last executing test programs: 22.918798144s ago: executing program 3 (id=2357): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x31, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x62, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) 16.870693929s ago: executing program 3 (id=2365): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xef89, 0x7fa, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0x100, 0x200008}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x800000, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 15.5413411s ago: executing program 3 (id=2366): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) rename(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="046bf184b7b7f1a55a", 0x9, 0x0, 0x0, 0x0) 14.315234974s ago: executing program 0 (id=2371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r3], 0x84}, 0x1, 0x0, 0x0, 0x2000c895}, 0x20008000) 14.035851682s ago: executing program 4 (id=2372): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, r0, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) r4 = fsopen(&(0x7f0000000240)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f00000005c0)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='mon_addr\x00', &(0x7f0000000640)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 12.774181776s ago: executing program 4 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x4000) syslog(0x3, &(0x7f0000000180)=""/21, 0x15) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 12.69547722s ago: executing program 2 (id=2376): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000040)=0x99fd, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r6, &(0x7f0000000a00)}, 0x20) 12.290588732s ago: executing program 0 (id=2377): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 11.972804653s ago: executing program 1 (id=2378): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x8) syz_io_uring_setup(0x25fb, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/igmp\x00') preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000540)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000007c0)={0x1, 0x0, 0x0, &(0x7f0000000800)=""/168, 0x0, 0x54000}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044014}, 0x0) 11.103424575s ago: executing program 4 (id=2379): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f00000000c0)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004700)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002540)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002580)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000004640)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004680), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000046c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) 11.044942911s ago: executing program 0 (id=2380): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) setns(r1, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 10.575777313s ago: executing program 2 (id=2381): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180), 0x55}, 0x5d1}], 0x1, 0x4002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x0, 0x1}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000"], 0x20}], 0x1}, 0x0) 10.571202535s ago: executing program 1 (id=2382): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x5, 0x0, 0x7ffc0001}]}) inotify_init() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000003c0)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x15, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x800) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0)='PASV\r\n', 0x6) write(r4, &(0x7f0000000200)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000240)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 9.592765465s ago: executing program 0 (id=2383): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x33, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x37]}, &(0x7f0000000100)={0x0, "001122330039c9d03cdb5ba9f7dd0400001122334455667788005566778899aabbccddeeff0011223300556677a1b21271f019ab3e00", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x0, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x35, 0x30, 0x30, 0x34, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64, 0x66, 0x61, 0x30, 0x30, 0x32, 0x0, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 9.553235844s ago: executing program 3 (id=2384): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000094) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) 9.488153655s ago: executing program 1 (id=2385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001", @ANYRES8=r3], 0x84}, 0x1, 0x0, 0x0, 0x2000c895}, 0x20008000) sched_setscheduler(0x0, 0x2, 0x0) 9.388850076s ago: executing program 0 (id=2386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_VERSION(r0, 0xc0046209, &(0x7f0000001040)) r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000001080)='./binderfs/binder_logs/state\x00', 0x0, 0x0) read(r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000020c0)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x1}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r4, &(0x7f0000000340)='3', 0x4e) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x559, r3) read(r2, &(0x7f0000003180)=""/4103, 0x1007) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000040)={'8255\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x1, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x402, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) r6 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000003100)='./binderfs/features/freeze_notification\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000005900)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000058c0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="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"], 0x16e0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) read(r6, &(0x7f0000003140)=""/16, 0x10) 8.620755282s ago: executing program 2 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r3], 0x84}, 0x1, 0x0, 0x0, 0x2000c895}, 0x20008000) 8.542519913s ago: executing program 4 (id=2388): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0xe, 0x1, 0xb4, 0x8, 0x4000a2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x6, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x3ff, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x3, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000071, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xffffffff, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x80006, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfffb, 0xb, 0x1, 0xf1, 0x7, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x4001, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x495, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x3, 0x41, 0x1000, 0xee4b, 0x2000003, 0x0, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x57d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x7fff, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x3, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x6, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x7, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0xfffffffe, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b, 0x8, 0x270, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x7, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.417581296s ago: executing program 1 (id=2389): chdir(0x0) setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='vers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0x2d8, 0xb8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'wg1\x00', 'syzkaller0\x00'}, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x287, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="e00242ca8f60"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 8.262054095s ago: executing program 0 (id=2390): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000000540), 0x800001d, 0x810) 7.074987342s ago: executing program 2 (id=2391): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='dummy_', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) mmap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) setpriority(0x2, 0x0, 0x10) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) 7.068120823s ago: executing program 4 (id=2392): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019940)=0x7) syz_emit_ethernet(0x66, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 5.245510785s ago: executing program 1 (id=2393): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 5.23250122s ago: executing program 4 (id=2394): syz_usb_connect(0x5, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x200, 0x10, 0x97, 0x22, 0x20, 0x5ac, 0x120a, 0x7b2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9a, 0x20, 0x2e}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e3, 0x1000, 0x0, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f0, 0x1000, 0x2, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc0, 0x41, 0x1, 0x2ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52e8, 0x400, 0x3, 0x30c}}], 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 1.567832954s ago: executing program 3 (id=2395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019540)=0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000019780)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}]}, &(0x7f00000000c0)=0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 599.07839ms ago: executing program 1 (id=2396): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x7, 0xb, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x2, 0x87}}}}}]}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'dh\x00', 0x0, 0x1c, 0xfffffffc}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 597.820832ms ago: executing program 3 (id=2397): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$tcp_mem(0xffffffffffffffff, &(0x7f00000002c0)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000340)={0x80}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) 540.620141ms ago: executing program 2 (id=2398): epoll_create1(0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000540)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x4, &(0x7f0000000240)={[0xc792]}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) 0s ago: executing program 2 (id=2399): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(0x0, 0x80000, 0x103) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff78) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x88040, 0x0) lseek(r1, 0xf, 0x1) getdents(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 413.217282][ T31] audit: type=1800 audit(1792063974.259:1450): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1393" name="file1" dev="sda1" ino=2047 res=0 errno=0 [ 413.969021][ T31] audit: type=1400 audit(1792063975.009:1451): avc: denied { ioctl } for pid=10934 comm="syz.3.1392" path="socket:[30803]" dev="sockfs" ino=30803 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 414.037567][ T31] audit: type=1800 audit(1792063975.079:1452): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1401" name="nullb0" dev="tmpfs" ino=764 res=0 errno=0 [ 415.812517][T10867] net_ratelimit: 7 callbacks suppressed [ 417.455340][ T31] audit: type=1800 audit(1792063978.499:1453): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1415" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 419.514674][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 419.626106][T11005] fuse: Bad value for 'fd' [ 419.804641][ T31] audit: type=1400 audit(1792063980.849:1454): avc: denied { write } for pid=11011 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 419.851789][ T5706] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 419.965360][T11016] bond7: (slave veth0_to_bond): Releasing backup interface [ 420.003908][ T5706] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.007222][ T5706] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 420.007250][ T5706] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 420.007278][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.009138][T11016] bond0: (slave bond_slave_1): Releasing backup interface [ 420.020406][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.020426][ T5706] usb 2-1: Product: syz [ 420.020441][ T5706] usb 2-1: Manufacturer: syz [ 420.020456][ T5706] usb 2-1: SerialNumber: syz [ 420.033286][ T5706] usb 2-1: config 0 descriptor?? [ 420.035636][T11004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 420.073489][ T5706] usb 2-1: selecting invalid altsetting 0 [ 420.316205][T11016] bond6: (slave veth0_virt_wifi): Releasing active interface [ 420.931089][T11016] bond1: (slave veth3): Releasing active interface [ 421.044038][T11016] bond2: (slave bridge2): Releasing backup interface [ 421.129099][T11016] bond3: (slave macvlan2): Releasing active interface [ 421.151453][T11030] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.190134][ T5706] usb 2-1: USB disconnect, device number 31 [ 421.339101][T11034] udevd[11034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.379299][T11016] bond4: (slave bond5): Releasing backup interface [ 421.379315][T11016] bond4: (slave bond5): the permanent HWaddr of slave - 5a:8b:fa:8a:a1:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 421.379507][T11016] bond4: (slave gretap1): making interface the new active one [ 421.728725][T11016] bond4: (slave gretap1): Releasing backup interface [ 421.984879][ T31] audit: type=1400 audit(1792063983.029:1455): avc: denied { search } for pid=11038 comm="syz.1.1427" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.985005][ T31] audit: type=1400 audit(1792063983.029:1456): avc: denied { search } for pid=11038 comm="syz.1.1427" name="usb_gadget" dev="configfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.985830][ T31] audit: type=1400 audit(1792063983.029:1457): avc: denied { search } for pid=11038 comm="syz.1.1427" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.986031][ T31] audit: type=1400 audit(1792063983.029:1458): avc: denied { search } for pid=11038 comm="syz.1.1427" name="usb_gadget" dev="configfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.986252][ T31] audit: type=1400 audit(1792063983.029:1459): avc: denied { search } for pid=11038 comm="syz.1.1427" name="g1" dev="configfs" ino=9349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.986294][ T31] audit: type=1400 audit(1792063983.029:1460): avc: denied { search } for pid=11038 comm="syz.1.1427" name="configs" dev="configfs" ino=9351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 422.022589][ T31] audit: type=1400 audit(1792063983.029:1461): avc: denied { write search } for pid=11038 comm="syz.1.1427" name="configs" dev="configfs" ino=9351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 422.022643][ T31] audit: type=1400 audit(1792063983.039:1462): avc: denied { add_name } for pid=11038 comm="syz.1.1427" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 423.277159][T11056] jffs2: notice: (11056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 423.477574][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 423.477592][ T31] audit: type=1400 audit(1792063984.519:1493): avc: denied { write } for pid=11051 comm="syz.1.1432" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.483964][ T31] audit: type=1400 audit(1792063984.519:1494): avc: denied { add_name } for pid=11051 comm="syz.1.1432" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.671163][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1435'. [ 424.503474][ T31] audit: type=1400 audit(1792063985.549:1495): avc: denied { create } for pid=11051 comm="syz.1.1432" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 424.508645][ T31] audit: type=1400 audit(1792063985.549:1496): avc: denied { read write open } for pid=11051 comm="syz.1.1432" path="/258/file0/file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 424.870970][T11076] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 424.924669][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 425.075223][T11082] fuse: fd is not a fuse device [ 425.559562][T11076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.232328][T10871] net_ratelimit: 36 callbacks suppressed [ 426.367045][T11080] bond5: (slave bridge2): making interface the new active one [ 426.368416][T11080] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 428.311978][ T52] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 430.147319][T11143] ip_tables: iptables: counters copy to user failed while replacing table [ 430.975515][ T31] audit: type=1400 audit(1792063992.019:1497): avc: denied { sys_module } for pid=11147 comm="syz.4.1458" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.193590][ T31] audit: type=1400 audit(1792063992.239:1498): avc: denied { listen } for pid=11157 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 431.195355][T11158] netlink: 'syz.3.1459': attribute type 2 has an invalid length. [ 431.197787][ T31] audit: type=1400 audit(1792063992.239:1499): avc: denied { accept } for pid=11157 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 431.423326][ T5990] net_ratelimit: 1 callbacks suppressed [ 431.593765][ T52] Bluetooth: hci0: unexpected event for opcode 0x200f [ 432.164349][ T31] audit: type=1400 audit(1792063993.209:1500): avc: denied { watch watch_reads } for pid=11174 comm="syz.2.1465" path="pipe:[4551]" dev="pipefs" ino=4551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 432.679528][T11189] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1467'. [ 437.157823][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1482'. [ 437.182440][T10865] net_ratelimit: 1 callbacks suppressed [ 439.450761][ T31] audit: type=1804 audit(1792064000.489:1501): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1489" name="bus" dev="ramfs" ino=30527 res=1 errno=0 [ 439.473686][ T31] audit: type=1804 audit(1792064000.519:1502): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1489" name="bus" dev="ramfs" ino=30527 res=1 errno=0 [ 439.743697][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.993053][T11270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.052452][T11286] jffs2: notice: (11286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 442.101078][T11282] syzkaller0: entered promiscuous mode [ 442.101087][T11282] syzkaller0: entered allmulticast mode [ 442.754564][T10871] net_ratelimit: 2 callbacks suppressed [ 443.874310][ T31] audit: type=1400 audit(1792064004.919:1503): avc: denied { getopt } for pid=11307 comm="syz.4.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 444.791801][ T5706] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 445.002898][ T5706] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 445.005404][ T5706] usb 2-1: config 4 has an invalid interface number: 122 but max is 0 [ 445.005426][ T5706] usb 2-1: config 4 has no interface number 0 [ 445.005453][ T5706] usb 2-1: too many endpoints for config 4 interface 122 altsetting 16: 59, using maximum allowed: 30 [ 445.005487][ T5706] usb 2-1: config 4 interface 122 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 445.005514][ T5706] usb 2-1: config 4 interface 122 has no altsetting 0 [ 445.007656][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.007677][ T5706] usb 2-1: Product: syz [ 445.007692][ T5706] usb 2-1: Manufacturer: syz [ 445.007705][ T5706] usb 2-1: SerialNumber: syz [ 445.793356][ T5706] gspca_main: mars-2.14.0 probing 093a:050f [ 445.849801][ T5706] usb 2-1: USB disconnect, device number 32 [ 445.949987][ T31] audit: type=1326 audit(1792064006.969:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.1515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb816b9e559 code=0x7ffc0000 [ 445.950042][ T31] audit: type=1326 audit(1792064006.969:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.1515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb816b9e559 code=0x7ffc0000 [ 446.086428][ T31] audit: type=1326 audit(1792064007.129:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.1515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb816b9e559 code=0x7ffc0000 [ 446.086482][ T31] audit: type=1326 audit(1792064007.129:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.1515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb816b9e559 code=0x7ffc0000 [ 446.086527][ T31] audit: type=1326 audit(1792064007.129:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.1515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb816b9e559 code=0x7ffc0000 [ 446.671547][ T31] audit: type=1400 audit(1792064007.709:1509): avc: denied { write } for pid=11349 comm="syz.2.1517" name="functions" dev="configfs" ino=9350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.757492][ T31] audit: type=1400 audit(1792064007.799:1510): avc: denied { write } for pid=11349 comm="syz.2.1517" name="target" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 448.304584][T11368] net_ratelimit: 7 callbacks suppressed ** 1130 printk messages dropped ** ** 220 printk messages dropped ** ** 213 printk messages dropped ** ** 211 printk messages dropped ** ** 212 printk messages dropped ** ** 210 printk messages dropped ** ** 213 printk messages dropped ** ** 211 printk messages dropped ** ** 211 printk messages dropped ** ** 362 printk messages dropped ** [ 449.213023][T11371] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.289000][ T31] audit: type=1400 audit(1792064010.329:1511): avc: denied { bind } for pid=11385 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 449.295246][T11388] overlayfs: failed to clone upperpath [ 450.338891][T11396] input: syz1 as /devices/virtual/input/input15 [ 452.751897][ T31] audit: type=1400 audit(1792064013.729:1512): avc: denied { getopt } for pid=11437 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 453.286562][ T31] audit: type=1400 audit(1792064014.039:1513): avc: denied { search } for pid=11439 comm="syz.2.1542" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 453.286616][ T31] audit: type=1400 audit(1792064014.039:1514): avc: denied { write } for pid=11439 comm="syz.2.1542" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 453.286657][ T31] audit: type=1400 audit(1792064014.039:1515): avc: denied { open } for pid=11439 comm="syz.2.1542" path="/309/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 453.413544][T11449] overlayfs: failed to clone upperpath [ 453.602179][ T31] audit: type=1400 audit(1792064014.639:1516): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 453.779586][T11458] syzkaller0: entered promiscuous mode [ 453.779612][T11458] syzkaller0: entered allmulticast mode [ 454.585399][T10793] net_ratelimit: 42 callbacks suppressed [ 454.714315][T11453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.038603][T11488] ip_tables: iptables: counters copy to user failed while replacing table [ 456.118853][T11488] tipc: New replicast peer: 172.20.20.187 [ 456.119110][T11488] tipc: Enabled bearer , priority 10 [ 457.131831][ T1215] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 457.232040][ T5740] tipc: Node number set to 2706524974 [ 457.287717][ T1215] usb 2-1: Using ep0 maxpacket: 8 [ 457.292861][ T1215] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 457.298850][ T1215] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 457.298872][ T1215] usb 2-1: config 0 has no interface number 0 [ 457.298913][ T1215] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.298936][ T1215] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 457.298961][ T1215] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.298986][ T1215] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.299043][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.308072][ T1215] usb 2-1: config 0 descriptor?? [ 457.927363][ T1215] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 459.117120][T11510] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 459.127130][T11510] bridge0: entered promiscuous mode [ 459.127165][T11510] bridge0: entered allmulticast mode [ 459.662015][T10872] net_ratelimit: 2 callbacks suppressed [ 459.734706][ T5740] usb 2-1: USB disconnect, device number 33 [ 459.751599][ T5740] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 460.500363][ T31] audit: type=1400 audit(1792064021.539:1517): avc: denied { read } for pid=11524 comm="syz.2.1569" path="socket:[31650]" dev="sockfs" ino=31650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 461.127975][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1570'. [ 461.753515][ T52] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 461.753735][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 462.166092][ T52] Bluetooth: hci3: unexpected subevent 0x37 length: 25 > 13 [ 462.185720][ T31] audit: type=1400 audit(1792064023.229:1518): avc: denied { setopt } for pid=11541 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 ** 29439 printk messages dropped ** [ 463.548344][ T31] audit: type=1400 audit(1792064024.589:1519): avc: denied { setopt } for pid=11550 comm="syz.3.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 463.727055][T11559] netlink: 'syz.0.1576': attribute type 10 has an invalid length. [ 463.727071][T11559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1576'. [ 463.795458][T11549] batman_adv: batadv0: Adding interface: dummy0 [ 463.795466][T11549] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.795482][T11549] batman_adv: batadv0: Interface activated: dummy0 [ 463.798788][T11551] tipc: Enabling of bearer rejected, already enabled [ 464.612622][ T5706] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 464.759945][T11559] batadv0: entered promiscuous mode [ 464.759954][T11559] batadv0: entered allmulticast mode [ 464.774788][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 464.780896][ T5706] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 464.790729][ T5706] usb 2-1: config 0 has no interfaces? [ 464.800196][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.800216][ T5706] usb 2-1: Product: syz [ 464.800231][ T5706] usb 2-1: Manufacturer: syz [ 464.800243][ T5706] usb 2-1: SerialNumber: syz [ 465.166882][ T5706] usb 2-1: config 0 descriptor?? [ 465.212819][T11559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.215831][T11559] net_ratelimit: 23 callbacks suppressed [ 465.215847][T11559] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 465.605064][ T5740] usb 2-1: USB disconnect, device number 34 [ 465.642068][T10853] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 465.642092][T10853] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 465.718733][T11608] xt_IDLETIMER: label is empty or not nul-terminated [ 466.604517][T10853] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 466.604539][T10853] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 467.837281][T11627] jffs2: notice: (11627) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 467.870611][T11627] overlayfs: failed to clone upperpath [ 468.409355][T11641] tipc: Enabling of bearer rejected, failed to enable media [ 468.451333][T11643] bridge_slave_0: left allmulticast mode [ 468.451562][T11643] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.479955][T11643] bridge_slave_1: left allmulticast mode [ 468.480149][T11643] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.523690][T11643] bond1: (slave veth0_to_bond): Releasing backup interface [ 469.113664][T11643] bond0: (slave bond_slave_0): Releasing backup interface [ 469.146107][T11643] bond0: (slave bond_slave_1): Releasing backup interface [ 469.175612][T11643] team0: Port device team_slave_0 removed [ 469.186339][T11643] team0: Port device team_slave_1 removed [ 469.186725][T11643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.198292][T11643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.218493][T11655] team0: Mode changed to "broadcast" ** 3174 printk messages dropped ** [ 470.462042][ C0] net_ratelimit: 17 callbacks suppressed [ 470.602429][T11668] CIFS mount error: No usable UNC path provided in device string! [ 470.602429][T11668] [ 470.602761][T11668] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 470.628719][ T173] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 470.628749][ T173] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 471.266825][ T173] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 471.293786][ T31] audit: type=1400 audit(1792064032.319:1520): avc: denied { read } for pid=11661 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 471.467530][ T31] audit: type=1326 audit(1792064032.509:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.1597" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd98b19e559 code=0x0 [ 475.482587][T11582] net_ratelimit: 16 callbacks suppressed [ 475.482607][T11582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 475.482630][T11582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 475.993554][T10853] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 475.993583][T10853] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.132773][T11739] tmpfs: Using encoding : utf8-12.1.0 [ 480.702570][T11582] net_ratelimit: 10 callbacks suppressed [ 480.741881][T11582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 480.741913][T11582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 481.086281][T11769] netlink: 'syz.2.1623': attribute type 1 has an invalid length. [ 481.239332][T11769] 8021q: adding VLAN 0 to HW filter on device bond8 [ 481.252558][T10860] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 481.252586][T10860] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 481.390065][T11777] batman_adv: batadv0: Interface deactivated: dummy0 [ 481.399994][T11777] batadv0: left promiscuous mode [ 481.400011][T11777] batadv0: left allmulticast mode [ 481.475712][T11777] batman_adv: batadv0: Interface deactivated: gretap2 ** 3391 printk messages dropped ** [ 481.651469][T11780] macvtap1: entered allmulticast mode [ 481.676956][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 481.677228][T11772] syzkaller0: entered promiscuous mode [ 481.677245][T11772] syzkaller0: entered allmulticast mode [ 481.924769][T11769] bond8: (slave geneve2): making interface the new active one [ 481.939493][T11769] bond8: (slave geneve2): Enslaving as an active interface with an up link ** 3328 printk messages dropped ** [ 483.504750][T11807] batman_adv: batadv0: Adding interface: macvtap1 [ 483.504761][T11807] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 483.504787][T11807] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 485.490127][ T31] audit: type=1326 audit(1792064046.529:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.2.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd98b19e559 code=0x0 [ 486.382543][T11593] net_ratelimit: 6 callbacks suppressed [ 487.161033][ T31] audit: type=1400 audit(1792064048.199:1523): avc: denied { write } for pid=11847 comm="syz.1.1645" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 487.208401][ T31] audit: type=1804 audit(1792064048.249:1524): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1647" name="bus" dev="ramfs" ino=33051 res=1 errno=0 [ 487.232023][ T31] audit: type=1804 audit(1792064048.279:1525): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1647" name="bus" dev="ramfs" ino=33051 res=1 errno=0 [ 487.544224][T11866] kvm_do_msr_access: 156 callbacks suppressed [ 487.546697][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 487.549685][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.584277][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.588145][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.591092][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.619023][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.632356][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.637121][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.660804][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 487.685084][T11866] kvm [11865]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 488.552000][T11871] CIFS: Attempting to mount //127.0.0.1/share [ 488.564987][T10866] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 488.565016][T10866] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 488.576035][T11871] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 488.586987][T10866] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 488.587010][T10866] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 488.589554][T11871] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 488.598506][T11871] CIFS: VFS: cifs_mount failed w/return code = -2 [ 488.933813][T11879] syzkaller0: entered promiscuous mode [ 488.933829][T11879] syzkaller0: entered allmulticast mode [ 488.956673][T11879] tc mirred to Houston: device batadv_slave_0 is down [ 489.131895][ T5740] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 489.281786][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 489.282656][ T5740] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 489.283959][ T5740] usb 3-1: config 3 has an invalid interface number: 79 but max is 0 [ 489.283982][ T5740] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 489.284001][ T5740] usb 3-1: config 3 has no interface number 0 [ 489.284037][ T5740] usb 3-1: config 3 interface 79 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.284064][ T5740] usb 3-1: config 3 interface 79 has no altsetting 0 [ 489.286804][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.286825][ T5740] usb 3-1: Product: syz [ 489.286841][ T5740] usb 3-1: Manufacturer: syz [ 489.286856][ T5740] usb 3-1: SerialNumber: syz [ 489.824418][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.825115][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.544228][ T5740] kobil_sct 3-1:3.79: required endpoints missing [ 490.563286][ T5740] usb 3-1: USB disconnect, device number 21 [ 491.582980][T10866] net_ratelimit: 1 callbacks suppressed [ 492.658454][T11957] netlink: 'syz.2.1671': attribute type 12 has an invalid length. [ 493.740323][T11969] fuse: fd is not a fuse device [ 494.905839][T11988] trusted_key: encrypted_key: key trusted:syz not found [ 495.753767][T11996] team_slave_1: Caught tx_queue_len zero misconfig [ 496.033416][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 496.220252][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 496.272697][T11996] ceph: No mds server is up or the cluster is laggy [ 496.604953][ T5740] net_ratelimit: 35 callbacks suppressed [ 496.638583][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 496.639987][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 497.745221][T12015] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 498.038617][T12015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.602735][T12017] bond2: (slave geneve2): making interface the new active one [ 498.604884][T12017] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 498.801781][T10857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.832273][T10855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.833193][T10855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.833229][T10855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.926282][T12032] xt_hashlimit: max too large, truncated to 1048576 [ 498.926463][T12032] xt_hashlimit: overflow, try lower: 0/0 [ 499.381799][ T31] audit: type=1326 audit(1792064060.399:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.3.1692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facf1b9e559 code=0x0 [ 499.667511][T12049] fuse: fd is not a fuse device [ 500.594153][ T1215] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 501.192697][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.252179][ T1215] usb 3-1: Using ep0 maxpacket: 32 [ 501.253363][ T1215] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 501.256547][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.256559][ T1215] usb 3-1: Product: syz [ 501.256567][ T1215] usb 3-1: Manufacturer: syz [ 501.256576][ T1215] usb 3-1: SerialNumber: syz [ 502.579930][T10857] net_ratelimit: 54 callbacks suppressed [ 502.773854][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.782364][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.552048][ T1215] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 504.552075][ T1215] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 504.825819][ T1215] usb 3-1: USB disconnect, device number 22 [ 506.142368][ T5740] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 506.291868][ T5740] usb 3-1: Using ep0 maxpacket: 16 [ 506.292630][ T5740] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 506.293900][ T5740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.293921][ T5740] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.293975][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.301475][ T5740] usb 3-1: config 0 descriptor?? [ 506.487636][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 507.672065][ T31] audit: type=1400 audit(1792064068.719:1527): avc: denied { map } for pid=12136 comm="syz.0.1721" path="socket:[34461]" dev="sockfs" ino=34461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.672368][ T31] audit: type=1400 audit(1792064068.719:1528): avc: denied { accept } for pid=12136 comm="syz.0.1721" path="socket:[34461]" dev="sockfs" ino=34461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.592922][ T31] audit: type=1400 audit(1792064069.639:1529): avc: denied { name_bind } for pid=12149 comm="syz.4.1723" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 510.645733][T12167] tipc: Enabling of bearer rejected, failed to enable media [ 511.302191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.706998][ T5740] usb 3-1: USB disconnect, device number 23 [ 511.730570][T12175] rxe_eth0 speed is unknown, defaulting to 1000 [ 512.721259][T12183] IPVS: Scheduler module ip_vs_sip not found [ 513.525635][ T5962] net_ratelimit: 66 callbacks suppressed [ 514.710967][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 515.245202][T12211] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 515.422407][T12211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.725069][T12216] macvlan2: entered promiscuous mode [ 515.725079][T12216] macvlan2: entered allmulticast mode [ 515.780765][T12217] bond0: (slave ip6gretap1): making interface the new active one [ 515.797818][T12217] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 519.265886][T10854] net_ratelimit: 6 callbacks suppressed [ 520.236876][T12238] macsec0: left promiscuous mode [ 521.895682][ T5788] kworker/1:5 (5788) used greatest stack depth: 16416 bytes left [ 523.768249][T12274] overlayfs: missing 'lowerdir' [ 524.891118][T10857] net_ratelimit: 28 callbacks suppressed [ 527.474940][T12308] vlan5: entered promiscuous mode [ 527.474958][T12308] hsr0: entered promiscuous mode [ 527.476599][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 527.572388][T12308] vlan5: entered allmulticast mode [ 527.572405][T12308] hsr0: entered allmulticast mode [ 527.572420][T12308] hsr_slave_0: entered allmulticast mode [ 527.572437][T12308] hsr_slave_1: entered allmulticast mode [ 527.634884][T12314] hsr_slave_0: left promiscuous mode [ 527.635567][T12314] hsr_slave_1: left promiscuous mode [ 528.397049][T12331] futex_wake_op: syz.3.1768 tries to shift op by 144; fix this program [ 528.537029][T12331] rxe_eth0 speed is unknown, defaulting to 1000 [ 530.213952][T12342] net_ratelimit: 54 callbacks suppressed [ 532.459512][T12361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1778'. [ 532.459644][T12361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1778'. [ 535.261131][T12390] net_ratelimit: 37 callbacks suppressed [ 535.830325][ T31] audit: type=1326 audit(1792064096.869:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.3.1787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facf1b9e559 code=0x0 [ 537.171086][ T52] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 539.793142][T12427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1795'. [ 539.794428][T12427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1795'. [ 539.794560][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1795'. [ 539.835589][ T31] audit: type=1400 audit(1792064100.879:1531): avc: denied { mounton } for pid=12426 comm="syz.3.1795" path="/353/file0" dev="tmpfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 539.835753][T12427] 9p: Bad value for 'rfdno' [ 539.916627][ T52] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 540.465504][T12439] CIFS mount error: No usable UNC path provided in device string! [ 540.465504][T12439] [ 540.465550][T12439] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 541.162668][T12446] overlayfs: failed to clone upperpath [ 541.316328][T12431] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 541.319282][T12431] Bluetooth: hci4: Injecting HCI hardware error event [ 541.359129][T12431] Bluetooth: hci4: hardware error 0x00 [ 541.924353][ T5605] Bluetooth: hci4: unexpected event for opcode 0x202f [ 541.986133][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 542.076882][ T5962] net_ratelimit: 1 callbacks suppressed [ 542.233678][ T31] audit: type=1400 audit(1792064103.279:1532): avc: denied { connect } for pid=12452 comm="syz.2.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 542.921932][ T31] audit: type=1400 audit(1792064103.909:1533): avc: denied { setopt } for pid=12463 comm="syz.2.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 543.662168][T12431] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 544.159032][T12431] Bluetooth: hci1: command 0x0406 tx timeout [ 546.761131][ T31] audit: type=1400 audit(1792064107.799:1534): avc: denied { create } for pid=12505 comm="syz.0.1814" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 547.751513][ T31] audit: type=1400 audit(1792064108.379:1535): avc: denied { write } for pid=12505 comm="syz.0.1814" name="file0" dev="tmpfs" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 547.751570][ T31] audit: type=1400 audit(1792064108.379:1536): avc: denied { open } for pid=12505 comm="syz.0.1814" path="/388/file0" dev="tmpfs" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 547.751613][ T31] audit: type=1400 audit(1792064108.659:1537): avc: denied { ioctl } for pid=12505 comm="syz.0.1814" path="/388/file0" dev="tmpfs" ino=2109 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 548.508385][ T31] audit: type=1400 audit(1792064109.549:1538): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file0" dev="tmpfs" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 554.554636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 557.408423][T12559] syz.2.1829 (12559): drop_caches: 2 [ 558.198428][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 558.198446][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 558.521580][T12597] fuse: fd is not a fuse device [ 558.580125][ T31] audit: type=1400 audit(1792064119.619:1539): avc: denied { map } for pid=12603 comm="syz.3.1845" path="socket:[36113]" dev="sockfs" ino=36113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 561.290897][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1849'. [ 561.291018][T12628] netlink: Unknown conntrack attr (0) [ 561.328315][T12628] FAULT_INJECTION: forcing a failure. [ 561.328315][T12628] name failslab, interval 1, probability 0, space 0, times 0 [ 561.328349][T12628] CPU: 1 UID: 0 PID: 12628 Comm: syz.2.1849 Tainted: G S L syzkaller #0 PREEMPT(full) [ 561.328380][T12628] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 561.328388][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 561.328414][T12628] Call Trace: [ 561.328423][T12628] [ 561.328432][T12628] dump_stack_lvl+0x100/0x190 [ 561.328468][T12628] should_fail_ex.cold+0x5/0xa [ 561.328499][T12628] should_failslab+0xc2/0x120 [ 561.328530][T12628] __kmalloc_node_noprof+0xff/0x880 [ 561.328560][T12628] ? crypto_create_tfm_node+0x8d/0x3b0 [ 561.328597][T12628] crypto_create_tfm_node+0x8d/0x3b0 [ 561.328625][T12628] crypto_alloc_tfm_node+0x102/0x260 [ 561.328652][T12628] init_skcipher_req.constprop.0+0x1d/0x180 [ 561.328674][T12628] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 561.328698][T12628] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 561.328722][T12628] ? kasan_quarantine_put+0x104/0x240 [ 561.328746][T12628] ? lockdep_hardirqs_on+0x7d/0x110 [ 561.328777][T12628] ? __kasan_check_byte+0x13/0x50 [ 561.328806][T12628] ? get_derived_key+0x11b/0x140 [ 561.328827][T12628] encrypted_read+0x389/0x850 [ 561.328848][T12628] ? lock_acquire+0x1d1/0x380 [ 561.328868][T12628] ? keyctl_read_key+0x227/0x510 [ 561.328888][T12628] ? __pfx_encrypted_read+0x10/0x10 [ 561.328908][T12628] ? __pfx___might_resched+0x10/0x10 [ 561.328932][T12628] ? down_read+0x13b/0x4c0 [ 561.328951][T12628] ? __pfx_down_read+0x10/0x10 [ 561.328966][T12628] ? keyctl_read_key+0x2ac/0x510 [ 561.328986][T12628] ? keyctl_read_key+0x2ac/0x510 [ 561.329005][T12628] ? keyctl_read_key+0x427/0x510 [ 561.329030][T12628] keyctl_read_key+0x29a/0x510 [ 561.329055][T12628] __do_sys_keyctl+0x36d/0x5a0 [ 561.329079][T12628] do_syscall_64+0x123/0x790 [ 561.329109][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.329129][T12628] RIP: 0033:0x7fd98b19e559 [ 561.329156][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.329175][T12628] RSP: 002b:00007fd98c13a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 561.329194][T12628] RAX: ffffffffffffffda RBX: 00007fd98b425fa0 RCX: 00007fd98b19e559 [ 561.329207][T12628] RDX: 0000200000000240 RSI: 0000000014060745 RDI: 000000000000000b [ 561.329219][T12628] RBP: 00007fd98b2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 561.329232][T12628] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 561.329244][T12628] R13: 00007fd98b426038 R14: 00007fd98b425fa0 R15: 00007ffedd40a0c8 [ 561.329269][T12628] [ 561.340712][T12628] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 562.728155][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.999015][ T151] net_ratelimit: 1 callbacks suppressed [ 565.874737][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1865'. [ 568.999041][T10868] IPVS: starting estimator thread 0... [ 569.162054][T12711] IPVS: using max 38 ests per chain, 91200 per kthread [ 569.370048][ T31] audit: type=1400 audit(1792064130.409:1540): avc: denied { ioctl } for pid=12716 comm="syz.1.1874" path="socket:[35405]" dev="sockfs" ino=35405 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 569.434717][ T31] audit: type=1400 audit(1792064130.479:1541): avc: denied { mounton } for pid=12715 comm="syz.2.1862" path="/365/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 569.434854][T12717] cgroup2: Unknown parameter 'subj_user' [ 569.609971][ T31] audit: type=1400 audit(1792064130.649:1542): avc: denied { bind } for pid=12721 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 569.664567][ T5962] net_ratelimit: 1 callbacks suppressed [ 569.697123][ T31] audit: type=1400 audit(1792064130.739:1543): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 570.249742][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 570.559912][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 570.559946][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 570.917862][ T31] audit: type=1400 audit(1792064131.959:1544): avc: denied { mount } for pid=12733 comm="syz.0.1879" name="/" dev="hugetlbfs" ino=36325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 573.371767][ T60] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.371797][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.371831][ T60] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.371855][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.371885][ T60] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.371910][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.371941][ T60] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.371967][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.554383][T12762] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1886'. [ 574.796271][T12764] tipc: Enabling of bearer rejected, already enabled [ 575.159438][T12784] bridge0: port 1(netdevsim0) entered blocking state [ 575.159520][T12784] bridge0: port 1(netdevsim0) entered disabled state [ 575.159719][T12784] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 575.162711][T12784] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 575.325748][T12788] futex_wake_op: syz.3.1891 tries to shift op by 144; fix this program [ 575.378704][T12788] net_ratelimit: 50 callbacks suppressed [ 575.439585][T12788] rxe_eth0 speed is unknown, defaulting to 1000 [ 577.220737][T12807] fuse: fd is not a fuse device [ 577.526056][ T31] audit: type=1400 audit(1792064138.569:1545): avc: denied { ioctl } for pid=12810 comm="syz.4.1898" path="socket:[36438]" dev="sockfs" ino=36438 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 578.445264][T12815] FAULT_INJECTION: forcing a failure. [ 578.445264][T12815] name failslab, interval 1, probability 0, space 0, times 0 [ 578.445299][T12815] CPU: 1 UID: 0 PID: 12815 Comm: syz.1.1899 Tainted: G S L syzkaller #0 PREEMPT(full) [ 578.445334][T12815] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 578.445343][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 578.445357][T12815] Call Trace: [ 578.445365][T12815] [ 578.445374][T12815] dump_stack_lvl+0x100/0x190 [ 578.445411][T12815] should_fail_ex.cold+0x5/0xa [ 578.445445][T12815] should_failslab+0xc2/0x120 [ 578.445475][T12815] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 578.445506][T12815] ? key_alloc+0xc6d/0x1310 [ 578.445542][T12815] kmemdup_noprof+0x29/0x60 [ 578.445566][T12815] key_alloc+0xc6d/0x1310 [ 578.445602][T12815] ? keyctl_get_persistent+0x537/0x940 [ 578.445627][T12815] ? __pfx_key_alloc+0x10/0x10 [ 578.445663][T12815] keyring_alloc+0x44/0xc0 [ 578.445696][T12815] keyctl_get_persistent+0x72b/0x940 [ 578.445724][T12815] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 578.445751][T12815] ? __x64_sys_futex+0x34f/0x4d0 [ 578.445783][T12815] ? __x64_sys_futex+0x358/0x4d0 [ 578.445819][T12815] ? xfd_validate_state+0x129/0x190 [ 578.445851][T12815] __do_sys_keyctl+0x3b2/0x5a0 [ 578.445880][T12815] do_syscall_64+0x123/0x790 [ 578.445914][T12815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.445936][T12815] RIP: 0033:0x7f6855d9e559 [ 578.445955][T12815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.445975][T12815] RSP: 002b:00007f6856c94028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 578.445996][T12815] RAX: ffffffffffffffda RBX: 00007f6856025fa0 RCX: 00007f6855d9e559 [ 578.446009][T12815] RDX: 000000000457a747 RSI: 0000000000000000 RDI: 0000000000000016 [ 578.446022][T12815] RBP: 00007f6855e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 578.446035][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.446047][T12815] R13: 00007f6856026038 R14: 00007f6856025fa0 R15: 00007ffc1d74beb8 [ 578.446076][T12815] [ 579.505819][T12820] jffs2: notice: (12820) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 580.543459][ T31] audit: type=1400 audit(1792064141.589:1546): avc: denied { execute } for pid=12853 comm="syz.3.1909" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 580.752269][T12859] net_ratelimit: 21 callbacks suppressed [ 580.752284][T12859] ip_tables: iptables: counters copy to user failed while replacing table [ 583.423866][T12879] kvm_do_msr_access: 2344 callbacks suppressed [ 585.310273][T12897] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 586.411484][T12901] team_slave_1: Caught tx_queue_len zero misconfig [ 586.473835][ T1215] libceph: connect (1)[c::]:6789 error -101 [ 586.489487][ T1215] libceph: mon0 (1)[c::]:6789 connect error [ 586.508532][T12901] ceph: No mds server is up or the cluster is laggy [ 587.059155][ T31] audit: type=1400 audit(1792064148.099:1547): avc: denied { read } for pid=12898 comm="syz.4.1926" laddr=2001::2 lport=52285 faddr=2001::2 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.927971][T12356] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 588.091734][T12356] usb 3-1: Using ep0 maxpacket: 16 [ 588.101351][T12356] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 588.119467][T12356] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 588.119490][T12356] usb 3-1: config 0 has no interface number 0 [ 588.119531][T12356] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 588.119560][T12356] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 588.166126][T12356] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 588.166147][T12356] usb 3-1: Product: syz [ 588.166163][T12356] usb 3-1: Manufacturer: syz [ 588.166177][T12356] usb 3-1: SerialNumber: syz [ 588.195652][T12356] usb 3-1: config 0 descriptor?? [ 588.218311][T12356] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 588.218500][T12356] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 588.220094][T12356] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 588.264453][T12356] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 588.285848][T12356] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 588.307451][T12356] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 588.323852][T12356] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 588.326237][T12356] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 588.354171][T12356] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 588.410855][T12918] syzkaller0: entered promiscuous mode [ 588.410872][T12918] syzkaller0: entered allmulticast mode [ 588.433133][T12356] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 588.780644][T12356] usb 3-1: USB disconnect, device number 24 [ 588.840160][T12356] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 588.859189][T12356] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 588.904382][T12356] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 588.925494][T12356] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 588.943563][T12356] keyspan 3-1:0.107: device disconnected [ 589.621280][ T31] audit: type=1400 audit(1792064150.659:1548): avc: denied { getopt } for pid=12942 comm="syz.1.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 590.365865][ T31] audit: type=1400 audit(1792064151.409:1549): avc: denied { connect } for pid=12948 comm="syz.2.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 590.615058][T12955] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1937'. [ 591.514940][ T52] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 592.159414][T12960] Invalid ELF header magic: != ELF [ 592.261780][ T31] audit: type=1400 audit(1792064153.199:1550): avc: denied { module_load } for pid=12957 comm="syz.4.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 593.714841][T12965] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 593.799744][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 593.827599][T12965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.869683][ T31] audit: type=1326 audit(1792064154.909:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.4.1944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb816b9e559 code=0x0 [ 594.234454][ T31] audit: type=1400 audit(1792064155.269:1552): avc: denied { bind } for pid=12983 comm="syz.3.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 594.716702][T12988] syzkaller0: entered promiscuous mode [ 594.716719][T12988] syzkaller0: entered allmulticast mode [ 594.744238][ T31] audit: type=1400 audit(1792064155.789:1553): avc: denied { ioctl } for pid=12977 comm="syz.2.1945" path="/dev/sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 595.207145][ T52] Bluetooth: hci0: unexpected subevent 0x1a length: 10 > 6 [ 595.645675][T12965] bond6: (slave bridge3): making interface the new active one [ 595.667432][T12965] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 596.112636][T12999] lo: left promiscuous mode [ 596.112859][T12999] tunl0: left promiscuous mode [ 596.113023][T12999] gre0: left promiscuous mode [ 596.113129][T12999] gretap0: left promiscuous mode [ 596.113230][T12999] erspan0: left promiscuous mode [ 596.113335][T12999] ip_vti0: left promiscuous mode [ 596.113462][T12999] ip6_vti0: left promiscuous mode [ 596.113561][T12999] sit0: left promiscuous mode [ 596.113663][T12999] ip6tnl0: left promiscuous mode [ 596.113765][T12999] ip6gre0: left promiscuous mode [ 596.701952][T12999] ip6gretap0: left promiscuous mode [ 596.711047][T12999] vcan0: left promiscuous mode [ 596.711188][T12999] team0: left promiscuous mode [ 596.723304][T12999] dummy0: left promiscuous mode [ 596.723470][T12999] nlmon0: left promiscuous mode [ 596.723606][T12999] batadv0: left promiscuous mode [ 596.724352][T12999] vxcan0: left promiscuous mode [ 596.724502][T12999] vxcan1: left promiscuous mode [ 596.725982][T12999] veth0: left promiscuous mode [ 596.726125][T12999] veth1: left promiscuous mode [ 596.726294][T12999] wg0: left promiscuous mode [ 596.726426][T12999] wg1: left promiscuous mode [ 596.726557][T12999] wg2: left promiscuous mode [ 596.726686][T12999] veth0_to_bridge: left promiscuous mode [ 596.726814][T12999] bridge_slave_0: left promiscuous mode [ 596.727764][T12999] veth1_to_bridge: left promiscuous mode [ 596.727900][T12999] bridge_slave_1: left promiscuous mode [ 596.728101][T12999] veth0_to_bond: left promiscuous mode [ 596.728297][T12999] bond_slave_0: left promiscuous mode [ 596.728397][T12999] veth1_to_bond: left promiscuous mode [ 596.728531][T12999] bond_slave_1: left promiscuous mode [ 596.728633][T12999] veth0_to_team: left promiscuous mode [ 596.728764][T12999] team_slave_0: left promiscuous mode [ 596.728895][T12999] veth1_to_team: left promiscuous mode [ 596.729353][T12999] team_slave_1: left promiscuous mode [ 596.729493][T12999] veth0_to_batadv: left promiscuous mode [ 596.729633][T12999] batadv_slave_0: left promiscuous mode [ 596.729762][T12999] veth1_to_batadv: left promiscuous mode [ 596.730134][T12999] batadv_slave_1: left promiscuous mode [ 596.730277][T12999] xfrm0: left promiscuous mode [ 596.731253][T12999] veth0_to_hsr: left promiscuous mode [ 596.731537][T12999] veth1_to_hsr: left promiscuous mode [ 596.974003][T12999] hsr0: left promiscuous mode [ 596.974084][T12999] veth1_virt_wifi: left promiscuous mode [ 596.974157][T12999] veth0_virt_wifi: left promiscuous mode [ 596.974237][T12999] virt_wifi0: left promiscuous mode [ 597.032993][T12999] vlan0: left promiscuous mode [ 597.033348][T12999] vlan1: left promiscuous mode [ 597.033586][T12999] macvlan0: left promiscuous mode [ 597.033709][T12999] macvlan1: left promiscuous mode [ 597.033831][T12999] ipvlan0: left promiscuous mode [ 597.033951][T12999] ipvlan1: left promiscuous mode [ 597.034335][T12999] macvtap0: left promiscuous mode [ 597.039479][T12999] macsec0: left promiscuous mode [ 597.039584][T12999] geneve0: left promiscuous mode [ 597.039712][T12999] geneve1: left promiscuous mode [ 597.039843][T12999] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 597.039958][T12999] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 597.040062][T12999] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 597.040164][T12999] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 597.040275][T12999] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 597.040417][T12999] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 597.040538][T12999] ip6erspan0: left promiscuous mode [ 597.040642][T12999] ipip0: left promiscuous mode [ 597.040795][T12999] bond1: left promiscuous mode [ 597.053516][T12999] veth2: left promiscuous mode [ 597.116335][T12999] veth3: left promiscuous mode [ 597.116477][T12999] vxlan0: left promiscuous mode [ 597.116578][T12999] bridge0: left promiscuous mode [ 597.116696][T12999] bond3: left promiscuous mode [ 597.116711][T12999] wireguard0: left promiscuous mode [ 597.116957][T12999] bond4: left promiscuous mode [ 597.116971][T12999] bridge2: left promiscuous mode [ 597.455110][T13011] FAULT_INJECTION: forcing a failure. [ 597.455110][T13011] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 597.455147][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.2.1953 Tainted: G S L syzkaller #0 PREEMPT(full) [ 597.455187][T13011] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 597.455197][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 597.455212][T13011] Call Trace: [ 597.455220][T13011] [ 597.455231][T13011] dump_stack_lvl+0x100/0x190 [ 597.455269][T13011] should_fail_ex.cold+0x5/0xa [ 597.455306][T13011] _copy_to_iter+0x5a4/0x1720 [ 597.455344][T13011] ? __pfx__copy_to_iter+0x10/0x10 [ 597.455377][T13011] ? netstat_seq_show+0x621/0x9b0 [ 597.455418][T13011] seq_read_iter+0xdab/0x1270 [ 597.455466][T13011] seq_read+0x344/0x4d0 [ 597.455496][T13011] ? __pfx_seq_read+0x10/0x10 [ 597.455532][T13011] ? lock_acquire+0x1d1/0x380 [ 597.455557][T13011] ? fdget_pos+0x2aa/0x380 [ 597.455580][T13011] ? selinux_file_permission+0x8f/0x6d0 [ 597.455616][T13011] ? __pfx_seq_read+0x10/0x10 [ 597.455644][T13011] proc_reg_read+0x240/0x330 [ 597.455668][T13011] ? __pfx_proc_reg_read+0x10/0x10 [ 597.455694][T13011] vfs_read+0x1e4/0xb40 [ 597.455720][T13011] ? lock_acquire+0x1d1/0x380 [ 597.455744][T13011] ? __fget_files+0x34/0x3d0 [ 597.455772][T13011] ? __pfx_vfs_read+0x10/0x10 [ 597.455795][T13011] ? find_held_lock+0x2b/0x80 [ 597.455826][T13011] ? __fget_files+0x215/0x3d0 [ 597.455861][T13011] ? __fget_files+0x21f/0x3d0 [ 597.455900][T13011] ksys_read+0x12a/0x250 [ 597.455925][T13011] ? __pfx_ksys_read+0x10/0x10 [ 597.455960][T13011] do_syscall_64+0x123/0x790 [ 597.455993][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.456016][T13011] RIP: 0033:0x7fd98b19e559 [ 597.456035][T13011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.456055][T13011] RSP: 002b:00007fd98c119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 597.456077][T13011] RAX: ffffffffffffffda RBX: 00007fd98b426090 RCX: 00007fd98b19e559 [ 597.456092][T13011] RDX: 0000000000000229 RSI: 0000200000000780 RDI: 0000000000000007 [ 597.456106][T13011] RBP: 00007fd98b2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 597.456119][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.456132][T13011] R13: 00007fd98b426128 R14: 00007fd98b426090 R15: 00007ffedd40a0c8 [ 597.456170][T13011] [ 598.656795][T13022] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 598.656808][T13022] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 598.656824][T13022] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 598.656830][T13022] One or more global auth toks could not properly register; rc = [-22] [ 598.656851][T13022] Error validating options; rc = [-22] [ 598.693442][T13022] veth0_virt_wifi: entered allmulticast mode [ 601.123955][T12431] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 601.276599][T13043] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 601.376815][T13043] 8021q: adding VLAN 0 to HW filter on device bond7 [ 601.575091][T13043] macvlan3: entered promiscuous mode [ 601.575100][T13043] macvlan3: entered allmulticast mode [ 601.785207][T13043] bond7: (slave ip6gretap1): making interface the new active one [ 601.788440][T13043] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 605.619371][T12431] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 605.619433][T12431] Bluetooth: hci2: Injecting HCI hardware error event [ 605.625375][T12431] Bluetooth: hci2: hardware error 0x00 [ 606.006645][T13086] syzkaller0: left promiscuous mode [ 606.006668][T13086] syzkaller0: left allmulticast mode [ 606.030768][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030791][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030804][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030816][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030828][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030841][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030853][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030865][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030876][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030888][T13086] tc action pedit unable to extract header offset for header type (0x5) [ 606.030909][T13086] net_ratelimit: 26 callbacks suppressed [ 606.030921][T13086] 0: reclassify loop, rule prio 0, protocol 800 [ 608.429053][T12431] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 610.140308][T13110] openvswitch: netlink: Message has 32 unknown bytes. [ 610.602960][T13110] overlayfs: failed to clone lowerpath [ 612.572009][T13129] bond5: option mode: unable to set because the bond device has slaves [ 612.664460][T13129] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 612.669460][T13129] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 612.669963][T12356] ip6gretap1: entered promiscuous mode [ 612.745283][T13129] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1997'. [ 612.749810][T13132] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 613.271076][T13129] bond5: (slave .`): Releasing backup interface [ 613.271093][T13129] bond5: (slave .`): the permanent HWaddr of slave - aa:aa:aa:aa:aa:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 613.271122][T13129] bond5: (slave macvlan2): making interface the new active one [ 613.314313][T13129] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.316350][T13129] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.318572][T13129] .` (unregistering): Released all slaves [ 613.545460][T13139] jffs2: notice: (13139) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 613.773235][T13146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1994'. [ 613.773256][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1994'. [ 613.777014][T13146] FAULT_INJECTION: forcing a failure. [ 613.777014][T13146] name failslab, interval 1, probability 0, space 0, times 0 [ 613.777046][T13146] CPU: 0 UID: 0 PID: 13146 Comm: syz.1.1994 Tainted: G S L syzkaller #0 PREEMPT(full) [ 613.777081][T13146] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 613.777091][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 613.777105][T13146] Call Trace: [ 613.777114][T13146] [ 613.777124][T13146] dump_stack_lvl+0x100/0x190 [ 613.777161][T13146] should_fail_ex.cold+0x5/0xa [ 613.777192][T13146] should_failslab+0xc2/0x120 [ 613.777223][T13146] kmem_cache_alloc_noprof+0x92/0x6a0 [ 613.777252][T13146] ? __kernfs_new_node+0xd2/0xa10 [ 613.777283][T13146] __kernfs_new_node+0xd2/0xa10 [ 613.777312][T13146] ? __pfx___kernfs_new_node+0x10/0x10 [ 613.777340][T13146] ? lock_acquire+0x1d1/0x380 [ 613.777364][T13146] ? kernfs_root+0x23/0x2a0 [ 613.777386][T13146] ? find_held_lock+0x2b/0x80 [ 613.777417][T13146] ? kernfs_root+0xee/0x2a0 [ 613.777438][T13146] ? kernfs_root+0xee/0x2a0 [ 613.777468][T13146] kernfs_new_node+0x117/0x150 [ 613.777498][T13146] __kernfs_create_file+0x53/0x350 [ 613.777529][T13146] sysfs_add_file_mode_ns+0x207/0x3c0 [ 613.777568][T13146] sysfs_merge_group+0x194/0x340 [ 613.777593][T13146] ? __pfx_sysfs_merge_group+0x10/0x10 [ 613.777614][T13146] ? bus_add_device+0x2e2/0x6c0 [ 613.777644][T13146] ? __pfx_bus_add_device+0x10/0x10 [ 613.777670][T13146] ? __pfx_dev_add_physical_location+0x10/0x10 [ 613.777703][T13146] dpm_sysfs_add+0x237/0x280 [ 613.777728][T13146] device_add+0x9f4/0x1970 [ 613.777755][T13146] ? __pfx_device_add+0x10/0x10 [ 613.777778][T13146] ? lockdep_init_map_type+0x5c/0x250 [ 613.777805][T13146] ? __init_waitqueue_head+0xca/0x150 [ 613.777839][T13146] netdev_register_kobject+0x1df/0x410 [ 613.777882][T13146] register_netdevice+0x15b6/0x25a0 [ 613.777916][T13146] ? __pfx_register_netdevice+0x10/0x10 [ 613.777947][T13146] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 613.777980][T13146] batadv_meshif_newlink+0x8f/0xc0 [ 613.778011][T13146] rtnl_newlink+0x1697/0x2620 [ 613.778046][T13146] ? __pfx_rtnl_newlink+0x10/0x10 [ 613.778068][T13146] ? avc_has_perm_noaudit+0x56/0x470 [ 613.778092][T13146] ? find_held_lock+0x2b/0x80 [ 613.778121][T13146] ? avc_has_perm_noaudit+0x11e/0x470 [ 613.778143][T13146] ? avc_has_perm_noaudit+0x11e/0x470 [ 613.778199][T13146] ? lock_acquire+0x1d1/0x380 [ 613.778222][T13146] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 613.778245][T13146] ? find_held_lock+0x2b/0x80 [ 613.778273][T13146] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 613.778297][T13146] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 613.778322][T13146] ? __pfx_rtnl_newlink+0x10/0x10 [ 613.778347][T13146] rtnetlink_rcv_msg+0x95e/0xe90 [ 613.778374][T13146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 613.778404][T13146] ? __lock_acquire+0x5c0/0x1f40 [ 613.778430][T13146] ? __netlink_lookup+0xa9/0x900 [ 613.778464][T13146] netlink_rcv_skb+0x159/0x420 [ 613.778495][T13146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 613.778521][T13146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.778564][T13146] ? netlink_deliver_tap+0x1ae/0xcc0 [ 613.778600][T13146] netlink_unicast+0x585/0x850 [ 613.778636][T13146] ? __pfx_netlink_unicast+0x10/0x10 [ 613.778676][T13146] netlink_sendmsg+0x8b0/0xda0 [ 613.778712][T13146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.778746][T13146] ? selinux_socket_sendmsg+0x198/0x2f0 [ 613.778781][T13146] ____sys_sendmsg+0xa4d/0xbe0 [ 613.778805][T13146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.778838][T13146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.778887][T13146] ___sys_sendmsg+0x190/0x1e0 [ 613.778919][T13146] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.778950][T13146] ? futex_wait+0x11e/0x370 [ 613.778987][T13146] ? find_held_lock+0x2b/0x80 [ 613.779040][T13146] __sys_sendmsg+0x160/0x210 [ 613.779063][T13146] ? __pfx___sys_sendmsg+0x10/0x10 [ 613.779104][T13146] do_syscall_64+0x123/0x790 [ 613.779137][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.779159][T13146] RIP: 0033:0x7f6855d9e559 [ 613.779178][T13146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.779197][T13146] RSP: 002b:00007f6856c94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.779219][T13146] RAX: ffffffffffffffda RBX: 00007f6856025fa0 RCX: 00007f6855d9e559 [ 613.779233][T13146] RDX: 0000000000000000 RSI: 0000200000001880 RDI: 0000000000000006 [ 613.779246][T13146] RBP: 00007f6855e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 613.779259][T13146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.779272][T13146] R13: 00007f6856026038 R14: 00007f6856025fa0 R15: 00007ffc1d74beb8 [ 613.779304][T13146] [ 614.125371][T13140] jffs2: notice: (13140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 614.412053][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1995'. [ 614.472116][T13155] netlink: zone id is out of range [ 614.472125][T13155] netlink: zone id is out of range [ 614.472130][T13155] netlink: zone id is out of range [ 614.472134][T13155] netlink: zone id is out of range [ 614.472138][T13155] netlink: zone id is out of range [ 614.472142][T13155] netlink: zone id is out of range [ 616.776636][T13171] jffs2: notice: (13171) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 616.822087][ T31] audit: type=1400 audit(1792064177.859:1554): avc: denied { write } for pid=13170 comm="syz.1.2000" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.823062][ T31] audit: type=1400 audit(1792064177.869:1555): avc: denied { create } for pid=13170 comm="syz.1.2000" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 616.951490][ T31] audit: type=1400 audit(1792064177.989:1556): avc: denied { write } for pid=13170 comm="syz.1.2000" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.976807][ T31] audit: type=1400 audit(1792064177.999:1557): avc: denied { write } for pid=13170 comm="syz.1.2000" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.976860][ T31] audit: type=1400 audit(1792064177.999:1558): avc: denied { write } for pid=13170 comm="syz.1.2000" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.998759][ T31] audit: type=1400 audit(1792064178.029:1559): avc: denied { write } for pid=13170 comm="syz.1.2000" name="lower" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 617.020638][ T31] audit: type=1400 audit(1792064178.029:1560): avc: denied { add_name } for pid=13170 comm="syz.1.2000" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 617.102940][ T31] audit: type=1400 audit(1792064178.149:1561): avc: denied { write } for pid=13170 comm="syz.1.2000" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.103066][ T31] audit: type=1400 audit(1792064178.149:1562): avc: denied { write } for pid=13170 comm="syz.1.2000" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.363210][T13186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.366617][T13186] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.367009][T13186] tipc: Resetting bearer [ 617.376891][T13186] tipc: Resetting bearer [ 617.377443][T13186] batman_adv: batadv0: Interface activated: dummy0 [ 617.377458][T13186] batadv0: mtu less than device minimum [ 617.378546][T13186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 617.379674][T13186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 617.380748][T13186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 617.568269][T12431] Bluetooth: hci1: command 0x0406 tx timeout [ 617.950825][T13186] batman_adv: batadv0: Interface deactivated: dummy0 [ 617.950840][T13186] batman_adv: batadv0: Removing interface: dummy0 [ 617.974834][T13186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.127375][T13186] bond2: (slave veth0_to_bond): Releasing active interface [ 618.193204][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.193250][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.193272][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.239247][T13186] team0: Port device xfrm0 removed [ 618.289471][ T151] tipc: Resetting bearer [ 618.410214][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.410234][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.410250][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.563436][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 618.849795][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.849912][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.849956][T13194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2007'. [ 618.944251][T13203] bond6: entered promiscuous mode [ 618.947069][T13203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.427489][T13208] kvm_do_msr_access: 388 callbacks suppressed [ 620.526138][T13223] netlink: 'syz.0.2014': attribute type 1 has an invalid length. [ 621.707991][T13223] 8021q: adding VLAN 0 to HW filter on device bond7 [ 621.798287][T13227] macvlan3: entered promiscuous mode [ 621.798303][T13227] macvlan3: entered allmulticast mode [ 621.798577][T13227] bond7: entered allmulticast mode [ 621.798611][T13227] bond7: entered promiscuous mode [ 621.799381][T13227] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 621.824267][T13227] team0: Port device macvlan3 added [ 621.932740][T13228] bond7: (slave ip6gretap1): making interface the new active one [ 621.932763][T13228] ip6gretap1: entered promiscuous mode [ 621.932908][T13228] ip6gretap1: entered allmulticast mode [ 621.942388][T13228] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 622.415148][T13250] xt_hashlimit: size too large, truncated to 1048576 [ 622.415189][T13250] xt_hashlimit: max too large, truncated to 1048576 [ 622.866885][T13246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.892351][T13246] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 622.894185][T13246] veth1_vlan: left promiscuous mode [ 622.895472][T13246] ve: left promiscuous mode [ 622.897199][T13246] ve: entered promiscuous mode [ 622.899686][T13246] veth1_vlan: entered promiscuous mode [ 622.906085][T13246] veth1_macvtap: left promiscuous mode [ 622.907321][T13246] veth0_macvtap: left promiscuous mode [ 622.908522][T13246] veth0_macvtap: entered promiscuous mode [ 622.909727][T13246] veth1_macvtap: entered promiscuous mode [ 622.916610][T13246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.918143][T13246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.919421][T13246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.920687][T13246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.925796][T13246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.927215][T13246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 622.929128][T13246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.934053][T13246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 622.939207][T13246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 622.945926][T13246] batman_adv: batadv0: Interface activated: gretap2 [ 622.948299][T13246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 622.959784][T13246] macvlan3: left promiscuous mode [ 622.959800][T13246] bond7: left promiscuous mode [ 622.960115][T13246] macvlan3: left allmulticast mode [ 622.960129][T13246] bond7: left allmulticast mode [ 622.960149][T13246] ip6gretap1: left allmulticast mode [ 623.001716][ T173] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.001746][ T173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.009183][ T173] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.009213][ T173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.264585][ T5740] gretap1: entered promiscuous mode [ 623.300212][T12356] net_ratelimit: 39 callbacks suppressed [ 623.303078][T10857] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.303107][T10857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.303152][T10857] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.303177][T10857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.766225][T13259] ip6t_rt: too many addresses specified [ 624.074022][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.076058][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 625.089716][ T31] audit: type=1400 audit(1792064186.119:1563): avc: denied { lock } for pid=13267 comm="syz.4.2027" path="socket:[37315]" dev="sockfs" ino=37315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 628.315510][T13301] tcf_pedit_act: 7 callbacks suppressed [ 628.315525][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315537][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315547][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315559][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315570][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315582][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315593][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315605][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315616][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315627][T13301] tc action pedit unable to extract header offset for header type (0x4) [ 628.315654][T13301] net_ratelimit: 104 callbacks suppressed [ 628.315665][T13301] 0: reclassify loop, rule prio 0, protocol 800 [ 629.263749][T13327] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 629.263749][T13327] program syz.2.2040 not setting count and/or reply_len properly [ 629.965160][ T31] audit: type=1400 audit(1792064190.999:1564): avc: denied { shutdown } for pid=13331 comm="iou-wrk-13334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 630.011731][T12356] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 630.187560][T12356] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 630.187602][T12356] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 630.188277][T12356] usb 2-1: config 0 has no interfaces? [ 630.188909][T12356] usb 2-1: config 0 has no interfaces? [ 630.189511][T12356] usb 2-1: config 0 has no interfaces? [ 630.190081][T12356] usb 2-1: config 0 has no interfaces? [ 630.190672][T12356] usb 2-1: config 0 has no interfaces? [ 630.191203][T12356] usb 2-1: config 0 has no interfaces? [ 630.191803][T12356] usb 2-1: config 0 has no interfaces? [ 630.196775][T12356] usb 2-1: config 0 has no interfaces? [ 630.196825][T12356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.204089][T12356] usb 2-1: config 0 descriptor?? [ 630.287700][T13345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2044'. [ 630.320309][ T31] audit: type=1400 audit(1792064191.359:1565): avc: denied { name_bind } for pid=13340 comm="syz.2.2044" src=20259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 630.320358][ T31] audit: type=1400 audit(1792064191.359:1566): avc: denied { node_bind } for pid=13340 comm="syz.2.2044" saddr=::e0:0:0:0:1 src=20259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 630.409130][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 630.533239][T13347] veth0_to_bond: Caught tx_queue_len zero misconfig [ 630.544755][ T5799] usb 2-1: USB disconnect, device number 35 [ 634.031357][ T5735] net_ratelimit: 16 callbacks suppressed [ 635.669925][T13377] __vm_enough_memory: pid: 13377, comm: syz.3.2056, bytes: 4503599627366400 not enough memory for the allocation [ 636.155903][ T31] audit: type=1400 audit(1792064197.199:1567): avc: denied { read } for pid=13381 comm="syz.1.2057" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 636.156280][ T31] audit: type=1400 audit(1792064197.199:1568): avc: denied { open } for pid=13381 comm="syz.1.2057" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 636.950214][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 638.472468][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2059'. [ 638.784282][T13410] jffs2: notice: (13410) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 638.865537][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 639.554653][ T60] net_ratelimit: 15 callbacks suppressed [ 642.683528][T13448] futex_wake_op: syz.1.2072 tries to shift op by 144; fix this program [ 642.816607][T13448] rxe_eth0 speed is unknown, defaulting to 1000 [ 643.411817][ T31] audit: type=1400 audit(1792064203.729:1569): avc: denied { write } for pid=13443 comm="syz.1.2072" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 645.182792][T10868] net_ratelimit: 30 callbacks suppressed [ 646.587097][ T31] audit: type=1400 audit(1792064207.629:1570): avc: denied { write } for pid=13474 comm="syz.1.2082" name="nullb" dev="configfs" ino=3559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.588683][ T52] Bluetooth: hci1: ISO packet for unknown connection handle 201 [ 649.421140][T13519] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2092'. [ 649.440599][T13517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 649.464529][T13517] netlink: 'syz.3.2084': attribute type 10 has an invalid length. [ 649.529227][ T31] audit: type=1400 audit(1792064210.569:1571): avc: denied { read } for pid=13512 comm="syz.2.2091" name="transactions_hashed" dev="binder" ino=1048590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 649.530861][ T31] audit: type=1400 audit(1792064210.569:1572): avc: denied { open } for pid=13512 comm="syz.2.2091" path="/dev/binderfs/binder_logs/transactions_hashed" dev="binder" ino=1048590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 650.153931][T13527] gtp0: entered allmulticast mode [ 651.656295][T13523] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 651.671604][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'. [ 652.728686][T13543] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.2100'. [ 653.565786][T13547] syzkaller0: entered promiscuous mode [ 653.565810][T13547] syzkaller0: entered allmulticast mode [ 653.682055][ T31] audit: type=1400 audit(1792064214.709:1573): avc: denied { lock } for pid=13546 comm="syz.4.2102" path="socket:[38532]" dev="sockfs" ino=38532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 656.543388][T10857] net_ratelimit: 16 callbacks suppressed [ 657.910545][ T31] audit: type=1400 audit(1792064218.949:1574): avc: denied { append } for pid=13580 comm="syz.1.2111" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 659.039988][T13601] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 659.040007][T13601] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 659.040023][T13601] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 659.040034][T13601] One or more global auth toks could not properly register; rc = [-22] [ 659.040065][T13601] Error validating options; rc = [-22] [ 659.831890][T13599] tipc: Enabled bearer , priority 0 [ 659.832096][T13606] lo: entered allmulticast mode [ 661.504638][ T31] audit: type=1326 audit(1792064222.549:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.504760][ T31] audit: type=1326 audit(1792064222.549:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.568345][ T31] audit: type=1326 audit(1792064222.609:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.569271][ T31] audit: type=1326 audit(1792064222.609:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.570481][ T31] audit: type=1326 audit(1792064222.609:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.570524][ T31] audit: type=1326 audit(1792064222.609:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.571788][ T31] audit: type=1326 audit(1792064222.609:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.582140][ T60] net_ratelimit: 7 callbacks suppressed [ 661.679205][ T31] audit: type=1326 audit(1792064222.679:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 661.679259][ T31] audit: type=1326 audit(1792064222.719:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.1.2119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 664.892161][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 664.892214][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 664.892319][T13652] netlink: 'syz.0.2123': attribute type 15 has an invalid length. [ 669.918059][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 669.918074][ T31] audit: type=1400 audit(1792064230.959:1590): avc: denied { connect } for pid=13664 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 670.024375][ T31] audit: type=1400 audit(1792064231.059:1591): avc: denied { accept } for pid=13664 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.695534][ T31] audit: type=1400 audit(1792064235.669:1592): avc: denied { listen } for pid=13715 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 676.121075][T13729] bond5: option mode: unable to set because the bond device has slaves [ 676.126159][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 676.126177][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 676.162714][T13729] ip6gretap1: left promiscuous mode [ 676.189689][T13736] netlink: 'syz.1.2149': attribute type 4 has an invalid length. [ 676.189712][T13736] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2149'. [ 676.418085][T13740] overlayfs: failed to resolve './bus': -2 [ 676.568249][T13740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2153'. [ 676.667899][T13746] FAULT_INJECTION: forcing a failure. [ 676.667899][T13746] name failslab, interval 1, probability 0, space 0, times 0 [ 676.667951][T13746] CPU: 0 UID: 0 PID: 13746 Comm: syz.1.2154 Tainted: G S L syzkaller #0 PREEMPT(full) [ 676.667984][T13746] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 676.667994][T13746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 676.668008][T13746] Call Trace: [ 676.668016][T13746] [ 676.668025][T13746] dump_stack_lvl+0x100/0x190 [ 676.668061][T13746] should_fail_ex.cold+0x5/0xa [ 676.668086][T13746] ? lock_acquire+0x1d1/0x380 [ 676.668115][T13746] should_failslab+0xc2/0x120 [ 676.668145][T13746] __kmalloc_cache_noprof+0x91/0x6d0 [ 676.668170][T13746] ? tipc_service_create+0xb1/0x340 [ 676.668208][T13746] tipc_service_create+0xb1/0x340 [ 676.668239][T13746] ? tipc_service_find+0x161/0x1c0 [ 676.668273][T13746] tipc_nametbl_subscribe+0x892/0xa80 [ 676.668312][T13746] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 676.668337][T13746] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 676.668362][T13746] ? lockdep_init_map_type+0x5c/0x250 [ 676.668414][T13746] tipc_sub_subscribe+0x4ba/0x730 [ 676.668452][T13746] tipc_conn_rcv_sub+0x21e/0x3d0 [ 676.668486][T13746] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 676.668519][T13746] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 676.668563][T13746] tipc_group_create+0x4ab/0x660 [ 676.668598][T13746] tipc_setsockopt+0x611/0xe30 [ 676.668623][T13746] ? __pfx_tipc_setsockopt+0x10/0x10 [ 676.668656][T13746] ? selinux_socket_setsockopt+0x6a/0x80 [ 676.668686][T13746] ? __pfx_tipc_setsockopt+0x10/0x10 [ 676.668710][T13746] do_sock_setsockopt+0xf3/0x1d0 [ 676.668740][T13746] __sys_setsockopt+0x195/0x220 [ 676.668769][T13746] __x64_sys_setsockopt+0xbd/0x160 [ 676.668790][T13746] ? do_syscall_64+0xae/0x790 [ 676.668818][T13746] ? lockdep_hardirqs_on+0x7d/0x110 [ 676.668846][T13746] do_syscall_64+0x123/0x790 [ 676.668878][T13746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.668900][T13746] RIP: 0033:0x7f6855d9e559 [ 676.668919][T13746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.668938][T13746] RSP: 002b:00007f6856c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.668960][T13746] RAX: ffffffffffffffda RBX: 00007f6856026180 RCX: 00007f6855d9e559 [ 676.668975][T13746] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 676.668989][T13746] RBP: 00007f6855e358b0 R08: 0000000000000010 R09: 0000000000000000 [ 676.669003][T13746] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 676.669018][T13746] R13: 00007f6856026218 R14: 00007f6856026180 R15: 00007ffc1d74beb8 [ 676.669051][T13746] [ 676.669067][T13746] tipc: Service creation failed, no memory [ 676.669076][T13746] tipc: Failed to subscribe for {67,0,4294967295} [ 677.166497][ T31] audit: type=1400 audit(1792064238.209:1593): avc: denied { connect } for pid=13749 comm="syz.4.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 677.489248][T13755] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 677.990837][T10857] net_ratelimit: 1 callbacks suppressed [ 678.431297][ T31] audit: type=1400 audit(1792064239.469:1594): avc: denied { setopt } for pid=13760 comm="syz.0.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.465758][T13763] tmpfs: Bad value for 'mpol' [ 679.285183][ T5799] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 679.514069][ T5799] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 679.516990][ T5799] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 679.517013][ T5799] usb 2-1: config 0 has no interface number 0 [ 679.517048][ T5799] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 679.517075][ T5799] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 679.517101][ T5799] usb 2-1: config 0 interface 200 has no altsetting 0 [ 679.519951][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.519974][ T5799] usb 2-1: Product: syz [ 679.519990][ T5799] usb 2-1: Manufacturer: syz [ 679.520006][ T5799] usb 2-1: SerialNumber: syz [ 679.657066][ T5799] usb 2-1: config 0 descriptor?? [ 682.269630][T13785] 9p: Could not find request transport: fd.rfdno=0xffffffffffffffff00000000000000000000 [ 682.456672][ T5799] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input17 [ 682.490927][ T5799] usb 2-1: USB disconnect, device number 36 [ 683.092358][T13806] tmpfs: Bad value for 'mpol' [ 683.784754][T13810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.956232][ T5706] libceph: connect (1)127.0.0.1:6789 error -101 [ 684.294315][ T5706] libceph: mon0 (1)127.0.0.1:6789 connect error [ 684.406067][T13810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2170'. [ 684.434323][T13813] ceph: No mds server is up or the cluster is laggy [ 684.631413][T13810] x_tables: duplicate underflow at hook 1 [ 684.810470][T13824] syzkaller0: left promiscuous mode [ 684.810487][T13824] syzkaller0: left allmulticast mode [ 684.857475][T13810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 685.927186][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.701805][T11590] net_ratelimit: 2 callbacks suppressed [ 689.960218][T13874] tipc: Enabling of bearer rejected, failed to enable media [ 691.809542][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2191'. [ 692.840040][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 692.960874][T13909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2181'. [ 692.976770][T13909] UBIFS error (pid: 13909): cannot open "ubi0_0", error -19 [ 692.981551][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 693.076911][T13904] 9pnet_virtio: no channels available for device syz [ 694.125180][ T5735] net_ratelimit: 45 callbacks suppressed [ 695.623227][T12356] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 695.772465][T12356] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 695.775873][T12356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.775893][T12356] usb 2-1: Product: syz [ 695.775910][T12356] usb 2-1: Manufacturer: syz [ 695.775925][T12356] usb 2-1: SerialNumber: syz [ 695.780288][T12356] usb 2-1: config 0 descriptor?? [ 696.264952][T12356] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 696.264973][T12356] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 696.264999][T12356] f81604 2-1:0.0: probe with driver f81604 failed with error -32 [ 696.319334][ T31] audit: type=1400 audit(1792064257.359:1595): avc: denied { connect } for pid=13922 comm="syz.1.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 696.321385][T12356] usb 2-1: USB disconnect, device number 37 [ 697.459051][ T31] audit: type=1400 audit(1792064258.499:1596): avc: denied { append } for pid=13936 comm="syz.1.2203" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 697.722858][ T31] audit: type=1400 audit(1792064258.769:1597): avc: denied { write } for pid=13945 comm="syz.2.2199" name="interface.ncm" dev="configfs" ino=30315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 697.871796][ T31] audit: type=1400 audit(1792064258.899:1598): avc: denied { write } for pid=13945 comm="syz.2.2199" name="functions" dev="configfs" ino=9350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 697.935824][ T31] audit: type=1400 audit(1792064258.979:1599): avc: denied { write } for pid=13945 comm="syz.2.2199" name="interface.rndis" dev="configfs" ino=39444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 697.979579][T13954] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 697.979596][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'. [ 699.738265][ T31] audit: type=1400 audit(1792064260.779:1600): avc: denied { append } for pid=13963 comm="syz.1.2211" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 700.861703][ C0] net_ratelimit: 34 callbacks suppressed [ 703.921875][T12356] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 704.088652][T12356] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 704.089881][T12356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.363721][T12356] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 704.451989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 706.170172][ T5732] net_ratelimit: 13 callbacks suppressed [ 706.556517][ T1215] usb 3-1: USB disconnect, device number 25 [ 706.730644][T13993] fuse: fd is not a fuse device [ 708.602110][ T31] audit: type=1400 audit(1792064269.569:1601): avc: denied { write } for pid=14023 comm="syz.2.2227" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 708.602394][ T31] audit: type=1400 audit(1792064269.569:1602): avc: denied { open } for pid=14023 comm="syz.2.2227" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 708.602575][ T31] audit: type=1400 audit(1792064269.579:1603): avc: denied { ioctl } for pid=14023 comm="syz.2.2227" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 708.793589][T14030] jffs2: notice: (14030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 711.341690][ C1] net_ratelimit: 9 callbacks suppressed [ 713.156902][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 713.156957][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 713.157064][T14066] netlink: 'syz.2.2233': attribute type 15 has an invalid length. [ 714.027631][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2235'. [ 714.981053][T14079] veth0_to_bond: Caught tx_queue_len zero misconfig [ 716.003929][T14087] ffs_data_put(): freeing [ 716.004009][ T31] audit: type=1400 audit(1792064277.049:1604): avc: denied { mount } for pid=14086 comm="syz.3.2242" name="/" dev="functionfs" ino=39684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 716.111591][ T31] audit: type=1400 audit(1792064277.149:1605): avc: denied { write } for pid=14088 comm="syz.2.2243" name="functions" dev="configfs" ino=9350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 716.941662][ C1] net_ratelimit: 4 callbacks suppressed [ 717.253651][ T31] audit: type=1400 audit(1792064278.299:1606): avc: denied { write } for pid=14088 comm="syz.2.2243" name="extensions" dev="configfs" ino=39717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 717.331532][T14103] netlink: 'syz.3.2245': attribute type 9 has an invalid length. [ 717.434847][T14108] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 717.471071][T14108] 8021q: adding VLAN 0 to HW filter on device bond8 [ 717.643634][T14108] bond8: (slave veth3): Enslaving as an active interface with a down link [ 717.648866][T14112] veth0_virt_wifi: entered promiscuous mode [ 718.145664][T14112] bond8: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 718.262024][ T2300] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 718.493395][ T2300] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 718.494521][ T2300] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.494549][ T2300] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.494575][ T2300] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.494632][ T2300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.499242][ T2300] usb 2-1: config 0 descriptor?? [ 719.483504][ T2300] hid_parser_main: 14 callbacks suppressed [ 719.483529][ T2300] xinmo 0003:16C0:05E1.0009: unknown main item tag 0x0 [ 719.483545][ T2300] xinmo 0003:16C0:05E1.0009: unbalanced collection at end of report description [ 719.483940][ T2300] xinmo 0003:16C0:05E1.0009: probe with driver xinmo failed with error -22 [ 720.881790][ T31] audit: type=1400 audit(1792064281.839:1607): avc: denied { write } for pid=14135 comm="syz.2.2253" name="sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 720.891046][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 721.259527][T14138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.308899][T14142] veth0_to_bond: Caught tx_queue_len zero misconfig [ 721.325102][ T1215] usb 2-1: USB disconnect, device number 38 [ 722.621750][ C1] net_ratelimit: 11 callbacks suppressed [ 723.686258][T14163] rxe_eth0 speed is unknown, defaulting to 1000 [ 724.355044][T14171] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2265'. [ 727.661675][ C0] net_ratelimit: 30 callbacks suppressed [ 728.948560][T14211] Invalid ELF header magic: != ELF [ 728.981706][ T31] audit: type=1400 audit(1792064289.999:1608): avc: denied { append } for pid=14203 comm="syz.2.2274" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 729.487245][T14206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.950024][ T2300] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 730.181720][ T2300] usb 3-1: Using ep0 maxpacket: 16 [ 730.363848][ T2300] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 730.365177][ T2300] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 730.365206][ T2300] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.365229][ T2300] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.365255][ T2300] usb 3-1: config 0 interface 0 has no altsetting 0 [ 730.365304][ T2300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.470623][ T2300] usb 3-1: config 0 descriptor?? [ 730.935648][ T2300] usbhid 3-1:0.0: can't add hid device: -71 [ 730.935770][ T2300] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 730.964574][T14230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.984692][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 731.015850][ T2300] usb 3-1: USB disconnect, device number 26 [ 732.377827][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2284'. [ 732.487725][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 732.581233][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 732.581526][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 733.021696][ C1] net_ratelimit: 4 callbacks suppressed [ 733.780527][T14256] bridge0: port 2(netdevsim0) entered blocking state [ 733.781002][T14256] bridge0: port 2(netdevsim0) entered disabled state [ 733.798463][T14256] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 733.839274][T14256] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 735.119802][T14264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2291'. [ 737.633794][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 737.751124][ T31] audit: type=1400 audit(1792064298.789:1609): avc: denied { write } for pid=14251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.875300][ T31] audit: type=1400 audit(1792064298.919:1610): avc: denied { write } for pid=14289 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.301673][ C1] net_ratelimit: 2 callbacks suppressed [ 740.015579][T14315] Can't find ip_set type hash: [ 742.583686][T14333] fuse: fd is not a fuse device [ 742.656620][ T31] audit: type=1326 audit(1792064303.699:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.656655][ T31] audit: type=1326 audit(1792064303.699:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.660111][ T31] audit: type=1326 audit(1792064303.699:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.660161][ T31] audit: type=1326 audit(1792064303.699:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.660206][ T31] audit: type=1326 audit(1792064303.699:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.821365][ T31] audit: type=1326 audit(1792064303.859:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.829680][ T31] audit: type=1326 audit(1792064303.859:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.829731][ T31] audit: type=1326 audit(1792064303.869:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.842774][ T31] audit: type=1326 audit(1792064303.869:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.842826][ T31] audit: type=1326 audit(1792064303.869:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.842866][ T31] audit: type=1326 audit(1792064303.869:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.848388][ T31] audit: type=1326 audit(1792064303.899:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.848437][ T31] audit: type=1326 audit(1792064303.899:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.848631][ T31] audit: type=1326 audit(1792064303.899:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 742.850727][ T31] audit: type=1326 audit(1792064303.899:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.1.2295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 743.661659][ C1] net_ratelimit: 2 callbacks suppressed [ 746.972497][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.208423][T14400] netlink: 'syz.2.2320': attribute type 1 has an invalid length. [ 747.224105][T14396] PKCS7: Unknown OID: [83] 2.16.840.17.101.3.4.2.1 [ 747.224197][T14396] Unsupported digest algo: 106 [ 747.301185][T14400] 8021q: adding VLAN 0 to HW filter on device bond9 [ 747.318184][T14402] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 748.177985][T14400] bridge3: entered promiscuous mode [ 748.190060][T14400] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 748.191454][T14409] ip6tnl0: Caught tx_queue_len zero misconfig [ 749.182302][ C1] net_ratelimit: 17 callbacks suppressed [ 749.853128][T14429] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 749.853687][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 749.853701][ T31] audit: type=1400 audit(1792064310.899:1652): avc: denied { relabelto } for pid=14428 comm="syz.0.2330" name="504" dev="tmpfs" ino=2730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 749.853748][ T31] audit: type=1400 audit(1792064310.899:1653): avc: denied { associate } for pid=14428 comm="syz.0.2330" name="504" dev="tmpfs" ino=2730 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 754.065626][ T31] audit: type=1400 audit(1792064315.109:1654): avc: denied { cmd } for pid=14468 comm="syz.0.2333" path="/506/file2" dev="tmpfs" ino=2750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 754.102805][ T30] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 754.742307][T14474] net_ratelimit: 6 callbacks suppressed [ 754.742330][T14474] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 755.473561][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 755.475797][ T30] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 755.476890][ T30] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 755.476910][ T30] usb 2-1: config 0 has no interface number 0 [ 755.476946][ T30] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 755.476971][ T30] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 755.479185][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.479204][ T30] usb 2-1: Product: syz [ 755.479220][ T30] usb 2-1: Manufacturer: syz [ 755.479235][ T30] usb 2-1: SerialNumber: syz [ 755.508673][ T30] usb 2-1: config 0 descriptor?? [ 755.517568][T14460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.517686][T14460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.901625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 755.981637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 756.091633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 756.191634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 756.371634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 756.485740][T14460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.485857][T14460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 757.659151][ T30] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 757.659371][ T30] asix 2-1:0.34: probe with driver asix failed with error -71 [ 757.690470][ T30] usb 2-1: USB disconnect, device number 39 [ 760.100524][ T31] audit: type=1400 audit(1792064321.139:1655): avc: denied { write } for pid=14476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.631669][ C0] net_ratelimit: 6 callbacks suppressed [ 760.866980][ T31] audit: type=1400 audit(1792064321.909:1656): avc: denied { write } for pid=14505 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.049420][T14504] 8021q: adding VLAN 0 to HW filter on device bond8 [ 761.050182][T14504] bridge0: port 2(bond8) entered blocking state [ 761.050301][T14504] bridge0: port 2(bond8) entered disabled state [ 761.050469][T14504] bond8: entered allmulticast mode [ 761.086057][T14504] bond8: entered promiscuous mode [ 761.093104][T14504] bridge0: port 2(bond8) entered blocking state [ 761.093234][T14504] bridge0: port 2(bond8) entered forwarding state [ 761.168857][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'. [ 761.176746][T14513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.294045][T10854] bridge0: port 2(bond8) entered disabled state [ 763.147987][T14549] netlink: 'syz.1.2350': attribute type 12 has an invalid length. [ 763.167609][ T31] audit: type=1400 audit(1792064324.209:1657): avc: denied { write } for pid=14517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.164920][ T31] audit: type=1400 audit(1792064325.199:1658): avc: denied { write } for pid=14558 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.736083][T14568] overlayfs: failed to clone upperpath [ 765.827680][ T5732] net_ratelimit: 84 callbacks suppressed [ 765.893654][T14572] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14572 comm=syz.1.2353 [ 768.041897][T14581] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2359'. [ 771.101666][ C1] net_ratelimit: 11 callbacks suppressed [ 773.540256][T14616] UHID_CREATE from different security context by process 1414 (syz.1.2367), this is not allowed. [ 773.617605][T14617] tps6598x 0-0020: failed to read vendor ID: -5, vid: 0x0 [ 773.618672][T14617] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 776.231803][ C0] net_ratelimit: 5 callbacks suppressed [ 778.198471][T14658] fuse: fd is not a fuse device [ 778.232946][ T31] audit: type=1326 audit(1792064339.279:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.232998][ T31] audit: type=1326 audit(1792064339.279:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.235384][ T31] audit: type=1326 audit(1792064339.279:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.235432][ T31] audit: type=1326 audit(1792064339.279:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.235488][ T31] audit: type=1326 audit(1792064339.279:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.235688][ T31] audit: type=1326 audit(1792064339.279:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.239007][ T31] audit: type=1326 audit(1792064339.279:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.239055][ T31] audit: type=1326 audit(1792064339.279:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.239095][ T31] audit: type=1326 audit(1792064339.279:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.239137][ T31] audit: type=1326 audit(1792064339.279:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.1.2382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6855d9e559 code=0x7ffc0000 [ 778.588172][T14666] VFS: Mount too revealing [ 779.673688][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 781.981725][ C1] net_ratelimit: 9 callbacks suppressed [ 784.672846][ T31] kauditd_printk_skb: 94 callbacks suppressed [ 784.672870][ T31] audit: type=1400 audit(1792064345.699:1763): avc: denied { write } for pid=14715 comm="syz.2.2391" name="functions" dev="configfs" ino=9350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 784.673126][ T31] audit: type=1400 audit(1792064345.709:1764): avc: denied { write } for pid=14715 comm="syz.2.2391" name="c.1" dev="configfs" ino=30943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 784.674570][ T31] audit: type=1400 audit(1792064345.719:1765): avc: denied { write } for pid=14715 comm="syz.2.2391" name="c.1" dev="configfs" ino=30943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 784.834565][T14718] UDC core: g1: couldn't find an available UDC or it's busy [ 787.022437][ C1] net_ratelimit: 2 callbacks suppressed [ 788.029017][T14724] configfs-gadget.g1 gadget.0: HOST MAC 82:8a:b0:1b:dc:ff [ 788.029042][T14724] configfs-gadget.g1 gadget.0: MAC ca:a4:fd:ea:15:98 [ 788.053757][T14724] udc dummy_udc.0: failed to start g1: -19 [ 788.055771][T14724] UDC core: g1: couldn't find an available UDC or it's busy [ 788.612901][T12356] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 788.677240][ T31] audit: type=1400 audit(1792064349.719:1766): avc: denied { write } for pid=14731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.762760][T12356] usb 2-1: Using ep0 maxpacket: 32 [ 788.763587][T12356] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 788.764700][T12356] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 788.764728][T12356] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.764754][T12356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 788.764802][T12356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.767561][T12356] usb 2-1: config 0 descriptor?? [ 788.955160][ T31] audit: type=1400 audit(1792064349.999:1767): avc: denied { write } for pid=14748 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.058566][ T31] audit: type=1400 audit(1792064350.099:1768): avc: denied { create } for pid=14749 comm="syz.2.2399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 789.092143][ T5262] usb0: bond_netdev_event received NETDEV_PRE_UP [ 789.092174][ T5262] net usb0: siw: event 14 [ 789.092272][ T5262] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000025: 0000 [#1] SMP KASAN NOPTI [ 789.114950][ T5262] KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f] [ 789.123352][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: dhcpcd Tainted: G S L syzkaller #0 PREEMPT(full) [ 789.133840][ T5262] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 789.139960][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 789.149994][ T5262] RIP: 0010:__dynamic_dev_dbg+0x1da/0x310 [ 789.155721][ T5262] Code: 85 40 ff ff ff 00 00 00 00 48 c7 85 48 ff ff ff 00 00 00 00 48 c7 85 50 ff ff ff 00 00 00 00 48 c7 85 58 ff ff ff 00 00 00 00 <80> 3c 08 00 0f 85 13 01 00 00 4c 8b 7b 50 4d 85 ff 0f 84 a8 00 00 [ 789.175326][ T5262] RSP: 0018:ffffc9000208f6b0 EFLAGS: 00010202 [ 789.181379][ T5262] RAX: 0000000000000025 RBX: 00000000000000d8 RCX: dffffc0000000000 [ 789.189345][ T5262] RDX: ffffffff8cdc6400 RSI: 00000000000000d8 RDI: 0000000000000128 [ 789.197298][ T5262] RBP: ffffc9000208f858 R08: 0000000000000005 R09: 0000000000000000 [ 789.205258][ T5262] R10: ffffc9000208f868 R11: 0000000000000001 R12: 1ffff92000411ed7 [ 789.213208][ T5262] R13: ffffffff923bf0b8 R14: ffffc9000208f7f8 R15: ffffffff8cdc70a0 [ 789.221158][ T5262] FS: 00007f1d88222780(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 789.230066][ T5262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.236640][ T5262] CR2: 000000110c3a90a3 CR3: 0000000076bfa000 CR4: 00000000003526f0 [ 789.244591][ T5262] Call Trace: [ 789.247846][ T5262] [ 789.250753][ T5262] ? find_held_lock+0x2b/0x80 [ 789.255420][ T5262] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 789.260868][ T5262] ? ib_device_get_by_netdev+0x1a8/0x530 [ 789.266485][ T5262] ? ib_device_get_by_netdev+0x1b2/0x530 [ 789.272102][ T5262] ? ip6_route_dev_notify+0xe4/0x750 [ 789.277374][ T5262] ? ndisc_netdev_event+0xa1/0x560 [ 789.282479][ T5262] ? notifier_call_chain+0x31b/0x3f0 [ 789.287767][ T5262] eth_open+0x17b/0x1f0 [ 789.291918][ T5262] ? __pfx_eth_open+0x10/0x10 [ 789.296588][ T5262] __dev_open+0x3ad/0x8f0 [ 789.300902][ T5262] ? __pfx___dev_open+0x10/0x10 [ 789.305745][ T5262] ? __local_bh_enable_ip+0xa5/0x120 [ 789.311022][ T5262] __dev_change_flags+0x596/0x850 [ 789.316026][ T5262] ? __pfx___dev_change_flags+0x10/0x10 [ 789.321558][ T5262] netif_change_flags+0x8d/0x160 [ 789.326476][ T5262] dev_change_flags+0xba/0x260 [ 789.331232][ T5262] devinet_ioctl+0x110b/0x1f10 [ 789.335990][ T5262] ? __pfx_devinet_ioctl+0x10/0x10 [ 789.341098][ T5262] ? _copy_from_user+0x59/0xd0 [ 789.345866][ T5262] inet_ioctl+0x3aa/0x3f0 [ 789.350186][ T5262] ? __pfx_inet_ioctl+0x10/0x10 [ 789.355029][ T5262] ? tomoyo_path_number_perm+0x188/0x580 [ 789.360660][ T5262] sock_do_ioctl+0x118/0x280 [ 789.365244][ T5262] ? __pfx_sock_do_ioctl+0x10/0x10 [ 789.370331][ T5262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 789.376207][ T5262] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 789.381221][ T5262] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 789.387702][ T5262] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 789.394549][ T5262] sock_ioctl+0x599/0x6b0 [ 789.398873][ T5262] ? __pfx_sock_ioctl+0x10/0x10 [ 789.403719][ T5262] ? selinux_file_ioctl+0x13b/0x290 [ 789.408912][ T5262] ? selinux_file_ioctl+0xb6/0x290 [ 789.414011][ T5262] ? __pfx_sock_ioctl+0x10/0x10 [ 789.418852][ T5262] __x64_sys_ioctl+0x18e/0x210 [ 789.423609][ T5262] do_syscall_64+0x123/0x790 [ 789.428203][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.434080][ T5262] RIP: 0033:0x7f1d88322378 [ 789.438473][ T5262] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 789.458071][ T5262] RSP: 002b:00007ffd6e25dee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.466459][ T5262] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00007f1d88322378 [ 789.474412][ T5262] RDX: 00007ffd6e26e0e0 RSI: 0000000000008914 RDI: 000000000000001a [ 789.482362][ T5262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 789.490324][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6e27e280 [ 789.498285][ T5262] R13: 00007f1d88222708 R14: 0000000000000028 R15: 0000000000008914 [ 789.506251][ T5262] [ 789.509243][ T5262] Modules linked in: [ 789.513201][ C0] virtqueue callback for ffff888029c2ce00 (ffffffff86ed9be0) [ 789.521192][ T5262] ---[ end trace 0000000000000000 ]--- [ 789.526670][ C0] No more buffers in queue [ 789.531459][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 789.537367][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 789.539188][T10854] bond2: (slave geneve2): Send learning packet: mac de:28:34:c5:c9:f4 vlan 0 [ 789.551976][ C0] No more buffers in queue [ 789.556647][ C0] eth0: xmit ffff888073e018c0 42:01:0a:80:00:01 [ 789.557000][T14738] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1447 [ 789.557213][ T5740] nfc: nfc_urelease_event_work: portid 1447 [ 789.576586][ C0] Added buffer head 32 to ffff888029c2cc00 [ 789.582381][ C0] virtqueue callback for ffff888029c2cc00 (ffffffff86ee2b00) [ 789.589890][ C0] Sent skb ffff888073e018c0 [ 789.589930][ C0] No more buffers in queue [ 789.589947][ C0] No more buffers in queue [ 789.606186][ T31] audit: type=1400 audit(1792064350.579:1769): avc: denied { setattr } for pid=14749 comm="syz.2.2399" name="file0" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 789.606226][ T31] audit: type=1400 audit(1792064350.639:1770): avc: denied { read } for pid=4949 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 789.606256][ T31] audit: type=1400 audit(1792064350.639:1771): avc: denied { search } for pid=4949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.606285][ T31] audit: type=1400 audit(1792064350.639:1772): avc: denied { write search } for pid=4949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.615861][T14752] kcov: kcov_start: t = ffff8880359b2580, size = 524288, area = ffffc9000e262000 [ 789.741636][ C1] tipc: TX(): probing for key[1] [ 789.751301][T14753] kcov: kcov_start: t = ffff88803703a580, size = 524288, area = ffffc9000f953000 [ 789.752710][T10854] bond5: (slave bridge2): Send learning packet: mac da:8f:9f:65:89:35 vlan 0 [ 789.752769][T10854] bond5: (slave bridge2): Send learning packet: mac da:8f:9f:65:89:35 vlan 1 [ 789.779473][T14750] kcov: kcov_task_exit: t = ffff88802823a580, kcov->t = ffff88802823a580 [ 789.791674][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 789.791690][ T31] audit: type=1400 audit(1792064350.829:1777): avc: denied { read } for pid=14749 comm="syz.2.2399" name="file0" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 789.791728][ T31] audit: type=1400 audit(1792064350.829:1778): avc: denied { open } for pid=14749 comm="syz.2.2399" path="/463/mnt/file0" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 789.892781][T10854] bond7: (slave ip6gretap1): Send learning packet: mac f2:80:a3:46:19:d2 vlan 0 [ 789.892874][T10854] bond7: (slave ip6gretap1): Send learning packet: mac 56:ad:79:b7:ab:99 vlan 0 [ 789.990880][T14755] kcov: kcov_start: t = ffff88802e90cb00, size = 524288, area = ffffc9000d6e1000 [ 790.061648][ C1] tipc: TX(): probing for key[1] [ 790.101150][T14756] kcov: kcov_start: t = ffff88803df12580, size = 524288, area = ffffc9000ea64000 [ 790.603312][T14755] kcov: kcov_task_exit: t = ffff88802e90cb00, kcov->t = ffff88802e90cb00 [ 790.603397][T14756] kcov: kcov_task_exit: t = ffff88803df12580, kcov->t = ffff88803df12580 [ 790.640814][ T31] audit: type=1400 audit(1792064351.079:1779): avc: denied { execmem } for pid=14754 comm="syz.3.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 790.698839][ T5262] RIP: 0010:__dynamic_dev_dbg+0x1da/0x310 [ 790.698872][ T5262] Code: 85 40 ff ff ff 00 00 00 00 48 c7 85 48 ff ff ff 00 00 00 00 48 c7 85 50 ff ff ff 00 00 00 00 48 c7 85 58 ff ff ff 00 00 00 00 <80> 3c 08 00 0f 85 13 01 00 00 4c 8b 7b 50 4d 85 ff 0f 84 a8 00 00 [ 790.698888][ T5262] RSP: 0018:ffffc9000208f6b0 EFLAGS: 00010202 [ 790.698911][ T5262] RAX: 0000000000000025 RBX: 00000000000000d8 RCX: dffffc0000000000 [ 790.698940][ T5262] RDX: ffffffff8cdc6400 RSI: 00000000000000d8 RDI: 0000000000000128 [ 790.698952][ T5262] RBP: ffffc9000208f858 R08: 0000000000000005 R09: 0000000000000000 [ 790.698964][ T5262] R10: ffffc9000208f868 R11: 0000000000000001 R12: 1ffff92000411ed7 [ 790.698975][ T5262] R13: ffffffff923bf0b8 R14: ffffc9000208f7f8 R15: ffffffff8cdc70a0 [ 790.698988][ T5262] FS: 00007f1d88222780(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 790.699005][ T5262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.699025][ T5262] CR2: 00007facf1b87b80 CR3: 0000000076bfa000 CR4: 00000000003526f0 [ 790.699040][ T5262] Kernel panic - not syncing: Fatal exception [ 790.799735][ T5262] Kernel Offset: disabled [ 790.804070][ T5262] Rebooting in 86400 seconds..