T5797] usb 6-1: config 0 descriptor?? [ 1164.351867][ T3862] fuse: fd is not a fuse device [ 1164.363439][ T5718] i2c i2c-1: connected i2c-tiny-usb device [ 1164.372102][ T30] audit: type=1400 audit(3213.368:1908): avc: denied { append } for pid=3861 comm="syz.2.4105" name="file0" dev="tmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1164.405341][ T30] audit: type=1400 audit(3213.368:1909): avc: denied { open } for pid=3861 comm="syz.2.4105" path="/552/file0" dev="tmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1164.510018][ T5797] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1164.532427][T24817] i2c i2c-2: connected i2c-tiny-usb device [ 1164.548865][ T5797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1164.560477][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4106'. [ 1164.578361][ T5797] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1164.593386][ T5797] usb 6-1: media controller created [ 1164.647749][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.660264][ T5792] usb 7-1: USB disconnect, device number 35 [ 1164.736910][ T5752] usb 5-1: USB disconnect, device number 8 [ 1164.833992][ T5797] DVB: Unable to find symbol dib7000p_attach() [ 1164.840307][ T5797] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1164.878177][ T3101] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1164.897918][ T5797] rc_core: IR keymap rc-dib0700-rc5 not found [ 1164.905706][ T5797] Registered IR keymap rc-empty [ 1164.912383][ T5797] dvb-usb: could not initialize remote control. [ 1164.920773][ T5797] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1164.933521][ T5797] usb 6-1: USB disconnect, device number 43 [ 1164.959816][ T5797] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1165.007997][ T3101] usb 1-1: device descriptor read/64, error -71 [ 1165.226857][ T3933] ieee802154 phy1 wpan1: encryption failed: -22 [ 1165.248058][ T3101] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1165.377928][ T3101] usb 1-1: device descriptor read/64, error -71 [ 1165.496670][ T3101] usb usb1-port1: attempt power cycle [ 1166.097918][ T29] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1166.146703][ T30] audit: type=1326 audit(3215.138:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987059cdd9 code=0x7ffc0000 [ 1166.167924][ T3101] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1166.174192][ T30] audit: type=1326 audit(3215.138:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987059cdd9 code=0x7ffc0000 [ 1166.207594][ T30] audit: type=1326 audit(3215.148:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987059cdd9 code=0x7ffc0000 [ 1166.253167][ T29] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1166.289786][ T3101] usb 1-1: device descriptor read/8, error -71 [ 1166.292148][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.323446][ T30] audit: type=1326 audit(3215.148:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987059cdd9 code=0x7ffc0000 [ 1166.403234][ T29] usb 6-1: config 0 descriptor?? [ 1166.443465][ T30] audit: type=1326 audit(3215.148:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f987059cdd9 code=0x7ffc0000 [ 1166.527940][ T5797] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1166.542927][ T3101] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1166.569644][ T3101] usb 1-1: device descriptor read/8, error -71 [ 1166.610849][ T30] audit: type=1326 audit(3215.228:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987059cdd9 code=0x7ffc0000 [ 1166.640675][ T30] audit: type=1326 audit(3215.228:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f987059cb42 code=0x7ffc0000 [ 1166.657963][ T5797] usb 7-1: device descriptor read/64, error -71 [ 1166.666590][ T29] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1166.679836][ T3101] usb usb1-port1: unable to enumerate USB device [ 1166.680322][ T30] audit: type=1326 audit(3215.228:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f987059cbd7 code=0x7ffc0000 [ 1166.713403][ T30] audit: type=1326 audit(3215.228:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9870559ad1 code=0x7ffc0000 [ 1166.740216][ T30] audit: type=1326 audit(3215.228:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.6.4111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f987059dbc9 code=0x7ffc0000 [ 1167.077811][ T5797] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1167.167919][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4109'. [ 1167.173061][ T29] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1167.186530][ T29] [drm] Initialized udl on minor 2 [ 1167.205433][ T29] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1167.218974][ T29] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1167.226243][ T5711] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1167.236472][ T5711] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1167.243775][ T29] usb 6-1: USB disconnect, device number 44 [ 1167.258639][ T5797] usb 7-1: device descriptor read/64, error -71 [ 1167.379235][ T5797] usb usb7-port1: attempt power cycle [ 1167.415284][ T3980] openvswitch: netlink: Flow actions attr not present in new flow. [ 1167.618692][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4115'. [ 1167.627706][ T3990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'. [ 1167.831689][ T5797] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1168.274510][ T5797] usb 7-1: device descriptor read/8, error -71 [ 1168.318604][ T29] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1168.710660][ T4015] fuse: Unknown parameter 'user_id00000000000000000000' [ 1168.738042][ T5797] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1168.754871][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.765642][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1168.777095][ T5797] usb 7-1: device descriptor read/8, error -71 [ 1168.787208][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.800975][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.812492][ T29] usb 1-1: Product: syz [ 1168.816705][ T29] usb 1-1: Manufacturer: syz [ 1168.822921][ T29] usb 1-1: SerialNumber: syz [ 1168.836062][ T29] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 1168.881003][ T4018] SET target dimension over the limit! [ 1168.891048][ T5797] usb usb7-port1: unable to enumerate USB device [ 1169.163345][ T4035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.211518][ T4035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.449615][ T4044] netlink: 'syz.6.4122': attribute type 13 has an invalid length. [ 1169.966710][ T4047] syz_tun: entered allmulticast mode [ 1169.976537][ T4047] syz_tun: left allmulticast mode [ 1170.213552][ T4054] xt_connbytes: Forcing CT accounting to be enabled [ 1170.479664][ T4061] netlink: 'syz.2.4128': attribute type 10 has an invalid length. [ 1170.487556][ T4061] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1170.496799][ T4061] bridge0: port 3(dummy0) entered blocking state [ 1170.503605][ T4061] bridge0: port 3(dummy0) entered disabled state [ 1170.510178][ T4061] dummy0: entered allmulticast mode [ 1170.518899][ T4061] dummy0: entered promiscuous mode [ 1170.618304][ T29] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1170.882024][ T29] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1170.969510][ T29] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1171.021805][ T29] usb 6-1: Product: syz [ 1171.046740][ T29] usb 6-1: Manufacturer: syz [ 1171.052674][ T29] usb 6-1: SerialNumber: syz [ 1171.060108][ T5711] usb 1-1: USB disconnect, device number 35 [ 1171.184053][ T29] usb 6-1: config 0 descriptor?? [ 1171.446694][ T29] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1171.473185][ T29] peak_usb 6-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 1171.569139][ T29] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1171.613059][ T29] usb 6-1: USB disconnect, device number 45 [ 1171.663010][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.683168][ T4126] fuse: Unknown parameter 'user_id00000000000000000000' [ 1171.907989][ T5711] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1172.054774][ T4132] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4140'. [ 1172.068178][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 1172.093054][ T5711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1172.122887][ T5711] usb 5-1: config 0 has no interface number 0 [ 1172.151619][ T5711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1172.217350][ T5711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1172.342772][ T5711] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1172.353337][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.361782][ T5711] usb 5-1: Product: syz [ 1172.398066][ T5711] usb 5-1: Manufacturer: syz [ 1172.436394][ T5711] usb 5-1: SerialNumber: syz [ 1172.479967][ T5711] usb 5-1: config 0 descriptor?? [ 1172.540903][ T4139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4139 comm=syz.6.4141 [ 1172.774084][ T5711] radio-si470x 5-1:0.35: this is not a si470x device. [ 1172.978682][ T5711] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1173.255393][ T5711] usb 5-1: USB disconnect, device number 9 [ 1173.447081][ T4145] bond3: entered allmulticast mode [ 1173.477131][ T4145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1173.665971][ T4206] loop4: detected capacity change from 0 to 2640 [ 1173.675399][ T4206] buffer_io_error: 322 callbacks suppressed [ 1173.675413][ T4206] Buffer I/O error on dev loop4, logical block 0, async page read [ 1173.690507][T14717] Buffer I/O error on dev loop4, logical block 0, async page read [ 1173.706933][ T4206] Buffer I/O error on dev loop4, logical block 0, async page read [ 1173.725382][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1173.742517][ T4206] loop4: unable to read partition table [ 1173.776390][ T4207] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 1174.418285][ T4206] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1174.646358][ T4207] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 1174.677634][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1174.677649][ T30] audit: type=1326 audit(3223.668:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.0.4145" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76d39cdd9 code=0x7fc00000 [ 1174.711729][ T4207] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 1174.765021][ T4207] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 1174.820900][ T4207] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 1174.909523][ T4207] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 1174.932456][ T4207] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 1175.064548][ T4230] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4155'. [ 1175.098409][ T4230] netlink: Unknown conntrack attr (0) [ 1176.742020][ T30] audit: type=1400 audit(3225.728:1967): avc: denied { bind } for pid=4274 comm="syz.4.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1178.385739][ T4330] [ 1178.388082][ T4330] ====================================================== [ 1178.395067][ T4330] WARNING: possible circular locking dependency detected [ 1178.402063][ T4330] syzkaller #0 Tainted: G L [ 1178.408018][ T4330] ------------------------------------------------------ [ 1178.415004][ T4330] syz.0.4173/4330 is trying to acquire lock: [ 1178.420947][ T4330] ffff888056d43de0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 1178.430658][ T4330] [ 1178.430658][ T4330] but task is already holding lock: [ 1178.437992][ T4330] ffff888056bddc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1178.447291][ T4330] [ 1178.447291][ T4330] which lock already depends on the new lock. [ 1178.447291][ T4330] [ 1178.457666][ T4330] [ 1178.457666][ T4330] the existing dependency chain (in reverse order) is: [ 1178.466647][ T4330] [ 1178.466647][ T4330] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1178.473841][ T4330] __mutex_lock+0x1a4/0x1b10 [ 1178.478928][ T4330] kernfs_fop_write_iter+0x2c2/0x5f0 [ 1178.484722][ T4330] iter_file_splice_write+0x830/0x10a0 [ 1178.490676][ T4330] do_splice+0x109c/0x1fd0 [ 1178.495588][ T4330] __do_splice+0x33b/0x370 [ 1178.500503][ T4330] __x64_sys_splice+0x187/0x250 [ 1178.505862][ T4330] do_syscall_64+0x10b/0xf80 [ 1178.510957][ T4330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.517340][ T4330] [ 1178.517340][ T4330] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1178.524687][ T4330] __mutex_lock+0x1a4/0x1b10 [ 1178.529772][ T4330] pipe_lock+0x69/0x80 [ 1178.534335][ T4330] iter_file_splice_write+0x1fd/0x10a0 [ 1178.540380][ T4330] do_splice+0x109c/0x1fd0 [ 1178.545309][ T4330] __do_splice+0x237/0x370 [ 1178.550221][ T4330] __x64_sys_splice+0x187/0x250 [ 1178.555573][ T4330] do_syscall_64+0x10b/0xf80 [ 1178.560657][ T4330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.567043][ T4330] [ 1178.567043][ T4330] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 1178.574401][ T4330] mnt_want_write+0x6f/0x450 [ 1178.579486][ T4330] ovl_create_object+0x12b/0x3b0 [ 1178.584929][ T4330] lookup_open.isra.0+0xc47/0x11b0 [ 1178.590532][ T4330] path_openat+0x2291/0x31a0 [ 1178.595622][ T4330] do_file_open+0x20e/0x430 [ 1178.600630][ T4330] do_sys_openat2+0x10d/0x1e0 [ 1178.605807][ T4330] __x64_sys_openat+0x12d/0x210 [ 1178.611153][ T4330] do_syscall_64+0x10b/0xf80 [ 1178.616235][ T4330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.622624][ T4330] [ 1178.622624][ T4330] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1178.631281][ T4330] __lock_acquire+0x14b8/0x2630 [ 1178.636630][ T4330] lock_acquire+0x1b1/0x370 [ 1178.641636][ T4330] down_read+0x99/0x450 [ 1178.646292][ T4330] lookup_slow+0x42/0x70 [ 1178.651032][ T4330] path_lookupat+0x5e8/0xc40 [ 1178.656112][ T4330] filename_lookup+0x202/0x590 [ 1178.661381][ T4330] kern_path+0x37/0x50 [ 1178.665943][ T4330] lookup_bdev+0xd8/0x280 [ 1178.670768][ T4330] resume_store+0x1d6/0x460 [ 1178.675766][ T4330] kobj_attr_store+0x58/0x80 [ 1178.680851][ T4330] sysfs_kf_write+0xf2/0x150 [ 1178.685930][ T4330] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1178.691712][ T4330] vfs_write+0x6ac/0x1070 [ 1178.696538][ T4330] ksys_write+0x12a/0x250 [ 1178.701357][ T4330] do_syscall_64+0x10b/0xf80 [ 1178.706439][ T4330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.712821][ T4330] [ 1178.712821][ T4330] other info that might help us debug this: [ 1178.712821][ T4330] [ 1178.723020][ T4330] Chain exists of: [ 1178.723020][ T4330] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 1178.723020][ T4330] [ 1178.736370][ T4330] Possible unsafe locking scenario: [ 1178.736370][ T4330] [ 1178.743797][ T4330] CPU0 CPU1 [ 1178.749136][ T4330] ---- ---- [ 1178.754472][ T4330] lock(&of->mutex); [ 1178.758425][ T4330] lock(&pipe->mutex); [ 1178.765067][ T4330] lock(&of->mutex); [ 1178.771536][ T4330] rlock(&ovl_i_mutex_dir_key[depth]); [ 1178.777051][ T4330] [ 1178.777051][ T4330] *** DEADLOCK *** [ 1178.777051][ T4330] [ 1178.785164][ T4330] 4 locks held by syz.0.4173/4330: [ 1178.790242][ T4330] #0: ffff8880a369f0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1178.799261][ T4330] #1: ffff888038828410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1178.808185][ T4330] #2: ffff888056bddc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1178.817893][ T4330] #3: ffff88801eaba698 (kn->active#77){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1178.827864][ T4330] [ 1178.827864][ T4330] stack backtrace: [ 1178.833725][ T4330] CPU: 1 UID: 0 PID: 4330 Comm: syz.0.4173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.833740][ T4330] Tainted: [L]=SOFTLOCKUP [ 1178.833745][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1178.833751][ T4330] Call Trace: [ 1178.833755][ T4330] [ 1178.833759][ T4330] dump_stack_lvl+0x100/0x190 [ 1178.833772][ T4330] print_circular_bug.cold+0x178/0x1c7 [ 1178.833790][ T4330] check_noncircular+0x146/0x160 [ 1178.833805][ T4330] __lock_acquire+0x14b8/0x2630 [ 1178.833820][ T4330] lock_acquire+0x1b1/0x370 [ 1178.833833][ T4330] ? lookup_slow+0x42/0x70 [ 1178.833854][ T4330] ? __pfx___might_resched+0x10/0x10 [ 1178.833869][ T4330] ? try_to_unlazy+0x296/0x910 [ 1178.833880][ T4330] down_read+0x99/0x450 [ 1178.833894][ T4330] ? lookup_slow+0x42/0x70 [ 1178.833909][ T4330] ? __pfx_down_read+0x10/0x10 [ 1178.833925][ T4330] lookup_slow+0x42/0x70 [ 1178.833940][ T4330] path_lookupat+0x5e8/0xc40 [ 1178.833952][ T4330] filename_lookup+0x202/0x590 [ 1178.833965][ T4330] ? __pfx_filename_lookup+0x10/0x10 [ 1178.833981][ T4330] ? __asan_memcpy+0x3c/0x60 [ 1178.833996][ T4330] ? do_getname_kernel+0x1be/0x250 [ 1178.834011][ T4330] kern_path+0x37/0x50 [ 1178.834022][ T4330] lookup_bdev+0xd8/0x280 [ 1178.834037][ T4330] ? __pfx_lookup_bdev+0x10/0x10 [ 1178.834051][ T4330] ? __asan_memcpy+0x3c/0x60 [ 1178.834066][ T4330] resume_store+0x1d6/0x460 [ 1178.834081][ T4330] ? __pfx_resume_store+0x10/0x10 [ 1178.834098][ T4330] ? find_held_lock+0x2b/0x80 [ 1178.834107][ T4330] ? sysfs_file_kobj+0xe4/0x290 [ 1178.834120][ T4330] ? sysfs_file_kobj+0xe4/0x290 [ 1178.834138][ T4330] ? __pfx_resume_store+0x10/0x10 [ 1178.834155][ T4330] kobj_attr_store+0x58/0x80 [ 1178.834168][ T4330] ? __pfx_kobj_attr_store+0x10/0x10 [ 1178.834182][ T4330] sysfs_kf_write+0xf2/0x150 [ 1178.834193][ T4330] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1178.834209][ T4330] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1178.834220][ T4330] vfs_write+0x6ac/0x1070 [ 1178.834231][ T4330] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1178.834248][ T4330] ? __pfx_vfs_write+0x10/0x10 [ 1178.834267][ T4330] ksys_write+0x12a/0x250 [ 1178.834283][ T4330] ? __pfx_ksys_write+0x10/0x10 [ 1178.834303][ T4330] ? rcu_is_watching+0x12/0xc0 [ 1178.834326][ T4330] do_syscall_64+0x10b/0xf80 [ 1178.834339][ T4330] ? clear_bhb_loop+0x40/0x90 [ 1178.834351][ T4330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.834361][ T4330] RIP: 0033:0x7fe76d39cdd9 [ 1178.834371][ T4330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.834382][ T4330] RSP: 002b:00007fe76e1ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1178.834392][ T4330] RAX: ffffffffffffffda RBX: 00007fe76d615fa0 RCX: 00007fe76d39cdd9 [ 1178.834399][ T4330] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 000000000000000e [ 1178.834405][ T4330] RBP: 00007fe76d432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1178.834411][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.834417][ T4330] R13: 00007fe76d616038 R14: 00007fe76d615fa0 R15: 00007ffe0a5be258 [ 1178.834427][ T4330] [ 1179.137068][ T4330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1179.146532][ T4330] PM: Image not found (code -6) [ 1179.228348][ T3101] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1179.389846][ T3101] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1179.400880][ T3101] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1179.409598][ T3101] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.419691][ T3101] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1179.430669][ T3101] usb 5-1: string descriptor 0 read error: -22 [ 1179.436849][ T3101] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1179.445983][ T3101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.458659][ T3101] usb 5-1: selecting invalid altsetting 1 [ 1179.480045][ T3101] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1181.100955][ T3101] usb 5-1: USB disconnect, device number 10