last executing test programs: 4m15.619178956s ago: executing program 4 (id=633): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x0, 0x200000}, 0x0, [0x9, 0x0, 0x3, 0x7, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0x8000000, 0x0, 0x5, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0xd5e4, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x6, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x7d]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xa, 0x7, 0x2, 0x4002804c4, 0x9, 0x5, 0x5, 0x0, 0x4, 0xfff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x11500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m15.403890237s ago: executing program 4 (id=635): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) 4m15.208047023s ago: executing program 4 (id=637): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4m15.08844874s ago: executing program 4 (id=638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}, 0x40000) 4m14.885546906s ago: executing program 4 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000003c0)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m14.774842366s ago: executing program 4 (id=644): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1000, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x40, 0x6, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x37, 0xef, 0x4, 0x3, 0xe, 0x7, 0xe, 0x6, 0x2001}, {0x93, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x8, 0x1d, 0x0, 0xff, 0xffff7ffffffffb97}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x8, 0x10, 0x6, 0x4, 0x0, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m59.703834013s ago: executing program 32 (id=644): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1000, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x40, 0x6, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x37, 0xef, 0x4, 0x3, 0xe, 0x7, 0xe, 0x6, 0x2001}, {0x93, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x8, 0x1d, 0x0, 0xff, 0xffff7ffffffffb97}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x8, 0x10, 0x6, 0x4, 0x0, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m36.372432157s ago: executing program 2 (id=977): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m36.272400623s ago: executing program 2 (id=981): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008044) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d3) r0 = inotify_init1(0x800) socket(0x2, 0x80805, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 3m36.162252553s ago: executing program 2 (id=984): r0 = syz_ublk_setup_io_uring(0x5d57, &(0x7f0000000000)={0x0, 0x3aac, 0x2, 0x3, 0x154}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8005) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x20242, 0x0) writev(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000027c0)={0x1, 0x1, 0x0, &(0x7f0000002740)=[{0x0}], 0x0}, 0x20) 3m35.815036428s ago: executing program 2 (id=988): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb40102030109021200010000000009"], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) bind$xdp(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x4622, 0xb57, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m34.382017767s ago: executing program 2 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m34.324467547s ago: executing program 2 (id=997): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000005) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xf0000002, 0xf, 0x31363553, 0x7, 0x8, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x9, 0x4}, {0xb, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x6}}, 0x8}) close(r1) 3m19.241313661s ago: executing program 33 (id=997): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000005) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xf0000002, 0xf, 0x31363553, 0x7, 0x8, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x9, 0x4}, {0xb, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x6}}, 0x8}) close(r1) 10.041482868s ago: executing program 5 (id=2296): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') socket$igmp(0x2, 0x3, 0x2) setns(r0, 0x20000000) sigaltstack(0x0, 0x0) sigaltstack(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = getpgid(0x0) tgkill(r1, 0x0, 0x39) 9.972010414s ago: executing program 5 (id=2297): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) open(0x0, 0x60840, 0x44) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd29, 0xc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x851) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 9.881599883s ago: executing program 5 (id=2298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create(0x80f04) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000480)=0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x8, 0x3, 0x10, @empty, @loopback, 0x7800, 0x0, 0x1}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x1000f, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1e, 0x1, 0x8, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) 9.767416665s ago: executing program 5 (id=2300): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) close(0xffffffffffffffff) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 8.22303285s ago: executing program 5 (id=2312): socket$inet_icmp(0x2, 0x2, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioprio_set$pid(0x1, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.368999802s ago: executing program 6 (id=2316): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0xfb7, 0x1) write$eventfd(r1, &(0x7f0000000040)=0xfffffffffffff049, 0x8) shutdown(r0, 0x1) 5.885187757s ago: executing program 6 (id=2324): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905e6022000", @ANYRES16], 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0x80, 0x9, {0x8, 0xb, 0xff, 0xfd, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xb0, 0x9, 0x0, 0x1002, 0x8, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x10, 0x0, {0xa, 0x25, 0x25, 0x0, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0x66fc, 0x6, 0x2}}}}}}}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xc3b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 5.884864489s ago: executing program 5 (id=2325): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4031, 0x2b) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000006040)=""/4086, 0x1000}, {&(0x7f0000000040)=""/111}, {&(0x7f0000000480)=""/143}, {&(0x7f0000000180)=""/132}, {&(0x7f0000000340)=""/151}], 0x1}, 0x8000}], 0x1c26679f6db3718, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048048) 5.788793751s ago: executing program 0 (id=2336): syz_emit_vhci(0x0, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 5.234014902s ago: executing program 1 (id=2327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 4.655790566s ago: executing program 0 (id=2328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0xfffd, 0x4e20, 0x4e, 0x0, @opaque="fc69fe1f5cc79374d254ab9f365a7d84cec4c60629393ec5c602008bf17d753daa9579b4f7761ba71dcd53b85111410735ddce7903135fd6bfbe99d85aa2da7ec0e0ccb8c86b"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 4.515979029s ago: executing program 0 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x80, 0x48, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0}]}, 0x30}}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="1f000000000000007311a300000000008510000002000000850000000000000095000000000000009500a50500000000597aa90a8a1dd84e2a7f99d68ab4df031ea9453ddddb644d9c831ada9cc8cc6938c7c7290512b01c384f187f64be99f21839d17c3eeb0ba2d1aee4d56ce5ad946bf675e430e412e51624bace9a74a2e30baff92ebc853ecf407c59873ca65ced6531f7846dcfc34a4b9346d9ee70bad600f4623c9d067d0d3539d1bc1a8866cc365df2b2ccb247d5ed3340cfb23d41912cd0c9960556871eeed00d4c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000050) r4 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f0000002880)={@broadcast, @broadcast, @void, {@arp={0x806, @generic={0x339, 0x8847, 0x6, 0x0, 0x4, @empty, "", @broadcast}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x16c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @qdisc_kind_options=@q_gred={{0x9}, {0x120, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x81}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0x6, 0x1, 0x2}}]}}]}, 0x16c}}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 4.296485922s ago: executing program 0 (id=2333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(r0) close(0x4) 4.293642914s ago: executing program 1 (id=2334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.526346054s ago: executing program 6 (id=2335): socket$inet_icmp(0x2, 0x2, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioprio_set$pid(0x1, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.525153715s ago: executing program 0 (id=2346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x5513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r3, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 2.984740479s ago: executing program 1 (id=2337): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getpeername$netlink(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r3, &(0x7f00000083c0)={0x2020}, 0x2020) read$hiddev(r3, 0x0, 0x0) 2.760560494s ago: executing program 6 (id=2339): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}}, 0x0) 2.298529608s ago: executing program 0 (id=2340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.884209624s ago: executing program 1 (id=2341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x10}}, 0x0) 1.793264057s ago: executing program 3 (id=2343): creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 1.307224819s ago: executing program 6 (id=2344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 1.282743541s ago: executing program 3 (id=2345): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101400, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x441, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0) 1.183206537s ago: executing program 3 (id=2347): r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 646.055893ms ago: executing program 1 (id=2348): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x107ff, r1}, 0x38) 494.633937ms ago: executing program 3 (id=2349): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="0094fd53", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) 391.811748ms ago: executing program 6 (id=2350): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d0003000000008000000000000000000000070000000000000008000000000000000500000000000000020400"], 0x78) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) 305.972842ms ago: executing program 1 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) r2 = socket$inet(0x2, 0x200000003, 0x84) getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x400}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='9', 0x1}, {&(0x7f00000019c0)="b0", 0x1}], 0x2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20040054) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56543, 0x70b925, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x404880c) 374.898µs ago: executing program 3 (id=2352): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 0s ago: executing program 3 (id=2353): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) kernel console output (not intermixed with test programs): 0.701395][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 180.872246][ T8929] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.932508][ T5855] udevd[5855]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 181.124110][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1058'. [ 181.270299][ T30] audit: type=1400 audit(1782262651.007:753): avc: denied { create } for pid=8940 comm="syz.5.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.341695][ T30] audit: type=1400 audit(1782262651.027:754): avc: denied { bind } for pid=8940 comm="syz.5.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.641728][ T30] audit: type=1400 audit(1782262651.377:755): avc: denied { connect } for pid=8955 comm="syz.1.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.662497][ T30] audit: type=1400 audit(1782262651.397:756): avc: denied { write } for pid=8955 comm="syz.1.1064" path="socket:[29927]" dev="sockfs" ino=29927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.696701][ T7083] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.718129][ T8958] tipc: Started in network mode [ 181.737067][ T8958] tipc: Node identity 2007ff, cluster identity 4711 [ 181.770366][ T8958] tipc: Node number set to 2099199 [ 181.855811][ T7083] usb 6-1: Using ep0 maxpacket: 8 [ 181.862286][ T7083] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.878668][ T7083] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.892102][ T7083] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.898919][ T7083] usb 6-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 181.912010][ T7083] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.926440][ T7083] usb 6-1: config 0 descriptor?? [ 182.145358][ T7083] usbhid 6-1:0.0: can't add hid device: -71 [ 182.160637][ T7083] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 182.188954][ T7083] usb 6-1: USB disconnect, device number 3 [ 182.240273][ T8965] bridge_slave_0: left allmulticast mode [ 182.250114][ T8965] bridge_slave_0: left promiscuous mode [ 182.274128][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.317264][ T8965] bridge_slave_1: left allmulticast mode [ 182.342631][ T8965] bridge_slave_1: left promiscuous mode [ 182.382905][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.432205][ T8965] bond1: (slave veth0_to_bond): Releasing backup interface [ 182.471035][ T8965] bond0: (slave bond_slave_0): Releasing backup interface [ 182.502330][ T8965] bond0: (slave bond_slave_1): Releasing backup interface [ 182.529155][ T8965] team0: Port device team_slave_0 removed [ 182.550101][ T8965] team0: Port device team_slave_1 removed [ 182.562544][ T8965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.576017][ T8965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.612297][ T8965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.642102][ T8965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.665326][ T8965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.782434][ T8966] team0: Port device xfrm0 added [ 182.838027][ T8970] tipc: Started in network mode [ 182.845423][ T8970] tipc: Node identity 0e68c5c4ed8c, cluster identity 4711 [ 182.882049][ T8970] tipc: Enabled bearer , priority 0 [ 183.218804][ T30] audit: type=1400 audit(1782262652.947:757): avc: denied { write } for pid=8984 comm="syz.5.1073" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.241913][ T8987] random: crng reseeded on system resumption [ 183.315647][ T30] audit: type=1400 audit(1782262652.947:758): avc: denied { open } for pid=8984 comm="syz.5.1073" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.875835][ T7080] tipc: Node number set to 3823420868 [ 185.031013][ T9001] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1079'. [ 185.040799][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.076575][ T9001] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1079'. [ 185.087501][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.094569][ T9001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.107382][ T9001] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1079'. [ 185.118664][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.756791][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.764776][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.773703][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.782975][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.792796][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.040685][ T6515] syz_tun (unregistering): left allmulticast mode [ 188.066988][ T6515] syz_tun (unregistering): left promiscuous mode [ 188.079404][ T6515] bridge0: port 3(syz_tun) entered disabled state [ 188.171545][ T6269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.233359][ T6269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.299988][ T6269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.354288][ T6269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.452580][ T30] audit: type=1400 audit(1782262658.187:759): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 188.518150][ T6269] bridge_slave_1: left allmulticast mode [ 188.541137][ T6269] bridge_slave_1: left promiscuous mode [ 188.560432][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.578398][ T6269] bridge_slave_0: left allmulticast mode [ 188.585898][ T6269] bridge_slave_0: left promiscuous mode [ 188.593428][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.702550][ T6269] bond2 (unregistering): (slave geneve2): Releasing active interface [ 188.735230][ T6269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.751400][ T6269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.762443][ T6269] bond0 (unregistering): Released all slaves [ 188.775270][ T6269] bond1 (unregistering): (slave veth5): Releasing active interface [ 188.796457][ T6269] bond1 (unregistering): Released all slaves [ 188.811998][ T6269] bond2 (unregistering): Released all slaves [ 188.867376][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.880260][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.883352][ T30] audit: type=1400 audit(1782262658.617:760): avc: denied { mount } for pid=9089 comm="syz.0.1109" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 188.921122][ T9090] overlayfs: failed to clone upperpath [ 188.945964][ T5621] Bluetooth: hci0: command tx timeout [ 188.957840][ T6269] tipc: Left network mode [ 188.976926][ T6269] IPVS: stopping backup sync thread 7882 ... [ 188.983065][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.002111][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.013638][ T9045] bridge_slave_0: entered allmulticast mode [ 189.021052][ T9045] bridge_slave_0: entered promiscuous mode [ 189.029343][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.036506][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.043690][ T9045] bridge_slave_1: entered allmulticast mode [ 189.050433][ T9045] bridge_slave_1: entered promiscuous mode [ 189.085075][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.107253][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.142321][ T9045] team0: Port device team_slave_0 added [ 189.197886][ T9045] team0: Port device team_slave_1 added [ 189.278582][ T6269] hsr_slave_0: left promiscuous mode [ 189.290695][ T6269] hsr_slave_1: left promiscuous mode [ 189.357605][ T30] audit: type=1804 audit(1782262659.097:761): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1112" name="file0" dev="tmpfs" ino=1191 res=1 errno=0 [ 189.451669][ T30] audit: type=1400 audit(1782262659.167:762): avc: denied { write } for pid=9096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.535542][ T6269] team0 (unregistering): Port device team_slave_1 removed [ 189.569763][ T6269] team0 (unregistering): Port device team_slave_0 removed [ 189.734250][ T30] audit: type=1400 audit(1782262659.467:763): avc: denied { write } for pid=9123 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.771463][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.779387][ T9126] fuse: fd is not a fuse device [ 189.794152][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.855741][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.871149][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 189.897901][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.915495][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.000308][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.113757][ T30] audit: type=1400 audit(1782262659.847:764): avc: denied { read } for pid=9121 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.211796][ T9045] hsr_slave_0: entered promiscuous mode [ 190.225130][ T9045] hsr_slave_1: entered promiscuous mode [ 190.577362][ T9045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.611667][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.639309][ T9045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.679434][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.750227][ T9045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.773072][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.805477][ T9045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.834101][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.977416][ T30] audit: type=1400 audit(1782262660.707:765): avc: denied { write } for pid=9136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.026296][ T5621] Bluetooth: hci0: command tx timeout [ 191.059549][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.107006][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.137151][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.144274][ T7797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.152167][ T30] audit: type=1400 audit(1782262660.877:766): avc: denied { write } for pid=9161 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.225092][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.232227][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.272468][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 191.562521][ T30] audit: type=1326 audit(1782262661.297:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.5.1123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f64f9ce59 code=0x7ffc0000 [ 191.675669][ T30] audit: type=1326 audit(1782262661.297:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.5.1123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f64f9ce59 code=0x7ffc0000 [ 191.888325][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.142092][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.197028][ T9207] lo: entered allmulticast mode [ 192.322656][ T9210] pimreg: entered allmulticast mode [ 192.518536][ T9045] veth0_vlan: entered promiscuous mode [ 192.519251][ T9221] Cannot find add_set index 0 as target [ 192.539998][ T9045] veth1_vlan: entered promiscuous mode [ 192.563017][ T9045] veth0_macvtap: entered promiscuous mode [ 192.571347][ T9045] veth1_macvtap: entered promiscuous mode [ 192.584557][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.607911][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.638896][ T7797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.673977][ T9206] lo: left allmulticast mode [ 192.689765][ T7797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.759254][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 192.780272][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 192.780440][ T7797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.835618][ T7797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.971893][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 192.991317][ T7797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.022880][ T7797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.088823][ T7004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.105975][ T5621] Bluetooth: hci0: command tx timeout [ 193.107511][ T7004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.071881][ T9257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.092205][ T9257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.188138][ T9257] batman_adv: batadv0: Interface deactivated: gretap1 [ 194.228649][ T7794] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.257430][ T7794] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.280920][ T7794] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.309861][ T3008] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.610216][ T9276] overlayfs: failed to clone upperpath [ 194.705532][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 194.705543][ T30] audit: type=1400 audit(1782262664.437:781): avc: denied { map } for pid=9277 comm="syz.6.1140" path="/2/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 194.871573][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1143'. [ 194.899499][ T9289] netlink: 'syz.3.1143': attribute type 7 has an invalid length. [ 194.925254][ T9289] netlink: 'syz.3.1143': attribute type 8 has an invalid length. [ 194.940691][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 194.971515][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1143'. [ 195.012659][ T9289] gretap0: entered promiscuous mode [ 195.032913][ T9290] netlink: 'syz.3.1143': attribute type 7 has an invalid length. [ 195.061666][ T9290] netlink: 'syz.3.1143': attribute type 8 has an invalid length. [ 195.084781][ T9289] gretap0: left promiscuous mode [ 195.105306][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 195.164522][ T9290] gretap0: entered promiscuous mode [ 195.186322][ T5621] Bluetooth: hci0: command tx timeout [ 195.201743][ T9290] gretap0: left promiscuous mode [ 195.512976][ T30] audit: type=1804 audit(1782262665.247:782): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1145" name="/newroot/77/file0" dev="tmpfs" ino=438 res=1 errno=0 [ 195.807315][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1150'. [ 195.809583][ T30] audit: type=1400 audit(1782262665.547:783): avc: denied { write } for pid=9307 comm="syz.1.1151" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.849610][ T9308] binder: 9307:9308 ioctl c0306201 200000000080 returned -14 [ 195.870010][ T9308] binder: 9307:9308 ioctl c0306201 2000000003c0 returned -14 [ 195.915475][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1152'. [ 195.973216][ T9310] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.982512][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1152'. [ 195.992034][ T9310] nbd: nbd64 already in use [ 196.012432][ T6659] block nbd64: NBD_DISCONNECT [ 196.103574][ T6659] udevd[6659]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 196.157488][ T9331] bridge_slave_0: left allmulticast mode [ 196.169476][ T9331] bridge_slave_0: left promiscuous mode [ 196.181382][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.194659][ T9331] bridge_slave_1: left allmulticast mode [ 196.202520][ T9331] bridge_slave_1: left promiscuous mode [ 196.208859][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.217651][ T9331] vlan2: left promiscuous mode [ 196.222568][ T9331] geneve0: left promiscuous mode [ 196.238417][ T9331] bond0: (slave bond_slave_0): Releasing backup interface [ 196.257791][ T9331] bond0: (slave bond_slave_1): Releasing backup interface [ 196.293174][ T9331] team0: Port device team_slave_0 removed [ 196.307385][ T9331] team0: Port device team_slave_1 removed [ 196.344736][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.370327][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.391991][ T9331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.434609][ T9333] team0: Mode changed to "loadbalance" [ 197.355730][ T189] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 197.409424][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 197.518083][ T189] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.527726][ T189] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.538795][ T189] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 197.548565][ T189] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 197.559446][ T189] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 197.572574][ T189] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 197.583419][ T189] usb 7-1: config 1 interface 1 has no altsetting 0 [ 197.593894][ T189] usb 7-1: string descriptor 0 read error: -22 [ 197.600249][ T189] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 197.609322][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.030645][ T189] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 198.056886][ T189] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 198.073237][ T9387] fuse: fd is not a fuse device [ 198.086589][ T189] usb 7-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 198.137631][ T9391] fuse: fd is not a fuse device [ 198.284628][ T9393] overlayfs: failed to clone upperpath [ 198.807448][ T189] usb 7-1: USB disconnect, device number 2 [ 199.000645][ T9414] fuse: fd is not a fuse device [ 199.141124][ T30] audit: type=1400 audit(1782262668.877:784): avc: denied { checkpoint_restore } for pid=9423 comm="syz.5.1197" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.230573][ T30] audit: type=1326 audit(1782262668.967:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.3.1196" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f011db9ce59 code=0x0 [ 199.813428][ T9443] veth1_macvtap: left promiscuous mode [ 200.042042][ T9449] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 200.162736][ T30] audit: type=1400 audit(1782262669.897:786): avc: denied { read } for pid=9454 comm="syz.6.1206" path="socket:[33182]" dev="sockfs" ino=33182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.459623][ T30] audit: type=1400 audit(1782262670.197:787): avc: denied { write } for pid=9447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.499064][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1208'. [ 200.660873][ T30] audit: type=1400 audit(1782262670.397:788): avc: denied { write } for pid=9473 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.790449][ T5272] veth1_macvtap: entered promiscuous mode [ 200.880204][ T9485] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 200.930529][ T9485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.985642][ T9492] fuse: fd is not a fuse device [ 201.022081][ T9485] bond1: (slave veth3): Enslaving as an active interface with a down link [ 201.065361][ T9485] dummy0: left promiscuous mode [ 201.115760][ T189] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 201.135267][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.160085][ T9498] bond1: (slave batadv1): making interface the new active one [ 201.189592][ T9498] batadv1: entered promiscuous mode [ 201.217106][ T9498] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 201.265994][ T3008] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 201.282020][ T189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.310547][ T189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.343313][ T189] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.379298][ T189] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.399455][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.418256][ T189] usb 7-1: config 0 descriptor?? [ 201.435827][ T7075] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 201.454263][ T30] audit: type=1400 audit(1782262671.187:789): avc: denied { write } for pid=9497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.541337][ T30] audit: type=1400 audit(1782262671.277:790): avc: denied { write } for pid=9514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.635826][ T7075] usb 2-1: Using ep0 maxpacket: 32 [ 201.645469][ T7075] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 201.663132][ T7075] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 201.711369][ T7075] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.733092][ T7075] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 201.752514][ T7075] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 201.761919][ T7075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.776920][ T7075] usb 2-1: Product: syz [ 201.799381][ T7075] usb 2-1: Manufacturer: syz [ 201.814954][ T7075] usb 2-1: SerialNumber: syz [ 201.842261][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 201.855259][ T7075] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input16 [ 202.076070][ T7075] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 202.078118][ T189] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 202.093139][ T7075] (id 0x00) [ 202.119973][ T189] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 202.186468][ T7075] rc_core: IR keymap rc-imon-pad not found [ 202.198879][ T7075] Registered IR keymap rc-empty [ 202.208485][ T7075] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 202.236433][ T7075] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 202.276911][ T7075] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 202.289802][ T7075] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input17 [ 202.346156][ T7075] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:14> initialized [ 202.407196][ T189] usb 7-1: USB disconnect, device number 3 [ 202.871582][ T189] usb 2-1: USB disconnect, device number 14 [ 203.138890][ T30] audit: type=1400 audit(1782262672.877:791): avc: denied { watch watch_reads } for pid=9555 comm="syz.1.1231" path="/" dev="ramfs" ino=33920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 203.187923][ T30] audit: type=1804 audit(1782262672.907:792): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1231" name="file0" dev="ramfs" ino=33921 res=1 errno=0 [ 204.406104][ T30] audit: type=1400 audit(1782262674.147:793): avc: denied { write } for pid=9563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.432218][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 204.654755][ T30] audit: type=1400 audit(1782262674.387:794): avc: denied { write } for pid=9598 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.809319][ T5621] Bluetooth: Frame is too long (len 16, expected len 4) [ 204.958238][ T7080] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 204.991717][ T30] audit: type=1400 audit(1782262674.727:795): avc: denied { write } for pid=9608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.127579][ T7080] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.138997][ T7080] usb 2-1: not running at top speed; connect to a high speed hub [ 205.156969][ T7080] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 205.171988][ T7080] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 205.196517][ T7080] usb 2-1: config 14 has no interface number 0 [ 205.214044][ T7080] usb 2-1: config 14 has no interface number 1 [ 205.232399][ T7080] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 205.262025][ T9632] fuse: fd is not a fuse device [ 205.269511][ T7080] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 205.283318][ T9634] syz_tun: entered allmulticast mode [ 205.305045][ T7080] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 205.330394][ T7080] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.357744][ T9635] pimreg: entered allmulticast mode [ 205.363888][ T7080] usb 2-1: config 14 interface 57 has no altsetting 0 [ 205.394074][ T7080] usb 2-1: config 14 interface 228 has no altsetting 0 [ 205.402736][ T9633] syz_tun: left allmulticast mode [ 205.404336][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 205.421325][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 205.421338][ T30] audit: type=1400 audit(1782262675.137:797): avc: denied { nlmsg_read } for pid=9637 comm="syz.3.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.483338][ T7080] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 205.520401][ T7080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.528622][ T7080] usb 2-1: Product: syz [ 205.533163][ T7080] usb 2-1: Manufacturer: syz [ 205.538857][ T7080] usb 2-1: SerialNumber: syz [ 205.687429][ T9653] fuse: fd is not a fuse device [ 205.739901][ T30] audit: type=1400 audit(1782262675.477:798): avc: denied { write } for pid=9638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.849107][ T9660] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 205.876685][ T9660] veth0_vlan: left promiscuous mode [ 205.893768][ T30] audit: type=1400 audit(1782262675.627:799): avc: denied { write } for pid=9656 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.898685][ T9660] veth0_vlan: entered promiscuous mode [ 205.962523][ T30] audit: type=1400 audit(1782262675.657:800): avc: denied { name_bind } for pid=9661 comm="syz.5.1253" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 206.007686][ T7080] legousbtower 2-1:14.57: interrupt endpoints not found [ 206.036568][ T9660] team0: Device veth0_vlan failed to register rx_handler [ 206.159495][ T30] audit: type=1400 audit(1782262675.897:801): avc: denied { wake_alarm } for pid=9670 comm="syz.0.1255" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.408879][ T7080] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 206.443953][ T7080] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 206.451272][ T30] audit: type=1400 audit(1782262676.187:802): avc: denied { write } for pid=9667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.568315][ T9684] netlink: 'syz.5.1256': attribute type 1 has an invalid length. [ 206.635513][ T30] audit: type=1400 audit(1782262676.367:803): avc: denied { write } for pid=9685 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.670156][ T9684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.810135][ T9687] bond2: (slave veth3): Enslaving as an active interface with a down link [ 206.824406][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1258'. [ 206.944741][ T9687] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 206.974798][ T9687] bond2: (slave batadv1): making interface the new active one [ 206.994967][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 207.008061][ T9687] batadv1: entered promiscuous mode [ 207.027802][ T9687] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 207.107785][ T7794] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 207.130253][ T9702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1260'. [ 207.145071][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 207.149521][ T9706] tipc: Failed to remove unknown binding: 66,0,0/0:327655088/327655089 [ 207.211735][ T9706] tipc: Failed to remove unknown binding: 66,0,0/0:327655088/327655089 [ 207.338707][ T7083] usb 2-1: USB disconnect, device number 15 [ 207.452795][ T7083] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 207.518609][ T30] audit: type=1400 audit(1782262677.257:804): avc: denied { write } for pid=9716 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.710961][ T30] audit: type=1400 audit(1782262678.447:805): avc: denied { map } for pid=9723 comm="syz.5.1268" path="socket:[33519]" dev="sockfs" ino=33519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 209.283852][ T9745] netlink: 'syz.5.1276': attribute type 4 has an invalid length. [ 209.320888][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 209.332522][ T9749] netlink: 'syz.6.1277': attribute type 1 has an invalid length. [ 209.343697][ T9745] netlink: 'syz.5.1276': attribute type 4 has an invalid length. [ 209.468964][ T30] audit: type=1400 audit(1782262679.207:806): avc: denied { remount } for pid=9752 comm="syz.3.1280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.612628][ T9764] Invalid ELF header len 1 [ 209.678001][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 209.692478][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 209.708171][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 209.921570][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 209.975610][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 210.039589][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 210.088417][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 210.102856][ T5621] block nbd0: Receive control failed (result -32) [ 210.195775][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 210.236005][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 210.249462][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9771 comm=syz.0.1287 [ 212.235487][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 212.235503][ T30] audit: type=1400 audit(1782262681.967:808): avc: denied { map } for pid=9818 comm="syz.1.1302" path="socket:[33740]" dev="sockfs" ino=33740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.302953][ T9820] team0: Port device xfrm0 removed [ 212.314683][ T30] audit: type=1400 audit(1782262682.017:809): avc: denied { bind } for pid=9817 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.322082][ T9808] Set syz1 is full, maxelem 6117 reached [ 212.338760][ T9820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.367813][ T9824] team0: Mode changed to "activebackup" [ 212.391675][ T7797] tipc: Resetting bearer [ 212.590482][ T30] audit: type=1400 audit(1782262682.327:810): avc: denied { write } for pid=9811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.679107][ T9838] tipc: Resetting bearer [ 212.732538][ T30] audit: type=1400 audit(1782262682.467:811): avc: denied { write } for pid=9845 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.929538][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1309'. [ 213.186387][ T9860] geneve2: entered promiscuous mode [ 213.227752][ T6999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.274775][ T6999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.343074][ T6999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.390651][ T6999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.489085][ T6999] batadv1: left promiscuous mode [ 213.620327][ T9879] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.704551][ T30] audit: type=1400 audit(1782262683.437:812): avc: denied { write } for pid=9859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.865949][ T7083] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 213.887747][ T30] audit: type=1400 audit(1782262683.627:813): avc: denied { write } for pid=9887 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.026865][ T7083] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.049865][ T7083] usb 2-1: config 0 has no interfaces? [ 214.063122][ T7083] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.073387][ T7083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.082871][ T7083] usb 2-1: Product: syz [ 214.088619][ T7083] usb 2-1: Manufacturer: syz [ 214.093394][ T7083] usb 2-1: SerialNumber: syz [ 214.104560][ T7083] usb 2-1: config 0 descriptor?? [ 214.176858][ T30] audit: type=1400 audit(1782262683.917:814): avc: denied { listen } for pid=9892 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 214.238425][ T30] audit: type=1400 audit(1782262683.937:815): avc: denied { accept } for pid=9892 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 214.715800][ T7083] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 214.780277][ T5706] usb 2-1: USB disconnect, device number 16 [ 214.875717][ T7083] usb 7-1: Using ep0 maxpacket: 32 [ 214.884506][ T7083] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 214.901696][ T7083] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 214.912108][ T7083] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 214.927213][ T7083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.945983][ T7083] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 214.965761][ T7083] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 214.979350][ T7083] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 214.988649][ T7083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.999335][ T7083] usb 7-1: config 0 descriptor?? [ 215.033394][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1319'. [ 215.144321][ T9915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1322'. [ 215.180596][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 215.180684][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1322'. [ 215.197957][ T9912] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.217984][ T7083] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 215.471207][ T7083] usb 7-1: USB disconnect, device number 4 [ 215.489537][ T7083] usblp0: removed [ 215.713386][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 215.740205][ T9937] hsr_slave_0 (unregistering): left promiscuous mode [ 217.957845][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1346'. [ 217.967819][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1346'. [ 217.978745][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1346'. [ 217.987806][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1346'. [ 218.368820][T10001] overlayfs: failed to clone lowerpath [ 218.412679][T10001] overlayfs: failed to clone upperpath [ 220.124494][T10017] fuse: fd is not a fuse device [ 220.208220][T10024] fuse: fd is not a fuse device [ 220.382445][ T6999] batadv1: left promiscuous mode [ 220.839215][T10034] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 220.889248][T10034] bond3: entered promiscuous mode [ 220.903724][T10034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.948213][T10034] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.023332][T10034] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 221.067835][T10034] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 221.105906][T10042] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.126101][T10042] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 221.129282][ T30] audit: type=1400 audit(1782262690.857:816): avc: denied { setopt } for pid=10045 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.307826][ T30] audit: type=1400 audit(1782262691.037:817): avc: denied { set_context_mgr } for pid=10049 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 221.363609][ T30] audit: type=1400 audit(1782262691.067:818): avc: denied { call } for pid=10049 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 221.930096][T10070] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 221.937984][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1375'. [ 221.949343][T10070] team0: Device geneve1 is of different type [ 221.957868][T10070] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 222.436541][T10085] fuse: fd is not a fuse device [ 222.495365][T10087] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 222.508835][T10087] Error validating options; rc = [-22] [ 223.312326][T10101] bond2: left promiscuous mode [ 223.330387][T10103] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1388'. [ 223.372594][T10101] geneve2: left promiscuous mode [ 223.402198][T10101] bond3: left promiscuous mode [ 223.422207][ T7794] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.459063][ T7794] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.507480][ T7794] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.557341][ T7794] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.856438][ T7080] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 224.867880][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1405'. [ 224.891279][T10154] selinux_netlink_send: 338 callbacks suppressed [ 224.891313][T10154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10154 comm=syz.0.1405 [ 225.041888][ T7080] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 225.060348][ T7080] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.076962][ T7080] usb 7-1: Product: syz [ 225.083836][ T7080] usb 7-1: Manufacturer: syz [ 225.090608][ T7080] usb 7-1: SerialNumber: syz [ 225.111870][ T7080] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 225.151520][ T30] audit: type=1400 audit(1782262694.887:819): avc: denied { firmware_load } for pid=7076 comm="kworker/1:11" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 225.161972][ T7076] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 225.431454][ T30] audit: type=1400 audit(1782262695.167:820): avc: denied { create } for pid=10177 comm="syz.0.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.461940][ T30] audit: type=1400 audit(1782262695.187:821): avc: denied { write } for pid=10177 comm="syz.0.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.463682][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 225.598451][ T7083] usb 7-1: USB disconnect, device number 5 [ 225.674821][T10185] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.718577][T10185] bond5 (unregistering): Released all slaves [ 225.771650][T10184] syz.3.1416 (10184) used greatest stack depth: 18440 bytes left [ 225.891055][ T30] audit: type=1326 audit(1782262695.627:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef9fd9ce59 code=0x0 [ 226.305990][ T7076] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 226.325827][ T7076] ath9k_htc: Failed to initialize the device [ 226.341968][ T7083] usb 7-1: ath9k_htc: USB layer deinitialized [ 226.910147][ T30] audit: type=1400 audit(1782262696.647:823): avc: denied { accept } for pid=10204 comm="syz.6.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 227.334174][T10223] tipc: Cannot configure node identity twice [ 228.135044][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 228.341647][T10249] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 228.495762][ T7083] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 228.665898][ T7083] usb 6-1: Using ep0 maxpacket: 32 [ 228.674157][ T7083] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 228.710045][T10266] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 228.722713][ T7083] usb 6-1: config 0 has no interface number 0 [ 228.751739][ T7083] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 228.863409][ T7083] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 229.040794][ T7083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.062349][ T7083] usb 6-1: Product: syz [ 229.075977][ T7083] usb 6-1: Manufacturer: syz [ 229.080673][ T7083] usb 6-1: SerialNumber: syz [ 229.090945][ T7083] usb 6-1: config 0 descriptor?? [ 229.104978][T10246] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 229.331428][T10246] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 229.409672][T10286] overlayfs: failed to clone upperpath [ 230.128381][ T30] audit: type=1400 audit(1782262699.867:824): avc: denied { connect } for pid=10296 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.181165][ T30] audit: type=1400 audit(1782262699.917:825): avc: denied { write } for pid=10296 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.171120][ T7083] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 231.194871][ T7083] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 231.217504][ T7083] asix 6-1:0.188: probe with driver asix failed with error -71 [ 231.251870][ T7083] usb 6-1: USB disconnect, device number 4 [ 232.882853][T10328] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1462'. [ 233.578777][T10339] netlink: 'syz.5.1465': attribute type 1 has an invalid length. [ 233.652193][T10339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.673446][T10339] bond3: (slave bond4): making interface the new active one [ 233.690259][T10339] bond3: (slave bond4): Enslaving as an active interface with an up link [ 233.753263][T10346] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 235.747519][T10380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.439081][ T30] audit: type=1400 audit(1782262706.177:826): avc: denied { ioctl } for pid=10390 comm="syz.5.1482" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.163288][T10380] bond5: (slave ip6erspan0): making interface the new active one [ 237.173578][T10380] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 237.183570][T10395] tipc: Started in network mode [ 237.191510][T10395] tipc: Node identity 7f, cluster identity 4711 [ 237.205403][T10395] tipc: Node number set to 127 [ 237.370702][T10406] Bluetooth: (null): Non-link packet received in non-active state [ 237.380072][T10402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.391448][ T64] Bluetooth: (null): Invalid header checksum [ 237.667584][T10420] tipc: Resetting bearer [ 238.190830][ T64] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.221494][ T64] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.251462][ T64] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.284778][ T64] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.478481][T10440] fuse: fd is not a fuse device [ 239.588390][T10473] syzkaller0: entered promiscuous mode [ 239.594980][T10473] syzkaller0: entered allmulticast mode [ 239.878770][T10484] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 239.892257][T10484] Error validating options; rc = [-22] [ 240.110166][T10488] fuse: fd is not a fuse device [ 240.124712][ T30] audit: type=1400 audit(1782262709.857:827): avc: denied { unmount } for pid=10487 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 242.639970][ T30] audit: type=1400 audit(1782262712.377:828): avc: denied { mount } for pid=10528 comm="syz.1.1530" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 242.718821][ T30] audit: type=1400 audit(1782262712.377:829): avc: denied { search } for pid=10528 comm="syz.1.1530" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.744891][ T30] audit: type=1400 audit(1782262712.377:830): avc: denied { search } for pid=10528 comm="syz.1.1530" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.788999][ T30] audit: type=1400 audit(1782262712.377:831): avc: denied { read } for pid=10528 comm="syz.1.1530" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.823732][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 242.845432][ T30] audit: type=1400 audit(1782262712.377:832): avc: denied { read open } for pid=10528 comm="syz.1.1530" path="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.913459][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 243.235273][T10541] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1535'. [ 243.275438][T10544] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1535'. [ 243.304141][T10553] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1535'. [ 243.651491][T10559] syzkaller0: entered promiscuous mode [ 243.660672][T10559] syzkaller0: entered allmulticast mode [ 243.675104][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1540'. [ 244.837158][T10568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10568 comm=syz.5.1540 [ 245.352402][ T30] audit: type=1400 audit(1782262715.087:833): avc: denied { sys_module } for pid=10575 comm="syz.3.1544" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 245.438411][ T30] audit: type=1326 audit(1782262715.177:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.6.1545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf1819ce59 code=0x0 [ 245.665806][ T5720] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 245.874983][ T5720] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 245.887433][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.895579][ T5720] usb 2-1: Product: syz [ 245.899983][ T5720] usb 2-1: Manufacturer: syz [ 245.904664][ T5720] usb 2-1: SerialNumber: syz [ 246.288975][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 246.322446][T10605] netlink: 'syz.3.1552': attribute type 5 has an invalid length. [ 246.330681][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 246.564907][ T5720] rtl8150 2-1:1.0: couldn't reset the device [ 246.571588][ T5720] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 246.586560][ T5720] usb 2-1: USB disconnect, device number 17 [ 247.102552][T10624] netlink: 'syz.1.1559': attribute type 11 has an invalid length. [ 247.576557][T10624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.615183][T10624] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.700210][T10624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.905915][T10624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.122873][T10624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.206659][T10624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.266598][T10624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.286380][T10624] veth1_vlan: left promiscuous mode [ 248.292418][T10624] veth0_vlan: left promiscuous mode [ 248.298550][T10624] veth0_vlan: entered promiscuous mode [ 248.307687][T10624] veth1_vlan: entered promiscuous mode [ 248.321010][T10624] veth1_macvtap: left promiscuous mode [ 248.332559][T10624] veth0_macvtap: left promiscuous mode [ 248.340545][T10624] veth0_macvtap: entered promiscuous mode [ 248.347730][T10624] veth1_macvtap: entered promiscuous mode [ 248.362363][T10624] batman_adv: batadv0: Interface activated: gretap1 [ 248.370864][T10624] 8021q: adding VLAN 0 to HW filter on device eth0 [ 248.380735][T10624] 8021q: adding VLAN 0 to HW filter on device eth1 [ 248.390675][T10624] 8021q: adding VLAN 0 to HW filter on device eth2 [ 248.401850][T10624] 8021q: adding VLAN 0 to HW filter on device eth3 [ 248.412463][T10624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.432375][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.439461][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.551105][ T7004] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.577801][ T7004] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.610805][ T7004] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.631867][ T7004] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.739415][T10647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1568'. [ 249.313892][T10668] syz.5.1573 (10668): drop_caches: 2 [ 249.345276][T10662] syz.5.1573 (10662): drop_caches: 2 [ 249.348306][T10668] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1573'. [ 249.363358][T10662] syz.5.1573 (10662): drop_caches: 2 [ 249.455066][T10677] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 249.602058][T10677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.675445][T10680] bond2: (slave veth5): Enslaving as an active interface with a down link [ 249.724817][T10684] bond2: (slave dummy0): making interface the new active one [ 249.735062][T10684] dummy0: entered promiscuous mode [ 249.740795][T10684] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 249.822213][T10677] netlink: 'syz.1.1577': attribute type 10 has an invalid length. [ 249.840946][T10677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1577'. [ 249.861325][T10677] bond2: (slave dummy0): Releasing active interface [ 250.307071][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.313868][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.567054][T10725] debugfs: '1ùà^!' already exists in 'ieee80211' [ 251.898400][ T30] audit: type=1400 audit(1782262721.637:835): avc: denied { mount } for pid=10728 comm="syz.1.1591" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 251.931817][ T30] audit: type=1400 audit(1782262721.667:836): avc: denied { watch } for pid=10728 comm="syz.1.1591" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 252.349147][ T7083] IPVS: starting estimator thread 0... [ 252.353917][T10734] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1593'. [ 252.387106][T10734] netlink: 'syz.6.1593': attribute type 2 has an invalid length. [ 252.475847][T10737] IPVS: using max 64 ests per chain, 153600 per kthread [ 252.501138][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1598'. [ 252.582789][T10748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10748 comm=syz.6.1598 [ 252.980602][ T30] audit: type=1326 audit(1782262722.707:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.5.1597" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f64f9ce59 code=0x0 [ 253.850287][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.857623][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.077047][T10770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.088784][T10770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.173635][ T7792] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.190479][ T7792] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.219079][ T7792] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.240259][ T7792] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.285252][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1609'. [ 254.366760][T10805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10805 comm=syz.6.1609 [ 254.616908][ T30] audit: type=1400 audit(1782262724.337:838): avc: denied { write } for pid=10800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.056409][ T30] audit: type=1400 audit(1782262724.777:839): avc: denied { write } for pid=10830 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.896373][ T30] audit: type=1400 audit(1782262725.627:840): avc: denied { write } for pid=10840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.901262][T10853] fuse: fd is not a fuse device [ 255.978184][ T30] audit: type=1400 audit(1782262725.717:841): avc: denied { write } for pid=10856 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.135547][T10862] openvswitch: netlink: Tunnel attr 2560 out of range max 16 [ 256.223015][ T30] audit: type=1804 audit(1782262725.957:842): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1620" name="bus" dev="ramfs" ino=38445 res=1 errno=0 [ 256.301851][ T30] audit: type=1804 audit(1782262725.957:843): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1620" name="bus" dev="ramfs" ino=38445 res=1 errno=0 [ 256.692200][ T30] audit: type=1400 audit(1782262726.427:844): avc: denied { write } for pid=10863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.978166][ T30] audit: type=1400 audit(1782262726.717:845): avc: denied { write } for pid=10885 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.835959][T10901] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.1629'. [ 258.488581][ T30] audit: type=1400 audit(1782262728.227:846): avc: denied { ioctl } for pid=10913 comm="syz.3.1634" path="socket:[39312]" dev="sockfs" ino=39312 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 258.776280][T10925] ref_ctr increment failed for inode: 0x6d8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888034220000 [ 258.787672][T10926] netlink: 'syz.3.1637': attribute type 11 has an invalid length. [ 259.281276][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 259.477938][T10947] pimreg: left allmulticast mode [ 259.627811][ T5706] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 260.115775][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 260.220481][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.269884][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 260.563485][ T5706] usb 2-1: can't read configurations, error -71 [ 261.587718][ T30] audit: type=1326 audit(1782262731.327:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.6.1654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf1819ce59 code=0x0 [ 262.062848][T10990] overlayfs: failed to clone upperpath [ 262.445763][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1661'. [ 262.472794][ T30] audit: type=1326 audit(1782262732.207:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.3.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f011db9ce59 code=0x0 [ 262.488240][T10996] bridge1: port 1(dummy0) entered blocking state [ 262.522588][T10996] bridge1: port 1(dummy0) entered disabled state [ 262.534672][T10996] dummy0: entered allmulticast mode [ 262.541239][T10996] dummy0: entered promiscuous mode [ 262.584903][T10996] netlink: 'syz.6.1661': attribute type 10 has an invalid length. [ 262.602754][T10996] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1661'. [ 262.624320][T10996] bridge1: port 1(dummy0) entered blocking state [ 262.630828][T10996] bridge1: port 1(dummy0) entered forwarding state [ 262.660467][T10996] dummy0: left allmulticast mode [ 262.679798][T10996] bridge1: port 1(dummy0) entered disabled state [ 263.338858][T11016] netlink: 'syz.0.1665': attribute type 1 has an invalid length. [ 263.415115][T11016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.433681][T11018] bond6: entered allmulticast mode [ 263.524633][T11016] bond6: (slave ip6gretap1): making interface the new active one [ 263.596605][T11016] ip6gretap1: entered allmulticast mode [ 263.604996][T11016] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 264.547439][T11044] debugfs: '1ùà^!' already exists in 'ieee80211' [ 264.981911][T11048] macsec1: entered promiscuous mode [ 265.167919][T11055] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1679'. [ 265.355541][ T7083] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 265.825739][ T7083] usb 6-1: Using ep0 maxpacket: 8 [ 265.844524][ T7083] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.858550][ T7083] usb 6-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 265.896063][ T7083] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.920769][ T7083] usb 6-1: config 0 descriptor?? [ 266.383214][ T7083] hid_parser_main: 30 callbacks suppressed [ 266.383237][ T7083] ntrig 0003:1B96:0005.0005: unknown main item tag 0x2 [ 266.414223][ T7083] ntrig 0003:1B96:0005.0005: unknown main item tag 0x6 [ 266.428298][ T7083] ntrig 0003:1B96:0005.0005: ignoring exceeding usage max [ 266.450909][ T7083] ntrig 0003:1B96:0005.0005: hidraw0: USB HID v0.01 Device [HID 1b96:0005] on usb-dummy_hcd.5-1/input0 [ 266.591771][ T7083] usb 6-1: USB disconnect, device number 5 [ 267.529461][ T30] audit: type=1400 audit(1782262737.257:849): avc: denied { read } for pid=11108 comm="syz.5.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.630599][ T30] audit: type=1400 audit(1782262737.367:850): avc: denied { read } for pid=11110 comm="syz.0.1693" path="socket:[41700]" dev="sockfs" ino=41700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.823237][T11120] binder_alloc: 11115: pid 11115 spamming oneway? 1 buffers allocated for a total size of 5240 [ 268.171399][T11128] tipc: Failed to remove unknown binding: 66,0,0/127:326895898/326895900 [ 268.202962][T11128] tipc: Failed to remove unknown binding: 66,0,0/127:326895898/326895899 [ 268.241581][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 268.250804][T11128] tipc: Failed to remove unknown binding: 66,0,0/127:326895898/326895900 [ 268.267565][T11128] tipc: Failed to remove unknown binding: 66,0,0/127:326895898/326895899 [ 268.284399][T11130] openvswitch: netlink: Missing key (keys=40, expected=100) [ 268.955729][ T189] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 269.116283][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 269.129693][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.144714][ T189] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.154389][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.170943][ T189] usb 2-1: config 0 descriptor?? [ 269.404266][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.438950][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.472319][ T189] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 269.948231][ T189] usb 2-1: USB disconnect, device number 20 [ 270.269774][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1712'. [ 270.325544][T11175] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.351962][ T5855] block nbd64: NBD_DISCONNECT [ 270.356905][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1712'. [ 270.375560][T11177] nbd: nbd64 already in use [ 270.452250][ T5855] udevd[5855]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.706041][ T30] audit: type=1400 audit(1782262740.447:851): avc: denied { relabelfrom } for pid=11191 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 270.731348][ T30] audit: type=1400 audit(1782262740.467:852): avc: denied { relabelto } for pid=11191 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 270.768797][T11193] tipc: Enabled bearer , priority 0 [ 270.785011][T11198] netlink: 'syz.0.1719': attribute type 39 has an invalid length. [ 270.787372][T11191] tipc: Disabling bearer [ 270.920028][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1722'. [ 270.980859][T11204] bond5: entered promiscuous mode [ 270.992395][T11204] bond5: entered allmulticast mode [ 271.093742][ T30] audit: type=1400 audit(1782262740.827:853): avc: denied { getopt } for pid=11208 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.304593][ T30] audit: type=1400 audit(1782262742.037:854): avc: denied { write } for pid=11232 comm="syz.1.1731" path="socket:[39806]" dev="sockfs" ino=39806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.459039][T11249] netlink: zone id is out of range [ 272.464166][T11249] netlink: zone id is out of range [ 272.469332][T11249] netlink: zone id is out of range [ 272.474447][T11249] netlink: zone id is out of range [ 272.483465][T11249] netlink: zone id is out of range [ 272.488643][T11249] netlink: zone id is out of range [ 272.493722][T11249] netlink: zone id is out of range [ 272.498842][T11249] netlink: zone id is out of range [ 272.503921][T11249] netlink: zone id is out of range [ 272.616230][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 272.682436][ T30] audit: type=1400 audit(1782262742.417:855): avc: denied { bind } for pid=11254 comm="syz.0.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.817089][ T30] audit: type=1804 audit(1782262742.557:856): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1742" name="bus" dev="ramfs" ino=39841 res=1 errno=0 [ 272.865806][ T30] audit: type=1804 audit(1782262742.557:857): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1742" name="bus" dev="ramfs" ino=39841 res=1 errno=0 [ 273.034262][ T30] audit: type=1326 audit(1782262742.767:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.3.1745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f011db9ce59 code=0x0 [ 274.371533][T11292] debugfs: '1ùà^!' already exists in 'ieee80211' [ 275.059985][T11301] netlink: 'syz.3.1755': attribute type 1 has an invalid length. [ 275.256930][T11301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.362201][T11308] bond2: entered allmulticast mode [ 275.859664][T11310] bond2: (slave ip6gretap1): making interface the new active one [ 275.979373][T11310] ip6gretap1: entered allmulticast mode [ 276.067743][T11310] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 278.344717][ T30] audit: type=1326 audit(1782262748.077:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.0.1774" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f579939ce59 code=0x0 [ 278.646326][T11368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.624916][ T30] audit: type=1400 audit(1782262751.357:860): avc: denied { watch_mount } for pid=11417 comm="syz.3.1789" path="/375/file0" dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.684421][T11421] syzkaller0: entered promiscuous mode [ 281.691018][T11421] syzkaller0: entered allmulticast mode [ 284.577622][T11472] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1804'. [ 285.311964][T11486] fuse: Bad value for 'fd' [ 285.498673][ T30] audit: type=1326 audit(1782262755.207:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011db9ce59 code=0x7ffc0000 [ 285.619429][ T30] audit: type=1326 audit(1782262755.207:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011db9ce59 code=0x7ffc0000 [ 285.649137][ T30] audit: type=1326 audit(1782262755.207:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011db9ce59 code=0x7ffc0000 [ 285.676930][ T30] audit: type=1326 audit(1782262755.207:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f011db9ce59 code=0x7ffc0000 [ 285.734086][ T30] audit: type=1326 audit(1782262755.207:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011db9ce59 code=0x7ffc0000 [ 285.765024][ T30] audit: type=1326 audit(1782262755.257:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f011db5d68e code=0x7ffc0000 [ 285.812413][ T30] audit: type=1326 audit(1782262755.267:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f011db5d68e code=0x7ffc0000 [ 285.857896][ T30] audit: type=1326 audit(1782262755.267:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f011db5d68e code=0x7ffc0000 [ 285.901155][ T30] audit: type=1326 audit(1782262755.267:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f011db5d68e code=0x7ffc0000 [ 285.963475][ T30] audit: type=1326 audit(1782262755.267:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.1807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f011db5d68e code=0x7ffc0000 [ 286.919706][ T5720] kernel read not supported for file [fscontext] (pid: 5720 comm: kworker/0:6) [ 287.689281][T11525] netlink: 'syz.5.1820': attribute type 1 has an invalid length. [ 287.721181][T11525] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.762984][T11525] bond6: entered allmulticast mode [ 287.824128][T11525] bond6: (slave ip6gretap1): making interface the new active one [ 287.852299][T11525] ip6gretap1: entered allmulticast mode [ 287.883460][T11525] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 289.175094][T11542] overlayfs: failed to clone upperpath [ 290.202648][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1832'. [ 290.284270][T11560] bridge2: port 1(veth7) entered blocking state [ 290.377565][T11560] bridge2: port 1(veth7) entered disabled state [ 290.388021][T11560] veth7: entered allmulticast mode [ 290.401934][T11560] veth7: entered promiscuous mode [ 291.375771][T11566] bridge2: port 2(veth0_to_bond) entered blocking state [ 291.384624][T11566] bridge2: port 2(veth0_to_bond) entered disabled state [ 291.407655][T11566] veth0_to_bond: entered allmulticast mode [ 291.446730][T11566] veth0_to_bond: entered promiscuous mode [ 292.554018][T11594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1842'. [ 292.608572][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 292.608629][ T30] audit: type=1400 audit(1782262762.277:938): avc: denied { create } for pid=11591 comm="syz.1.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 292.937554][ T30] audit: type=1400 audit(1782262762.287:939): avc: denied { write } for pid=11591 comm="syz.1.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 293.999820][T11616] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 294.059774][T11616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.095754][T11621] bond3: (slave veth9): Enslaving as an active interface with a down link [ 294.171550][T11616] vlan2: entered allmulticast mode [ 294.181360][T11616] veth0_to_bond: entered allmulticast mode [ 294.195008][T11616] veth0_to_bond: entered promiscuous mode [ 294.206534][T11616] veth0_to_bond: left promiscuous mode [ 294.216023][T11616] bond3: (slave vlan2): making interface the new active one [ 294.230371][T11616] veth0_to_bond: entered promiscuous mode [ 294.241043][T11616] vlan2: entered promiscuous mode [ 294.247412][T11616] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 294.474590][T11637] uprobe: syz.0.1858:11637 failed to unregister, leaking uprobe [ 295.288371][ T30] audit: type=1400 audit(1782262765.017:940): avc: denied { execute } for pid=11641 comm="syz.5.1860" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 295.385172][T11647] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 295.481718][T11653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.524009][T11653] bond3: (slave bond4): making interface the new active one [ 295.569049][T11653] bond3: (slave bond4): Enslaving as an active interface with an up link [ 295.619136][T11647] bond3: (slave gretap4): Enslaving as a backup interface with an up link [ 295.706426][T11658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.807329][T11662] netlink: 'syz.3.1866': attribute type 5 has an invalid length. [ 296.393258][T11693] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 296.394628][ T30] audit: type=1804 audit(1782262766.127:941): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1872" name="/newroot/196/file0" dev="tmpfs" ino=1059 res=1 errno=0 [ 296.491221][T11693] ref_ctr increment failed for inode: 0x423 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888079aecc80 [ 296.527224][T11692] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 296.553987][T11692] ref_ctr decrement failed for inode: 0x423 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888079aecc80 [ 296.591848][T11692] uprobe: syz.5.1872:11692 failed to unregister, leaking uprobe [ 296.800105][ T30] audit: type=1400 audit(1782262766.537:942): avc: denied { setopt } for pid=11709 comm="syz.6.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 297.165792][ T5706] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 297.457385][ T5706] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.468657][ T5706] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.475338][ T5706] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 297.484941][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.508595][ T5706] usb 6-1: config 0 descriptor?? [ 298.063001][ T5706] prodikeys 0003:041E:2801.0006: unknown main item tag 0x2 [ 298.098580][ T5706] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 298.122410][ T30] audit: type=1326 audit(1782262767.857:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11732 comm="syz.6.1882" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fcf18196bd7 code=0x0 [ 298.123594][ T5706] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 298.222611][ T5706] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 298.230505][ T5706] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 298.237768][ T5706] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 298.245188][ T5706] prodikeys 0003:041E:2801.0006: bogus close delimiter [ 298.252057][ T5706] prodikeys 0003:041E:2801.0006: item 0 2 2 10 parsing failed [ 298.262895][ T5706] prodikeys 0003:041E:2801.0006: hid parse failed [ 298.269718][ T5706] prodikeys 0003:041E:2801.0006: probe with driver prodikeys failed with error -22 [ 298.299077][ T5706] usb 6-1: USB disconnect, device number 6 [ 299.358313][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.424531][T11759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.835770][ T189] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 299.966407][ T189] usb 6-1: device descriptor read/64, error -71 [ 300.019316][T11771] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 300.045479][T11771] CIFS mount error: No usable UNC path provided in device string! [ 300.045479][T11771] [ 300.055503][T11771] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 300.516333][ T189] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 300.562445][ T30] audit: type=1400 audit(1782262770.297:944): avc: denied { write } for pid=11776 comm="syz.1.1898" name="/" dev="ocfs2_dlmfs" ino=43982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.562906][T11780] o2cb: This node has not been configured. [ 300.591277][T11780] o2cb: Cluster check failed. Fix errors before retrying. [ 300.600084][T11780] (syz.1.1898,11780,0):user_dlm_register:674 ERROR: status = -22 [ 300.608008][T11780] (syz.1.1898,11780,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 300.616579][ T30] audit: type=1400 audit(1782262770.297:945): avc: denied { add_name } for pid=11776 comm="syz.1.1898" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.746094][ T30] audit: type=1400 audit(1782262770.297:946): avc: denied { create } for pid=11776 comm="syz.1.1898" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 300.775927][ T189] usb 6-1: device descriptor read/64, error -71 [ 300.782685][ T30] audit: type=1400 audit(1782262770.297:947): avc: denied { associate } for pid=11776 comm="syz.1.1898" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 300.909312][ T189] usb usb6-port1: attempt power cycle [ 301.266374][ T189] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 301.317578][ T189] usb 6-1: device descriptor read/8, error -71 [ 301.575828][ T189] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 301.616160][ T189] usb 6-1: device descriptor read/8, error -71 [ 301.824886][ T189] usb usb6-port1: unable to enumerate USB device [ 303.225604][ T30] audit: type=1400 audit(1782262772.957:948): avc: denied { recv } for pid=4977 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 303.283875][T11822] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 303.934457][T11827] netlink: 'syz.6.1914': attribute type 1 has an invalid length. [ 304.019389][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 304.702379][T11827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.740484][T11830] vlan3: entered allmulticast mode [ 304.764560][T11830] bond1: entered allmulticast mode [ 304.914035][T11832] bond1: (slave geneve2): making interface the new active one [ 304.928466][T11832] geneve2: entered allmulticast mode [ 304.937080][T11832] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 304.948648][ T7792] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.965724][ T7792] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.002729][ T30] audit: type=1400 audit(1782262774.737:949): avc: denied { create } for pid=11840 comm="syz.1.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 305.334941][ T7792] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.351420][ T7792] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.361491][T11841] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 305.427277][T11841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.470234][T11841] bond4: (slave veth0_to_bond): making interface the new active one [ 305.479693][T11841] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 305.493006][T11841] bond4: entered promiscuous mode [ 305.498211][T11841] bond4: entered allmulticast mode [ 305.509652][T11841] macvlan2: entered promiscuous mode [ 305.515059][T11841] macvlan2: entered allmulticast mode [ 305.522315][T11841] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 305.541954][T11841] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 306.086074][T11860] vlan0: entered promiscuous mode [ 306.095992][T11860] team0: Device vlan0 is of different type [ 306.104421][T11858] syzkaller0: entered promiscuous mode [ 306.114322][T11858] syzkaller0: entered allmulticast mode [ 307.107167][ T7004] vlan2: left promiscuous mode [ 308.694198][T11888] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 308.715294][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 308.735812][ T7083] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 308.984156][ T7083] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.075328][ T7083] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 309.102005][ T7083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.117151][ T7083] usb 2-1: Product: syz [ 309.121404][ T7083] usb 2-1: Manufacturer: syz [ 309.127887][ T7083] usb 2-1: SerialNumber: syz [ 309.137550][ T7083] usb 2-1: config 0 descriptor?? [ 311.140571][T11934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 311.211820][T11937] fuse: fd is not a fuse device [ 311.219959][ T30] audit: type=1800 audit(1782262780.957:950): pid=11937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1944" name="file1" dev="tmpfs" ino=2204 res=0 errno=0 [ 311.511104][ T5706] usb 2-1: USB disconnect, device number 21 [ 311.759338][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.768665][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.781725][T11948] fuse: fd is not a fuse device [ 313.533133][ T30] audit: type=1400 audit(1782262783.267:951): avc: denied { setattr } for pid=11986 comm="syz.0.1962" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.792986][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 313.820386][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 315.736486][ T7075] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 315.837223][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 315.846979][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 315.858142][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 315.877713][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 315.896690][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 315.905989][ T7075] usb 2-1: Using ep0 maxpacket: 32 [ 315.912666][ T7075] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 315.924337][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 315.933697][ T7075] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 315.952492][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 315.973139][ T7075] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.985301][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 316.012209][ T7075] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 316.095119][ T7075] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 316.115793][ T7075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.127656][ T30] audit: type=1400 audit(1782262785.867:952): avc: denied { lock } for pid=12035 comm="syz.0.1979" path="socket:[45469]" dev="sockfs" ino=45469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 316.128568][ T7075] usb 2-1: Product: syz [ 316.166252][ T7075] usb 2-1: Manufacturer: syz [ 316.172208][ T7075] usb 2-1: SerialNumber: syz [ 316.200699][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 316.208529][ T7075] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input19 [ 316.715762][ T7075] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 316.742170][ T7075] (id 0x00) [ 316.856949][ T7075] rc_core: IR keymap rc-imon-pad not found [ 316.884980][ T7075] Registered IR keymap rc-empty [ 316.905385][ T7075] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 316.945083][ T7075] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 316.983490][T12048] syz_tun (unregistering): left allmulticast mode [ 317.006270][ T7075] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 317.063559][ T7075] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input20 [ 317.136744][ T7075] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:22> initialized [ 317.863836][T12064] fuse: fd is not a fuse device [ 317.868796][ T5706] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 318.085860][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 318.106435][ T5706] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 318.136458][ T5706] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 318.516355][ T5706] usb 6-1: config 254 has no interface number 0 [ 318.530501][ T5706] usb 6-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 318.553820][ T5706] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 318.565184][ T5706] usb 6-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.578996][ T5706] usb 6-1: config 254 interface 235 has no altsetting 0 [ 318.589669][ T5706] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 318.605926][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 318.630592][ T5706] usb 6-1: Product: syz [ 318.641880][ T5706] usb 6-1: Manufacturer: syz [ 318.668412][ T5706] usb 6-1: SerialNumber: syz [ 318.682668][T12067] imon:send_packet: task interrupted [ 318.696447][T12067] imon:send_packet: packet tx failed (-512) [ 318.705303][T12056] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 318.729469][T12067] imon:vfd_write: send packet #5 failed [ 318.734313][ T5706] usbtest 6-1:254.235: couldn't get endpoints, -22 [ 318.761515][T12067] imon:send_packet: packet tx failed (-32) [ 318.770440][ T5706] usbtest 6-1:254.235: probe with driver usbtest failed with error -22 [ 318.859640][T12089] __nla_validate_parse: 2 callbacks suppressed [ 318.859653][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 318.883202][T12067] imon:vfd_write: send packet #0 failed [ 318.916239][ T5706] usb 2-1: USB disconnect, device number 22 [ 319.400522][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.430557][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.306874][ T7083] usb 6-1: USB disconnect, device number 11 [ 320.600662][ T30] audit: type=1400 audit(1782262790.337:953): avc: denied { mount } for pid=12118 comm="syz.3.2001" name="/" dev="pstore" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 321.021524][T12132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2006'. [ 321.102318][T12138] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2006'. [ 321.274637][ T30] audit: type=1400 audit(1782262791.007:954): avc: denied { shutdown } for pid=12135 comm="syz.5.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.658171][T12146] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 321.676177][ T30] audit: type=1400 audit(1782262791.417:955): avc: denied { relabelto } for pid=12145 comm="syz.1.2010" name="391" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 321.743419][ T30] audit: type=1400 audit(1782262791.417:956): avc: denied { associate } for pid=12145 comm="syz.1.2010" name="391" dev="tmpfs" ino=2084 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 321.778689][ T30] audit: type=1400 audit(1782262791.467:957): avc: denied { write } for pid=5606 comm="syz-executor" name="391" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 321.807176][ T30] audit: type=1400 audit(1782262791.467:958): avc: denied { remove_name } for pid=5606 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 321.833731][ T30] audit: type=1400 audit(1782262791.467:959): avc: denied { write } for pid=5606 comm="syz-executor" name="391" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 321.860428][ T30] audit: type=1400 audit(1782262791.467:960): avc: denied { write } for pid=5606 comm="syz-executor" name="391" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 321.932918][ T30] audit: type=1400 audit(1782262791.467:961): avc: denied { write } for pid=5606 comm="syz-executor" name="391" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 322.060490][ T30] audit: type=1400 audit(1782262791.477:962): avc: denied { rmdir } for pid=5606 comm="syz-executor" name="391" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 322.155134][T12160] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 322.255721][ T189] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 322.476486][ T189] usb 6-1: Using ep0 maxpacket: 16 [ 322.483104][ T189] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 322.493811][ T189] usb 6-1: config 0 has no interface number 0 [ 322.500408][ T189] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 322.510759][ T189] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 322.526607][ T189] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 322.536068][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.545311][ T189] usb 6-1: Product: syz [ 322.549816][ T189] usb 6-1: Manufacturer: syz [ 322.555972][ T189] usb 6-1: SerialNumber: syz [ 322.582578][ T189] usb 6-1: config 0 descriptor?? [ 322.600925][T12158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 322.613462][T12158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 322.828227][T12158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 322.835819][T12158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 322.885316][T12176] netlink: 'syz.0.2020': attribute type 1 has an invalid length. [ 322.917913][T12176] bond7: (slave bridge2): Enslaving as a backup interface with an up link [ 322.937833][T12176] macvlan2: entered promiscuous mode [ 322.943170][T12176] macvlan2: entered allmulticast mode [ 322.950020][T12176] bond7: entered promiscuous mode [ 322.955111][T12176] bridge2: entered promiscuous mode [ 322.960921][T12176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 322.968604][T12176] bond7: left promiscuous mode [ 322.973407][T12176] bridge2: left promiscuous mode [ 323.047099][ T189] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 323.093954][T12181] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2022'. [ 325.270612][ T189] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 325.310546][ T189] asix 6-1:0.34: probe with driver asix failed with error -71 [ 325.344232][ T189] usb 6-1: USB disconnect, device number 12 [ 325.656985][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 325.657001][ T30] audit: type=1400 audit(1782262795.397:964): avc: denied { write } for pid=12238 comm="syz.0.2038" path="socket:[45814]" dev="sockfs" ino=45814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 325.841078][T12249] macsec0: entered promiscuous mode [ 325.846556][T12249] bridge0: entered promiscuous mode [ 326.219405][T12251] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 326.685030][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2042'. [ 326.754291][T12259] bond5: (slave geneve2): making interface the new active one [ 326.849303][T12259] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 326.872055][ T1035] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 326.886153][ T1035] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 326.896701][T12251] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.904255][ T1035] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 326.917930][ T1035] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.015716][ T5720] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 327.160172][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2050'. [ 327.170836][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.185893][ T5720] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 327.195253][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.203747][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2050'. [ 327.204931][ T5720] usb 2-1: config 0 descriptor?? [ 327.229845][T12278] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2051'. [ 327.254097][T12278] gretap0: entered promiscuous mode [ 327.265795][T12278] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2051'. [ 327.291276][T12280] fuse: fd is not a fuse device [ 327.296006][T12278] 0ªî{X¹¦: renamed from gretap0 [ 327.308202][T12278] 0ªî{X¹¦: left promiscuous mode [ 327.314332][T12278] 0ªî{X¹¦: entered allmulticast mode [ 327.329989][T12278] net_ratelimit: 13 callbacks suppressed [ 327.329999][T12278] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 327.996012][ T5720] usbhid 2-1:0.0: can't add hid device: -71 [ 328.505251][T12294] netlink: 'syz.3.2057': attribute type 11 has an invalid length. [ 328.507225][ T5720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 328.590363][T12297] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 328.640758][ T30] audit: type=1400 audit(1782262798.317:965): avc: denied { getopt } for pid=12295 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 328.672245][T12298] netlink: 'syz.6.2059': attribute type 1 has an invalid length. [ 328.811181][T12297] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.977783][T12298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.051502][ T5720] usb 2-1: USB disconnect, device number 23 [ 329.059243][T12300] bond8: (slave geneve3): making interface the new active one [ 329.077534][T12300] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 329.107654][T12294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.153074][T12294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.170461][T12301] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 329.191540][T12299] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 329.199773][T12299] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 329.220010][T12303] bond2 (unregistering): (slave syz_tun): Removing an active aggregator [ 329.231187][T12303] bond2 (unregistering): (slave syz_tun): Releasing backup interface [ 329.246295][T12303] bond2 (unregistering): Released all slaves [ 329.292073][ T3008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.309832][ T3008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.356101][ T5720] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 329.388917][ T3008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.433222][ T3008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.446609][ T3008] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 329.529052][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2065'. [ 330.021333][T12322] veth9: entered allmulticast mode [ 330.051540][T12322] bond2: (slave veth9): Enslaving as an active interface with an up link [ 330.094146][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2068'. [ 330.935760][T12345] fuse: fd is not a fuse device [ 331.417483][T12354] kvm: pic: non byte write [ 332.156573][T12370] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2081'. [ 332.194047][T12370] syzkaller0: entered promiscuous mode [ 332.212711][T12370] syzkaller0: entered allmulticast mode [ 332.245442][T12370] tipc: Enabled bearer , priority 0 [ 332.266700][T12369] tipc: Resetting bearer [ 332.373099][T12369] tipc: Disabling bearer [ 332.409082][T12388] fuse: fd is not a fuse device [ 332.518765][ T30] audit: type=1400 audit(1782262802.247:966): avc: denied { mounton } for pid=12380 comm="syz.6.2085" path="/177/file0" dev="tmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 333.842323][T12402] lo: entered allmulticast mode [ 333.868849][T12399] lo: left allmulticast mode [ 335.174058][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2098'. [ 335.246799][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2098'. [ 335.342018][ T30] audit: type=1326 audit(1782262805.077:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12443 comm="syz.0.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f579939ce59 code=0x0 [ 335.450086][T12446] usb usb9: usbfs: process 12446 (syz.5.2100) did not claim interface 0 before use [ 335.495879][ T30] audit: type=1326 audit(1782262805.237:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12443 comm="syz.0.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579939ce59 code=0x7fc00000 [ 335.748690][T12459] netlink: 798 bytes leftover after parsing attributes in process `syz.6.2104'. [ 336.232705][ T30] audit: type=1326 audit(1782262805.907:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12443 comm="syz.0.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f579939ce59 code=0x7fc00000 [ 337.147674][ T30] audit: type=1400 audit(1782262806.877:970): avc: denied { write } for pid=12474 comm="syz.0.2110" path="socket:[46283]" dev="sockfs" ino=46283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 337.365324][T12493] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 337.379476][T12493] netlink: 'syz.3.2116': attribute type 4 has an invalid length. [ 337.387986][T12493] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2116'. [ 337.401482][T12493] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 337.409552][T12493] netlink: 'syz.3.2116': attribute type 4 has an invalid length. [ 337.452590][T12493] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2116'. [ 337.474565][ T30] audit: type=1400 audit(1782262807.187:971): avc: denied { ioctl } for pid=12492 comm="syz.3.2116" path="socket:[47175]" dev="sockfs" ino=47175 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.084019][ T5621] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 338.095792][T12512] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 340.033112][ T30] audit: type=1400 audit(1782262809.767:972): avc: denied { bind } for pid=12535 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 340.064645][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 340.083838][ T30] audit: type=1400 audit(1782262809.767:973): avc: denied { setopt } for pid=12535 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 340.172870][T12539] netlink: 'syz.1.2130': attribute type 39 has an invalid length. [ 340.202700][ T30] audit: type=1326 audit(1782262809.937:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.0.2128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579939ce59 code=0x7ffc0000 [ 340.302926][ T30] audit: type=1326 audit(1782262809.937:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.0.2128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f579939ce59 code=0x7ffc0000 [ 340.379594][ T30] audit: type=1326 audit(1782262810.117:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.0.2128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579939ce59 code=0x7ffc0000 [ 340.420864][ T30] audit: type=1326 audit(1782262810.117:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.0.2128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579939ce59 code=0x7ffc0000 [ 340.554310][T12551] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2135'. [ 340.597954][T12551] tipc: Enabling of bearer rejected, failed to enable media [ 340.719304][T12559] xt_TCPMSS: Only works on TCP SYN packets [ 341.104106][T12569] netlink: 'syz.6.2140': attribute type 1 has an invalid length. [ 341.124803][T12569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.147668][T12569] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 341.158062][T12569] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 341.177217][T12569] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 341.186042][T12569] bond3: (slave batadv1): making interface the new active one [ 341.193806][T12569] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 341.212325][T12569] batadv1: entered promiscuous mode [ 341.218042][T12569] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 341.222516][T12554] overlayfs: upper fs does not support file handles, falling back to index=off. [ 341.899511][T12560] sctp: [Deprecated]: syz.5.2137 (pid 12560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.899511][T12560] Use struct sctp_sack_info instead [ 341.955541][T12580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2144'. [ 342.387878][T12592] sch_fq: defrate 4294967295 ignored. [ 344.827757][T12620] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2155'. [ 345.044016][T12620] loop5: detected capacity change from 0 to 4095 [ 345.333275][T12627] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2157'. [ 346.039051][ T30] audit: type=1400 audit(1782262815.767:978): avc: denied { recv } for pid=3106 comm="kworker/1:1H" saddr=10.128.0.169 src=40482 daddr=10.128.1.57 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 346.187999][T12630] syzkaller0: entered promiscuous mode [ 346.224939][T12630] syzkaller0: entered allmulticast mode [ 346.462602][T12639] bridge0: port 1(veth1_macvtap) entered blocking state [ 346.470140][T12639] bridge0: port 1(veth1_macvtap) entered disabled state [ 346.477853][T12639] veth1_macvtap: entered allmulticast mode [ 346.488637][T12639] veth1_macvtap: left allmulticast mode [ 349.532054][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 350.627172][ T30] audit: type=1800 audit(1782262820.367:979): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2165" name="bus" dev="ramfs" ino=47523 res=0 errno=0 [ 352.813880][ T30] audit: type=1400 audit(1782262822.547:980): avc: denied { bpf } for pid=12716 comm="syz.6.2182" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.194019][T12725] netlink: 'syz.1.2185': attribute type 1 has an invalid length. [ 353.302393][T12725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.427284][T12727] vlan2: entered allmulticast mode [ 353.448045][T12727] bond5: entered allmulticast mode [ 353.476805][T12730] bond5: (slave geneve3): making interface the new active one [ 353.882725][ T30] audit: type=1400 audit(1782262823.297:981): avc: denied { perfmon } for pid=12728 comm="syz.3.2186" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.930059][T12730] geneve3: entered allmulticast mode [ 353.946062][T12730] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 354.812713][T12750] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 354.854651][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2191'. [ 355.687920][ T3008] batadv1: left promiscuous mode [ 357.330794][T12786] xt_cgroup: path and classid specified [ 358.435121][ T30] audit: type=1400 audit(1782262828.167:982): avc: denied { transfer } for pid=12795 comm="syz.1.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 358.589928][T12805] netlink: 'syz.6.2209': attribute type 1 has an invalid length. [ 358.635357][T12805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.712315][T12805] bond4: (slave ip6gretap1): making interface the new active one [ 358.750669][T12805] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 358.762434][T12809] bond4: entered allmulticast mode [ 358.771519][T12809] ip6gretap1: entered allmulticast mode [ 360.462686][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 361.397161][ T30] audit: type=1400 audit(1782262831.137:983): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 362.060185][T12865] nftables ruleset with unbound set [ 362.317945][ T30] audit: type=1400 audit(1782262832.057:984): avc: denied { getopt } for pid=12871 comm="syz.0.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.342331][ T7004] Bluetooth: hci2: Frame reassembly failed (-84) [ 362.362556][ T5614] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 362.948261][ T30] audit: type=1400 audit(1782262832.687:985): avc: denied { connect } for pid=12883 comm="syz.3.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 363.452061][T12892] overlayfs: failed to clone upperpath [ 363.626091][T12902] netlink: 'syz.3.2239': attribute type 1 has an invalid length. [ 363.670702][T12902] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.746020][T12905] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 363.759528][T12905] Error validating options; rc = [-22] [ 364.051919][T12902] vlan1: entered allmulticast mode [ 364.057352][T12902] bond6: entered allmulticast mode [ 364.076181][T12902] bond6: (slave geneve3): making interface the new active one [ 364.083715][T12902] geneve3: entered allmulticast mode [ 364.091034][T12902] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 364.937660][ T5614] Bluetooth: hci2: command 0x1003 tx timeout [ 364.937951][ T5621] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 366.419780][T12943] netlink: 'syz.6.2248': attribute type 1 has an invalid length. [ 366.468233][T12943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.620967][T12990] 9p: Bad value for 'dfltuid' [ 367.824900][T12990] 9p: Bad value for 'dfltuid' [ 368.815802][ T30] audit: type=1400 audit(1782262838.507:986): avc: denied { mount } for pid=12994 comm="syz.5.2258" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 369.009525][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2261'. [ 369.066713][T13003] ip6gre1: entered promiscuous mode [ 369.099448][T13003] ip6gre1: entered allmulticast mode [ 369.161527][T13003] netlink: 'syz.6.2261': attribute type 6 has an invalid length. [ 369.183311][T13003] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2261'. [ 369.211163][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2264'. [ 370.811824][T13043] netlink: 'syz.5.2271': attribute type 3 has an invalid length. [ 372.455543][T13052] syzkaller0: entered promiscuous mode [ 372.472641][T13052] syzkaller0: entered allmulticast mode [ 372.583592][T13056] usb usb9: usbfs: process 13056 (syz.1.2275) did not claim interface 0 before use [ 373.186627][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.199093][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.125491][T13087] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 374.444682][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2288'. [ 375.136354][T13102] fuse: fd is not a fuse device [ 376.197149][ T30] audit: type=1400 audit(1782262845.937:987): avc: denied { read } for pid=13139 comm="syz.3.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.905219][ T30] audit: type=1400 audit(1782262846.637:988): avc: denied { mount } for pid=13153 comm="syz.0.2308" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 377.344452][T13154] overlayfs: failed to clone lowerpath [ 377.929259][T13174] overlayfs: failed to clone upperpath [ 378.564652][T13181] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 378.622180][T13181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.157508][ T30] audit: type=1400 audit(1782262850.897:989): avc: denied { setopt } for pid=13229 comm="syz.3.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 381.297866][T13234] macsec1: entered promiscuous mode [ 381.312527][T13234] virt_wifi0: entered promiscuous mode [ 383.430174][ T30] audit: type=1400 audit(1782262853.167:990): avc: denied { egress } for pid=0 comm="swapper/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 383.566329][ T30] audit: type=1400 audit(1782262853.167:991): avc: denied { sendto } for pid=0 comm="swapper/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 385.535105][ T30] audit: type=1404 audit(1782262855.267:992): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 385.599931][ T30] audit: type=1400 audit(1782262855.267:993): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 385.660473][ T30] audit: type=1400 audit(1782262855.317:994): avc: denied { prog_load } for pid=13307 comm="syz.3.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 385.798154][ T30] audit: type=1400 audit(1782262855.317:995): avc: denied { sys_module } for pid=13302 comm="syz.1.2351" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 385.934629][ T30] audit: type=1400 audit(1782262855.317:996): avc: denied { execmem } for pid=13307 comm="syz.3.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 386.051506][ T30] audit: type=1400 audit(1782262855.317:997): avc: denied { create } for pid=13307 comm="syz.3.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 386.084997][ T30] audit: type=1400 audit(1782262855.327:998): avc: denied { write } for pid=13302 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 386.147205][ T30] audit: type=1400 audit(1782262855.457:999): avc: denied { recv } for pid=5594 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 388.866354][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 388.866371][ T30] audit: type=1400 audit(1782262858.607:1040): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 388.936874][ T30] audit: type=1400 audit(1782262858.677:1041): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 392.306279][ T30] audit: type=1400 audit(1782262862.047:1042): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 392.493936][ T30] audit: type=1400 audit(1782262862.227:1043): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 399.400376][ T30] audit: type=1400 audit(1782262869.137:1044): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 399.426687][ T30] audit: type=1400 audit(1782262869.167:1045): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 412.967273][ T30] audit: type=1400 audit(1782262882.707:1046): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 413.506744][ T30] audit: type=1400 audit(1782262883.247:1047): avc: denied { recv } for pid=5806 comm="kworker/0:7" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 434.626817][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.633146][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.848772][ T30] audit: type=1400 audit(1782262909.587:1048): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 441.026889][ T30] audit: type=1400 audit(1782262910.767:1049): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 495.135565][ T30] audit: type=1400 audit(1782262964.867:1050): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 496.066615][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.069987][ T30] audit: type=1400 audit(1782262965.807:1051): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=50882 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 496.072918][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.546443][ T31] INFO: task kworker/1:1:29 blocked for more than 143 seconds. [ 516.554071][ T31] Tainted: G L syzkaller #0 [ 516.560606][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.569307][ T31] task:kworker/1:1 state:D stack:25992 pid:29 tgid:29 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 516.581381][ T31] Workqueue: usb_hub_wq hub_event [ 516.586568][ T31] Call Trace: [ 516.589833][ T31] [ 516.592738][ T31] __schedule+0x125c/0x6730 [ 516.597348][ T31] ? __pfx___schedule+0x10/0x10 [ 516.602207][ T31] ? do_raw_spin_lock+0x128/0x260 [ 516.607286][ T31] ? __pfx___schedule+0x10/0x10 [ 516.612146][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.616987][ T31] ? schedule+0x2bf/0x390 [ 516.621338][ T31] ? lock_release+0x24d/0x310 [ 516.626088][ T31] schedule+0xdd/0x390 [ 516.630154][ T31] usb_kill_urb+0x253/0x320 [ 516.634636][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 516.639699][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 516.645783][ T31] usb_start_wait_urb+0x2c3/0x580 [ 516.650784][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 516.656432][ T31] ? trace_kmalloc+0xeb/0x110 [ 516.661117][ T31] ? __asan_memset+0x23/0x50 [ 516.665715][ T31] usb_control_msg+0x328/0x4b0 [ 516.670474][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 516.675811][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 516.681886][ T31] hub_port_init+0x642/0x37f0 [ 516.686677][ T31] hub_event+0x2f27/0x4af0 [ 516.691115][ T31] ? __pfx_hub_event+0x10/0x10 [ 516.695892][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 516.701525][ T31] ? ioread16+0xd0/0xd0 [ 516.705717][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.710495][ T31] ? lock_acquire+0x301/0x370 [ 516.715148][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.719940][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.724697][ T31] process_one_work+0xa23/0x1940 [ 516.729667][ T31] ? __pfx_process_one_work+0x10/0x10 [ 516.735032][ T31] ? __pfx_hub_event+0x10/0x10 [ 516.739827][ T31] worker_thread+0x5ef/0xe50 [ 516.744413][ T31] ? kthread+0x13a/0x450 [ 516.748674][ T31] ? __pfx_worker_thread+0x10/0x10 [ 516.753778][ T31] kthread+0x370/0x450 [ 516.757873][ T31] ? __pfx_kthread+0x10/0x10 [ 516.762459][ T31] ret_from_fork+0x72b/0xd50 [ 516.767090][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.772196][ T31] ? __switch_to+0x800/0x10f0 [ 516.776896][ T31] ? __pfx_kthread+0x10/0x10 [ 516.781473][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.786392][ T31] [ 516.789550][ T31] INFO: lockdep is turned off. [ 516.794290][ T31] NMI backtrace for cpu 1 [ 516.794305][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 516.794321][ T31] Tainted: [L]=SOFTLOCKUP [ 516.794325][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.794332][ T31] Call Trace: [ 516.794336][ T31] [ 516.794340][ T31] dump_stack_lvl+0x100/0x190 [ 516.794357][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 516.794372][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.794388][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 516.794404][ T31] sys_info+0x141/0x190 [ 516.794416][ T31] watchdog+0xcb1/0x1030 [ 516.794430][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 516.794445][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.794457][ T31] ? __kthread_parkme+0x18c/0x230 [ 516.794472][ T31] ? kthread+0x13a/0x450 [ 516.794482][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.794493][ T31] kthread+0x370/0x450 [ 516.794502][ T31] ? __pfx_kthread+0x10/0x10 [ 516.794513][ T31] ret_from_fork+0x72b/0xd50 [ 516.794528][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.794542][ T31] ? __switch_to+0x800/0x10f0 [ 516.794553][ T31] ? __pfx_kthread+0x10/0x10 [ 516.794563][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.794577][ T31] [ 516.794581][ T31] Sending NMI from CPU 1 to CPUs 0: [ 516.925222][ C0] NMI backtrace for cpu 0 [ 516.925240][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.925265][ C0] Tainted: [L]=SOFTLOCKUP [ 516.925271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.925282][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 516.925312][ C0] Code: 26 86 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 b8 10 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 516.925330][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000246 [ 516.925348][ C0] RAX: 0000000000eb57cc RBX: ffffffff8e491480 RCX: ffffffff8b9ae2d5 [ 516.925360][ C0] RDX: 0000000000000001 RSI: ffffffff8c1e6000 RDI: ffffffff81de4aa7 [ 516.925371][ C0] RBP: fffffbfff1c92290 R08: 0000000000000000 R09: ffffed101708678d [ 516.925382][ C0] R10: ffff8880b8433c6b R11: ffffffff81d51f9c R12: 0000000000000000 [ 516.925393][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 516.925405][ C0] FS: 0000000000000000(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000 [ 516.925421][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.925433][ C0] CR2: 0000560ec7383168 CR3: 000000000e592000 CR4: 00000000003526f0 [ 516.925444][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.925454][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 516.925465][ C0] Call Trace: [ 516.925472][ C0] [ 516.925478][ C0] default_idle+0x9/0x10 [ 516.925495][ C0] default_idle_call+0x6c/0xb0 [ 516.925513][ C0] do_idle+0x3a7/0x5b0 [ 516.925538][ C0] ? __pfx_do_idle+0x10/0x10 [ 516.925560][ C0] ? finish_task_switch.isra.0+0x14c/0x1010 [ 516.925588][ C0] cpu_startup_entry+0x4f/0x60 [ 516.925611][ C0] rest_init+0x251/0x260 [ 516.925629][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 516.925655][ C0] start_kernel+0x48e/0x490 [ 516.925676][ C0] x86_64_start_reservations+0x24/0x30 [ 516.925699][ C0] x86_64_start_kernel+0x12b/0x130 [ 516.925722][ C0] common_startup_64+0x13e/0x158 [ 516.925744][ C0] [ 516.926220][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 516.926237][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 516.926264][ T31] Tainted: [L]=SOFTLOCKUP [ 516.926271][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.926283][ T31] Call Trace: [ 516.926289][ T31] [ 516.926297][ T31] dump_stack_lvl+0x100/0x190 [ 516.926323][ T31] vpanic+0x552/0x970 [ 516.926341][ T31] ? __pfx_vpanic+0x10/0x10 [ 516.926360][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.926387][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 516.926420][ T31] panic+0xd1/0xe0 [ 516.926437][ T31] ? __pfx_panic+0x10/0x10 [ 516.926457][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 516.926481][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 516.926558][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 516.926584][ T31] ? watchdog.cold+0x1ec/0x234 [ 516.926605][ T31] ? watchdog+0xcc1/0x1030 [ 516.926628][ T31] watchdog.cold+0x1fd/0x234 [ 516.926666][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 516.926693][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.926715][ T31] ? __kthread_parkme+0x18c/0x230 [ 516.926748][ T31] ? kthread+0x13a/0x450 [ 516.926765][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.926786][ T31] kthread+0x370/0x450 [ 516.926804][ T31] ? __pfx_kthread+0x10/0x10 [ 516.926823][ T31] ret_from_fork+0x72b/0xd50 [ 516.926850][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.926876][ T31] ? __switch_to+0x800/0x10f0 [ 516.926896][ T31] ? __pfx_kthread+0x10/0x10 [ 516.926915][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.926940][ T31] [ 517.293060][ T31] Kernel Offset: disabled [ 517.297353][ T31] Rebooting in 86400 seconds..