last executing test programs: 29.431076446s ago: executing program 3 (id=1283): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0xffc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000b15dbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0) 27.839433531s ago: executing program 3 (id=1290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f00653d30303034303030303030303030303030308b46573e61", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000400)={{r2}, 0x1, &(0x7f0000000280)=[0x0], 0x2, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x50200, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f00000001c0)={0x7, 'pimreg0\x00', {0x10000000}, 0x200}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}}, 0x50) write$FUSE_POLL(r3, &(0x7f0000000200)={0x18, 0x0, r7, {0x1b1}}, 0x18) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) 26.187322308s ago: executing program 3 (id=1295): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019400)=@newqdisc={0x5c, 0x24, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0xe, 0x8}, {0xe, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x0, 0x406}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xd7, 0x6}}]}, 0x5c}}, 0x8000) r2 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r2, 0xc028583e, &(0x7f00000004c0)={{[0x7fff, 0x3, 0x6, 0x1ff]}, 0x0, 0x48b442efff85d2dd, 0xb5, 0x0, &(0x7f0000000340)=[{{@align=0x1, {0x3b, 0x8, 0x2, 0x81}}, 0x6, 0x0, '*}\x00'}, {{@_ha_fsid={[0xb, 0x4]}, {0x7, 0x6, 0x4}}, 0x1, 0x0, '%$/\x00'}, {{@_ha_fsid={[0x3, 0x2327a131]}, {0xe, 0x1, 0xb, 0x3}}, 0xb59c}, {{@_ha_fsid={[0x3, 0x3]}, {0x0, 0x6, 0x40, 0xfffffffffffffffc}}, 0x8, 0x0, '-/\x00'}, {{@_ha_fsid={[0x0, 0x6]}, {0x20, 0x4, 0x6, 0x7}}, 0x3, 0x0, '$$\x00'}, {{@_ha_fsid={[0x6, 0x2]}, {0xa5, 0x3, 0x6, 0x8000000000000000}}, 0x6, 0x0, 'tunnel_key\x00'}, {{@align=0x8f6f, {0x4, 0x384e, 0x200, 0x2ef0}}, 0xe, 0x0, '\x00'}, {{@_ha_fsid={[0x636, 0x2]}, {0x6, 0x5, 0xf, 0xe}}, 0x0, 0x0, 'tunnel_key\x00'}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) close(r3) userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) 23.997845279s ago: executing program 3 (id=1300): epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x6a98047402e98331, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800dd8d1000000400010000002008001e00020000000000000000000000000016ccc486f90f1054490eda1c46e6dd4020491ea1318de7d1d10a365d0b4bd08e1a14c91cf61ce4"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 20.648653159s ago: executing program 3 (id=1319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4e}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 19.159176194s ago: executing program 1 (id=1312): set_mempolicy(0x4005, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, 0x0, 0x0) 18.144460518s ago: executing program 1 (id=1313): request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='builtin_trusted\x00', 0xfffffffffffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/consoles\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000004140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x33, 0x4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fsopen(&(0x7f0000000200)='pstore\x00', 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x64002, 0x20) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='coredump_filter\x00') pread64(r6, 0x0, 0x0, 0x2f) syz_genetlink_get_family_id$ethtool(0x0, r5) landlock_restrict_self(r4, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 14.60532128s ago: executing program 2 (id=1321): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.575441653s ago: executing program 1 (id=1322): socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 13.634142403s ago: executing program 2 (id=1325): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) 11.748553356s ago: executing program 2 (id=1327): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10004002) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', '', [{0x20, '/dev/cec#\x00'}, {0x20, '+!-'}, {}]}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x10, 0x0) mq_notify(r5, &(0x7f0000000200)={0x0, 0x8, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0xc, 0x0) 11.744982635s ago: executing program 1 (id=1328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 11.163857348s ago: executing program 3 (id=1330): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x10, 0x9, 0x20, 0x5}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000340)=""/90) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x366082) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 10.862577747s ago: executing program 2 (id=1332): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005f00), 0x8000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x59e, 0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20002008}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) getpeername$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb8a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000840) sendto$packet(r7, &(0x7f0000000640)="e8", 0x1, 0x40, &(0x7f0000000040)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000400)}, 0x10) 7.702478562s ago: executing program 1 (id=1334): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\xb1\xe8\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='Quest\x00', 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xd01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x400}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d0006"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'macvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800a, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x20042, 0x8e) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000340)='./mnt\x00', 0x20000777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0x461a6000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='vers\x00', &(0x7f0000000600)='2.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7.455020188s ago: executing program 2 (id=1336): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 7.331181838s ago: executing program 4 (id=1337): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) 7.120959981s ago: executing program 1 (id=1338): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 6.211051264s ago: executing program 4 (id=1339): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@userptr={0x5f65, 0xb, 0x4, 0x2, 0x9, {}, {0x1, 0x1, 0x6, 0x9, 0xff, 0x7, "22ec6c62"}, 0x7fff, 0x2, {0x0}, 0x2}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r9, 0x38, 0x0) setsockopt$MRT6_TABLE(r9, 0x29, 0xcf, &(0x7f0000000140), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 6.17225208s ago: executing program 0 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty, 0x3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) close(r7) 5.899837648s ago: executing program 0 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) 4.805141785s ago: executing program 0 (id=1342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c201700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 4.493951097s ago: executing program 4 (id=1343): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000040)=ANY=[@ANYBLOB="180001000000000000000000feffffff85000000650000008538000000500000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="31301f31203100", 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x8000}, {0x20, 0x0, 0x2, 0xfffff038}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\x00', 0x2) close(r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x14) 3.173049468s ago: executing program 0 (id=1344): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x2, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)={r4}, &(0x7f0000000040)=0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) 3.060059697s ago: executing program 4 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c201700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2.294137227s ago: executing program 4 (id=1346): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x42003, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1000000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) 1.974041977s ago: executing program 0 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0xfffffb6e}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) 1.94547263s ago: executing program 2 (id=1348): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) connect$inet6(r1, 0x0, 0x0) 740.98662ms ago: executing program 4 (id=1349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$loop(0x0, 0x6b, 0x901) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0xe, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2}}}}) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_IFNAME={0x14, 0x3, 'wg0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x44}}, 0x0) 0s ago: executing program 0 (id=1350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140003000000003000000000000190780a010100ac1414aa0400907800000000450000000000000000110000ac1414aa7f000001"], 0x3e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb0024000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xe) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r7, @ANYBLOB="000827bd7000fcdbdf251100000008000500ff0300000800050009000000080004000000000008000600300f00002400018008000600776c6300060002003b000000080009000e000000060002003b00000008000500090000000800060007000000"], 0x68}, 0x1, 0x0, 0x0, 0x4002090}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x3, @mcast1, 0x6}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008d40)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x880) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xff, 0xffffffff], [0x0, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'nr0\x00', {0xff}, {}, 0x33, 0x98, 0x6, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x2, 0x1, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'wlan0\x00', 'veth1_to_team\x00', {}, {}, 0x2f, 0x2, 0x0, 0x10}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0xff}) kernel console output (not intermixed with test programs): ][ T5709] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.023586][ T5709] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.032983][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.034875][ T5763] usb 2-1: config 0 descriptor?? [ 226.171489][ T7432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.185660][ T5709] usb 3-1: config 0 descriptor?? [ 226.191881][ T5763] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 227.062765][ T29] audit: type=1400 audit(1785897958.186:641): avc: denied { mount } for pid=7434 comm="syz.3.356" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 227.405903][ T29] audit: type=1400 audit(1785897958.596:642): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 228.283827][ T29] audit: type=1400 audit(1785897958.926:643): avc: denied { shutdown } for pid=7421 comm="syz.2.351" lport=32946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.596181][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.600058][ T29] audit: type=1400 audit(1785897959.826:644): avc: denied { create } for pid=7451 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 229.043640][ T29] audit: type=1800 audit(1785897960.076:645): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.357" name="file0" dev="overlay" ino=405 res=0 errno=0 [ 229.521755][ T24] usb 3-1: USB disconnect, device number 5 [ 229.654621][ T29] audit: type=1400 audit(1785897960.696:646): avc: denied { shutdown } for pid=7451 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 229.789459][ T7452] warning: `syz.0.359' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 230.822468][ T6076] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.455771][ T24] usb 2-1: USB disconnect, device number 4 [ 232.504945][ T29] audit: type=1400 audit(1785897963.736:647): avc: denied { ioctl } for pid=7462 comm="syz.4.360" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.099590][ T7475] tipc: Enabling of bearer rejected, failed to enable media [ 233.112330][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 233.373462][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.434273][ T29] audit: type=1400 audit(1785897964.676:648): avc: denied { read } for pid=7481 comm="syz.1.368" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.525197][ T29] audit: type=1400 audit(1785897964.676:649): avc: denied { open } for pid=7481 comm="syz.1.368" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.525229][ T29] audit: type=1400 audit(1785897964.696:650): avc: denied { read } for pid=7479 comm="syz.2.367" name="trace" dev="tracefs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 233.525252][ T29] audit: type=1400 audit(1785897964.696:651): avc: denied { open } for pid=7479 comm="syz.2.367" path="/70/dir0/per_cpu/cpu0/trace" dev="tracefs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 233.525276][ T29] audit: type=1400 audit(1785897964.706:652): avc: denied { write } for pid=7479 comm="syz.2.367" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 233.525299][ T29] audit: type=1400 audit(1785897964.706:653): avc: denied { open } for pid=7479 comm="syz.2.367" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 233.525322][ T29] audit: type=1400 audit(1785897964.716:654): avc: denied { ioctl } for pid=7479 comm="syz.2.367" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 233.525346][ T29] audit: type=1400 audit(1785897964.726:655): avc: denied { bind } for pid=7479 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.564020][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.565046][ T9] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 233.565081][ T9] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 233.565109][ T9] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 233.565137][ T9] usb 4-1: config 129 has no interface number 0 [ 233.565160][ T9] usb 4-1: config 129 has no interface number 1 [ 233.565203][ T9] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.565240][ T9] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 233.565282][ T9] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 233.565324][ T9] usb 4-1: config 129 interface 135 has no altsetting 0 [ 233.565347][ T9] usb 4-1: config 129 interface 5 has no altsetting 0 [ 233.568971][ T9] usb 4-1: string descriptor 0 read error: -22 [ 233.569044][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 233.569059][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.759185][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.066827][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.067122][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 235.316140][ T7485] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 235.322957][ T7485] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.332248][ T7485] vhci_hcd vhci_hcd.0: Device attached [ 236.250057][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.983022][ T188] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 237.414323][ T5712] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 237.440925][ T9] usb 4-1: USB disconnect, device number 8 [ 237.636562][ T7490] vhci_hcd: connection reset by peer [ 237.684150][ T75] vhci_hcd vhci_hcd.0: stop threads [ 237.719813][ T1098] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.729454][ T75] vhci_hcd vhci_hcd.0: release socket [ 237.761587][ T75] vhci_hcd vhci_hcd.0: disconnect device [ 238.220455][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.416290][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.453691][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.484919][ T5712] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 238.503398][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.519985][ T5712] usb 3-1: config 0 descriptor?? [ 238.542563][ T5712] smsusb:smsusb_probe: board id=8, interface number 0 [ 238.564595][ T5712] smsusb:smsusb_probe: Device initialized with return code -19 [ 238.659447][ T29] audit: type=1400 audit(1785897969.886:656): avc: denied { wake_alarm } for pid=7514 comm="syz.3.377" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.217936][ T1098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.218658][ T24] usb 3-1: USB disconnect, device number 6 [ 240.269179][ T29] audit: type=1326 audit(1785897971.486:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.4.378" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668839e019 code=0x0 [ 240.870690][ T7538] netlink: 'syz.2.382': attribute type 4 has an invalid length. [ 240.932378][ T5799] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 241.103929][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.144659][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.196284][ T5799] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.243467][ T5799] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.271289][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.329724][ T5799] usb 5-1: config 0 descriptor?? [ 241.953824][ T7547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.963822][ T7547] gretap1: left promiscuous mode [ 242.192481][ T3384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.232340][ T188] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 243.087959][ T5799] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 243.113535][ T7557] binder_alloc: 7553: binder_alloc_buf, no vma [ 243.140057][ T5799] usb 5-1: USB disconnect, device number 9 [ 243.490780][ T7558] fido_id[7558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 243.619641][ T29] audit: type=1400 audit(1785897974.826:658): avc: denied { watch } for pid=7561 comm="syz.1.387" path="pipe:[15135]" dev="pipefs" ino=15135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 244.210917][ T7570] xt_hashlimit: size too large, truncated to 1048576 [ 245.585170][ T29] audit: type=1400 audit(1785897976.366:659): avc: denied { create } for pid=7573 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 246.018183][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.032473][ T29] audit: type=1400 audit(1785897976.376:660): avc: denied { sys_admin } for pid=7573 comm="syz.1.389" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 247.786659][ T296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.656291][ T7520] syz.3.377 (7520): drop_caches: 2 [ 249.042133][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.372191][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 249.400278][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.424856][ T24] usb 5-1: config 0 has no interfaces? [ 249.438795][ T7606] binder_alloc: 7604: binder_alloc_buf, no vma [ 249.445627][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 249.470995][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.492169][ T24] usb 5-1: Product: syz [ 249.501840][ T24] usb 5-1: Manufacturer: syz [ 249.511915][ T24] usb 5-1: SerialNumber: syz [ 249.529672][ T24] usb 5-1: config 0 descriptor?? [ 250.245928][ T7618] vlan2: entered promiscuous mode [ 250.254495][ T29] audit: type=1400 audit(1785897981.486:661): avc: denied { bind } for pid=7612 comm="syz.2.402" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.280379][ T7618] batadv0: entered promiscuous mode [ 250.303341][ T29] audit: type=1400 audit(1785897981.486:662): avc: denied { name_bind } for pid=7612 comm="syz.2.402" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 250.491012][ T29] audit: type=1400 audit(1785897981.486:663): avc: denied { node_bind } for pid=7612 comm="syz.2.402" saddr=fe88::3 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 251.570351][ T296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.846834][ T29] audit: type=1400 audit(1785897982.586:664): avc: denied { listen } for pid=7624 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.889035][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.917713][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.045760][ T29] audit: type=1326 audit(1785897983.276:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.1.394" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f335059e019 code=0x0 [ 252.164745][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 252.503474][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 252.512793][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.647845][ T9] usb 3-1: config 0 descriptor?? [ 252.932533][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.975866][ T24] usb 5-1: USB disconnect, device number 10 [ 253.493273][ T29] audit: type=1400 audit(1785897984.716:666): avc: denied { ioctl } for pid=7630 comm="syz.2.404" path="socket:[15645]" dev="sockfs" ino=15645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.719409][ T9] ath6kl: Failed to submit usb control message: -110 [ 253.757749][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 253.792047][ T9] ath6kl: Unable to send get target info: -110 [ 253.818322][ T9] ath6kl: Failed to init ath6kl core: -110 [ 253.845185][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 253.921062][ T7665] binder_alloc: 7662: binder_alloc_buf, no vma [ 253.937730][ T5763] usb 3-1: USB disconnect, device number 7 [ 254.003879][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 254.022279][ T5753] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 254.078888][ T7669] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 254.108865][ T7669] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 254.153647][ T7673] 9p: Bad value for 'rfdno' [ 254.158603][ T7669] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 254.194948][ T5753] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.230959][ T5753] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.270361][ T5753] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 254.310244][ T5753] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 254.331120][ T5753] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 254.364500][ T5753] usb 5-1: Manufacturer: syz [ 254.389361][ T5753] usb 5-1: SerialNumber: syz [ 254.710688][ T29] audit: type=1400 audit(1785897985.686:667): avc: denied { ioctl } for pid=7676 comm="syz.3.414" path="socket:[16545]" dev="sockfs" ino=16545 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.822050][ T7682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 254.831076][ T7682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.932517][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 254.939079][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.136243][ T5753] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 255.227462][ T29] audit: type=1400 audit(1785897985.706:668): avc: denied { setopt } for pid=7676 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.274468][ T5753] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input11 [ 255.389754][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.398538][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.405551][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.414789][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.422133][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.429071][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.436175][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.443149][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 255.449916][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 255.461381][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.605611][ T5753] usb 5-1: USB disconnect, device number 11 [ 257.314849][ T29] audit: type=1400 audit(1785897988.136:669): avc: denied { map } for pid=7692 comm="syz.1.420" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.397436][ T1098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.294636][ T7708] xt_hashlimit: size too large, truncated to 1048576 [ 258.602800][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.912960][ T29] audit: type=1400 audit(1785897990.146:670): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 259.244600][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.426'. [ 261.062193][ T5763] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 261.232472][ T5763] usb 5-1: Using ep0 maxpacket: 8 [ 261.250324][ T5763] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 261.288676][ T5763] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.316349][ T5763] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 261.391304][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.882127][ T5763] usb 5-1: Product: syz [ 261.887815][ T5763] usb 5-1: Manufacturer: syz [ 261.903847][ T5763] usb 5-1: SerialNumber: syz [ 261.921265][ T5763] usb 5-1: config 0 descriptor?? [ 261.942448][ T5763] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 262.724358][ T7746] syz.3.431 (7746) used greatest stack depth: 19328 bytes left [ 262.921033][ T29] audit: type=1400 audit(1785897994.146:671): avc: denied { write } for pid=7729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.004874][ T7751] syzkaller0: entered promiscuous mode [ 263.072688][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.102186][ T7760] binder_alloc: 7755: binder_alloc_buf, no vma [ 263.181363][ T7751] syzkaller0: entered allmulticast mode [ 263.746459][ T5763] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 263.773836][ T5763] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 264.041980][ T29] audit: type=1400 audit(1785897995.266:672): avc: denied { write } for pid=7763 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.546056][ T1098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.800721][ T29] audit: type=1400 audit(1785897995.926:673): avc: denied { mounton } for pid=7773 comm="syz.2.437" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 264.842141][ T5343] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.895088][ T7775] affs: No valid root block on device nullb0 [ 265.608710][ T24] usb 5-1: USB disconnect, device number 12 [ 265.652295][ T5343] usb 4-1: Using ep0 maxpacket: 32 [ 265.664769][ T5343] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 265.778775][ T5343] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 266.250388][ T5343] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 266.266483][ T5343] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 266.280762][ T5343] usb 4-1: config 0 interface 0 has no altsetting 0 [ 266.289201][ T5343] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 266.298544][ T5343] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 266.307048][ T5343] usb 4-1: Product: syz [ 266.348843][ T5343] usb 4-1: Manufacturer: syz [ 266.374859][ T5343] usb 4-1: SerialNumber: syz [ 266.411851][ T5343] usb 4-1: config 0 descriptor?? [ 266.507433][ T5343] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 266.603058][ T5343] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 266.687122][ T7795] binder: 7794:7795 ioctl 4018620d 0 returned -22 [ 267.408437][ T29] audit: type=1800 audit(1785897998.286:674): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.443" name="file0" dev="overlay" ino=528 res=0 errno=0 [ 267.510337][ T29] audit: type=1400 audit(1785897998.736:675): avc: denied { read } for pid=7804 comm="syz.4.444" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 267.618376][ T24] usb 4-1: USB disconnect, device number 9 [ 267.645283][ T24] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 268.401927][ T7817] IPVS: Error during creation of socket; terminating [ 268.933634][ T1098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.207024][ T29] audit: type=1400 audit(1785898000.436:676): avc: denied { write } for pid=7819 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.387108][ T6073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.406020][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 270.463434][ T29] audit: type=1400 audit(1785898001.686:677): avc: denied { write } for pid=7778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.583559][ T29] audit: type=1400 audit(1785898001.806:678): avc: denied { write } for pid=7820 comm="syz.2.450" name="usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 270.620272][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 270.660902][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.325541][ T9] usb 4-1: config 0 descriptor?? [ 271.332448][ T29] audit: type=1400 audit(1785898002.276:679): avc: denied { read write } for pid=7839 comm="syz.1.452" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 271.443339][ T29] audit: type=1400 audit(1785898002.276:680): avc: denied { open } for pid=7839 comm="syz.1.452" path="/94/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 271.529914][ T29] audit: type=1400 audit(1785898002.756:681): avc: denied { write } for pid=7844 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.982222][ T5343] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 272.512613][ T9] ath6kl: Failed to submit usb control message: -110 [ 273.460328][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 273.471560][ T9] ath6kl: Unable to send get target info: -110 [ 273.498510][ T9] ath6kl: Failed to init ath6kl core: -110 [ 273.509608][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 273.622183][ T5343] usb 2-1: Using ep0 maxpacket: 32 [ 273.640237][ T5343] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 273.700321][ T5343] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 273.718270][ T9] usb 4-1: USB disconnect, device number 10 [ 273.769904][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 273.898056][ T5343] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 273.940612][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.988350][ T5343] usb 2-1: config 0 descriptor?? [ 274.013220][ T29] audit: type=1400 audit(1785898005.236:682): avc: denied { read write } for pid=7866 comm="syz.0.459" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 274.075640][ T29] audit: type=1400 audit(1785898005.236:683): avc: denied { open } for pid=7866 comm="syz.0.459" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 274.602489][ T1098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.129164][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.462'. [ 275.882605][ T6076] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.993534][ T5343] usbhid 2-1:0.0: can't add hid device: -71 [ 279.108442][ T5343] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.147781][ T5343] usb 2-1: USB disconnect, device number 5 [ 280.357222][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.064068][ T7920] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.071252][ T7920] overlayfs: failed to set xattr on upper [ 281.077048][ T7920] overlayfs: ...falling back to redirect_dir=nofollow. [ 281.084007][ T7920] overlayfs: ...falling back to index=off. [ 281.090818][ T7920] overlayfs: ...falling back to uuid=null. [ 281.599868][ T7921] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.607986][ T7921] overlayfs: failed to set xattr on upper [ 281.613773][ T7921] overlayfs: ...falling back to redirect_dir=nofollow. [ 281.620659][ T7921] overlayfs: ...falling back to index=off. [ 281.627059][ T7921] overlayfs: ...falling back to uuid=null. [ 281.633249][ T7921] overlayfs: conflicting lowerdir path [ 281.796514][ T29] audit: type=1400 audit(1785898012.286:684): avc: denied { mounton } for pid=7914 comm="syz.1.471" path="/file0" dev="ramfs" ino=17022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 281.952542][ T296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.382721][ T5733] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 282.563422][ T29] audit: type=1400 audit(1785898013.796:685): avc: denied { getopt } for pid=7929 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 282.706672][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 282.755045][ T7943] Invalid ELF header magic: != ELF [ 282.805475][ T29] audit: type=1400 audit(1785898013.986:686): avc: denied { module_load } for pid=7935 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 282.869815][ T5733] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 282.960650][ T5733] usb 3-1: config 0 has no interface number 0 [ 283.150622][ T5733] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.150458][ T5733] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.198159][ T5733] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 284.240778][ T5733] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 284.283265][ T5733] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 284.582227][ T7950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.478'. [ 285.683328][ T5733] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.749587][ T5733] usb 3-1: string descriptor 0 read error: -71 [ 285.767350][ T5733] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 285.801919][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.928127][ T5733] usb 3-1: config 0 descriptor?? [ 285.974819][ T5733] usb 3-1: can't set config #0, error -71 [ 286.054041][ T5733] usb 3-1: USB disconnect, device number 8 [ 286.135807][ T6066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.320306][ T5623] ffs_data_put(): freeing [ 287.399419][ T6069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.437639][ T7979] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 289.335085][ T7985] Failed to initialize the IGMP autojoin socket (err -2) [ 289.420754][ T7990] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 289.498685][ T7979] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 289.950600][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.494'. [ 292.812378][ T5608] ffs_data_put(): freeing [ 292.851924][ T6073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.874728][ T6069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.220808][ T8025] Failed to initialize the IGMP autojoin socket (err -2) [ 295.875572][ T8038] netlink: 'syz.4.505': attribute type 2 has an invalid length. [ 295.884302][ T8038] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 296.032385][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 296.767565][ T29] audit: type=1400 audit(1785898027.976:687): avc: denied { bind } for pid=8040 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.904940][ T8036] Process accounting resumed [ 298.273595][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.285060][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.144781][ T29] audit: type=1400 audit(1785898030.376:688): avc: denied { ioctl } for pid=8061 comm="syz.2.513" path="socket:[17254]" dev="sockfs" ino=17254 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 299.635717][ T29] audit: type=1400 audit(1785898030.426:689): avc: denied { write } for pid=8061 comm="syz.2.513" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.806981][ T29] audit: type=1400 audit(1785898030.436:690): avc: denied { ioctl } for pid=8061 comm="syz.2.513" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.832013][ T29] audit: type=1326 audit(1785898030.446:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.2.513" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f695db9e019 code=0x0 [ 300.021519][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 300.085811][ T29] audit: type=1400 audit(1785898031.316:692): avc: denied { create } for pid=8069 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 300.189882][ T29] audit: type=1400 audit(1785898031.316:693): avc: denied { ioctl } for pid=8069 comm="syz.4.515" path="socket:[17265]" dev="sockfs" ino=17265 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 300.673431][ T5343] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 300.894733][ T5343] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 300.915675][ T5343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.926975][ T5343] usb 3-1: config 0 has no interfaces? [ 301.027647][ T5343] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 301.040061][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.052672][ T5343] usb 3-1: config 0 descriptor?? [ 301.390774][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.398998][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.423454][ T29] audit: type=1400 audit(1785898032.656:694): avc: denied { mount } for pid=8095 comm="syz.3.521" name="/" dev="rpc_pipefs" ino=17447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 301.542535][ T5343] usb 3-1: string descriptor 0 read error: -71 [ 301.572030][ T5343] usb 3-1: USB disconnect, device number 9 [ 302.349581][ T29] audit: type=1800 audit(1785898033.206:695): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.522" name="file0" dev="overlay" ino=589 res=0 errno=0 [ 302.747522][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.833988][ T29] audit: type=1400 audit(1785898034.036:696): avc: denied { accept } for pid=8105 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.196855][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.215757][ T29] audit: type=1400 audit(1785898035.446:697): avc: denied { ioctl } for pid=8114 comm="syz.4.525" path="socket:[17315]" dev="sockfs" ino=17315 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 304.466221][ T8096] batman_adv: batadv0: Interface deactivated: gretap1 [ 304.492161][ T6069] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.501130][ T6069] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.510431][ T6069] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.526771][ T6069] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.677249][ T6069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.688157][ T296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.946502][ T8140] Invalid ELF header magic: != ELF [ 306.994131][ T8151] kernel read not supported for file /memory.swap.current (pid: 8151 comm: syz.1.533) [ 307.141938][ T29] audit: type=1800 audit(1785898038.336:698): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.533" name="memory.swap.current" dev="mqueue" ino=18493 res=0 errno=0 [ 307.329762][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 308.430613][ T8166] [U]  [ 308.665752][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.673387][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.137123][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.483210][ T5828] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.504454][ T5828] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.530109][ T5828] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.569742][ T5828] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.671304][ T8205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.696338][ T8210] fuse: Bad value for 'fd' [ 309.765891][ T8212] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.815535][ T29] audit: type=1400 audit(1785898040.996:699): avc: denied { write } for pid=8206 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 310.602522][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.602950][ T6066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.689648][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.714161][ T8213] batadv_slave_1: entered promiscuous mode [ 311.763632][ T29] audit: type=1400 audit(1785898042.456:700): avc: denied { write } for pid=8208 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.825204][ T29] audit: type=1400 audit(1785898042.456:701): avc: denied { setopt } for pid=8208 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 313.792204][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 313.923002][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.930566][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.995126][ T8251] batadv0: left promiscuous mode [ 314.581116][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.601496][ T8251] batadv_slave_1: left promiscuous mode [ 314.827631][ T29] audit: type=1400 audit(1785898046.056:702): avc: denied { getopt } for pid=8260 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 314.977223][ T8251] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 314.986500][ T8251] virt_wifi0: left promiscuous mode [ 314.994419][ T8251] macsec1: left promiscuous mode [ 315.002565][ T8256] Failed to initialize the IGMP autojoin socket (err -2) [ 315.011625][ T8261] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 315.093588][ T3384] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.122520][ T6066] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.154611][ T6066] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.188197][ T29] audit: type=1400 audit(1785898046.406:703): avc: denied { read } for pid=8281 comm="syz.4.559" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 315.216757][ T6066] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.276111][ T29] audit: type=1400 audit(1785898046.406:704): avc: denied { open } for pid=8281 comm="syz.4.559" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 315.348846][ T8290] read descriptors [ 315.367795][ T29] audit: type=1400 audit(1785898046.416:705): avc: denied { ioctl } for pid=8281 comm="syz.4.559" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 315.435823][ T8291] create_pit_timer: 86 callbacks suppressed [ 315.435840][ T8291] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 315.502556][ T8180] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 315.511572][ T5617] ffs_data_put(): freeing [ 315.693898][ T8180] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 315.723370][ T8180] usb 3-1: config 160 has no interface number 0 [ 315.735423][ T8180] usb 3-1: config 160 interface 200 has no altsetting 0 [ 315.758030][ T8180] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 315.773608][ T8180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.789315][ T8180] usb 3-1: Product: syz [ 315.794078][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.812938][ T8180] usb 3-1: Manufacturer: syz [ 315.817792][ T8180] usb 3-1: SerialNumber: syz [ 315.952169][ T8200] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 316.162020][ T8285] netlink: 'syz.2.560': attribute type 21 has an invalid length. [ 316.217883][ T3384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.365990][ T8180] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.381565][ T8180] usb 3-1: MIDIStreaming interface descriptor not found [ 316.382139][ T8200] usb 2-1: Using ep0 maxpacket: 32 [ 316.435734][ T8200] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 316.452133][ T8200] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 316.474838][ T8180] usb 3-1: USB disconnect, device number 10 [ 316.494949][ T8200] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 316.521288][ T8200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.605540][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.668181][ T8200] usb 2-1: Product: syz [ 316.676359][ T8200] usb 2-1: Manufacturer: syz [ 316.686680][ T8200] usb 2-1: SerialNumber: syz [ 316.833943][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.920672][ T8200] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 316.934065][ T8200] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 317.077245][ T8200] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 317.098413][ T8200] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 317.124932][ T8200] usb 2-1: USB disconnect, device number 6 [ 317.250310][ T8200] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 317.668543][ T8314] binder: 8313:8314 ioctl 4018620d 0 returned -22 [ 317.678354][ T8200] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 317.691467][ T8200] visor 2-1:1.0: device disconnected [ 318.520477][ T29] audit: type=1400 audit(1785898049.746:706): avc: denied { ioctl } for pid=8323 comm="syz.2.570" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 320.672988][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 321.362187][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.000503][ T8356] hub 8-0:1.0: USB hub found [ 322.006975][ T8356] hub 8-0:1.0: 1 port detected [ 322.076848][ T6066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.777917][ T29] audit: type=1400 audit(1785898054.006:707): avc: denied { open } for pid=8360 comm="syz.2.580" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 322.838159][ T29] audit: type=1326 audit(1785898054.066:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.2.580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f695db9e019 code=0x0 [ 324.113778][ T8376] netlink: 'syz.4.584': attribute type 13 has an invalid length. [ 324.333909][ T8380] can0: slcan on ptm0. [ 324.484088][ T8380] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 324.491895][ T8380] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 324.500754][ T8380] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 324.594671][ T8378] can0 (unregistered): slcan off ptm0. [ 325.449129][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.591'. [ 325.453564][ T8399] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 325.513306][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 325.522481][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 325.616741][ T8402] team0 (unregistering): Port device team_slave_0 removed [ 325.832804][ T8402] team0 (unregistering): Port device team_slave_1 removed [ 327.083108][ T3384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.114045][ T8417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8417 comm=syz.1.593 [ 327.721596][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.913970][ T8427] Failed to initialize the IGMP autojoin socket (err -2) [ 328.581915][ T29] audit: type=1400 audit(1785898059.806:709): avc: denied { write } for pid=8389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.646032][ T8439] fuse: Bad value for 'fd' [ 328.810486][ T29] audit: type=1400 audit(1785898059.896:710): avc: denied { connect } for pid=8436 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 328.910670][ T8444] input: syz1 as /devices/virtual/input/input12 [ 329.637449][ T29] audit: type=1400 audit(1785898060.866:711): avc: denied { write } for pid=8447 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.916218][ T29] audit: type=1400 audit(1785898061.116:712): avc: denied { setopt } for pid=8450 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.196203][ T29] audit: type=1400 audit(1785898061.246:713): avc: denied { write } for pid=8450 comm="syz.2.600" name="functions" dev="configfs" ino=11544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.421028][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 330.591558][ T29] audit: type=1400 audit(1785898061.476:714): avc: denied { write } for pid=8450 comm="syz.2.600" name="c.1" dev="configfs" ino=11561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.740663][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 330.898344][ T29] audit: type=1400 audit(1785898061.626:715): avc: denied { write } for pid=8450 comm="syz.2.600" name="c.1" dev="configfs" ino=11561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.930394][ T8448] batadv_slave_1: entered promiscuous mode [ 331.130889][ T29] audit: type=1400 audit(1785898061.946:716): avc: denied { write } for pid=8458 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.189891][ T29] audit: type=1400 audit(1785898061.966:717): avc: denied { write } for pid=8450 comm="syz.2.600" name="functions" dev="configfs" ino=11544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.321028][ T29] audit: type=1400 audit(1785898062.046:718): avc: denied { write } for pid=8450 comm="syz.2.600" name="c.1" dev="configfs" ino=11561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 332.494719][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 332.842484][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.852939][ T8180] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 333.272150][ T8180] usb 5-1: Using ep0 maxpacket: 16 [ 333.278935][ T8180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.292135][ T8180] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.319478][ T8180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.348679][ T8180] usb 5-1: config 0 descriptor?? [ 333.379502][ T8535] kernel read not supported for file /memory.swap.current (pid: 8535 comm: syz.0.613) [ 333.472541][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.866396][ T8545] Failed to initialize the IGMP autojoin socket (err -2) [ 334.457270][ T8180] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 334.727719][ T8551] syzkaller0: entered promiscuous mode [ 334.735735][ T8551] syzkaller0: entered allmulticast mode [ 334.796171][ T8180] usb 5-1: USB disconnect, device number 13 [ 337.783646][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 337.783657][ T29] audit: type=1400 audit(1785898069.016:722): avc: denied { watch } for pid=8571 comm="syz.0.625" path="/123/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 338.601159][ T6062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.944649][ T8604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.068034][ T8623] kvm: kvm [8622]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 342.108977][ T8623] kvm: kvm [8622]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 342.164799][ T29] audit: type=1400 audit(1785898073.396:723): avc: denied { write } for pid=8634 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 342.613074][ T6073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.650312][ T5620] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 344.353062][ T1098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.422807][ T8649] syzkaller0: entered promiscuous mode [ 344.448841][ T8649] syzkaller0: entered allmulticast mode [ 345.760445][ T29] audit: type=1400 audit(1785898076.856:724): avc: denied { ioctl } for pid=8663 comm="syz.2.651" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.522201][ T5708] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 347.601542][ T29] audit: type=1400 audit(1785898078.826:725): avc: denied { getopt } for pid=8687 comm="syz.4.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.732121][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 347.749057][ T5708] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 347.779340][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.805426][ T5708] usb 3-1: Product: syz [ 347.813145][ T5708] usb 3-1: Manufacturer: syz [ 347.821967][ T5708] usb 3-1: SerialNumber: syz [ 347.833415][ T5708] usb 3-1: config 0 descriptor?? [ 347.846649][ T5708] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 347.858623][ T5708] pctv452e: pctv452e_power_ctrl: 1 [ 347.858623][ T5708] [ 347.872219][ T5708] usb 3-1: selecting invalid altsetting 3 [ 347.881921][ T5708] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 347.881921][ T5708] [ 347.897915][ T5708] dvb-usb: bulk message failed: -22 (5/0) [ 347.922184][ T5799] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 347.946334][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.961523][ T5708] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 347.979721][ T5708] usb 3-1: media controller created [ 347.997798][ T5708] dvb-usb: bulk message failed: -22 (8/0) [ 348.014512][ T5708] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 348.029170][ T5708] dvb-usb: MAC address reading failed. [ 348.048238][ T8679] dvb-usb: bulk message failed: -22 (7/0) [ 348.054185][ T8679] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 348.083496][ T5799] usb 2-1: Using ep0 maxpacket: 16 [ 348.100746][ T5799] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 348.116507][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.126024][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.142330][ T5799] usb 2-1: Product: syz [ 348.147829][ T5799] usb 2-1: Manufacturer: syz [ 348.162274][ T5799] usb 2-1: SerialNumber: syz [ 348.192537][ T6073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.292412][ T5799] usb 2-1: config 0 descriptor?? [ 348.315757][ T5799] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 348.824025][ T5799] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 348.857959][ T5708] DVB: Unable to find symbol stb0899_attach() [ 348.865234][ T5708] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 348.962282][ T5708] rc_core: IR keymap rc-tt-1500 not found [ 349.128739][ T5708] Registered IR keymap rc-empty [ 349.140246][ T5708] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 350.018902][ T5708] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 350.036220][ T5708] dvb-usb: schedule remote query interval to 100 msecs. [ 350.043366][ T5708] pctv452e: pctv452e_power_ctrl: 0 [ 350.043366][ T5708] [ 350.050729][ T5708] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 350.154621][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 350.218382][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 350.233429][ T9] dvb-usb: error -22 while querying for an remote control event. [ 350.262937][ T5708] usb 3-1: USB disconnect, device number 11 [ 350.320075][ T8714] netlink: 'syz.2.663': attribute type 4 has an invalid length. [ 350.528457][ T5708] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 350.972476][ T8725] overlayfs: missing 'lowerdir' [ 351.513998][ T8199] usb 2-1: USB disconnect, device number 7 [ 351.639603][ T8714] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 351.703804][ T8731] batadv_slave_1: left promiscuous mode [ 351.727606][ T8731] 8021q: adding VLAN 0 to HW filter on device eth0 [ 352.679511][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.388931][ T29] audit: type=1400 audit(1785898084.516:726): avc: denied { bind } for pid=8737 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 353.952481][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.872175][ T5609] Bluetooth: hci4: command 0x0405 tx timeout [ 358.432562][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.541046][ T29] audit: type=1400 audit(1785898089.766:727): avc: denied { write } for pid=8783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.706904][ T29] audit: type=1400 audit(1785898089.936:728): avc: denied { write } for pid=8809 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.713004][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.859922][ T29] audit: type=1400 audit(1785898091.086:729): avc: denied { write } for pid=8813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.149907][ T8838] Failed to initialize the IGMP autojoin socket (err -2) [ 360.194988][ T29] audit: type=1400 audit(1785898091.426:730): avc: denied { write } for pid=8836 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.497506][ T8846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 360.551129][ T8846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 361.071774][ T8854] trusted_key: encrypted_key: keylen parameter is missing [ 361.706575][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.713992][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.761671][ T8859] [U]  [ 361.848207][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.871484][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.940761][ T8869] binder: 8868:8869 ioctl c0306201 0 returned -14 [ 361.956603][ T8869] binder_alloc: 8868: binder_alloc_buf, no vma [ 362.314321][ T8857] syzkaller0: left promiscuous mode [ 362.314345][ T8857] syzkaller0: left allmulticast mode [ 362.365211][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.365241][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.365261][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.365281][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.365417][ T9] syz0: Port: 1 Link DOWN [ 365.133710][ T8875] syz.4.696 (8875): drop_caches: 2 [ 365.234969][ T29] audit: type=1400 audit(1785898095.471:731): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 365.642120][ T8907] netlink: 'syz.4.704': attribute type 3 has an invalid length. [ 365.649828][ T8907] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 365.657549][ T8907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.704'. [ 365.769748][ T8907] NCSI netlink: No device for ifindex 767 [ 366.252554][ T29] audit: type=1400 audit(1785898095.861:732): avc: denied { connect } for pid=8897 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.452243][ T29] audit: type=1400 audit(1785898095.871:733): avc: denied { getopt } for pid=8897 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.522961][ T48] Bluetooth: hci5: Frame reassembly failed (-84) [ 366.545229][ T29] audit: type=1326 audit(1785898096.601:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.3.699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58ae19e019 code=0x0 [ 366.580492][ T29] audit: type=1400 audit(1785898096.781:735): avc: denied { read } for pid=8898 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 367.003490][ T8925] Failed to initialize the IGMP autojoin socket (err -2) [ 367.049708][ T29] audit: type=1400 audit(1785898097.281:736): avc: denied { append } for pid=8924 comm="syz.2.707" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 368.514677][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 368.567153][ T29] audit: type=1400 audit(1785898098.791:737): avc: denied { read } for pid=8935 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 371.051481][ T29] audit: type=1400 audit(1785898101.281:738): avc: denied { write } for pid=8965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.316753][ T8983] ve: renamed from veth0_vlan [ 371.355774][ T29] audit: type=1400 audit(1785898101.591:739): avc: denied { write } for pid=8977 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.391621][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 371.837547][ T9005] netlink: 5180 bytes leftover after parsing attributes in process `syz.1.724'. [ 371.876770][ T29] audit: type=1400 audit(1785898102.111:740): avc: denied { create } for pid=9003 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.124715][ T9006] can0: slcan on ttyS3. [ 372.163858][ T5799] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 372.324619][ T5799] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.345280][ T5799] usb 5-1: not running at top speed; connect to a high speed hub [ 372.371452][ T5799] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 372.399873][ T5799] usb 5-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 372.425327][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.452041][ T5799] usb 5-1: Product: syz [ 372.472115][ T5799] usb 5-1: Manufacturer: syz [ 372.487502][ T5799] usb 5-1: SerialNumber: syz [ 372.709118][ T29] audit: type=1400 audit(1785898102.941:741): avc: denied { write } for pid=9015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.807415][ T29] audit: type=1400 audit(1785898103.031:742): avc: denied { ioctl } for pid=9026 comm="syz.1.728" path="ipc:[4026532796]" dev="nsfs" ino=4026532796 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.026671][ T29] audit: type=1400 audit(1785898103.261:743): avc: denied { write } for pid=9030 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.183062][ T5708] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 373.264275][ T5799] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 373.289104][ T5799] imon 5-1:5.0: unable to initialize intf0, err -19 [ 373.347960][ T5799] imon:imon_probe: failed to initialize context! [ 373.370657][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.395334][ T5799] imon 5-1:5.0: unable to register, err -19 [ 373.418146][ T5708] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=8b.40 [ 373.451515][ T5799] usb 5-1: USB disconnect, device number 14 [ 373.464203][ T5708] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 373.493046][ T5708] usb 2-1: Manufacturer: syz [ 373.512762][ T9004] can0 (unregistered): slcan off ttyS3. [ 373.525979][ T5708] usb 2-1: config 0 descriptor?? [ 373.553793][ T5708] gspca_main: spca501-2.14.0 probing 0000:0000 [ 373.857284][ T29] audit: type=1400 audit(1785898104.091:744): avc: denied { write } for pid=9039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.062172][ T5708] gspca_spca501: reg write: error -71 [ 374.071741][ T5708] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 374.092888][ T5708] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 374.115825][ T5708] usb 2-1: USB disconnect, device number 8 [ 374.212002][ T29] audit: type=1400 audit(1785898104.431:745): avc: denied { connect } for pid=9060 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.670761][ T29] audit: type=1400 audit(1785898104.901:746): avc: denied { write } for pid=9063 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.725663][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.732'. [ 374.810050][ T9072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'. [ 374.819263][ T9072] netlink: 64 bytes leftover after parsing attributes in process `syz.2.734'. [ 374.831970][ T9073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9073 comm=syz.4.732 [ 374.860524][ T9072] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 374.904501][ T29] audit: type=1400 audit(1785898105.131:747): avc: denied { map } for pid=9071 comm="syz.2.734" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 375.104216][ T9084] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 375.227617][ T9088] befs: (nbd1): No write support. Marking filesystem read-only [ 375.245484][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.739'. [ 375.422635][ T9089] team0 (unregistering): Port device team_slave_0 removed [ 376.232158][ T9089] team0 (unregistering): Port device team_slave_1 removed [ 377.547850][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.569054][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.579403][ T9096] wireguard: wg0: Could not create IPv4 socket [ 377.585903][ T9096] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 378.289032][ T9114] block device autoloading is deprecated and will be removed. [ 378.313187][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.923146][ T9129] 9p: Bad value for 'rfdno' [ 379.145417][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 379.145528][ T29] audit: type=1400 audit(1785898109.362:749): avc: denied { create } for pid=9130 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 379.997577][ T9140] efs: cannot read volume header [ 380.519370][ T9145] syzkaller0: entered promiscuous mode [ 380.536402][ T9145] syzkaller0: entered allmulticast mode [ 381.328436][ T29] audit: type=1400 audit(1785898111.525:750): avc: denied { bind } for pid=9151 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.355491][ T29] audit: type=1400 audit(1785898111.555:751): avc: denied { listen } for pid=9151 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.396726][ T29] audit: type=1400 audit(1785898111.555:752): avc: denied { accept } for pid=9151 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 382.411475][ T9177] Failed to initialize the IGMP autojoin socket (err -2) [ 385.937896][ T9217] binder: 9216:9217 ioctl c0306201 0 returned -14 [ 385.977398][ T9222] syzkaller0: entered promiscuous mode [ 386.004764][ T9222] syzkaller0: entered allmulticast mode [ 386.722871][ T29] audit: type=1400 audit(1785898116.878:753): avc: denied { read } for pid=9236 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.448108][ T29] audit: type=1400 audit(1785898117.603:754): avc: denied { read write } for pid=9244 comm="syz.4.784" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 387.454000][ T9245] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 387.541265][ T29] audit: type=1400 audit(1785898117.603:755): avc: denied { open } for pid=9244 comm="syz.4.784" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 387.697086][ T29] audit: type=1400 audit(1785898117.831:756): avc: denied { write } for pid=9249 comm="syz.4.786" name="functions" dev="configfs" ino=11544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.730291][ T9252] hsr0: entered promiscuous mode [ 387.735489][ T29] audit: type=1400 audit(1785898117.841:757): avc: denied { write } for pid=9249 comm="syz.4.786" name="core" dev="configfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.735535][ T29] audit: type=1400 audit(1785898117.841:758): avc: denied { write } for pid=9249 comm="syz.4.786" name="rd_mcp_0" dev="configfs" ino=21278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.840635][ T29] audit: type=1400 audit(1785898117.990:759): avc: denied { write } for pid=9249 comm="syz.4.786" name="target" dev="configfs" ino=3168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.933358][ T9263] Device name cannot be null; rc = [-22] [ 387.956444][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 387.966424][ T29] audit: type=1400 audit(1785898117.990:760): avc: denied { write } for pid=9249 comm="syz.4.786" name="usb_gadget" dev="configfs" ino=21295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.143750][ T9258] hsr_slave_0: left promiscuous mode [ 388.167984][ T9258] hsr_slave_1: left promiscuous mode [ 388.190981][ T9258] hsr0 (unregistering): left promiscuous mode [ 388.230939][ T9260] syzkaller0: entered promiscuous mode [ 388.366601][ T9260] syzkaller0: entered allmulticast mode [ 389.147502][ T9281] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 389.204558][ T9281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.239384][ T9283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.246655][ T9283] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 389.257850][ T9283] bond2: (slave gre1): Error -95 calling set_mac_address [ 389.283246][ T9281] gretap1: entered promiscuous mode [ 389.297872][ T9281] bond2: (slave gretap1): making interface the new active one [ 389.306393][ T9281] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 389.368154][ T29] audit: type=1400 audit(1785898119.510:761): avc: denied { create } for pid=9279 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 389.398337][ T29] audit: type=1400 audit(1785898119.540:762): avc: denied { write } for pid=9279 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 389.472004][ T9281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.485307][ T9281] bond2: (slave bond3): Enslaving as an active interface with a down link [ 389.509427][ T9283] bond2 (unregistering): (slave gretap1): Releasing active interface [ 389.547754][ T9283] bond2 (unregistering): (slave bond3): Releasing active interface [ 389.592745][ T9283] bond2 (unregistering): Released all slaves [ 392.001754][ T29] audit: type=1400 audit(1785898121.706:763): avc: denied { write } for pid=9316 comm="syz.4.803" name="dynamic_events" dev="tracefs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 392.183955][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 392.631498][ T5620] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 394.625784][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.823'. [ 394.906651][ T8200] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 395.110990][ T8200] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.258347][ T8200] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 395.346719][ T8200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.362789][ T8200] usb 3-1: config 0 descriptor?? [ 395.927028][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.949299][ T9351] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.418284][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.479224][ T9351] wireguard: wg0: Could not create IPv4 socket [ 396.506321][ T9351] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 396.565168][ T9373] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 396.589638][ T9373] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 396.727471][ T8200] usb 3-1: string descriptor 0 read error: -71 [ 396.753837][ T8200] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected [ 396.776238][ T8200] earthmate ttyUSB0: required endpoint is missing [ 396.796714][ T8200] usb 3-1: USB disconnect, device number 12 [ 396.815187][ T8200] cypress_m8 3-1:0.0: device disconnected [ 396.885111][ T29] audit: type=1400 audit(1785898126.984:764): avc: denied { create } for pid=9389 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 396.978934][ T29] audit: type=1400 audit(1785898127.004:765): avc: denied { write } for pid=9389 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 397.128654][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 398.028689][ T9412] Failed to initialize the IGMP autojoin socket (err -2) [ 402.893816][ T9487] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.969059][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.015129][ T9487] wireguard: wg0: Could not create IPv4 socket [ 403.045828][ T9487] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 403.279871][ T9489] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 403.365559][ T9489] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 403.417119][ T9495] netlink: 'syz.4.850': attribute type 10 has an invalid length. [ 405.428046][ T9527] netlink: 148 bytes leftover after parsing attributes in process `syz.3.859'. [ 405.943180][ T9530] Failed to initialize the IGMP autojoin socket (err -2) [ 406.017020][ T9527] netlink: 148 bytes leftover after parsing attributes in process `syz.3.859'. [ 408.658602][ T9570] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 409.569705][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.872'. [ 410.602737][ T29] audit: type=1400 audit(1785898140.633:766): avc: denied { unmount } for pid=9573 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 410.798723][ T9595] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 411.686764][ T9595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.726076][ T9596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.748721][ T9596] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 411.771318][ T9607] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 411.785055][ T9596] bond3: (slave gre1): Error -95 calling set_mac_address [ 411.854944][ T9601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.885519][ T9601] bond3: (slave bond4): Enslaving as an active interface with a down link [ 411.929117][ T9595] bond3 (unregistering): (slave bond4): Releasing active interface [ 411.971557][ T9595] bond3 (unregistering): Released all slaves [ 412.201555][ T9609] bond2: entered promiscuous mode [ 412.212419][ T9609] bond2: entered allmulticast mode [ 412.218175][ T9609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.817648][ T9610] bridge1: entered promiscuous mode [ 413.189074][ T48] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 413.203547][ T29] audit: type=1400 audit(1785898143.102:767): avc: denied { getopt } for pid=9623 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.223562][ T9610] bridge1: entered allmulticast mode [ 413.243002][ T9610] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 413.535897][ T5828] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 415.638064][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 415.647057][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'. [ 416.038995][ T9659] Failed to initialize the IGMP autojoin socket (err -2) [ 418.045331][ T9687] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 418.299762][ T9694] binder_alloc: 9693: binder_alloc_buf, no vma [ 418.658879][ T29] audit: type=1400 audit(1785898148.648:768): avc: denied { ioctl } for pid=9697 comm="syz.4.902" path="socket:[24105]" dev="sockfs" ino=24105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 419.496603][ T9723] futex_wake_op: syz.0.910 tries to shift op by 144; fix this program [ 419.505854][ T9715] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 419.517346][ T9723] futex_wake_op: syz.0.910 tries to shift op by 144; fix this program [ 419.688313][ T8180] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 419.849003][ T8180] usb 5-1: Using ep0 maxpacket: 8 [ 420.179036][ T8180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 420.356956][ T8180] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 420.374045][ T8180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.388957][ T8180] usb 5-1: Product: syz [ 421.486182][ T8180] usb 5-1: Manufacturer: syz [ 421.507722][ T8180] usb 5-1: SerialNumber: syz [ 423.049470][ T9764] netlink: 'syz.0.921': attribute type 4 has an invalid length. [ 423.155245][ T9765] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 423.193469][ T9765] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 423.232866][ T9765] gretap1: left promiscuous mode [ 423.261205][ T9765] bond2: left promiscuous mode [ 423.294104][ T9765] bridge1: left promiscuous mode [ 423.476008][ T9765] bond2: left allmulticast mode [ 423.509935][ T9765] bridge1: left allmulticast mode [ 423.520813][ T9764] Illegal XDP return value 4294967274 on prog (id 56) dev N/A, expect packet loss! [ 423.798621][ T29] audit: type=1400 audit(1785898153.758:769): avc: denied { remount } for pid=9772 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 423.803615][ T9777] batadv_slave_0: entered promiscuous mode [ 423.883253][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 423.936530][ T9777] batadv_slave_0 (unregistering): left promiscuous mode [ 424.282571][ T8180] usb 5-1: USB disconnect, device number 15 [ 425.045994][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 425.151654][ T9795] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 425.160250][ T9795] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 425.175449][ T9795] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 425.356980][ T29] audit: type=1400 audit(1785898155.143:770): avc: denied { firmware_load } for pid=9793 comm="syz.2.930" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 425.433379][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.487955][ T29] audit: type=1400 audit(1785898155.292:771): avc: denied { mount } for pid=9793 comm="syz.2.930" name="/" dev="hugetlbfs" ino=24891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 426.125477][ T9809] binder: 9806:9809 ioctl c0306201 0 returned -14 [ 426.705273][ T5618] Bluetooth: hci4: command 0x0405 tx timeout [ 427.563902][ T29] audit: type=1400 audit(1785898157.514:772): avc: denied { getopt } for pid=9819 comm="syz.4.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 428.950818][ T9834] tipc: Started in network mode [ 428.965118][ T9834] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 428.987875][ T9834] tipc: Enabling of bearer rejected, failed to enable media [ 429.007256][ T9836] syzkaller0: left promiscuous mode [ 429.014627][ T9836] syzkaller0: left allmulticast mode [ 429.035323][ T9836] [U]  [ 431.601406][ T5620] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 432.029968][ T9870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.037763][ T9870] bridge0: port 3(bond4) entered blocking state [ 432.044306][ T9870] bridge0: port 3(bond4) entered disabled state [ 432.050738][ T9870] bond4: entered allmulticast mode [ 432.058117][ T9870] bond4: entered promiscuous mode [ 432.095271][ T9870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.254952][ T29] audit: type=1400 audit(1785898162.188:773): avc: denied { bind } for pid=9882 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.311971][ T29] audit: type=1400 audit(1785898162.198:774): avc: denied { listen } for pid=9882 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.521718][ T29] audit: type=1400 audit(1785898162.198:775): avc: denied { connect } for pid=9882 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.541394][ T29] audit: type=1400 audit(1785898162.238:776): avc: denied { mount } for pid=9879 comm="syz.1.953" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 433.475109][ T29] audit: type=1400 audit(1785898162.248:777): avc: denied { accept } for pid=9882 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.494748][ T29] audit: type=1400 audit(1785898162.278:778): avc: denied { read } for pid=9882 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.555859][ T9883] Failed to initialize the IGMP autojoin socket (err -2) [ 434.133302][ T9908] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 435.247489][ T9926] overlayfs: failed to clone upperpath [ 437.221266][ T9933] Failed to initialize the IGMP autojoin socket (err -2) [ 439.792158][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 439.828627][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 440.029602][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.268177][ T9974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9974 comm=syz.3.976 [ 441.111705][ T29] audit: type=1400 audit(1785898171.001:779): avc: denied { create } for pid=9992 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.828237][ T9995] overlayfs: failed to clone upperpath [ 441.883900][ T5620] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 442.114324][ T29] audit: type=1400 audit(1785898171.749:780): avc: denied { accept } for pid=9992 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.846193][T10009] netlink: 'syz.0.986': attribute type 2 has an invalid length. [ 442.884884][T10009] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 443.537550][T10004] Process accounting resumed [ 443.696234][T10018] overlayfs: failed to clone upperpath [ 444.223155][ T29] audit: type=1326 audit(1785898174.122:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.0.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14a439e019 code=0x0 [ 444.727611][ T29] audit: type=1400 audit(1785898174.571:782): avc: denied { append } for pid=10035 comm="syz.2.994" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 444.849089][T10010] syz.4.985 (10010): drop_caches: 2 [ 444.904200][ T29] audit: type=1400 audit(1785898174.810:783): avc: denied { setopt } for pid=10039 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 445.073917][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.996'. [ 445.083084][T10045] netlink: 90 bytes leftover after parsing attributes in process `syz.4.996'. [ 445.105066][T10045] netlink: 90 bytes leftover after parsing attributes in process `syz.4.996'. [ 446.959372][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 446.984402][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 446.993468][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 447.002904][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 447.011978][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 448.658234][T10077] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 448.666450][T10077] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 448.675233][T10077] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 448.951700][ T5708] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 449.620097][ T5708] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 449.677925][ T5708] usb 5-1: config 0 has no interface number 0 [ 449.699287][ T5708] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 449.712624][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.720873][ T5708] usb 5-1: Product: syz [ 449.809875][ T5708] usb 5-1: Manufacturer: syz [ 449.815773][ T5708] usb 5-1: SerialNumber: syz [ 449.823387][ T5708] usb 5-1: config 0 descriptor?? [ 449.945060][T10093] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1013'. [ 449.960511][T10093] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1013'. [ 450.052305][ T5708] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 450.104682][ T5708] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 450.132920][ T5708] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 450.157799][ T5708] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 450.347593][ T5708] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 450.936918][ T5708] usb 5-1: USB disconnect, device number 16 [ 450.964391][ T5708] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 451.052188][ T5708] keyspan 5-1:0.133: device disconnected [ 454.600465][ T29] audit: type=1326 audit(1785898184.466:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 454.688283][ T29] audit: type=1326 audit(1785898184.476:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 454.802288][ T29] audit: type=1326 audit(1785898184.516:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 454.926840][ T29] audit: type=1326 audit(1785898184.516:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 455.015666][ T29] audit: type=1326 audit(1785898184.516:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 455.057275][ T29] audit: type=1326 audit(1785898184.516:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 455.169454][ T29] audit: type=1326 audit(1785898184.516:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 455.243381][ T29] audit: type=1326 audit(1785898184.516:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 455.359203][ T29] audit: type=1326 audit(1785898184.516:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 455.465908][ T29] audit: type=1326 audit(1785898184.516:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.2.1030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695db9e019 code=0x7ffc0000 [ 455.626387][T10184] __nla_validate_parse: 1 callbacks suppressed [ 455.626405][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 455.723403][T10184] hsr_slave_1 (unregistering): left promiscuous mode [ 455.819637][ T3384] smbdirect: ib_dev[syz0] removed [ 455.919436][ T8200] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 456.079937][ T8200] usb 5-1: Using ep0 maxpacket: 16 [ 456.091300][ T8200] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 456.111019][ T8200] usb 5-1: config 0 has no interface number 0 [ 456.130949][ T8200] usb 5-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 456.173855][ T8200] usb 5-1: config 0 interface 246 has no altsetting 0 [ 456.198334][ T8200] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 456.221509][ T8200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.247798][ T8200] usb 5-1: Product: syz [ 456.259360][ T8200] usb 5-1: Manufacturer: syz [ 456.274521][ T8200] usb 5-1: SerialNumber: syz [ 456.299051][ T8200] usb 5-1: config 0 descriptor?? [ 456.582923][ T8200] usb 5-1: USB disconnect, device number 17 [ 456.596430][T10204] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1042'. [ 458.438766][T10228] binder: 10226:10228 ioctl c0306201 0 returned -14 [ 459.748096][ T8200] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 459.838494][T10246] Failed to initialize the IGMP autojoin socket (err -2) [ 460.025448][ T8200] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 460.053644][ T8200] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 460.087506][ T8200] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 460.118630][ T8200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.155918][T10241] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.188849][ T8200] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.667824][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 461.247121][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 461.247138][ T29] audit: type=1400 audit(1785898191.111:819): avc: denied { setattr } for pid=10240 comm="syz.2.1054" path="socket:[25583]" dev="sockfs" ino=25583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 461.291473][ T8180] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 461.321461][ T5708] usb 3-1: USB disconnect, device number 13 [ 461.574756][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 461.603500][ T8180] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.614935][ T8180] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.625960][ T8180] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.636157][ T8180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.013300][T10259] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 462.031768][ T8180] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.081766][T10282] binder: 10280:10282 ioctl c0306201 0 returned -14 [ 462.339659][ T8199] usb 5-1: USB disconnect, device number 18 [ 462.382273][T10284] wireguard: wg2: Could not create IPv4 socket [ 463.168003][ T29] audit: type=1400 audit(1785898193.027:820): avc: denied { bind } for pid=10295 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.221513][ T29] audit: type=1400 audit(1785898193.077:821): avc: denied { listen } for pid=10295 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.298659][T10301] [U]  [ 463.311225][ T29] audit: type=1400 audit(1785898193.167:822): avc: denied { ioctl } for pid=10295 comm="syz.2.1070" path="socket:[26071]" dev="sockfs" ino=26071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.359854][T10302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1070'. [ 463.378593][ T29] audit: type=1400 audit(1785898193.207:823): avc: denied { write } for pid=10295 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.399155][ T29] audit: type=1400 audit(1785898193.207:824): avc: denied { accept } for pid=10295 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.617477][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.633205][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.682796][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.708432][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.730274][ T35] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.454707][T10332] dummy0: entered allmulticast mode [ 464.503314][T10332] dummy0: left allmulticast mode [ 464.779229][T10337] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 465.084271][T10348] overlayfs: failed to clone upperpath [ 465.491180][T10346] bond4: entered promiscuous mode [ 465.505566][T10346] bond4: entered allmulticast mode [ 465.517338][T10346] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.514728][T10372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 466.622133][T10374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 466.652754][T10374] Failed to initialize the IGMP autojoin socket (err -2) [ 467.643326][ T5708] hid_parser_main: 28 callbacks suppressed [ 467.643347][ T5708] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 467.693328][ T5708] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 469.291606][T10398] syzkaller0: entered promiscuous mode [ 469.305169][T10398] syzkaller0: entered allmulticast mode [ 469.321440][ T29] audit: type=1400 audit(1785898199.175:825): avc: denied { getopt } for pid=10399 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 469.689713][T10408] netlink: 'syz.4.1101': attribute type 11 has an invalid length. [ 469.705802][T10408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1101'. [ 470.008308][ T5708] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 470.219273][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 470.235970][ T5708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 470.253580][ T5708] usb 5-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 470.272778][ T5708] usb 5-1: config 1 interface 0 has no altsetting 0 [ 470.416484][ T5708] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 470.448124][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.963169][ T5708] usb 5-1: Product: syz [ 470.967404][ T5708] usb 5-1: Manufacturer: syz [ 470.972357][ T5708] usb 5-1: SerialNumber: syz [ 470.982645][T10408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 471.721800][T10408] Can't find a SQUASHFS superblock on nullb0 [ 471.911665][ T29] audit: type=1400 audit(1785898201.691:826): avc: denied { write } for pid=10409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.971539][ T29] audit: type=1400 audit(1785898201.811:827): avc: denied { write } for pid=10439 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.008646][T10441] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 472.614386][ T5708] usblp0: Disabling reads from problematic bidirectional printer [ 472.637866][ T5708] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 472.661361][ T5708] usb 5-1: USB disconnect, device number 19 [ 472.718636][ T5708] usblp0: removed [ 474.826562][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 474.841837][T10469] macsec1: entered promiscuous mode [ 474.847104][T10469] dummy0: entered promiscuous mode [ 474.852483][T10469] macsec1: entered allmulticast mode [ 474.857876][T10469] dummy0: entered allmulticast mode [ 476.251587][ T29] audit: type=1400 audit(1785898206.088:828): avc: denied { write } for pid=10447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.764593][T10510] tmpfs: Unknown parameter 'grpquo' [ 477.818741][ T29] audit: type=1400 audit(1785898207.658:829): avc: denied { write } for pid=10505 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.847025][T10513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1121'. [ 478.426373][T10519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.441909][T10519] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.474155][T10519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.512172][T10519] wireguard: wg0: Could not create IPv4 socket [ 478.518475][T10519] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 478.703190][ T5618] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 478.753952][ T29] audit: type=1400 audit(1785898207.728:830): avc: denied { remount } for pid=10511 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 480.407094][T10530] Failed to initialize the IGMP autojoin socket (err -2) [ 483.304732][T10543] gretap0: entered promiscuous mode [ 483.963004][ T29] audit: type=1400 audit(1785898213.798:831): avc: denied { watch watch_reads } for pid=10551 comm="syz.2.1132" path="/216/mnt" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 483.993411][ T8200] libceph: mon0 (1)[c::]:6789 connect error [ 484.004359][T10561] CIFS: Attempting to mount //127.0.0.1/share [ 484.022279][T10561] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 484.031461][T10561] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 484.038120][T10561] CIFS: VFS: Error connecting to socket. Aborting operation. [ 484.046587][T10561] CIFS: VFS: cifs_mount failed w/return code = -2 [ 484.140895][T10559] ceph: No mds server is up or the cluster is laggy [ 484.276312][ T8200] libceph: mon0 (1)[c::]:6789 connect error [ 486.031529][ T29] audit: type=1400 audit(1785898215.868:832): avc: denied { write } for pid=10554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.351911][ T29] audit: type=1400 audit(1785898216.188:833): avc: denied { write } for pid=10602 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.784830][T10612] kAFS: unable to lookup cell 'ÿ' [ 488.629473][ T29] audit: type=1400 audit(1785898217.878:834): avc: denied { getattr } for pid=10613 comm="syz.1.1142" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 489.657561][T10612] netlink: 'syz.4.1141': attribute type 10 has an invalid length. [ 490.456227][T10638] Failed to initialize the IGMP autojoin socket (err -2) [ 491.961339][ T29] audit: type=1400 audit(1785898221.798:835): avc: denied { write } for pid=10611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.376394][ T29] audit: type=1400 audit(1785898222.208:836): avc: denied { write } for pid=10662 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.541058][T10665] Failed to initialize the IGMP autojoin socket (err -2) [ 492.975053][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.986299][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.016423][T10666] wireguard: wg0: Could not create IPv4 socket [ 493.022667][T10666] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 493.388039][ T5618] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 493.602427][T10673] binder: 10668:10673 ioctl c0306201 0 returned -14 [ 494.144532][T10684] overlay: ./file0 is not a directory [ 494.716363][T10687] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 494.848570][ T29] audit: type=1400 audit(1785898224.548:837): avc: denied { mounton } for pid=10683 comm="syz.4.1159" path="/227/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 495.644165][T10703] netlink: 'syz.4.1164': attribute type 10 has an invalid length. [ 495.668900][T10703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.701994][T10703] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 495.731856][T10704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.760967][T10704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.791006][T10704] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 495.819030][T10704] bond0 (unregistering): Released all slaves [ 496.197919][ T29] audit: type=1400 audit(1785898225.918:838): avc: denied { create } for pid=10707 comm="syz.4.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 497.646687][T10726] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 498.415895][T10731] bond3: entered promiscuous mode [ 498.421078][T10731] bond3: entered allmulticast mode [ 498.429684][T10731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.619444][T10735] bond0 (unregistering): Released all slaves [ 498.844481][ T8199] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 499.051338][ T8199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.112347][ T8199] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 499.166447][ T8199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.335010][ T8199] usb 5-1: config 0 descriptor?? [ 500.709674][ T29] audit: type=1400 audit(1785898230.538:839): avc: denied { map } for pid=10734 comm="syz.4.1170" path="/dev/vbi8" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 500.978008][ T8199] ath6kl: Failed to read usb control message: -71 [ 500.985801][ T8199] ath6kl: Unable to read the bmi data from the device: -71 [ 501.035485][ T8199] ath6kl: unable to read target info byte count: -71 [ 501.089408][ T8199] ath6kl: Failed to init ath6kl core: -71 [ 501.119497][ T8199] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 501.177727][ T8199] usb 5-1: USB disconnect, device number 20 [ 501.549731][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.932336][T10765] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 502.560990][T10769] bond0: entered promiscuous mode [ 502.575768][T10769] bond0: entered allmulticast mode [ 502.582622][T10769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.788047][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1180'. [ 502.804116][ T5708] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 502.924050][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 503.491334][ T5708] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 503.503254][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.519493][ T5708] usb 3-1: USB2VGA dongle found at address 14 [ 503.544931][ T5708] usb 3-1: Allocated 8 output buffers [ 503.645876][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.662779][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.674191][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 503.683273][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.703483][ T9] usb 5-1: config 0 descriptor?? [ 505.004987][ T5708] usb 3-1: Failed to early initialize device [ 505.146380][T10800] input: syz1 as /devices/virtual/input/input14 [ 505.209931][ T5708] usb 3-1: USB disconnect, device number 14 [ 505.421364][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 505.448872][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.481184][ T9] usb 5-1: USB disconnect, device number 21 [ 506.929942][ T29] audit: type=1400 audit(1785898236.768:840): avc: denied { read } for pid=10812 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 507.019576][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 507.052496][T10818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=10818 comm=syz.4.1189 [ 508.091169][T10833] netlink: 'syz.2.1193': attribute type 49 has an invalid length. [ 508.355582][T10833] bond0: (slave bond_slave_0): Releasing backup interface [ 508.455431][T10833] bond_slave_0: entered promiscuous mode [ 508.565009][T10833] bond_slave_0: entered allmulticast mode [ 510.079669][ T29] audit: type=1400 audit(1785898239.918:841): avc: denied { write } for pid=10853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.385906][ T29] audit: type=1400 audit(1785898240.228:842): avc: denied { write } for pid=10892 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.370054][ T29] audit: type=1400 audit(1785898241.198:843): avc: denied { write } for pid=10899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.676524][ T29] audit: type=1400 audit(1785898241.518:844): avc: denied { write } for pid=10934 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.741428][T10940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 511.821351][T10940] bond1: entered promiscuous mode [ 511.826695][T10940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.894617][T10918] fuse: fd is not a fuse device [ 512.189429][T10955] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 514.543967][ T29] audit: type=1400 audit(1785898244.358:845): avc: denied { setopt } for pid=10946 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 515.070737][T10965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1209'. [ 517.343583][ T9] page_pool_release_retry() stalled pool shutdown: id 33, 18 inflight 61 sec [ 517.664123][T10989] [U]  [ 519.887523][T11024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1225'. [ 519.995539][T11025] overlayfs: failed to clone lowerpath [ 520.075928][T11026] overlayfs: failed to clone lowerpath [ 521.922260][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1229'. [ 522.035904][ T29] audit: type=1400 audit(1785898251.878:846): avc: denied { getopt } for pid=11042 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 522.101378][T11048] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 522.159602][T11053] bond5: entered promiscuous mode [ 522.180155][T11053] bond5: entered allmulticast mode [ 522.201614][T11053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 522.555701][T11058] Failed to initialize the IGMP autojoin socket (err -2) [ 523.263800][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 523.435382][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 523.457369][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 523.485622][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 523.512104][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.537802][ T9] usb 5-1: Product: syz [ 523.562261][ T9] usb 5-1: Manufacturer: syz [ 523.585837][ T9] usb 5-1: SerialNumber: syz [ 527.519617][ T29] audit: type=1400 audit(1785898257.258:847): avc: denied { write } for pid=11106 comm="syz.4.1244" name="functions" dev="configfs" ino=11544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.321408][ T9] usb 5-1: USB disconnect, device number 22 [ 528.569636][ T29] audit: type=1326 audit(1785898258.408:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.569680][ T29] audit: type=1326 audit(1785898258.408:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.572354][ T29] audit: type=1326 audit(1785898258.408:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.612976][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.717893][ T29] audit: type=1326 audit(1785898258.538:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.717947][ T29] audit: type=1326 audit(1785898258.538:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.717991][ T29] audit: type=1326 audit(1785898258.538:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.727790][ T29] audit: type=1326 audit(1785898258.568:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.728029][ T29] audit: type=1326 audit(1785898258.568:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.815049][ T29] audit: type=1326 audit(1785898258.658:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.4.1246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668839e019 code=0x7ffc0000 [ 528.839541][T11119] openvswitch: netlink: Unknown key attributes 2 [ 529.062534][ T8199] libceph: mon0 (1)[c::]:6789 connect error [ 529.214550][T11114] ceph: No mds server is up or the cluster is laggy [ 529.450092][T11133] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 530.211159][T11151] overlayfs: failed to clone lowerpath [ 530.222386][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 530.231352][T11151] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1253'. [ 530.344303][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 530.354394][ T5618] Bluetooth: hci5: command 0x1003 tx timeout [ 534.035552][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 534.035569][ T29] audit: type=1400 audit(1785898263.878:1121): avc: denied { write } for pid=11168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.178084][ T29] audit: type=1400 audit(1785898263.988:1122): avc: denied { ioctl } for pid=11204 comm="syz.4.1264" path="socket:[28467]" dev="sockfs" ino=28467 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 534.221293][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1264'. [ 534.265884][T11208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=11208 comm=syz.4.1264 [ 534.470321][ T29] audit: type=1400 audit(1785898264.298:1123): avc: denied { write } for pid=11209 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.656604][ T29] audit: type=1400 audit(1785898264.488:1124): avc: denied { connect } for pid=11204 comm="syz.4.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 534.748201][ T29] audit: type=1400 audit(1785898264.578:1125): avc: denied { read } for pid=11204 comm="syz.4.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 536.973810][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 537.079316][ T29] audit: type=1400 audit(1785898266.918:1126): avc: denied { write } for pid=11217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.116703][ T9] usb 3-1: device descriptor read/64, error -71 [ 537.292253][ T29] audit: type=1400 audit(1785898267.128:1127): avc: denied { write } for pid=11246 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.463862][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 537.535996][T11250] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 537.623854][ T9] usb 3-1: device descriptor read/64, error -71 [ 537.744489][ T9] usb usb3-port1: attempt power cycle [ 540.772315][ T29] audit: type=1400 audit(1785898270.608:1128): avc: denied { setopt } for pid=11278 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 542.693173][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 542.702157][T11299] bridge_slave_1: left allmulticast mode [ 542.707825][T11299] bridge_slave_1: left promiscuous mode [ 542.713567][T11299] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.090540][T11299] bridge_slave_0: left allmulticast mode [ 543.096293][T11299] bridge_slave_0: left promiscuous mode [ 543.102032][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.119460][T11321] fuse: Unknown parameter '0x0000000000000004' [ 544.721804][T11321] fuse: fd is not a fuse device [ 546.192423][ T29] audit: type=1400 audit(1785898275.888:1129): avc: denied { read } for pid=11334 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.044489][T11369] netlink: 'syz.4.1303': attribute type 1 has an invalid length. [ 549.154665][T11373] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 549.564820][T11377] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 551.254115][ T5708] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 551.643813][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 551.656181][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 551.671743][ T5708] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 551.699048][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.797881][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 552.048352][ T5708] usb 3-1: Product: syz [ 552.077191][ T5708] usb 3-1: Manufacturer: syz [ 552.083429][ T5708] usb 3-1: SerialNumber: syz [ 556.178195][T11431] netlink: 'syz.2.1318': attribute type 23 has an invalid length. [ 556.740644][ T5708] usb 3-1: USB disconnect, device number 18 [ 556.961871][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.297958][ T5618] Bluetooth: hci3: unexpected event for opcode 0x202d [ 559.241094][ T29] audit: type=1326 audit(1785898289.078:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11460 comm="syz.0.1326" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14a439e019 code=0x0 [ 560.781211][ T29] audit: type=1400 audit(1785898290.618:1131): avc: denied { create } for pid=11473 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 560.958798][ T29] audit: type=1400 audit(1785898290.678:1132): avc: denied { write } for pid=11473 comm="syz.0.1329" path="socket:[29715]" dev="sockfs" ino=29715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 561.475397][ T29] audit: type=1400 audit(1785898291.318:1133): avc: denied { write } for pid=11453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.604944][ T5708] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 561.913987][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 561.945875][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.015073][ T5708] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.396084][T11504] Failed to initialize the IGMP autojoin socket (err -2) [ 563.186768][ T5708] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 563.218490][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.225848][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.276723][ T5708] usb 5-1: Product: syz [ 563.295693][ T5708] usb 5-1: Manufacturer: syz [ 563.338487][ T5708] usb 5-1: SerialNumber: syz [ 564.119818][ T5708] usb 5-1: config 0 descriptor?? [ 564.157139][ T29] audit: type=1400 audit(1785898293.998:1134): avc: denied { write } for pid=11503 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.195878][ T5708] usb 5-1: can't set config #0, error -71 [ 564.240904][ T5708] usb 5-1: USB disconnect, device number 23 [ 564.322159][T11511] CIFS: Attempting to mount //127.0.0.1/share [ 564.328526][T11512] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 564.379897][T11511] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 564.422071][T11511] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 564.457885][T11511] CIFS: VFS: Error connecting to socket. Aborting operation. [ 564.478924][T11511] CIFS: VFS: cifs_mount failed w/return code = -2 [ 567.211622][ T29] audit: type=1400 audit(1785898297.038:1135): avc: denied { write } for pid=11524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.503975][ T29] audit: type=1400 audit(1785898299.328:1136): avc: denied { write } for pid=11568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.154102][ T29] audit: type=1400 audit(1785898300.988:1137): avc: denied { read } for pid=11589 comm="syz.2.1348" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 571.346359][T11593] futex_wake_op: syz.4.1349 tries to shift op by 144; fix this program [ 571.839026][ T29] audit: type=1400 audit(1785898301.178:1138): avc: denied { open } for pid=11589 comm="syz.2.1348" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 571.976513][ T29] audit: type=1400 audit(1785898301.618:1139): avc: denied { ioctl } for pid=11589 comm="syz.2.1348" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 571.994340][T11591] [ 572.005081][T11591] ====================================================== [ 572.012091][T11591] WARNING: possible circular locking dependency detected [ 572.019105][T11591] syzkaller #0 Tainted: G L [ 572.025068][T11591] ------------------------------------------------------ [ 572.032063][T11591] syz.2.1348/11591 is trying to acquire lock: [ 572.038108][T11591] ffff888027c657b0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkcg_deactivate_policy+0x167/0x600 [ 572.048049][T11591] [ 572.048049][T11591] but task is already holding lock: [ 572.055392][T11591] ffff88807c06a0b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 572.064265][T11591] [ 572.064265][T11591] which lock already depends on the new lock. [ 572.064265][T11591] [ 572.074645][T11591] [ 572.074645][T11591] the existing dependency chain (in reverse order) is: [ 572.083636][T11591] [ 572.083636][T11591] -> #5 (&eq->sysfs_lock){+.+.}-{4:4}: [ 572.091276][T11591] lock_acquire+0x1b9/0x370 [ 572.096291][T11591] __mutex_lock+0x1a4/0x1bd0 [ 572.101391][T11591] elevator_exit+0x88/0xf0 [ 572.106315][T11591] elevator_switch+0x3a7/0x7e0 [ 572.111585][T11591] elevator_change+0x352/0x530 [ 572.116856][T11591] elevator_set_none+0x92/0xf0 [ 572.122129][T11591] blk_unregister_queue+0x178/0x310 [ 572.127839][T11591] __del_gendisk+0x2e3/0xb20 [ 572.132944][T11591] del_gendisk+0x10e/0x1b0 [ 572.137873][T11591] loop_control_ioctl+0x4f8/0x620 [ 572.143407][T11591] __x64_sys_ioctl+0x18e/0x210 [ 572.148684][T11591] do_syscall_64+0x115/0x870 [ 572.153787][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.160191][T11591] [ 572.160191][T11591] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 572.167998][T11591] lock_acquire+0x1b9/0x370 [ 572.173020][T11591] __mutex_lock+0x1a4/0x1bd0 [ 572.178117][T11591] elevator_change+0x1bc/0x530 [ 572.183389][T11591] elv_iosched_store+0x3be/0x460 [ 572.188837][T11591] queue_attr_store+0x25f/0x2f0 [ 572.194198][T11591] sysfs_kf_write+0xf2/0x150 [ 572.199305][T11591] kernfs_fop_write_iter+0x3e0/0x5f0 [ 572.205102][T11591] vfs_write+0x6ac/0x1050 [ 572.209946][T11591] ksys_write+0x12a/0x250 [ 572.214777][T11591] do_syscall_64+0x115/0x870 [ 572.219877][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.226275][T11591] [ 572.226275][T11591] -> #3 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 572.234864][T11591] lock_acquire+0x1b9/0x370 [ 572.239875][T11591] blk_alloc_queue+0x610/0x790 [ 572.245151][T11591] blk_mq_alloc_queue+0x174/0x290 [ 572.250680][T11591] __blk_mq_alloc_disk+0x29/0x120 [ 572.256208][T11591] loop_add+0x498/0xb60 [ 572.260866][T11591] loop_init+0x1d3/0x200 [ 572.265618][T11591] do_one_initcall+0x11d/0x700 [ 572.270893][T11591] kernel_init_freeable+0x6ea/0x7b0 [ 572.276604][T11591] kernel_init+0x1f/0x1e0 [ 572.281446][T11591] ret_from_fork+0x72b/0xd50 [ 572.286544][T11591] ret_from_fork_asm+0x1a/0x30 [ 572.291818][T11591] [ 572.291818][T11591] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 572.299011][T11591] lock_acquire+0x1b9/0x370 [ 572.304022][T11591] fs_reclaim_acquire+0xc4/0x100 [ 572.309469][T11591] prepare_alloc_pages+0x166/0x5f0 [ 572.315089][T11591] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 572.321483][T11591] __alloc_pages_noprof+0xb/0x110 [ 572.327010][T11591] pcpu_populate_chunk+0x118/0x990 [ 572.332635][T11591] pcpu_alloc_noprof+0x881/0x1ca0 [ 572.338178][T11591] xt_percpu_counter_alloc+0x13e/0x1b0 [ 572.344145][T11591] find_check_entry.isra.0+0xbf/0x990 [ 572.350027][T11591] translate_table+0xbcd/0x1630 [ 572.355387][T11591] ipt_register_table+0x106/0x2b0 [ 572.360919][T11591] iptable_raw_table_init+0x63/0x90 [ 572.366626][T11591] xt_find_table_lock+0x2db/0x520 [ 572.372159][T11591] xt_request_find_table_lock+0x28/0xf0 [ 572.378215][T11591] get_info+0x1a7/0x790 [ 572.382878][T11591] do_ipt_get_ctl+0x231/0xbf0 [ 572.388061][T11591] nf_getsockopt+0x7c/0xe0 [ 572.392986][T11591] ip_getsockopt+0x192/0x1e0 [ 572.398086][T11591] tcp_getsockopt+0xa1/0x110 [ 572.403188][T11591] do_sock_getsockopt+0x50a/0x6e0 [ 572.408725][T11591] __sys_getsockopt+0x148/0x260 [ 572.414083][T11591] __x64_sys_getsockopt+0xbd/0x160 [ 572.419700][T11591] do_syscall_64+0x115/0x870 [ 572.424796][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.431192][T11591] [ 572.431192][T11591] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 572.438906][T11591] lock_acquire+0x1b9/0x370 [ 572.443916][T11591] __mutex_lock+0x1a4/0x1bd0 [ 572.449014][T11591] pcpu_alloc_noprof+0xe87/0x1ca0 [ 572.454541][T11591] percpu_ref_init+0x37/0x3f0 [ 572.459722][T11591] blkg_alloc+0xf0/0xf80 [ 572.464474][T11591] blkg_conf_prep+0x46e/0xf10 [ 572.469661][T11591] tg_set_conf.isra.0+0x1ed/0x500 [ 572.475191][T11591] cgroup_file_write+0x1e6/0x8a0 [ 572.480638][T11591] kernfs_fop_write_iter+0x3e0/0x5f0 [ 572.486431][T11591] vfs_write+0x6ac/0x1050 [ 572.491272][T11591] ksys_write+0x12a/0x250 [ 572.496100][T11591] do_syscall_64+0x115/0x870 [ 572.501195][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.507593][T11591] [ 572.507593][T11591] -> #0 (&q->blkcg_mutex){+.+.}-{4:4}: [ 572.515219][T11591] check_prev_add+0xeb/0xe60 [ 572.520316][T11591] __lock_acquire+0x136c/0x1a40 [ 572.525673][T11591] lock_acquire+0x1b9/0x370 [ 572.530682][T11591] __mutex_lock+0x1a4/0x1bd0 [ 572.535790][T11591] blkcg_deactivate_policy+0x167/0x600 [ 572.541758][T11591] bfq_exit_queue+0x29d/0x430 [ 572.546937][T11591] blk_mq_exit_sched+0x20e/0x4e0 [ 572.552391][T11591] elevator_exit+0x93/0xf0 [ 572.557315][T11591] elevator_switch+0x3a7/0x7e0 [ 572.562584][T11591] elevator_change+0x352/0x530 [ 572.567852][T11591] elevator_set_none+0x92/0xf0 [ 572.573126][T11591] blk_unregister_queue+0x178/0x310 [ 572.578829][T11591] __del_gendisk+0x2e3/0xb20 [ 572.583924][T11591] del_gendisk+0x10e/0x1b0 [ 572.588845][T11591] loop_control_ioctl+0x4f8/0x620 [ 572.594373][T11591] __x64_sys_ioctl+0x18e/0x210 [ 572.599646][T11591] do_syscall_64+0x115/0x870 [ 572.604742][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.611140][T11591] [ 572.611140][T11591] other info that might help us debug this: [ 572.611140][T11591] [ 572.621342][T11591] Chain exists of: [ 572.621342][T11591] &q->blkcg_mutex --> &q->elevator_lock --> &eq->sysfs_lock [ 572.621342][T11591] [ 572.634532][T11591] Possible unsafe locking scenario: [ 572.634532][T11591] [ 572.641961][T11591] CPU0 CPU1 [ 572.647306][T11591] ---- ---- [ 572.652649][T11591] lock(&eq->sysfs_lock); [ 572.657048][T11591] lock(&q->elevator_lock); [ 572.664135][T11591] lock(&eq->sysfs_lock); [ 572.671048][T11591] lock(&q->blkcg_mutex); [ 572.675443][T11591] [ 572.675443][T11591] *** DEADLOCK *** [ 572.675443][T11591] [ 572.683562][T11591] 3 locks held by syz.2.1348/11591: [ 572.688735][T11591] #0: ffff888027c5a3a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x106/0x1b0 [ 572.698820][T11591] #1: ffff888027c65958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 572.708641][T11591] #2: ffff88807c06a0b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 572.717941][T11591] [ 572.717941][T11591] stack backtrace: [ 572.723825][T11591] CPU: 1 UID: 0 PID: 11591 Comm: syz.2.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.723853][T11591] Tainted: [L]=SOFTLOCKUP [ 572.723860][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 572.723874][T11591] Call Trace: [ 572.723882][T11591] [ 572.723890][T11591] dump_stack_lvl+0x100/0x190 [ 572.723914][T11591] print_circular_bug.cold+0x178/0x1c7 [ 572.723950][T11591] check_noncircular+0x146/0x160 [ 572.723975][T11591] check_prev_add+0xeb/0xe60 [ 572.723998][T11591] __lock_acquire+0x136c/0x1a40 [ 572.724024][T11591] lock_acquire+0x1b9/0x370 [ 572.724045][T11591] ? blkcg_deactivate_policy+0x167/0x600 [ 572.724073][T11591] ? __pfx___might_resched+0x10/0x10 [ 572.724098][T11591] __mutex_lock+0x1a4/0x1bd0 [ 572.724122][T11591] ? blkcg_deactivate_policy+0x167/0x600 [ 572.724148][T11591] ? blkcg_deactivate_policy+0x167/0x600 [ 572.724176][T11591] ? __pfx___mutex_lock+0x10/0x10 [ 572.724198][T11591] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 572.724219][T11591] ? percpu_ref_is_zero+0xe7/0x150 [ 572.724241][T11591] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 572.724264][T11591] ? __blk_freeze_queue_start+0xd2/0x460 [ 572.724294][T11591] ? blkcg_deactivate_policy+0x167/0x600 [ 572.724319][T11591] blkcg_deactivate_policy+0x167/0x600 [ 572.724349][T11591] bfq_exit_queue+0x29d/0x430 [ 572.724370][T11591] ? __pfx_bfq_exit_queue+0x10/0x10 [ 572.724390][T11591] blk_mq_exit_sched+0x20e/0x4e0 [ 572.724420][T11591] elevator_exit+0x93/0xf0 [ 572.724441][T11591] elevator_switch+0x3a7/0x7e0 [ 572.724466][T11591] elevator_change+0x352/0x530 [ 572.724492][T11591] elevator_set_none+0x92/0xf0 [ 572.724517][T11591] ? __pfx_elevator_set_none+0x10/0x10 [ 572.724544][T11591] ? kobject_put+0xb9/0x640 [ 572.724574][T11591] blk_unregister_queue+0x178/0x310 [ 572.724598][T11591] __del_gendisk+0x2e3/0xb20 [ 572.724620][T11591] ? del_gendisk+0xb9/0x1b0 [ 572.724640][T11591] ? __pfx___del_gendisk+0x10/0x10 [ 572.724661][T11591] ? up_write+0x2e5/0x5c0 [ 572.724686][T11591] del_gendisk+0x10e/0x1b0 [ 572.724707][T11591] loop_control_ioctl+0x4f8/0x620 [ 572.724728][T11591] ? __pfx_loop_control_ioctl+0x10/0x10 [ 572.724751][T11591] ? __pfx_loop_control_ioctl+0x10/0x10 [ 572.724772][T11591] __x64_sys_ioctl+0x18e/0x210 [ 572.724800][T11591] do_syscall_64+0x115/0x870 [ 572.724823][T11591] ? clear_bhb_loop+0x40/0x90 [ 572.724844][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.724863][T11591] RIP: 0033:0x7f695db9e019 [ 572.724883][T11591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.724900][T11591] RSP: 002b:00007f695eb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.724921][T11591] RAX: ffffffffffffffda RBX: 00007f695de25fa0 RCX: 00007f695db9e019 [ 572.724933][T11591] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 572.724948][T11591] RBP: 00007f695dc3500c R08: 0000000000000000 R09: 0000000000000000 [ 572.724960][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.724971][T11591] R13: 00007f695de26038 R14: 00007f695de25fa0 R15: 00007ffe65cf9fe8 [ 572.724990][T11591] [ 578.263859][ T5708] page_pool_release_retry() stalled pool shutdown: id 33, 18 inflight 122 sec