last executing test programs: 3m20.23037388s ago: executing program 4 (id=342): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 3m16.478106588s ago: executing program 4 (id=349): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000080)=0xfffffffe, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0xda90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m13.923118864s ago: executing program 4 (id=356): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m13.712804017s ago: executing program 4 (id=357): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0xfd, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x1, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x2, 0x10, 0x0, 0x1}, {0x0, 0xb000, 0x18, 0x8, 0xc9, 0x4, 0x3, 0x5, 0x80, 0xc, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0xfa, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xcccd4000, 0xd, 0x4, 0x0, 0x8f, 0x0, 0xb, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0xe000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x80, 0x3, 0x4, 0x7}, {0x100000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0xe8, 0xe, 0x0, 0x0, 0x7}, {0x100000, 0x1}, {0x1, 0xfffe}, 0x10000, 0x0, 0x0, 0x10, 0x1, 0x800, 0x900, [0x17a, 0x0, 0x10000, 0x5]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2fe5, 0x4000000000, &(0x7f0000006680)) kexec_load(0x3, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 3m11.434197794s ago: executing program 4 (id=363): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) 3m9.872871312s ago: executing program 4 (id=370): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) fallocate(r0, 0x0, 0x0, 0x1000f4) setns(0xc9, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x44, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x994}]}, 0x44}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x9, 0x0, '\x00', [{0xa1, 0x73, 0x8, 0x80000000, 0x3, 0x4000400000000000}, {0x81, 0x2, 0x8001, 0x1ec, 0x7ff, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 2m54.340477235s ago: executing program 32 (id=370): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) fallocate(r0, 0x0, 0x0, 0x1000f4) setns(0xc9, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x44, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x994}]}, 0x44}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x9, 0x0, '\x00', [{0xa1, 0x73, 0x8, 0x80000000, 0x3, 0x4000400000000000}, {0x81, 0x2, 0x8001, 0x1ec, 0x7ff, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1m58.961374828s ago: executing program 2 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)={{}, {r3, r4/1000+60000}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 1m54.254007584s ago: executing program 2 (id=549): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m53.22993411s ago: executing program 2 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 1m51.970082789s ago: executing program 2 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)={{}, {r2, r3/1000+60000}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x700) 1m46.058841703s ago: executing program 2 (id=573): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) 1m42.138406335s ago: executing program 2 (id=580): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1m26.734280487s ago: executing program 33 (id=580): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) 13.630347597s ago: executing program 5 (id=748): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = socket(0x28, 0x6, 0x400) write(r0, &(0x7f0000000140)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d00000000000000398", 0x2f) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 12.232621248s ago: executing program 6 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bffff3, 0x12, r4, 0x0) 11.159073067s ago: executing program 6 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) 11.027912224s ago: executing program 1 (id=755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x5111c2, 0x7c) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) set_mempolicy_home_node(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x200]}, 0x8, 0x80000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.91645851s ago: executing program 1 (id=756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20064004) io_uring_setup(0x667, &(0x7f0000000180)={0x0, 0x5f23, 0x200, 0x2, 0x232}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) mq_unlink(&(0x7f0000000100)='\\%,\x00') bind$rds(r1, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) signalfd4(r2, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newsa={0x14c, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in=@private=0xa010101, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x200080d4) 10.685989504s ago: executing program 5 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1}}}, 0x4) pipe2(&(0x7f00000000c0), 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 10.002228666s ago: executing program 6 (id=758): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x5, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0xffffffff, 0x0, 0x4, 0x10, 0x5, 0xfffffffe, 0xfff, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) ioctl$UI_DEV_CREATE(r0, 0x5501) read$usbmon(r1, &(0x7f0000000140)=""/47, 0x2f) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000016c0)=""/102400, 0x19000) epoll_create1(0x0) unshare(0x22020600) 9.990773575s ago: executing program 1 (id=759): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004041}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 9.23688789s ago: executing program 5 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 8.169206204s ago: executing program 5 (id=764): io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000540)={0x6, "9e58dca567d4404ef94f54652acb330ec0aabc93cd0dd92d6960273c928540d0", 0x800, 0x5, 0x8e, 0x0, 0x1}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) 8.163540798s ago: executing program 1 (id=774): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x82c6, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.999601947s ago: executing program 5 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x4008804) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x100, "3a8e0300d614000001000100000040004000000000000016c713b41e2a3600", 0x4745504a}) 6.994529298s ago: executing program 3 (id=766): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.989906306s ago: executing program 5 (id=768): semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000002c0)=""/192) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000180)) fchown(r1, r2, r3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x5dc, 0x0}}, {{0x0, 0x0, 0x0}}], 0x802, 0x4000011) 4.481002692s ago: executing program 3 (id=770): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 4.36618344s ago: executing program 0 (id=771): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bond\x00', 0x71) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x4) exit(0xffff) read$FUSE(r3, &(0x7f0000000740)={0x2020}, 0x2020) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x30, 0x4000011}], 0x1, 0x40881) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) 4.255050005s ago: executing program 1 (id=772): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.20947287s ago: executing program 3 (id=773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = io_uring_setup(0x7272, &(0x7f0000000080)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f00000001c0), 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8d, 0xdea8, 0x400, 0x0, 0x0, "4acb8a41c8c563d00e1b2e88c485f5361dd0fdb7980aa6fdf78f8454301432aeec0b06169664d15fca9168207cb030c62d9b9dfec80600000000000000a100"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f0000001cc0)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x10001}, 0x5, 0x81, 0x5, 0x74, 0xd, 'syz1\x00', "43df317caa34dbeb13e4ceacd434fb5b91cb40fd3a89d0999b69451b282867f3", "37ca6ba2a2c506b16c49c4e91ae87b75d344977de0a648e527ce0778089d8284", [{0x4, 0x9, {0x1, 0x2}}, {0x7fff, 0x0, {0x3, 0x7}}, {0x4, 0x7ff, {0x1, 0x1}}, {0x5, 0x3, {0x3, 0x8b91}}, {0x3, 0x9, {0x3, 0x7}}, {0x7, 0x0, {0x3, 0xfffffffd}}, {0x9, 0x7f, {0x2, 0x9d19651}}, {0xd92a, 0x8476, {0x2, 0xfffffff7}}, {0xf53f, 0x6, {0x3, 0xffffff01}}, {0x3, 0x9, {0x3, 0x7}}, {0xdd8, 0x5, {0x3, 0x10}}, {0x4, 0x9, {0x2, 0xf}}, {0x1, 0x7, {0x2, 0x7fffffff}}, {0x800, 0x3, {0x2, 0x6}}, {0xe, 0x2, {0x2, 0x1}}, {0xa, 0x5, {0x3, 0x8}}, {0x5, 0x5, {0x0, 0x9}}, {0x6, 0x1, {0x3, 0x76}}, {0x8, 0x6, {0x3, 0x9}}, {0x7a, 0x3, {0x3, 0x7}}, {0x5, 0x4, {0x2, 0x8}}, {0xfffa, 0x9a59, {0x2, 0x5}}, {0x9, 0xb, {0x2, 0x4}}, {0x6, 0x7f, {0x2, 0x6}}, {0x1, 0x249, {0x2, 0x40}}, {0x39, 0xf752, {0x0, 0xffffffff}}, {0x1, 0x5, {0x2, 0x5}}, {0x2, 0x0, {0x2, 0xc}}, {0x5, 0x6, {0x0, 0x8}}, {0x8, 0x4, {0x0, 0x5}}, {0x290a, 0xfffd}, {0x4, 0xffff, {0x0, 0x8}}, {0x9, 0x100, {0x2, 0x80}}, {0xfbff, 0x8, {0x2, 0xa}}, {0x40, 0x40, {0x2, 0x7f}}, {0x7, 0x1, {0x1, 0xff}}, {0x2, 0x6, {0x1, 0x1}}, {0x3ff, 0xb2, {0x2, 0x8}}, {0x5, 0xff, {0x2, 0xfffffffd}}, {0x1, 0x2, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0xeaa6}, 0x40, 0x8, 0x4, 0x3, 0xe, 'syz0\x00', "65cf9c0001a37065d0deaa8c8241e7af5e75e455abd7301730bfc00366ed8d3a", "efc23a75884dc97810c1ecb9eb8142eb05bc176c506060b8d97610273ae9d16c", [{0xfee7, 0x7fff, {0x1, 0x3}}, {0x80, 0x276b, {0x1, 0x6}}, {0x3ff, 0xd47, {0x0, 0xd}}, {0x81, 0x4000, {0x3, 0x1}}, {0x8001, 0xc6b, {0x2, 0x6}}, {0xffc0, 0xe, {0x2, 0xa}}, {0x4, 0x3, {0x1, 0x3}}, {0x2, 0x19, {0x3, 0x1ff}}, {0x9, 0xaba, {0x2, 0x8}}, {0x3ff, 0x7, {0xb381f3358e040e5, 0x4}}, {0x9, 0x6, {0x3, 0x5}}, {0xb827, 0x7ff, {0x3, 0x9}}, {0x4, 0x3, {0x0, 0x1}}, {0x9, 0x3ff, {0x0, 0x4}}, {0x8, 0x9, {0x0, 0x12000000}}, {0x1, 0xe, {0x3, 0x7}}, {0x0, 0xffff, {0x3, 0x5}}, {0x8001, 0x6, {0x2, 0x5}}, {0x5, 0x3, {0x2, 0x9}}, {0x6, 0xb8e1, {0x3, 0x7ff}}, {0x9, 0x80, {0x2, 0x7}}, {0xff, 0x100, {0x1, 0x6}}, {0x6, 0x6, {0x1, 0x8001}}, {0x9, 0x9, {0x1, 0x13b8}}, {0x80, 0x7ff, {0x0, 0x589}}, {0x2, 0x7, {0x2, 0xd375}}, {0x0, 0xef2, {0x3, 0x8001}}, {0x9, 0x7fff, {0x3, 0x10000}}, {0x9, 0x8, {0x1, 0x821}}, {0x4, 0x800, {0x0, 0x4}}, {0x3, 0x5, {0x3, 0x2}}, {0x1, 0x1, {0x1, 0xc}}, {0x0, 0xfff8, {0x0, 0xad8}}, {0xd838, 0x3, {0x3, 0x5}}, {0x6, 0x200, {0x3, 0x1}}, {0xe8, 0x0, {0x0, 0xf}}, {0x4, 0x7ff, {0x0, 0x6}}, {0xa416, 0x9, {0x0, 0x4}}, {0x9, 0x1, {0x3, 0x9}}, {0x1000, 0x80, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x9, 0x8, 0x4, 0x0, 0xa, 'syz0\x00', "d2cfc3e6557583bdcc3a956385cd25ecd03b7fd654fcd4fd9b96db3aa733fd65", "8b70d336f6732937f4f0b970d292588d5f8efcbfc12fb436a1d0e19746c36a5b", [{0xe, 0x4, {0x1, 0x3}}, {0x4, 0x6, {0x2, 0x8}}, {0x401, 0x7, {0x2, 0x7fff}}, {0x3, 0x2, {0x1, 0x8}}, {0x14, 0x2, {0x1, 0x1}}, {0x81, 0x5, {0x1, 0x7fffffff}}, {0x1, 0x823}, {0x1000, 0x2000, {0x3, 0x10}}, {0x8000, 0x9, {0x2, 0x7ff}}, {0x8ea, 0x3, {0x2}}, {0xa201, 0xf26c, {0x3, 0x6}}, {0xfff8, 0xdb8a, {0x3, 0x2}}, {0x2cc, 0x1ff, {0x0, 0x3}}, {0x401, 0x80, {0x0, 0x6}}, {0x6, 0x3, {0x2, 0x7}}, {0x2, 0x8001, {0x2, 0x44e}}, {0x5f94, 0x2, {0x3, 0x10000}}, {0x306, 0xfff, {0x2, 0x401}}, {0x91a, 0x9, {0x0, 0x6}}, {0x400, 0xb369, {0x0, 0x3}}, {0x2, 0x5, {0x0, 0xf30}}, {0x8, 0x0, {0x2, 0x4}}, {0x8, 0x8001, {0x1, 0x1}}, {0x1, 0xb9, {0x2, 0x4}}, {0x400, 0xfffa, {0x1}}, {0x4, 0x2, {0x1, 0xff}}, {0x5, 0x3}, {0x9, 0x5d, {0x2, 0x800}}, {0x7}, {0x1, 0x9c, {0x3, 0x1}}, {0x7, 0x8001, {0x3}}, {0x8, 0x9, {0x2, 0x3}}, {0x89, 0x3, {0x2, 0x3}}, {0x7, 0x401, {0x1, 0x7}}, {0xf5d, 0xd, {0x0, 0xa}}, {0x5, 0x81, {0x2, 0x74b21003}}, {0x3, 0x6, {0x2, 0x7}}, {0xa, 0xf5, {0x3, 0x24}}, {0x4, 0x2, {0x1, 0x7}}, {0x2, 0x1ff, {0x1, 0xb}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) 3.136051071s ago: executing program 0 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.135628659s ago: executing program 6 (id=776): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x480800, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa6400, 0xb5) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) madvise(&(0x7f0000150000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) 2.849346317s ago: executing program 3 (id=777): io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000540)={0x6, "9e58dca567d4404ef94f54652acb330ec0aabc93cd0dd92d6960273c928540d0", 0x800, 0x5, 0x8e, 0x0, 0x1}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) 2.84831366s ago: executing program 1 (id=787): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00, 0x0, 0x0, 0x1000, 0xffffffff, r3}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x2, 0x40040001, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.872884444s ago: executing program 0 (id=778): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x87) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x5, 0x0, @val=@iter={0x0}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.760678709s ago: executing program 3 (id=779): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2081, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) accept$unix(r1, &(0x7f0000000180), &(0x7f00000002c0)=0x6e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='12', 0x2) 1.573010294s ago: executing program 6 (id=780): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) mkdirat(0xffffffffffffffff, 0x0, 0x1fb) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 1.504292588s ago: executing program 0 (id=781): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}}, 0xe4) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @mcast2, 0x17fff}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000ffffff06000000140008"], 0x34}}, 0x0) 1.251386703s ago: executing program 3 (id=782): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000230000000061002e6161610061005f00"], 0x0, 0x4c}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_le_set_cig_params={{0x3}, {0x3, 0x7}}}}, 0x9) syz_clone(0xc9a02180, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 195.202195ms ago: executing program 0 (id=783): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 188.254641ms ago: executing program 6 (id=784): sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4004004) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setns(0xc9, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x839ce000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 0s ago: executing program 0 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x136) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) kernel console output (not intermixed with test programs): 137.352089][ T9] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 137.352123][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.352149][ T9] usb 4-1: config 0 has no interface number 0 [ 137.352180][ T9] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 137.352204][ T9] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 137.352229][ T9] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.352253][ T9] usb 4-1: config 0 interface 52 has no altsetting 0 [ 137.353990][ T9] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 137.354014][ T9] usb 4-1: Product: syz [ 137.354029][ T9] usb 4-1: Manufacturer: syz [ 137.354044][ T9] usb 4-1: SerialNumber: syz [ 137.412296][ T9] usb 4-1: config 0 descriptor?? [ 137.605618][ T31] audit: type=1400 audit(1788902488.142:424): avc: denied { write } for pid=6544 comm="syz.0.201" name="ipv6_route" dev="proc" ino=4026533499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 138.747254][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 138.763592][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.887637][ T9] usb 4-1: Can not set alternate setting to 1, error: -71 [ 138.887683][ T9] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 138.915974][ T9] usb 4-1: USB disconnect, device number 6 [ 139.182085][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'. [ 139.219166][ T31] audit: type=1400 audit(1788902489.752:425): avc: denied { read } for pid=6554 comm="syz.1.207" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.219569][ T31] audit: type=1400 audit(1788902489.752:426): avc: denied { open } for pid=6554 comm="syz.1.207" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.279777][ T6558] veth3: entered promiscuous mode [ 139.285452][ T6558] veth3: entered allmulticast mode [ 139.291561][ T6558] bridge1: port 1(veth3) entered blocking state [ 139.298109][ T6558] bridge1: port 1(veth3) entered disabled state [ 139.311028][ T6558] bridge1: port 1(veth3) entered blocking state [ 139.311145][ T6558] bridge1: port 1(veth3) entered forwarding state [ 139.327643][ T55] bridge1: port 1(veth3) entered disabled state [ 139.394848][ T6560] veth5: entered promiscuous mode [ 139.394892][ T6560] veth5: entered allmulticast mode [ 139.401393][ T6560] bridge1: port 2(veth5) entered blocking state [ 139.401469][ T6560] bridge1: port 2(veth5) entered disabled state [ 139.407823][ T6560] bridge1: port 2(veth5) entered blocking state [ 139.407953][ T6560] bridge1: port 2(veth5) entered forwarding state [ 139.436412][ T158] bridge1: port 2(veth5) entered disabled state [ 142.955536][ T31] audit: type=1400 audit(1788902493.492:427): avc: denied { write } for pid=6596 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.173988][ T31] audit: type=1804 audit(1788902494.712:428): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.220" name="file1" dev="ramfs" ino=11050 res=1 errno=0 [ 144.227221][ T31] audit: type=1400 audit(1788902494.762:429): avc: denied { bind } for pid=6626 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.256548][ T31] audit: type=1400 audit(1788902494.792:430): avc: denied { node_bind } for pid=6626 comm="syz.4.221" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 144.583032][ T31] audit: type=1400 audit(1788902495.082:431): avc: denied { mount } for pid=6628 comm="syz.3.223" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 145.221443][ T31] audit: type=1400 audit(1788902495.762:432): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 147.077908][ T6662] pimreg: entered allmulticast mode [ 147.306539][ T6670] pimreg: left allmulticast mode [ 149.774606][ T6699] syzkaller0: entered promiscuous mode [ 149.781811][ T6699] syzkaller0: entered allmulticast mode [ 149.853689][ T5772] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 150.018951][ T5772] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 150.039302][ T5772] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.076683][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.086847][ T5772] usb 5-1: Product: syz [ 150.086893][ T5772] usb 5-1: Manufacturer: syz [ 150.086933][ T5772] usb 5-1: SerialNumber: syz [ 150.196651][ T5772] usb 5-1: config 0 descriptor?? [ 150.206526][ T6703] warning: `syz.3.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.548211][ T5608] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.789741][ T6713] ======================================================= [ 150.789741][ T6713] WARNING: The mand mount option has been deprecated and [ 150.789741][ T6713] and is ignored by this kernel. Remove the mand [ 150.789741][ T6713] option from the mount to silence this warning. [ 150.789741][ T6713] ======================================================= [ 150.868631][ T9] usb 5-1: USB disconnect, device number 7 [ 150.922540][ T5608] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.922606][ T5608] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 150.923543][ T5608] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.923562][ T5608] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.923593][ T5608] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 150.923620][ T5608] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 150.923648][ T5608] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.923720][ T5608] usb 3-1: config 1 interface 1 has no altsetting 0 [ 150.925926][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.925946][ T5608] usb 3-1: Product: syz [ 150.925957][ T5608] usb 3-1: Manufacturer: syz [ 150.925969][ T5608] usb 3-1: SerialNumber: syz [ 151.050280][ T31] audit: type=1400 audit(1788902501.582:433): avc: denied { mount } for pid=6714 comm="syz.3.240" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 151.055923][ T31] audit: type=1400 audit(1788902501.592:434): avc: denied { search } for pid=6714 comm="syz.3.240" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.057624][ T31] audit: type=1400 audit(1788902501.592:435): avc: denied { search } for pid=6714 comm="syz.3.240" name="usb_gadget" dev="configfs" ino=3290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.058371][ T31] audit: type=1400 audit(1788902501.592:436): avc: denied { write search } for pid=6714 comm="syz.3.240" name="usb_gadget" dev="configfs" ino=3290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.058698][ T31] audit: type=1400 audit(1788902501.592:437): avc: denied { add_name } for pid=6714 comm="syz.3.240" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.059032][ T31] audit: type=1400 audit(1788902501.592:438): avc: denied { create } for pid=6714 comm="syz.3.240" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 151.066735][ T31] audit: type=1400 audit(1788902501.602:439): avc: denied { search } for pid=6714 comm="syz.3.240" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.066907][ T31] audit: type=1400 audit(1788902501.602:440): avc: denied { search } for pid=6714 comm="syz.3.240" name="usb_gadget" dev="configfs" ino=3290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.067055][ T31] audit: type=1400 audit(1788902501.602:441): avc: denied { search } for pid=6714 comm="syz.3.240" name="g1" dev="configfs" ino=11222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.067245][ T31] audit: type=1400 audit(1788902501.602:442): avc: denied { search } for pid=6714 comm="syz.3.240" name="functions" dev="configfs" ino=11223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.534111][ T6743] syzkaller0: entered promiscuous mode [ 153.534146][ T6743] syzkaller0: entered allmulticast mode [ 153.566851][ T6743] tipc: Started in network mode [ 153.566895][ T6743] tipc: Node identity 72d6d96f37, cluster identity 4711 [ 153.568024][ T6743] tipc: Enabled bearer , priority 0 [ 153.651604][ T6742] tipc: Resetting bearer [ 153.761499][ T5608] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 153.773203][ T5608] usb 3-1: USB disconnect, device number 3 [ 153.802191][ T5591] udevd[5591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.862673][ T6742] tipc: Disabling bearer [ 154.049584][ T6753] xt_hashlimit: size too large, truncated to 1048576 [ 155.520249][ T6778] netlink: 6 bytes leftover after parsing attributes in process `syz.4.258'. [ 155.532795][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 155.685953][ T6784] syzkaller0: entered promiscuous mode [ 155.693390][ T6784] syzkaller0: entered allmulticast mode [ 156.315925][ T5772] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.391351][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 156.391976][ T31] audit: type=1400 audit(1788902506.922:452): avc: denied { watch watch_reads } for pid=6789 comm="syz.3.262" path="/48" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 156.471047][ T5772] usb 5-1: Using ep0 maxpacket: 8 [ 156.476754][ T5772] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.488141][ T5772] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 156.488193][ T5772] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.488232][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.536485][ T5772] usbtmc 5-1:16.0: bulk endpoints not found [ 156.671955][ T6797] syzkaller0: entered promiscuous mode [ 156.677525][ T6797] syzkaller0: entered allmulticast mode [ 156.757900][ T6778] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 156.769040][ T5772] usb 5-1: USB disconnect, device number 8 [ 156.855820][ T6804] syz.0.267(6804): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 156.865715][ T31] audit: type=1400 audit(1788902507.392:453): avc: denied { getopt } for pid=6803 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.867187][ T6805] IPVS: length: 31 != 24 [ 156.868046][ T6805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.268'. [ 157.748466][ T6818] syz_tun: entered allmulticast mode [ 157.769012][ T6818] dvmrp6: entered allmulticast mode [ 157.817349][ T6817] syz_tun: left allmulticast mode [ 158.095483][ T31] audit: type=1400 audit(1788902508.612:454): avc: denied { read } for pid=6819 comm="syz.1.273" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 158.119579][ T31] audit: type=1400 audit(1788902508.612:455): avc: denied { open } for pid=6819 comm="syz.1.273" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 158.496977][ T31] audit: type=1400 audit(1788902509.032:456): avc: denied { append } for pid=6826 comm="syz.3.274" name="sda" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.154438][ T31] audit: type=1400 audit(1788902509.692:457): avc: denied { mounton } for pid=6832 comm="syz.0.277" path="/52/file0" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 159.733992][ T6842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.726014][ T31] audit: type=1400 audit(1788902512.262:458): avc: denied { connect } for pid=6857 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.745840][ T5712] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.895827][ T5712] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 161.907377][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.917515][ T5712] usb 4-1: config 0 descriptor?? [ 162.010902][ T5608] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.139400][ T6855] random: crng reseeded on system resumption [ 162.142209][ T31] audit: type=1400 audit(1788902512.672:459): avc: denied { write } for pid=6852 comm="syz.3.284" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.142248][ T31] audit: type=1400 audit(1788902512.672:460): avc: denied { open } for pid=6852 comm="syz.3.284" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.195950][ T31] audit: type=1400 audit(1788902512.732:461): avc: denied { read } for pid=6857 comm="syz.4.285" path="socket:[12644]" dev="sockfs" ino=12644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.215430][ T31] audit: type=1400 audit(1788902512.752:462): avc: denied { mounton } for pid=6852 comm="syz.3.284" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 162.245276][ T5608] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 162.255526][ T5608] usb 3-1: config 4 has an invalid interface number: 122 but max is 0 [ 162.255561][ T5608] usb 3-1: config 4 has no interface number 0 [ 162.255587][ T5608] usb 3-1: too many endpoints for config 4 interface 122 altsetting 16: 59, using maximum allowed: 30 [ 162.255620][ T5608] usb 3-1: config 4 interface 122 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 162.255672][ T5608] usb 3-1: config 4 interface 122 has no altsetting 0 [ 162.306547][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.306583][ T5608] usb 3-1: Product: syz [ 162.306607][ T5608] usb 3-1: Manufacturer: syz [ 162.306651][ T5608] usb 3-1: SerialNumber: syz [ 162.472276][ T5712] ath6kl: Failed to submit usb control message: -71 [ 162.472352][ T5712] ath6kl: unable to send the bmi data to the device: -71 [ 162.472376][ T5712] ath6kl: Unable to send get target info: -71 [ 162.497449][ T5712] ath6kl: Failed to init ath6kl core: -71 [ 162.504518][ T5712] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 162.517281][ T5712] usb 4-1: USB disconnect, device number 7 [ 162.579700][ T5608] gspca_main: mars-2.14.0 probing 093a:050f [ 162.596157][ T5608] usb 3-1: USB disconnect, device number 4 [ 163.536755][ T31] audit: type=1400 audit(1788902513.612:463): avc: denied { name_connect } for pid=6878 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 163.536818][ T31] audit: type=1400 audit(1788902513.682:464): avc: denied { listen } for pid=6878 comm="syz.0.290" lport=56461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.536850][ T31] audit: type=1400 audit(1788902513.682:465): avc: denied { accept } for pid=6878 comm="syz.0.290" lport=56461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.910632][ T6896] hub 8-0:1.0: USB hub found [ 163.911434][ T6896] hub 8-0:1.0: 1 port detected [ 166.950469][ T6919] blktrace: Concurrent blktraces are not allowed on loop4 [ 168.860553][ T5608] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.020474][ T5608] usb 4-1: Using ep0 maxpacket: 8 [ 169.030053][ T5608] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.043086][ T5608] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.053802][ T5608] usb 4-1: config 0 has no interfaces? [ 169.053856][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.072229][ T5608] usb 4-1: config 0 descriptor?? [ 169.472126][ T31] audit: type=1400 audit(1788902519.842:466): avc: denied { create } for pid=6946 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.497451][ T31] audit: type=1400 audit(1788902519.842:467): avc: denied { connect } for pid=6946 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.497644][ T31] audit: type=1400 audit(1788902519.852:468): avc: denied { write } for pid=6946 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.642247][ T6945] ipvlan2: entered allmulticast mode [ 169.642278][ T6945] batadv_slave_1: entered allmulticast mode [ 169.663949][ T6945] batman_adv: batadv0: Adding interface: ipvlan2 [ 169.664011][ T6945] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.664046][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.664062][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.664075][ T6945] batman_adv: batadv0: Interface activated: ipvlan2 [ 171.236856][ T6953] FAULT_INJECTION: forcing a failure. [ 171.236856][ T6953] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.236900][ T6953] CPU: 1 UID: 0 PID: 6953 Comm: syz.4.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.236927][ T6953] Tainted: [L]=SOFTLOCKUP [ 171.236934][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 171.236946][ T6953] Call Trace: [ 171.236963][ T6953] [ 171.236971][ T6953] dump_stack_lvl+0x100/0x190 [ 171.237004][ T6953] should_fail_ex.cold+0x5/0xa [ 171.237031][ T6953] _copy_from_user+0x2e/0xd0 [ 171.237061][ T6953] restore_altstack+0x98/0x170 [ 171.237088][ T6953] ? __pfx_restore_altstack+0x10/0x10 [ 171.237115][ T6953] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.237136][ T6953] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.237158][ T6953] ? _raw_spin_unlock_irq+0x2e/0x50 [ 171.237179][ T6953] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 171.237208][ T6953] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 171.237242][ T6953] do_syscall_64+0x123/0x790 [ 171.237266][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.237286][ T6953] RIP: 0033:0x7f4c45d3f4d9 [ 171.237302][ T6953] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 171.237318][ T6953] RSP: 002b:00007f4c46d2d340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 171.237336][ T6953] RAX: ffffffffffffffda RBX: 00007f4c46025fa0 RCX: 00007f4c45d3f4d9 [ 171.237348][ T6953] RDX: 00007f4c46d2d340 RSI: 00007f4c46d2d470 RDI: 0000000000000021 [ 171.237358][ T6953] RBP: 00007f4c45e3503b R08: 0000000000000000 R09: 0000000000000000 [ 171.237369][ T6953] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.237379][ T6953] R13: 00007f4c46026038 R14: 00007f4c46025fa0 R15: 00007ffe21717d98 [ 171.237402][ T6953] [ 172.192679][ T5698] usb 4-1: USB disconnect, device number 8 [ 173.406746][ T6966] loop2: detected capacity change from 0 to 7 [ 173.445085][ T31] audit: type=1400 audit(1788902523.982:469): avc: denied { write } for pid=6984 comm="syz.2.316" name="configs" dev="configfs" ino=11224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.468719][ T31] audit: type=1400 audit(1788902524.002:470): avc: denied { write } for pid=6984 comm="syz.2.316" name="functions" dev="configfs" ino=11223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.508745][ T6966] Dev loop2: unable to read RDB block 7 [ 173.508786][ T6966] loop2: AHDI p1 p2 p3 [ 173.508814][ T6966] loop2: partition table partially beyond EOD, truncated [ 173.519000][ T6966] loop2: p1 start 1601398130 is beyond EOD, truncated [ 173.519024][ T6966] loop2: p2 start 1702059890 is beyond EOD, truncated [ 173.527271][ T31] audit: type=1400 audit(1788902524.062:471): avc: denied { write } for pid=6984 comm="syz.2.316" name="header" dev="configfs" ino=13380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.548728][ T31] audit: type=1400 audit(1788902524.082:472): avc: denied { bind } for pid=6983 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.570474][ T31] audit: type=1400 audit(1788902524.092:473): avc: denied { read } for pid=6983 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.570519][ T31] audit: type=1400 audit(1788902524.102:474): avc: denied { write } for pid=6984 comm="syz.2.316" name="fs" dev="configfs" ino=13387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.570549][ T31] audit: type=1400 audit(1788902524.102:475): avc: denied { create } for pid=6984 comm="syz.2.316" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 175.470530][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 175.476743][ T31] audit: type=1400 audit(1788902525.972:483): avc: denied { mounton } for pid=7003 comm="syz.2.322" path="/77/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 175.727120][ T7013] netlink: 'syz.4.325': attribute type 1 has an invalid length. [ 175.866685][ T7013] bond2: (slave geneve3): making interface the new active one [ 175.919618][ T7013] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 175.944792][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.207807][ T7010] syzkaller0: entered promiscuous mode [ 176.215765][ T7010] syzkaller0: entered allmulticast mode [ 176.781365][ T147] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.782097][ T147] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.804371][ T6304] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.984081][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.325'. [ 177.042385][ T7013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.592045][ T7029] ceph: No mds server is up or the cluster is laggy [ 178.604344][ T1751] libceph: connect (1)[c::]:6789 error -101 [ 178.604457][ T1751] libceph: mon0 (1)[c::]:6789 connect error [ 178.753047][ T31] audit: type=1400 audit(1788902529.292:484): avc: denied { setopt } for pid=7040 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.505297][ T31] audit: type=1400 audit(1788902530.042:485): avc: denied { read } for pid=7043 comm="syz.3.331" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 179.529566][ T31] audit: type=1400 audit(1788902530.072:486): avc: denied { open } for pid=7043 comm="syz.3.331" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 179.655102][ T31] audit: type=1400 audit(1788902530.192:487): avc: denied { mount } for pid=7051 comm="syz.2.333" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 179.696585][ T31] audit: type=1400 audit(1788902530.232:488): avc: denied { cmd } for pid=7043 comm="iou-wrk-7048" path="socket:[12812]" dev="sockfs" ino=12812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.921175][ T31] audit: type=1800 audit(1788902530.462:489): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.334" name="bus" dev="sda1" ino=2048 res=0 errno=0 [ 179.990547][ T7060] syzkaller0: entered promiscuous mode [ 179.990572][ T7060] syzkaller0: entered allmulticast mode [ 180.143850][ T31] audit: type=1400 audit(1788902530.682:490): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 180.482616][ T31] audit: type=1400 audit(1788902531.022:491): avc: denied { create } for pid=7071 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.543906][ T31] audit: type=1400 audit(1788902531.082:492): avc: denied { bind } for pid=7071 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.558461][ T31] audit: type=1400 audit(1788902531.082:493): avc: denied { listen } for pid=7071 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.708617][ T31] audit: type=1400 audit(1788902531.242:494): avc: denied { read write } for pid=7081 comm="syz.1.339" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.733159][ T31] audit: type=1400 audit(1788902531.272:495): avc: denied { open } for pid=7081 comm="syz.1.339" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.817615][ T31] audit: type=1400 audit(1788902531.352:496): avc: denied { ioctl } for pid=7081 comm="syz.1.339" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.999667][ T7082] input: syz0 as /devices/virtual/input/input7 [ 181.029442][ T31] audit: type=1400 audit(1788902531.562:497): avc: denied { read } for pid=4954 comm="acpid" name="event4" dev="devtmpfs" ino=2845 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.029512][ T31] audit: type=1400 audit(1788902531.562:498): avc: denied { open } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2845 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.029540][ T31] audit: type=1400 audit(1788902531.562:499): avc: denied { ioctl } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2845 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.375841][ T31] audit: type=1400 audit(1788902531.912:500): avc: denied { write } for pid=7083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.316135][ T5698] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.464214][ T5698] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 182.466014][ T5698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.466066][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.466091][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.466112][ T5698] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.466148][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.953461][ T5698] usbhid 5-1:1.0: can't add hid device: -71 [ 183.953931][ T5698] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 183.970335][ T5698] usb 5-1: USB disconnect, device number 9 [ 185.353494][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.348'. [ 185.796542][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 185.797712][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 185.797742][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 185.797762][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 187.664622][ T7159] syzkaller0: entered promiscuous mode [ 187.664662][ T7159] syzkaller0: entered allmulticast mode [ 187.715624][ T7162] futex_wake_op: syz.4.356 tries to shift op by 144; fix this program [ 188.275891][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 188.275946][ T31] audit: type=1400 audit(1788902538.812:510): avc: denied { create } for pid=7166 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.913959][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.914042][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.510616][ T1751] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 189.671710][ T1751] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 189.697698][ T1751] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 189.710266][ T1751] usb 4-1: config 1 interface 0 has no altsetting 0 [ 189.751645][ T1751] usb 4-1: string descriptor 0 read error: -22 [ 189.751713][ T1751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.789020][ T7176] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.169936][ T31] audit: type=1400 audit(1788902540.702:511): avc: denied { name_bind } for pid=7182 comm="syz.1.373" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 190.240984][ T1751] usbhid 4-1:1.0: can't add hid device: -71 [ 190.241080][ T1751] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 190.271620][ T1751] usb 4-1: USB disconnect, device number 9 [ 191.599228][ T31] audit: type=1400 audit(1788902542.132:512): avc: denied { write } for pid=7201 comm="syz.2.367" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=12985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 191.599660][ T31] audit: type=1400 audit(1788902542.132:513): avc: denied { add_name } for pid=7201 comm="syz.2.367" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 191.600469][ T31] audit: type=1400 audit(1788902542.132:514): avc: denied { create } for pid=7201 comm="syz.2.367" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 191.771168][ T7206] syzkaller0: entered promiscuous mode [ 191.776845][ T7206] syzkaller0: entered allmulticast mode [ 191.789255][ T7206] tipc: Enabled bearer , priority 0 [ 191.860725][ T7205] tipc: Resetting bearer [ 191.922918][ T7205] tipc: Disabling bearer [ 193.509910][ T7222] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 193.855265][ T7229] No source specified [ 195.002875][ T31] audit: type=1400 audit(1788902545.542:515): avc: denied { read write } for pid=7239 comm="syz.2.382" name="mouse0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 195.030712][ T31] audit: type=1400 audit(1788902545.572:516): avc: denied { open } for pid=7239 comm="syz.2.382" path="/dev/input/mouse0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 195.580823][ T7243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.840437][ T5698] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.870272][ T7248] bridge_slave_0: left allmulticast mode [ 195.876204][ T7248] bridge_slave_0: left promiscuous mode [ 195.882387][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.904241][ T7248] bridge_slave_1: left allmulticast mode [ 195.916709][ T7248] bridge_slave_1: left promiscuous mode [ 195.916928][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.982322][ T7248] bond0: (slave bond_slave_0): Releasing backup interface [ 196.004071][ T5698] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 196.008659][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.008684][ T5698] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.008704][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64768, setting to 1024 [ 196.008725][ T5698] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 196.023080][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.023103][ T5698] usb 3-1: Product: syz [ 196.023115][ T5698] usb 3-1: Manufacturer: syz [ 196.023127][ T5698] usb 3-1: SerialNumber: syz [ 196.046554][ T5698] usb 3-1: config 0 descriptor?? [ 196.047188][ T7243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.073739][ T5698] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 196.073761][ T5698] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 196.074041][ T5698] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 196.152585][ T7248] bond0: (slave bond_slave_1): Releasing backup interface [ 196.219543][ T7248] team0: Port device team_slave_0 removed [ 196.259637][ T7248] team0: Port device team_slave_1 removed [ 196.278753][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.278798][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.287690][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.287709][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.316160][ T7248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.343410][ T7252] team0: Port device xfrm0 added [ 196.357881][ T7253] tipc: Enabled bearer , priority 0 [ 196.392561][ T5698] usb 3-1: USB disconnect, device number 5 [ 197.352234][ T5698] tipc: Node number set to 2833869966 [ 197.381887][ T31] audit: type=1400 audit(1788902547.922:517): avc: denied { append } for pid=7260 comm="syz.0.387" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 197.407398][ T31] audit: type=1400 audit(1788902547.942:518): avc: denied { open } for pid=7260 comm="syz.0.387" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 197.665248][ T31] audit: type=1400 audit(1788902548.192:519): avc: denied { accept } for pid=7258 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.920441][ T31] audit: type=1400 audit(1788902548.452:520): avc: denied { write } for pid=7260 comm="syz.0.387" name="functions" dev="configfs" ino=11223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.949022][ T31] audit: type=1400 audit(1788902548.482:521): avc: denied { write } for pid=7260 comm="syz.0.387" name="c.1" dev="configfs" ino=13361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.963032][ T31] audit: type=1400 audit(1788902548.502:522): avc: denied { write } for pid=7260 comm="syz.0.387" name="c.1" dev="configfs" ino=13361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.200458][ T5712] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.351121][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 198.351741][ T5712] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 198.352552][ T5712] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 198.352571][ T5712] usb 1-1: config 0 has no interface number 0 [ 198.352599][ T5712] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 198.352619][ T5712] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.352637][ T5712] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.354257][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.354275][ T5712] usb 1-1: Product: syz [ 198.354287][ T5712] usb 1-1: Manufacturer: syz [ 198.354299][ T5712] usb 1-1: SerialNumber: syz [ 198.358386][ T5712] usb 1-1: config 0 descriptor?? [ 198.365859][ T7261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.576788][ T5712] usb-storage 1-1:0.20: USB Mass Storage device detected [ 198.610163][ T5712] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 198.618037][ T5712] scsi host1: usb-storage 1-1:0.20 [ 198.642248][ T5712] usb 1-1: USB disconnect, device number 4 [ 200.167541][ T31] audit: type=1400 audit(1788902550.262:523): avc: denied { read } for pid=7270 comm="syz.1.389" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 200.545502][ T7282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7282 comm=syz.2.390 [ 206.255938][ T5600] Bluetooth: hci4: command 0x0406 tx timeout [ 207.318980][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.329115][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.336558][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.344090][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.351511][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.458574][ T5772] s`z1: Port: 1 Link DOWN [ 207.471809][ T1117] smbdirect: ib_dev[s`z1] removed [ 207.590275][ T7287] lo speed is unknown, defaulting to 1000 [ 207.755194][ T6304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.768096][ T6304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.363653][ T6304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.367562][ T6304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.652347][ T6304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.652398][ T6304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.503130][ T5605] Bluetooth: hci5: command tx timeout [ 211.530467][ T5605] Bluetooth: hci5: command tx timeout [ 211.599112][ T31] audit: type=1400 audit(1788902562.132:524): avc: denied { wake_alarm } for pid=7335 comm="syz.2.400" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.625657][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.633260][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.640549][ T7287] bridge_slave_0: entered allmulticast mode [ 211.641263][ T7287] bridge_slave_0: entered promiscuous mode [ 211.692612][ T31] audit: type=1400 audit(1788902562.232:525): avc: denied { read } for pid=7316 comm="syz.1.396" lport=38161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.724988][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 212.017015][ T6304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.017086][ T6304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.169112][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.177677][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.186067][ T7287] bridge_slave_1: entered allmulticast mode [ 212.196612][ T7287] bridge_slave_1: entered promiscuous mode [ 212.224973][ T7366] FAULT_INJECTION: forcing a failure. [ 212.224973][ T7366] name failslab, interval 1, probability 0, space 0, times 1 [ 212.225019][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.225048][ T7366] Tainted: [L]=SOFTLOCKUP [ 212.225055][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 212.225067][ T7366] Call Trace: [ 212.225074][ T7366] [ 212.225082][ T7366] dump_stack_lvl+0x100/0x190 [ 212.225121][ T7366] should_fail_ex.cold+0x5/0xa [ 212.225148][ T7366] should_failslab+0xc2/0x120 [ 212.225171][ T7366] __kmalloc_cache_noprof+0x91/0x6d0 [ 212.225198][ T7366] ? stack_depot_init+0x17/0x80 [ 212.225218][ T7366] ? __hw_addr_create+0x57/0x220 [ 212.225248][ T7366] __hw_addr_create+0x57/0x220 [ 212.225275][ T7366] __hw_addr_add_ex+0x32b/0x650 [ 212.225303][ T7366] ? stack_depot_init+0x38/0x80 [ 212.225324][ T7366] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 212.225350][ T7366] ? __mutex_unlock_slowpath+0x35d/0x930 [ 212.225379][ T7366] dev_addr_init+0x161/0x250 [ 212.225407][ T7366] ? __pfx_dev_addr_init+0x10/0x10 [ 212.225432][ T7366] ? avc_has_perm_noaudit+0x51/0x3b0 [ 212.225462][ T7366] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 212.225487][ T7366] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 212.225510][ T7366] alloc_netdev_mqs+0x363/0x15c0 [ 212.225535][ T7366] __ip_tunnel_create+0x398/0x670 [ 212.225558][ T7366] ? __pfx___ip_tunnel_create+0x10/0x10 [ 212.225581][ T7366] ? bpf_lsm_capable+0x9/0x10 [ 212.225605][ T7366] ? security_capable+0x80/0x260 [ 212.225635][ T7366] ip_tunnel_ctl+0x540/0xb80 [ 212.225658][ T7366] vti_tunnel_ctl+0x295/0x4b0 [ 212.225682][ T7366] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 212.225713][ T7366] ip_tunnel_siocdevprivate+0x114/0x1b0 [ 212.225737][ T7366] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 212.225765][ T7366] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 212.225785][ T7366] ? full_name_hash+0xbc/0x100 [ 212.225816][ T7366] dev_ifsioc+0xc7a/0x1fc0 [ 212.225839][ T7366] ? __pfx_dev_ifsioc+0x10/0x10 [ 212.225857][ T7366] ? __pfx___mutex_lock+0x10/0x10 [ 212.225885][ T7366] ? lock_acquire+0x1d1/0x380 [ 212.225907][ T7366] ? dev_load+0x8e/0x240 [ 212.225924][ T7366] ? dev_load+0x8e/0x240 [ 212.225947][ T7366] dev_ioctl+0x70e/0x10e0 [ 212.225967][ T7366] sock_ioctl+0x494/0x6b0 [ 212.225992][ T7366] ? __pfx_sock_ioctl+0x10/0x10 [ 212.226022][ T7366] ? selinux_file_ioctl+0x13b/0x290 [ 212.226040][ T7366] ? selinux_file_ioctl+0xb6/0x290 [ 212.226059][ T7366] ? __pfx_sock_ioctl+0x10/0x10 [ 212.226085][ T7366] __x64_sys_ioctl+0x18e/0x210 [ 212.226114][ T7366] do_syscall_64+0x123/0x790 [ 212.226139][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.226155][ T7366] RIP: 0033:0x7f09ed59e159 [ 212.226170][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.226185][ T7366] RSP: 002b:00007f09ee4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.226201][ T7366] RAX: ffffffffffffffda RBX: 00007f09ed825fa0 RCX: 00007f09ed59e159 [ 212.226214][ T7366] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000005 [ 212.226222][ T7366] RBP: 00007f09ed63503b R08: 0000000000000000 R09: 0000000000000000 [ 212.226231][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.226240][ T7366] R13: 00007f09ed826038 R14: 00007f09ed825fa0 R15: 00007ffce8fd85e8 [ 212.226263][ T7366] [ 212.599263][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.089306][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.160663][ T7287] team0: Port device team_slave_0 added [ 213.168754][ T7287] team0: Port device team_slave_1 added [ 213.197412][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.204549][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.254757][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.267165][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.274239][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.375665][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.758217][ T5605] Bluetooth: hci5: command tx timeout [ 213.927286][ T31] audit: type=1400 audit(1788902564.462:526): avc: denied { associate } for pid=7380 comm="syz.0.408" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 214.107345][ T7287] hsr_slave_0: entered promiscuous mode [ 214.108054][ T7287] hsr_slave_1: entered promiscuous mode [ 214.108531][ T7287] debugfs: 'hsr0' already exists in 'hsr' [ 214.108546][ T7287] Cannot create hsr debugfs directory [ 214.207706][ T31] audit: type=1400 audit(1788902564.732:527): avc: denied { read } for pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 215.770425][ T5605] Bluetooth: hci5: command tx timeout [ 215.857541][ T6304] bridge_slave_1: left allmulticast mode [ 216.310572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 216.581455][ T6304] bridge_slave_1: left promiscuous mode [ 216.592424][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.612844][ T31] audit: type=1400 audit(1788902567.152:528): avc: denied { create } for pid=7406 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.655942][ T6304] bridge_slave_0: left allmulticast mode [ 216.663245][ T6304] bridge_slave_0: left promiscuous mode [ 216.669149][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.725487][ T6304] dvmrp6: left allmulticast mode [ 217.296778][ T6304] bond2 (unregistering): (slave geneve3): Releasing active interface [ 217.331678][ T6304] bond1 (unregistering): (slave geneve2): Releasing active interface [ 217.448730][ T6304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.466662][ T6304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.483881][ T6304] bond0 (unregistering): Released all slaves [ 217.502524][ T6304] bond1 (unregistering): Released all slaves [ 217.543856][ T6304] bond2 (unregistering): Released all slaves [ 217.670634][ T7407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.700669][ T7413] team0: Device xfrm0 failed to enter team mode [ 217.700701][ T7413] team0: Device xfrm0 failed to enter team mode [ 219.258343][ T7414] tipc: Resetting bearer [ 219.993401][ T31] audit: type=1400 audit(1788902570.532:529): avc: denied { write } for pid=7425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.054871][ T31] audit: type=1400 audit(1788902570.582:530): avc: denied { write } for pid=7449 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.426415][ T31] audit: type=1400 audit(1788902570.952:531): avc: denied { append } for pid=7426 comm="syz.3.419" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 220.752443][ T31] audit: type=1400 audit(1788902571.292:532): avc: denied { create } for pid=7457 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 220.844105][ T31] audit: type=1400 audit(1788902571.372:533): avc: denied { write } for pid=7457 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 221.450684][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 221.592685][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'. [ 221.936415][ T7415] tipc: Enabled bearer , priority 0 [ 221.969891][ T1751] lo speed is unknown, defaulting to 1000 [ 221.969925][ T1751] sy: Port: 1 Link DOWN [ 222.204497][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 222.260520][ T6611] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.260564][ T6611] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.260593][ T6611] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.260617][ T6611] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.401944][ T7474] syzkaller0: entered promiscuous mode [ 222.427148][ T7474] syzkaller0: entered allmulticast mode [ 223.049268][ T7453] tipc: Node number set to 2853245981 [ 223.085465][ T31] audit: type=1400 audit(1788902573.622:534): avc: denied { write } for pid=7479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.118352][ T6304] hsr_slave_0: left promiscuous mode [ 223.124727][ T6304] hsr_slave_1: left promiscuous mode [ 223.125398][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.125425][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.163215][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.163257][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.171611][ T6304] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 223.171656][ T6304] batman_adv: batadv0: Removing interface: ipvlan2 [ 223.238004][ T31] audit: type=1400 audit(1788902573.772:535): avc: denied { write } for pid=7498 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.240939][ T6304] veth1_macvtap: left promiscuous mode [ 223.240984][ T6304] veth0_macvtap: left promiscuous mode [ 223.241126][ T6304] veth1_vlan: left promiscuous mode [ 223.241189][ T6304] veth0_vlan: left promiscuous mode [ 224.054080][ T6304] team0 (unregistering): Port device team_slave_1 removed [ 224.072452][ T6304] team0 (unregistering): Port device team_slave_0 removed [ 224.160203][ T7496] syzkaller0: entered promiscuous mode [ 224.166004][ T7496] syzkaller0: entered allmulticast mode [ 224.178042][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 224.191037][ T7502] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 224.191072][ T7502] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 224.191097][ T7502] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 224.196854][ T7502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 224.538660][ T7287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.606782][ T7287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.668612][ T7287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.693553][ T7287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.206224][ T7287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.237984][ T7287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.238640][ T7287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.275627][ T7287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.453354][ T5605] Bluetooth: hci5: command tx timeout [ 225.645069][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.684840][ T31] audit: type=1400 audit(1788902576.222:536): avc: denied { write } for pid=7523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.727848][ T31] audit: type=1400 audit(1788902576.262:537): avc: denied { sqpoll } for pid=7540 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 225.737220][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.160745][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.160842][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.179662][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.179745][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.272748][ T31] audit: type=1400 audit(1788902576.812:538): avc: denied { write } for pid=7552 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.318170][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.746315][ T7453] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 227.048860][ T7453] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.175287][ T7453] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.175332][ T7453] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.175364][ T7453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.613400][ T7453] usb 2-1: config 0 descriptor?? [ 227.805384][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.936111][ T31] audit: type=1400 audit(1788902578.472:539): avc: denied { write } for pid=7561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.950623][ T7595] random: crng reseeded on system resumption [ 228.512559][ T31] audit: type=1400 audit(1788902578.542:540): avc: denied { bind } for pid=7585 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.517805][ T31] audit: type=1400 audit(1788902579.052:541): avc: denied { setopt } for pid=7593 comm="syz.2.443" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.927739][ T7603] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.234443][ T31] audit: type=1400 audit(1788902579.772:542): avc: denied { write } for pid=7606 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.721328][ T10] usb 2-1: USB disconnect, device number 3 [ 230.232696][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.256428][ T7287] veth0_vlan: entered promiscuous mode [ 230.269832][ T7287] veth1_vlan: entered promiscuous mode [ 230.368001][ T7287] veth0_macvtap: entered promiscuous mode [ 230.954358][ T7287] veth1_macvtap: entered promiscuous mode [ 230.963534][ T7622] capability: warning: `syz.3.448' uses 32-bit capabilities (legacy support in use) [ 230.995045][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.007419][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.041740][ T6611] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.041921][ T6611] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.041948][ T6611] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.041974][ T6611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.558607][ T7646] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 231.562661][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.866447][ T7648] fuse: Bad value for 'fd' [ 232.259428][ T7646] team0: Port device netdevsim1 added [ 232.306744][ T6304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.306757][ T6304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.435913][ T31] audit: type=1400 audit(1788902582.972:543): avc: denied { create } for pid=7651 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.492646][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.492674][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.517954][ T31] audit: type=1400 audit(1788902583.052:544): avc: denied { write } for pid=7651 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.540315][ T31] audit: type=1400 audit(1788902583.082:545): avc: denied { mounton } for pid=7287 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 232.544930][ T31] audit: type=1400 audit(1788902583.082:546): avc: denied { connect } for pid=7651 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.600407][ T7454] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 232.627619][ T31] audit: type=1400 audit(1788902583.152:547): avc: denied { listen } for pid=7651 comm="syz.0.453" lport=40961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.627683][ T31] audit: type=1400 audit(1788902583.152:548): avc: denied { accept } for pid=7651 comm="syz.0.453" lport=40961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.686857][ T31] audit: type=1326 audit(1788902583.222:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70bcb9e159 code=0x7ffc0000 [ 232.750485][ T7454] usb 2-1: Using ep0 maxpacket: 16 [ 232.780427][ T1751] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 232.930462][ T1751] usb 4-1: Using ep0 maxpacket: 32 [ 232.931155][ T1751] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 232.932458][ T1751] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.933747][ T1751] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 232.933766][ T1751] usb 4-1: Product: syz [ 232.933778][ T1751] usb 4-1: Manufacturer: syz [ 232.937905][ T1751] usb 4-1: config 0 descriptor?? [ 232.953772][ T1751] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 233.350563][ T7454] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.350611][ T7454] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 233.350658][ T7454] usb 2-1: no configurations [ 233.350668][ T7454] usb 2-1: can't read configurations, error -22 [ 233.380023][ T1751] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 233.380097][ T1751] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 233.399489][ T1751] usb 4-1: USB disconnect, device number 10 [ 233.576625][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 233.577058][ T31] audit: type=1400 audit(1788902584.112:569): avc: denied { shutdown } for pid=7678 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.577230][ T31] audit: type=1400 audit(1788902584.112:570): avc: denied { getopt } for pid=7678 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.577464][ T31] audit: type=1400 audit(1788902584.112:571): avc: denied { name_connect } for pid=7678 comm="syz.2.459" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 233.584076][ T31] audit: type=1400 audit(1788902584.122:572): avc: denied { setopt } for pid=7678 comm="syz.2.459" laddr=::ac14:14aa lport=47864 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.748358][ T31] audit: type=1400 audit(1788902584.282:573): avc: denied { setopt } for pid=7681 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 233.756534][ T31] audit: type=1400 audit(1788902584.292:574): avc: denied { execute } for pid=7681 comm="syz.5.461" dev="hugetlbfs" ino=16212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 233.757717][ T31] audit: type=1400 audit(1788902584.292:575): avc: denied { execute_no_trans } for pid=7681 comm="syz.5.461" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=16212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 233.762296][ T31] audit: type=1400 audit(1788902584.302:576): avc: denied { name_bind } for pid=7681 comm="syz.5.461" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 234.371195][ T1751] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.540553][ T1751] usb 6-1: Using ep0 maxpacket: 32 [ 234.557490][ T1751] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 234.571784][ T1751] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 234.609347][ T1751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.617705][ T1751] usb 6-1: Product: syz [ 234.617751][ T1751] usb 6-1: Manufacturer: syz [ 234.617791][ T1751] usb 6-1: SerialNumber: syz [ 235.315200][ T7700] Cannot find add_set index 0 as target [ 235.899990][ T1751] usb 6-1: USB disconnect, device number 2 [ 237.558791][ T7290] udevd[7290]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.091835][ T7737] geneve2: entered promiscuous mode [ 240.102315][ T7737] geneve2: entered allmulticast mode [ 240.120691][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 240.120743][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 240.120789][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 240.120820][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 240.333697][ T7443] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 240.503281][ T7443] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 240.518459][ T7443] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.518554][ T7443] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.518589][ T7443] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.518622][ T7443] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.518679][ T7443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.891159][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 241.022535][ T7443] gud 4-1:1.0: probe with driver gud failed with error -32 [ 241.080571][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 241.094332][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 241.116287][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 241.169316][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 241.179172][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 241.196838][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.210996][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.225967][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.226067][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.226136][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 241.226230][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 241.336456][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 241.349182][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 241.361665][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.374115][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.374176][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.374216][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.374269][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 241.374309][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 241.437682][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 241.437749][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 241.437822][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.437872][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.437906][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.437939][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.437973][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 241.438009][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 241.540410][ T10] usb 6-1: string descriptor 0 read error: -22 [ 241.547272][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.584371][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 241.848449][ T1751] usb 4-1: USB disconnect, device number 11 [ 242.057165][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 242.374767][ T7430] usb 6-1: USB disconnect, device number 3 [ 243.384644][ T31] audit: type=1400 audit(1788902593.922:577): avc: denied { write } for pid=7796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.428513][ T31] audit: type=1400 audit(1788902594.962:578): avc: denied { write } for pid=7819 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.300493][ T31] audit: type=1400 audit(1788902595.532:579): avc: denied { bind } for pid=7824 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.300561][ T31] audit: type=1400 audit(1788902595.542:580): avc: denied { node_bind } for pid=7824 comm="syz.3.486" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 245.300611][ T31] audit: type=1400 audit(1788902595.542:581): avc: denied { connect } for pid=7824 comm="syz.3.486" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.300646][ T31] audit: type=1400 audit(1788902595.552:582): avc: denied { write } for pid=7824 comm="syz.3.486" laddr=224.0.0.1 faddr=172.20.20.170 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.780362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 245.909282][ T31] audit: type=1400 audit(1788902596.442:583): avc: denied { map } for pid=7838 comm="syz.5.490" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.308316][ T31] audit: type=1400 audit(1788902596.842:584): avc: denied { mount } for pid=7854 comm="syz.0.494" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 246.353666][ T31] audit: type=1400 audit(1788902596.892:585): avc: denied { bind } for pid=7854 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.353722][ T31] audit: type=1400 audit(1788902596.892:586): avc: denied { node_bind } for pid=7854 comm="syz.0.494" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 248.120361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 248.180360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 248.420361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 248.540360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 249.021833][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 249.021872][ T31] audit: type=1400 audit(1788902599.552:588): avc: denied { write } for pid=7880 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.636935][ T7904] netlink: 'syz.1.502': attribute type 4 has an invalid length. [ 251.006116][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.006174][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.750357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 252.810355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 253.813716][ T31] audit: type=1400 audit(1788902604.352:589): avc: denied { write } for pid=7899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.919836][ T7945] syzkaller0: entered promiscuous mode [ 253.919874][ T7945] syzkaller0: entered allmulticast mode [ 254.668748][ T31] audit: type=1400 audit(1788902605.182:590): avc: denied { write } for pid=7956 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.695209][ T7978] geneve2: entered promiscuous mode [ 256.695251][ T7978] geneve2: entered allmulticast mode [ 256.713410][ T6304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 256.713741][ T1173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 256.713785][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 256.713816][ T1173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 257.060958][ T7988] No source specified [ 257.299686][ T7454] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 257.441099][ T7454] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 257.441928][ T7454] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.441967][ T7454] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.441986][ T7454] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 257.442005][ T7454] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.442035][ T7454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.520114][ T31] audit: type=1400 audit(1788902608.052:591): avc: denied { write } for pid=7971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.863150][ T31] audit: type=1400 audit(1788902608.402:592): avc: denied { write } for pid=7995 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.348444][ T7454] gud 2-1:1.0: probe with driver gud failed with error -32 [ 258.948270][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'. [ 258.967044][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'. [ 259.622565][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 259.758565][ T8017] bridge_slave_0: left allmulticast mode [ 259.765121][ T8017] bridge_slave_0: left promiscuous mode [ 259.773832][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.785594][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 259.789759][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.804169][ T9] usb 3-1: config 0 descriptor?? [ 259.868046][ T7443] usb 2-1: USB disconnect, device number 6 [ 259.892966][ T8017] bridge_slave_1: left allmulticast mode [ 259.903617][ T8017] bridge_slave_1: left promiscuous mode [ 259.916527][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.071310][ T8007] random: crng reseeded on system resumption [ 260.109578][ T8017] bond0: (slave bond_slave_0): Releasing backup interface [ 260.333191][ T8017] bond0: (slave bond_slave_1): Releasing backup interface [ 260.773683][ T8017] team0: Port device team_slave_0 removed [ 261.012052][ T9] ath6kl: Failed to submit usb control message: -110 [ 261.012173][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 261.012198][ T9] ath6kl: Unable to send get target info: -110 [ 261.036257][ T9] ath6kl: Failed to init ath6kl core: -110 [ 261.037632][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 261.059059][ T9] usb 3-1: USB disconnect, device number 6 [ 261.469166][ T31] audit: type=1326 audit(1788902612.002:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0594d9e159 code=0x0 [ 261.568167][ T8017] team0: Port device team_slave_1 removed [ 261.583621][ T8017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.593783][ T8017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.651167][ T8018] team0: Device xfrm0 is of different type [ 261.735846][ T8020] tipc: Started in network mode [ 261.735887][ T8020] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 261.766220][ T8020] tipc: Enabled bearer , priority 0 [ 261.828029][ T8047] lo: Caught tx_queue_len zero misconfig [ 262.310687][ T8055] No source specified [ 262.751099][ T9] tipc: Node number set to 11578026 [ 262.976833][ T7454] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 263.132695][ T7454] usb 3-1: Using ep0 maxpacket: 16 [ 263.964362][ T31] audit: type=1400 audit(1788902614.502:594): avc: denied { map } for pid=8070 comm="syz.1.538" path="socket:[15199]" dev="sockfs" ino=15199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.964457][ T31] audit: type=1400 audit(1788902614.502:595): avc: denied { read } for pid=8070 comm="syz.1.538" path="socket:[15199]" dev="sockfs" ino=15199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.968919][ T8095] tipc: Resetting bearer [ 266.892295][ T8095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 267.288979][ T7454] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.289046][ T7454] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 267.289088][ T7454] usb 3-1: no configurations [ 267.289101][ T7454] usb 3-1: can't read configurations, error -22 [ 267.342299][ T8101] team0: Device xfrm0 failed to enter team mode [ 267.342333][ T8101] team0: Device xfrm0 failed to enter team mode [ 267.342561][ T8104] tipc: Enabling of bearer rejected, already enabled [ 267.343178][ T8103] tipc: Enabled bearer , priority 0 [ 267.423363][ T8100] syzkaller0: entered promiscuous mode [ 267.423399][ T8100] syzkaller0: entered allmulticast mode [ 267.437173][ T8100] tipc: Resetting bearer [ 267.490679][ T8112] futex_wake_op: syz.2.549 tries to shift op by 144; fix this program [ 267.689193][ T8097] tipc: Resetting bearer [ 267.840907][ T8118] No source specified [ 268.107572][ T8097] tipc: Disabling bearer [ 268.673372][ T8127] program syz.2.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.992177][ T7454] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 271.145173][ T7454] usb 3-1: Using ep0 maxpacket: 16 [ 272.692047][ T8164] bridge_slave_0: left allmulticast mode [ 272.692693][ T8164] bridge_slave_0: left promiscuous mode [ 272.692859][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.989755][ T8164] bridge_slave_1: left allmulticast mode [ 273.989794][ T8164] bridge_slave_1: left promiscuous mode [ 273.989962][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.045783][ T8164] bond0: (slave bond_slave_0): Releasing backup interface [ 274.102551][ T8164] bond0: (slave bond_slave_1): Releasing backup interface [ 274.172909][ T8164] team0: Port device team_slave_0 removed [ 274.214725][ T8164] team0: Port device team_slave_1 removed [ 274.218585][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.218627][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.238079][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.238128][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.254670][ T8164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.320305][ T8165] team0: Port device xfrm0 added [ 274.329814][ T8166] tipc: Started in network mode [ 274.329864][ T8166] tipc: Node identity 12ec781410a8, cluster identity 4711 [ 274.338919][ T8166] tipc: Enabled bearer , priority 0 [ 274.377823][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 274.435173][ T31] audit: type=1400 audit(1788902624.972:596): avc: denied { create } for pid=8170 comm="syz.1.565" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 274.480630][ T8174] lo: entered promiscuous mode [ 274.499162][ T8174] tunl0: entered promiscuous mode [ 274.499705][ T8177] futex_wake_op: syz.3.566 tries to shift op by 144; fix this program [ 274.521254][ T8174] gre0: entered promiscuous mode [ 274.536587][ T7454] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.536641][ T7454] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 274.536679][ T7454] usb 3-1: no configurations [ 274.536691][ T7454] usb 3-1: can't read configurations, error -22 [ 274.595065][ T8174] gretap0: entered promiscuous mode [ 274.606918][ T8174] erspan0: entered promiscuous mode [ 274.621198][ T8174] ip_vti0: entered promiscuous mode [ 274.629889][ T8174] ip6_vti0: entered promiscuous mode [ 274.642433][ T8174] sit0: entered promiscuous mode [ 274.656629][ T8174] ip6tnl0: entered promiscuous mode [ 274.666035][ T8174] ip6gre0: entered promiscuous mode [ 274.679406][ T8174] syz_tun: entered promiscuous mode [ 274.702706][ T8174] ip6gretap0: entered promiscuous mode [ 274.714486][ T8174] bridge0: entered promiscuous mode [ 274.721990][ T8174] bond0: entered promiscuous mode [ 274.725412][ T8174] tipc: Resetting bearer [ 274.725563][ T8174] tipc: Resetting bearer [ 274.727522][ T8174] team0: entered promiscuous mode [ 274.739324][ T8174] nlmon0: entered promiscuous mode [ 274.748313][ T8174] batadv0: entered promiscuous mode [ 275.159928][ T8192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.440715][ T7430] tipc: Node number set to 38041620 [ 276.150188][ T31] audit: type=1400 audit(1788902626.682:597): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 276.187171][ T31] audit: type=1400 audit(1788902626.722:598): avc: denied { view } for pid=8210 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 277.947782][ T8183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.328475][ T31] audit: type=1400 audit(1788902629.862:599): avc: denied { create } for pid=8217 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.335061][ T31] audit: type=1400 audit(1788902629.872:600): avc: denied { setopt } for pid=8217 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.335671][ T31] audit: type=1400 audit(1788902629.872:601): avc: denied { write } for pid=8217 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 280.588135][ T8226] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 280.647775][ T31] audit: type=1400 audit(1788902631.182:602): avc: denied { ioctl } for pid=8220 comm="syz.1.576" path="socket:[17418]" dev="sockfs" ino=17418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.703475][ T31] audit: type=1400 audit(1788902631.242:603): avc: denied { write } for pid=8228 comm="syz.5.581" name="nullb" dev="configfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.703538][ T31] audit: type=1400 audit(1788902631.242:604): avc: denied { create } for pid=8228 comm="syz.5.581" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 280.752216][ T8226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.760052][ T31] audit: type=1400 audit(1788902631.292:605): avc: denied { write } for pid=8228 comm="syz.5.581" name="nullb" dev="configfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.808552][ T31] audit: type=1400 audit(1788902631.342:606): avc: denied { write } for pid=8230 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.848144][ T31] audit: type=1400 audit(1788902631.382:607): avc: denied { write } for pid=8230 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 280.866957][ T8229] null_blk: nullb2: using native zone append [ 280.876158][ T8227] bond1: (slave ip6gretap1): making interface the new active one [ 280.887588][ T8227] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 281.327504][ T8229] null_blk: disk nullb2 created [ 295.019394][ T31] audit: type=1400 audit(1788902645.542:608): avc: denied { setopt } for pid=8242 comm="syz.5.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.574315][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.585925][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.594066][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.602981][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.603415][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.244830][ T6611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.450789][ T31] audit: type=1400 audit(1788902647.982:609): avc: denied { mounton } for pid=8279 comm="syz.1.589" path="/124/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 297.656316][ T7454] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 297.693581][ T5600] Bluetooth: hci0: command tx timeout [ 297.852112][ T7454] usb 4-1: Using ep0 maxpacket: 16 [ 298.728072][ T6611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.052279][ T6611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.099469][ T8300] IPVS: Scheduler module ip_vs_ not found [ 299.343379][ T6611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.681810][ T8255] lo speed is unknown, defaulting to 1000 [ 299.759957][ T6611] vlan2: left allmulticast mode [ 299.768744][ T6611] geneve0: left allmulticast mode [ 300.187495][ T6611] vlan2: left promiscuous mode [ 300.187560][ T6611] geneve0: left promiscuous mode [ 300.188647][ T6611] bridge0: port 3(vlan2) entered disabled state [ 300.442158][ T6611] bridge_slave_1: left allmulticast mode [ 300.444829][ T5600] Bluetooth: hci0: command tx timeout [ 300.455586][ T6611] bridge_slave_1: left promiscuous mode [ 300.456492][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.512697][ T6611] bridge_slave_0: left allmulticast mode [ 300.518472][ T6611] bridge_slave_0: left promiscuous mode [ 300.524721][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.560052][ T6611] bridge1: port 2(veth5) entered disabled state [ 300.576553][ T6611] bridge1: port 1(veth3) entered disabled state [ 300.596522][ T7454] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.596573][ T7454] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 300.596614][ T7454] usb 4-1: no configurations [ 300.596629][ T7454] usb 4-1: can't read configurations, error -22 [ 300.610022][ T31] audit: type=1400 audit(1788902651.142:610): avc: denied { create } for pid=8322 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 300.614505][ T8323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.796224][ T31] audit: type=1400 audit(1788902651.332:611): avc: denied { ioctl } for pid=8324 comm="syz.1.600" path="socket:[18537]" dev="sockfs" ino=18537 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.857328][ T31] audit: type=1400 audit(1788902651.392:612): avc: denied { getopt } for pid=8324 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.980022][ T6611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.108019][ T6611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.125026][ T6611] bond0 (unregistering): Released all slaves [ 302.961552][ T5605] Bluetooth: hci0: command tx timeout [ 303.692374][ T6611] tipc: Left network mode [ 304.897929][ T6611] hsr_slave_0: left promiscuous mode [ 304.907845][ T6611] hsr_slave_1: left promiscuous mode [ 304.908532][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.908547][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.932359][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.932397][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.944290][ T31] audit: type=1400 audit(1788902655.482:613): avc: denied { write } for pid=8336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.131876][ T31] audit: type=1400 audit(1788902655.662:614): avc: denied { write } for pid=8359 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.190444][ T55] IPVS: starting estimator thread 0... [ 305.225381][ T6611] veth1_macvtap: left promiscuous mode [ 305.225435][ T6611] veth0_macvtap: left promiscuous mode [ 305.225524][ T6611] veth1_vlan: left promiscuous mode [ 305.225653][ T6611] veth0_vlan: left promiscuous mode [ 305.280434][ T8368] IPVS: using max 41 ests per chain, 98400 per kthread [ 305.387137][ T31] audit: type=1400 audit(1788902655.922:615): avc: denied { write } for pid=8369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.530648][ T5605] Bluetooth: hci0: command tx timeout [ 306.524607][ T31] audit: type=1400 audit(1788902657.062:616): avc: denied { ioctl } for pid=8377 comm="syz.3.611" path="socket:[18130]" dev="sockfs" ino=18130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.554057][ T31] audit: type=1400 audit(1788902657.092:617): avc: denied { connect } for pid=8377 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.780916][ T6611] team0 (unregistering): Port device team_slave_1 removed [ 306.827122][ T6611] team0 (unregistering): Port device team_slave_0 removed [ 307.586317][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 309.499271][ T31] audit: type=1400 audit(1788902659.802:618): avc: denied { module_load } for pid=8395 comm="syz.3.616" path="/sys/kernel/oops_count" dev="sysfs" ino=53294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 310.358889][ T31] audit: type=1400 audit(1788902660.892:619): avc: denied { create } for pid=8406 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 310.401820][ T31] audit: type=1400 audit(1788902660.932:620): avc: denied { ioctl } for pid=8406 comm="syz.1.617" path="socket:[18602]" dev="sockfs" ino=18602 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 310.502691][ T31] audit: type=1400 audit(1788902661.042:621): avc: denied { write } for pid=8406 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 310.532787][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.532875][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.532988][ T8255] bridge_slave_0: entered allmulticast mode [ 310.534159][ T8255] bridge_slave_0: entered promiscuous mode [ 310.548234][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.548303][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.548412][ T8255] bridge_slave_1: entered allmulticast mode [ 310.556700][ T8255] bridge_slave_1: entered promiscuous mode [ 310.612534][ T31] audit: type=1400 audit(1788902661.152:622): avc: denied { setopt } for pid=8406 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 310.668448][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.815943][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.314548][ T8255] team0: Port device team_slave_0 added [ 311.337668][ T8255] team0: Port device team_slave_1 added [ 311.405811][ T31] audit: type=1400 audit(1788902661.942:623): avc: denied { bind } for pid=8429 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 311.522386][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.529535][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.529563][ T8255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.694241][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.694305][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.200559][ T8432] input: syz0 as /devices/virtual/input/input8 [ 312.211625][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.223685][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.251567][ T8255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.264152][ T31] audit: type=1400 audit(1788902662.792:624): avc: denied { write } for pid=8410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.373550][ T8255] hsr_slave_0: entered promiscuous mode [ 312.379964][ T8255] hsr_slave_1: entered promiscuous mode [ 314.103100][ T8255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.115121][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.126174][ T8255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.137634][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.145843][ T8255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.155988][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.163812][ T8255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.175216][ T31] audit: type=1400 audit(1788902664.712:625): avc: denied { write } for pid=8453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.201271][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.320918][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 314.351403][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 314.508176][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.537213][ T8255] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.584660][ T8255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.595512][ T8255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.276678][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.278985][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.286542][ T9] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 315.288524][ T9] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 315.288556][ T9] usb 2-1: config 1 has no interface number 0 [ 315.301838][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.301873][ T9] usb 2-1: Product: syz [ 315.301898][ T9] usb 2-1: Manufacturer: syz [ 315.301911][ T9] usb 2-1: SerialNumber: syz [ 315.309416][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.309530][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.345452][ T9] usb 2-1: 3:1 : does not exist [ 315.345486][ T9] usb 2-1: 3:2 : does not exist [ 316.681239][ T31] audit: type=1400 audit(1788902667.152:626): avc: denied { write } for pid=8469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.767972][ T31] audit: type=1400 audit(1788902668.302:627): avc: denied { write } for pid=8520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.815514][ T9] usb 2-1: USB disconnect, device number 7 [ 317.886259][ T8514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.198493][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 319.422469][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.590649][ T8555] syzkaller0: entered promiscuous mode [ 319.590680][ T8555] syzkaller0: entered allmulticast mode [ 320.009988][ T31] audit: type=1400 audit(1788902670.542:628): avc: denied { write } for pid=8541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.216309][ T8574] ceph: No mds server is up or the cluster is laggy [ 320.268889][ T7454] libceph: connect (1)[c::]:6789 error -101 [ 320.276418][ T7454] libceph: mon0 (1)[c::]:6789 connect error [ 320.556497][ T7454] libceph: connect (1)[c::]:6789 error -101 [ 320.566040][ T7454] libceph: mon0 (1)[c::]:6789 connect error [ 321.090576][ T31] audit: type=1400 audit(1788902671.482:629): avc: denied { write } for pid=8579 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 321.132195][ T7454] libceph: connect (1)[c::]:6789 error -101 [ 321.138878][ T7454] libceph: mon0 (1)[c::]:6789 connect error [ 321.878021][ T31] audit: type=1400 audit(1788902672.412:630): avc: denied { write } for pid=8586 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.219604][ T8604] input: syz1 as /devices/virtual/input/input9 [ 322.360668][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 322.548861][ T8255] veth0_vlan: entered promiscuous mode [ 322.654938][ T8611] syz.0.651 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 322.678039][ T8255] veth1_vlan: entered promiscuous mode [ 322.934485][ T8255] veth0_macvtap: entered promiscuous mode [ 323.038072][ T8255] veth1_macvtap: entered promiscuous mode [ 323.199978][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.254450][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.331697][ T5819] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.333442][ T1173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.333475][ T1173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.333500][ T1173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.737455][ T6304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.737498][ T6304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.769477][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.769509][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.920907][ T31] audit: type=1400 audit(1788902675.462:631): avc: denied { unmount } for pid=8255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 325.919740][ T8648] bridge_slave_0: left allmulticast mode [ 325.928885][ T8648] bridge_slave_0: left promiscuous mode [ 325.929102][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.979358][ T8648] bridge_slave_1: left allmulticast mode [ 325.987171][ T8648] bridge_slave_1: left promiscuous mode [ 325.987383][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.030754][ T8648] bond0: (slave bond_slave_0): Releasing backup interface [ 326.044962][ T31] audit: type=1400 audit(1788902676.582:632): avc: denied { read } for pid=8639 comm="syz.5.656" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 326.045021][ T31] audit: type=1400 audit(1788902676.582:633): avc: denied { open } for pid=8639 comm="syz.5.656" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 326.594649][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 326.665638][ T8648] bond0: (slave bond_slave_1): Releasing backup interface [ 326.752546][ T8648] team0: Port device team_slave_0 removed [ 326.773425][ T8648] team0: Port device team_slave_1 removed [ 326.780098][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.788536][ T8648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.808296][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.817552][ T8648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.825340][ T8659] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 326.825403][ T8659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.658'. [ 326.845519][ T8648] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.900262][ T8649] team0: Port device xfrm0 added [ 326.914833][ T8650] tipc: Started in network mode [ 326.914904][ T8650] tipc: Node identity b210bc3f66aa, cluster identity 4711 [ 326.915111][ T8650] tipc: Enabled bearer , priority 0 [ 328.031337][ T10] tipc: Node number set to 3569007679 [ 328.220667][ T8671] overlayfs: failed to clone lowerpath [ 330.557296][ T31] audit: type=1400 audit(1788902681.092:634): avc: denied { read } for pid=8688 comm="syz.5.667" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.557377][ T31] audit: type=1400 audit(1788902681.092:635): avc: denied { open } for pid=8688 comm="syz.5.667" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.572012][ T31] audit: type=1400 audit(1788902681.092:636): avc: denied { ioctl } for pid=8688 comm="syz.5.667" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.641366][ T31] audit: type=1400 audit(1788902681.172:637): avc: denied { set_context_mgr } for pid=8688 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 330.698829][ T31] audit: type=1400 audit(1788902681.232:638): avc: denied { map } for pid=8688 comm="syz.5.667" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.749820][ T31] audit: type=1400 audit(1788902681.282:639): avc: denied { call } for pid=8688 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 331.062809][ T7454] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 331.654731][ T7454] usb 7-1: Using ep0 maxpacket: 16 [ 331.661446][ T7454] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 331.671596][ T7454] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.671647][ T7454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.701511][ T7454] usb 7-1: config 0 descriptor?? [ 331.755792][ T8704] xt_hashlimit: size too large, truncated to 1048576 [ 331.782724][ T8705] veth0_macvtap: Caught tx_queue_len zero misconfig [ 331.946248][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 332.151752][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 332.159391][ T31] audit: type=1400 audit(1788902682.692:640): avc: denied { connect } for pid=8691 comm="syz.6.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 332.184840][ T10] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 332.192611][ T10] usb 6-1: config 0 has no interfaces? [ 332.206811][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.206896][ T10] usb 6-1: Product: syz [ 332.206924][ T10] usb 6-1: Manufacturer: syz [ 332.206937][ T10] usb 6-1: SerialNumber: syz [ 332.215259][ T10] usb 6-1: config 0 descriptor?? [ 332.478583][ T7454] usb 6-1: USB disconnect, device number 4 [ 332.719117][ T10] usb 7-1: USB disconnect, device number 2 [ 333.972883][ T31] audit: type=1400 audit(1788902684.502:641): avc: denied { bind } for pid=8720 comm="syz.6.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.010447][ T31] audit: type=1400 audit(1788902684.542:642): avc: denied { connect } for pid=8720 comm="syz.6.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 335.978681][ T8745] netlink: 'syz.5.682': attribute type 1 has an invalid length. [ 335.978744][ T8745] netlink: 'syz.5.682': attribute type 2 has an invalid length. [ 336.146362][ T31] audit: type=1400 audit(1788902686.682:643): avc: denied { write } for pid=8719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.258036][ T31] audit: type=1400 audit(1788902686.792:644): avc: denied { write } for pid=8749 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.489355][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.686'. [ 339.534828][ T8766] bond0: entered promiscuous mode [ 339.551733][ T8766] batadv0: entered promiscuous mode [ 340.245668][ T8766] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 340.245701][ T8766] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 340.254043][ T8766] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 340.315462][ T8766] bond0: left promiscuous mode [ 340.334851][ T8766] batadv0: left promiscuous mode [ 340.595854][ T31] audit: type=1400 audit(1788902691.132:645): avc: denied { write } for pid=8752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.829574][ T31] audit: type=1400 audit(1788902691.362:646): avc: denied { write } for pid=8785 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.084769][ T31] audit: type=1400 audit(1788902692.622:647): avc: denied { write } for pid=8789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.321668][ T8812] netlink: 'syz.3.691': attribute type 13 has an invalid length. [ 343.310629][ T31] audit: type=1400 audit(1788902693.852:648): avc: denied { write } for pid=8811 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.848861][ T8823] futex_wake_op: syz.6.693 tries to shift op by 144; fix this program [ 344.012130][ T8830] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 344.254247][ T31] audit: type=1400 audit(1788902694.792:649): avc: denied { read } for pid=8836 comm="syz.5.685" path="socket:[19124]" dev="sockfs" ino=19124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.281441][ T8830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.302913][ T8832] gretap1: entered promiscuous mode [ 344.314458][ T8832] bond2: (slave gretap1): making interface the new active one [ 344.327034][ T8832] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 344.404771][ T8840] macvlan2: entered promiscuous mode [ 344.404810][ T8840] macvlan2: entered allmulticast mode [ 344.405299][ T8840] bond2: entered promiscuous mode [ 344.412745][ T8840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.416586][ T8840] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 344.416808][ T8840] bond2: left promiscuous mode [ 344.656508][ T31] audit: type=1400 audit(1788902695.162:650): avc: denied { write } for pid=8829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.811465][ T8859] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 344.812086][ T8859] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 344.816048][ T8859] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 344.925496][ T31] audit: type=1400 audit(1788902695.352:651): avc: denied { firmware_load } for pid=8847 comm="syz.0.697" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 345.195934][ T31] audit: type=1400 audit(1788902695.732:652): avc: denied { write } for pid=8861 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.083462][ T31] audit: type=1400 audit(1788902696.592:653): avc: denied { write } for pid=8862 comm="syz.5.700" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 346.115597][ T31] audit: type=1400 audit(1788902696.602:654): avc: denied { ioctl } for pid=8862 comm="syz.5.700" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 346.640949][ T8871] tipc: Enabled bearer , priority 0 [ 346.677606][ T8871] syzkaller0: entered promiscuous mode [ 346.677644][ T8871] syzkaller0: entered allmulticast mode [ 346.692135][ T8871] tipc: Resetting bearer [ 346.721992][ T8867] tipc: Resetting bearer [ 346.906277][ T8879] capability: warning: `syz.0.705' uses deprecated v2 capabilities in a way that may be insecure [ 347.060492][ T5605] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 347.769885][ T8867] tipc: Disabling bearer [ 347.900462][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 348.630453][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 348.631434][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 348.634487][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 348.634544][ T9] usb 7-1: config 0 has no interface number 0 [ 348.635540][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.635597][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 348.635639][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.635694][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.635762][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.647076][ T9] usb 7-1: config 0 descriptor?? [ 348.854475][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 349.622634][ T5600] Bluetooth: hci5: command 0x0406 tx timeout [ 349.872047][ T8882] tipc: Resetting bearer [ 350.589940][ T7454] usb 7-1: USB disconnect, device number 3 [ 350.629162][ T7454] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 352.035267][ T31] audit: type=1400 audit(1788902702.572:655): avc: denied { write } for pid=8907 comm="syz.6.710" name="core" dev="configfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 352.045443][ T31] audit: type=1400 audit(1788902702.582:656): avc: denied { write } for pid=8907 comm="syz.6.710" name="rd_mcp_0" dev="configfs" ino=20576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.827946][ T8931] ip6gretap1: entered allmulticast mode [ 353.829303][ T8931] batman_adv: batadv0: Adding interface: ip6gretap1 [ 353.829332][ T8931] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.829745][ T8931] batman_adv: batadv0: Interface activated: ip6gretap1 [ 353.833680][ T1106] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.834243][ T1106] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.834294][ T1106] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.834349][ T1106] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.051115][ T8937] ecryptfs: Unknown parameter 'ecŒ|}«' [ 354.063733][ T8935] syzkaller0: entered promiscuous mode [ 354.069412][ T8935] syzkaller0: entered allmulticast mode [ 354.188730][ T8935] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 356.425253][ T8941] comedi comedi0: No hardware detected at I/O base 0x294 [ 359.584503][ T31] audit: type=1400 audit(1788902710.122:657): avc: denied { read } for pid=8963 comm="syz.3.727" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 359.584901][ T31] audit: type=1400 audit(1788902710.122:658): avc: denied { open } for pid=8963 comm="syz.3.727" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 359.652209][ T31] audit: type=1400 audit(1788902710.192:659): avc: denied { bind } for pid=8966 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 359.672661][ T31] audit: type=1400 audit(1788902710.212:660): avc: denied { accept } for pid=8966 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 359.672758][ T31] audit: type=1400 audit(1788902710.212:661): avc: denied { read } for pid=8966 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 361.676368][ T8975] bond0: option slaves: interface -veth does not exist! [ 361.782994][ T31] audit: type=1400 audit(1788902712.312:662): avc: denied { watch } for pid=8979 comm="syz.0.729" path="/166/file0" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 361.842493][ T31] audit: type=1400 audit(1788902712.382:663): avc: denied { write } for pid=8984 comm="syz.1.723" name="cluster" dev="configfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.910418][ T31] audit: type=1400 audit(1788902712.412:664): avc: denied { write } for pid=8984 comm="syz.1.723" name="node" dev="configfs" ino=19216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.079475][ T8985] o2net: Error -99 while binding socket at 127.0.0.1:77 [ 362.135260][ T31] audit: type=1400 audit(1788902712.672:665): avc: denied { write } for pid=8984 comm="syz.1.723" name="heartbeat" dev="configfs" ino=19217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.162134][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.731'. [ 362.283684][ T8997] ªªªªªª: renamed from vlan0 (while UP) [ 362.336004][ T8997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.574369][ T31] audit: type=1400 audit(1788902713.022:666): avc: denied { unlink } for pid=8999 comm="syz.1.736" name="#1" dev="tmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 364.102802][ T9010] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 365.420832][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 366.071980][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 366.072015][ T31] audit: type=1400 audit(1788902716.612:670): avc: denied { name_bind } for pid=9028 comm="syz.1.742" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 366.637034][ T9031] FAULT_INJECTION: forcing a failure. [ 366.637034][ T9031] name fail_futex, interval 1, probability 0, space 0, times 1 [ 366.637078][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.1.742 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.637103][ T9031] Tainted: [L]=SOFTLOCKUP [ 366.637109][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 366.637120][ T9031] Call Trace: [ 366.637126][ T9031] [ 366.637133][ T9031] dump_stack_lvl+0x100/0x190 [ 366.637166][ T9031] should_fail_ex.cold+0x5/0xa [ 366.637192][ T9031] get_futex_key+0x293/0x14f0 [ 366.637218][ T9031] ? __pfx_get_futex_key+0x10/0x10 [ 366.637241][ T9031] ? __mutex_unlock_slowpath+0x35d/0x930 [ 366.637270][ T9031] futex_wake+0xf4/0x5e0 [ 366.637299][ T9031] ? __pfx_futex_wake+0x10/0x10 [ 366.637329][ T9031] ? lock_acquire+0x1d1/0x380 [ 366.637348][ T9031] ? detach_task_ctx_data+0x83/0x490 [ 366.637378][ T9031] do_futex+0x2b2/0x440 [ 366.637406][ T9031] ? __pfx_do_futex+0x10/0x10 [ 366.637427][ T9031] ? __might_fault+0xc5/0x140 [ 366.637459][ T9031] mm_exit_exec_release+0x256/0x2f0 [ 366.637482][ T9031] do_exit+0x707/0x2ae0 [ 366.637508][ T9031] ? __pfx_do_exit+0x10/0x10 [ 366.637529][ T9031] ? do_raw_spin_lock+0x128/0x260 [ 366.637550][ T9031] ? find_held_lock+0x2b/0x80 [ 366.637573][ T9031] ? get_signal+0x7e0/0x21e0 [ 366.637593][ T9031] do_group_exit+0xd5/0x2a0 [ 366.637618][ T9031] get_signal+0x1ec7/0x21e0 [ 366.637646][ T9031] ? __pfx_get_signal+0x10/0x10 [ 366.637666][ T9031] ? do_futex+0x190/0x440 [ 366.637691][ T9031] arch_do_signal_or_restart+0x91/0x7e0 [ 366.637717][ T9031] ? do_raw_spin_lock+0x128/0x260 [ 366.637739][ T9031] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 366.637770][ T9031] ? __local_bh_enable_ip+0xa5/0x120 [ 366.637801][ T9031] exit_to_user_mode_loop+0x139/0x700 [ 366.637823][ T9031] ? rcu_is_watching+0x13/0xc0 [ 366.637849][ T9031] do_syscall_64+0x661/0x790 [ 366.637873][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.637891][ T9031] RIP: 0033:0x7ff8c3d9e159 [ 366.637906][ T9031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.637922][ T9031] RSP: 002b:00007ff8c4d3e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 366.637941][ T9031] RAX: fffffffffffffe00 RBX: 00007ff8c4025fa8 RCX: 00007ff8c3d9e159 [ 366.637952][ T9031] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8c4025fa8 [ 366.637963][ T9031] RBP: 00007ff8c4025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 366.637974][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.637985][ T9031] R13: 00007ff8c4026038 R14: 00007ffcb41d2120 R15: 00007ffcb41d2208 [ 366.638010][ T9031] [ 366.806833][ T1106] IPVS: starting estimator thread 0... [ 367.061708][ T9042] IPVS: using max 52 ests per chain, 124800 per kthread [ 369.240437][ T7446] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 369.373591][ T9036] netlink: 14 bytes leftover after parsing attributes in process `syz.3.744'. [ 369.645514][ T7446] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 369.647465][ T7446] usb 6-1: config index 0 descriptor too short (expected 425, got 36) [ 369.647530][ T7446] usb 6-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 369.647564][ T7446] usb 6-1: config 0 has no interfaces? [ 369.647609][ T7446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.652457][ T7446] usb 6-1: config 0 descriptor?? [ 370.089896][ T31] audit: type=1400 audit(1788902720.622:671): avc: denied { map } for pid=9060 comm="syz.6.750" path="socket:[20869]" dev="sockfs" ino=20869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.089951][ T31] audit: type=1400 audit(1788902720.622:672): avc: denied { read } for pid=9060 comm="syz.6.750" path="socket:[20869]" dev="sockfs" ino=20869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.199502][ T7446] usb 6-1: string descriptor 0 read error: -71 [ 370.253538][ T7446] usb 6-1: USB disconnect, device number 5 [ 370.576570][ T9089] binder: 9088:9089 ioctl 4018620d 0 returned -22 [ 372.030171][ T31] audit: type=1400 audit(1788902722.562:673): avc: denied { bind } for pid=9102 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 372.232075][ T9107] input: syz0 as /devices/virtual/input/input10 [ 373.132665][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.139034][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.406308][ T31] audit: type=1400 audit(1788902723.942:674): avc: denied { ioctl } for pid=9118 comm="syz.3.763" path="/dev/sg0" dev="devtmpfs" ino=1009 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 373.478054][ T31] audit: type=1400 audit(1788902724.012:675): avc: denied { read } for pid=9118 comm="syz.3.763" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 373.478132][ T31] audit: type=1400 audit(1788902724.012:676): avc: denied { open } for pid=9118 comm="syz.3.763" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 373.478190][ T31] audit: type=1400 audit(1788902724.012:677): avc: denied { ioctl } for pid=9118 comm="syz.3.763" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 376.128939][ T9122] kvm [9121]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 376.954033][ T9131] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 376.965576][ T9122] kvm [9121]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 377.422152][ T31] audit: type=1400 audit(1788902727.952:678): avc: denied { ioctl } for pid=9146 comm="syz.0.771" path="socket:[21113]" dev="sockfs" ino=21113 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 380.747437][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 381.525374][ T9196] netlink: 108 bytes leftover after parsing attributes in process `syz.6.784'. [ 488.080361][ C1] ------------[ cut here ]------------ [ 488.080377][ C1] 1 [ 488.080384][ C1] WARNING: kernel/rcu/tree_stall.h:1063 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: swapper/1/0 [ 488.099664][ C1] Modules linked in: [ 488.103557][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.114062][ C1] Tainted: [L]=SOFTLOCKUP [ 488.118378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 488.128422][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 488.135363][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 40 c5 99 9b e8 f0 1f 8f 00 b8 01 00 00 00 87 05 25 93 a9 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 04 45 45 91 48 81 fd 80 7a df 8e 74 5a 48 b8 00 [ 488.154974][ C1] RSP: 0018:ffffc90000a18dc8 EFLAGS: 00010046 [ 488.161042][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81f03210 [ 488.169004][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9b99c540 [ 488.176975][ C1] RBP: ffffffff8edf7a80 R08: 0000000000000001 R09: fffffbfff37338a8 [ 488.184941][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: 1ffffffff1d41e50 [ 488.192905][ C1] R13: 0000000000000246 R14: ffff8880b853d028 R15: ffff8880b853d0b8 [ 488.200865][ C1] FS: 0000000000000000(0000) GS:ffff888123c5d000(0000) knlGS:0000000000000000 [ 488.209791][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.216368][ C1] CR2: 00007f0594d87780 CR3: 00000000217aa000 CR4: 00000000003526f0 [ 488.224344][ C1] Call Trace: [ 488.227630][ C1] [ 488.230470][ C1] rcu_core+0x31a/0x1260 [ 488.234734][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 488.239934][ C1] ? sched_clock_cpu+0x6c/0x570 [ 488.244783][ C1] ? __pfx_rcu_core+0x10/0x10 [ 488.249462][ C1] ? lapic_next_event+0x10/0x20 [ 488.254309][ C1] ? clockevents_program_event+0x1ef/0x820 [ 488.260122][ C1] ? rcu_is_watching+0x13/0xc0 [ 488.264909][ C1] handle_softirqs+0x1e6/0x9d0 [ 488.269678][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 488.274961][ C1] ? _raw_spin_unlock+0x28/0x50 [ 488.279806][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 488.285445][ C1] __irq_exit_rcu+0x16a/0x210 [ 488.290115][ C1] irq_exit_rcu+0x9/0x30 [ 488.294353][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 488.299982][ C1] [ 488.302904][ C1] [ 488.305832][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.311826][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 488.317459][ C1] Code: 58 9b 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 76 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 488.337062][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 [ 488.343121][ C1] RAX: 0000000000e8c8fd RBX: ffff88801f6ccb00 RCX: ffffffff8bd04185 [ 488.351095][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ec063 RDI: ffffffff8c621080 [ 488.359059][ C1] RBP: ffffed1003ed9960 R08: 0000000000000001 R09: ffffed10170a67bd [ 488.367025][ C1] R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 [ 488.374989][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 488.382964][ C1] ? ct_kernel_exit+0x125/0x180 [ 488.387820][ C1] default_idle+0x9/0x10 [ 488.392063][ C1] default_idle_call+0x6c/0xb0 [ 488.396826][ C1] do_idle+0x3ae/0x5b0 [ 488.400894][ C1] ? __pfx_do_idle+0x10/0x10 [ 488.405497][ C1] ? do_idle+0x12/0x5b0 [ 488.409655][ C1] cpu_startup_entry+0x4f/0x60 [ 488.414416][ C1] start_secondary+0x21d/0x2d0 [ 488.419175][ C1] ? __pfx_start_secondary+0x10/0x10 [ 488.424462][ C1] common_startup_64+0x13e/0x158 [ 488.429417][ C1] [ 488.432429][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 488.439702][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.450202][ C1] Tainted: [L]=SOFTLOCKUP [ 488.454514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 488.464558][ C1] Call Trace: [ 488.467827][ C1] [ 488.470669][ C1] dump_stack_lvl+0x100/0x190 [ 488.475354][ C1] vpanic+0x553/0x970 [ 488.479337][ C1] ? __pfx_vpanic+0x10/0x10 [ 488.483863][ C1] panic+0xd1/0xe0 [ 488.487589][ C1] ? __pfx_panic+0x10/0x10 [ 488.492015][ C1] check_panic_on_warn.cold+0x19/0x34 [ 488.497390][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 488.503721][ C1] __warn.cold+0x191/0x318 [ 488.508150][ C1] __report_bug+0x30f/0x440 [ 488.512648][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 488.518982][ C1] ? __pfx___report_bug+0x10/0x10 [ 488.524011][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 488.528954][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 488.533888][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 488.540219][ C1] report_bug+0xb3/0x220 [ 488.544461][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 488.550789][ C1] handle_bug+0x16a/0x2a0 [ 488.555126][ C1] exc_invalid_op+0x17/0x50 [ 488.559644][ C1] asm_exc_invalid_op+0x1a/0x20 [ 488.564492][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 488.571431][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 40 c5 99 9b e8 f0 1f 8f 00 b8 01 00 00 00 87 05 25 93 a9 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 04 45 45 91 48 81 fd 80 7a df 8e 74 5a 48 b8 00 [ 488.591124][ C1] RSP: 0018:ffffc90000a18dc8 EFLAGS: 00010046 [ 488.597190][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81f03210 [ 488.605250][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9b99c540 [ 488.613209][ C1] RBP: ffffffff8edf7a80 R08: 0000000000000001 R09: fffffbfff37338a8 [ 488.621175][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: 1ffffffff1d41e50 [ 488.629138][ C1] R13: 0000000000000246 R14: ffff8880b853d028 R15: ffff8880b853d0b8 [ 488.637111][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 488.643452][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 488.649785][ C1] rcu_core+0x31a/0x1260 [ 488.654026][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 488.659221][ C1] ? sched_clock_cpu+0x6c/0x570 [ 488.664069][ C1] ? __pfx_rcu_core+0x10/0x10 [ 488.668743][ C1] ? lapic_next_event+0x10/0x20 [ 488.673599][ C1] ? clockevents_program_event+0x1ef/0x820 [ 488.679448][ C1] ? rcu_is_watching+0x13/0xc0 [ 488.684233][ C1] handle_softirqs+0x1e6/0x9d0 [ 488.689023][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 488.694310][ C1] ? _raw_spin_unlock+0x28/0x50 [ 488.699156][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 488.704807][ C1] __irq_exit_rcu+0x16a/0x210 [ 488.709501][ C1] irq_exit_rcu+0x9/0x30 [ 488.713739][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 488.719389][ C1] [ 488.722311][ C1] [ 488.725238][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.731215][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 488.736848][ C1] Code: 58 9b 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 76 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 488.756457][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 [ 488.762520][ C1] RAX: 0000000000e8c8fd RBX: ffff88801f6ccb00 RCX: ffffffff8bd04185 [ 488.770499][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ec063 RDI: ffffffff8c621080 [ 488.778478][ C1] RBP: ffffed1003ed9960 R08: 0000000000000001 R09: ffffed10170a67bd [ 488.786446][ C1] R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 [ 488.794420][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 488.802394][ C1] ? ct_kernel_exit+0x125/0x180 [ 488.807255][ C1] default_idle+0x9/0x10 [ 488.811499][ C1] default_idle_call+0x6c/0xb0 [ 488.816260][ C1] do_idle+0x3ae/0x5b0 [ 488.820330][ C1] ? __pfx_do_idle+0x10/0x10 [ 488.824931][ C1] ? do_idle+0x12/0x5b0 [ 488.829094][ C1] cpu_startup_entry+0x4f/0x60 [ 488.833857][ C1] start_secondary+0x21d/0x2d0 [ 488.838616][ C1] ? __pfx_start_secondary+0x10/0x10 [ 488.843901][ C1] common_startup_64+0x13e/0x158 [ 488.848851][ C1] [ 489.942011][ C1] Shutting down cpus with NMI [ 489.946947][ C1] Kernel Offset: disabled [ 489.951255][ C1] Rebooting in 86400 seconds..