last executing test programs: 7m36.434124873s ago: executing program 32 (id=5073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x2fdfdbfd, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x11963}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3a}]}}}]}, 0x3c}}, 0x0) 5m26.656738881s ago: executing program 33 (id=11160): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) read(r0, 0x0, 0x0) 4m32.438988001s ago: executing program 34 (id=11901): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) 4m24.903651883s ago: executing program 35 (id=12363): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000100)=@can={{0x1, 0x1}, 0x6, 0x5, 0x0, 0x0, "19e76b95fa37cff8"}, 0x10}, 0x1, 0x0, 0x0, 0x200cc014}, 0xd1628f4366deaaa4) 3m37.714364848s ago: executing program 6 (id=13027): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@verity_on}], [], 0x2c}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 3m37.603555382s ago: executing program 6 (id=13030): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000040), 0x0}, 0x20) 3m37.529269427s ago: executing program 6 (id=13034): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x22}, @loopback}}}], 0x20}, 0x4001000) 3m37.435621988s ago: executing program 6 (id=13036): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3m37.270635612s ago: executing program 6 (id=13043): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 3m37.138835181s ago: executing program 6 (id=13045): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) 3m21.131761119s ago: executing program 36 (id=13045): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) 3m20.491359432s ago: executing program 7 (id=13276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x40000003, {0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x886f5cad098fbc1) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 3m20.425256082s ago: executing program 7 (id=13277): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 3m19.473899996s ago: executing program 7 (id=13286): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 3m19.449516553s ago: executing program 7 (id=13287): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 3m19.377640242s ago: executing program 7 (id=13288): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 3m18.834680968s ago: executing program 7 (id=13300): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x1c, &(0x7f0000000740)=[@in6={0xa, 0x4e24, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000800)={r1, @in6={{0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0xedd, 0x1, 0x5, 0x1, 0x1000}, &(0x7f00000008c0)=0x98) 3m18.736110782s ago: executing program 37 (id=13300): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x1c, &(0x7f0000000740)=[@in6={0xa, 0x4e24, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000800)={r1, @in6={{0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0xedd, 0x1, 0x5, 0x1, 0x1000}, &(0x7f00000008c0)=0x98) 2m49.573761378s ago: executing program 5 (id=13950): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x7e76, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xfffffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x2, 0x9, 0x0, 0x0) 2m49.488774967s ago: executing program 5 (id=13951): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f0000000680)='T5', 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 2m49.432658695s ago: executing program 5 (id=13952): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x6, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 2m49.431329185s ago: executing program 5 (id=13953): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 2m49.376498108s ago: executing program 5 (id=13954): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)={0x28, r3, 0x109, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044888) 2m48.931161317s ago: executing program 5 (id=13967): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x3}, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 2m48.827048548s ago: executing program 38 (id=13967): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x3}, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1m25.796520167s ago: executing program 8 (id=15876): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x7ffffffd, 0x2) getdents64(r2, 0x0, 0x0) 1m25.740116234s ago: executing program 8 (id=15877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1m25.61155612s ago: executing program 8 (id=15883): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x400480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r2, &(0x7f0000000380)=""/144, 0x90) close_range(r1, 0xffffffffffffffff, 0x0) 1m25.017517768s ago: executing program 8 (id=15894): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1m25.013204177s ago: executing program 8 (id=15895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(r2, 0x0, 0xee01) r3 = getuid() sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc81, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r2, r3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1m24.004981195s ago: executing program 8 (id=15903): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) 1m23.991012256s ago: executing program 39 (id=15903): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) 1m19.30657235s ago: executing program 9 (id=15976): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m19.150500245s ago: executing program 9 (id=15978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 1m19.044089133s ago: executing program 9 (id=15980): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x81}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x80) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) 1m18.967784289s ago: executing program 9 (id=15982): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) 1m18.962209348s ago: executing program 9 (id=15983): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1m18.692846065s ago: executing program 9 (id=15986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 1m18.595790525s ago: executing program 40 (id=15986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 41.601126014s ago: executing program 2 (id=16599): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0xffffffff, 0x20}, 0xc) 41.510779488s ago: executing program 2 (id=16600): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(0x0, 0x8) chdir(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 41.457131011s ago: executing program 2 (id=16602): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004800) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 41.429003717s ago: executing program 2 (id=16604): socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="fab0817dbcb5f31a2400128011000100620926d6fe026d3db3617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 41.352440913s ago: executing program 2 (id=16605): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 41.30429369s ago: executing program 2 (id=16606): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 25.218575255s ago: executing program 41 (id=16606): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2.281150201s ago: executing program 4 (id=17067): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.237126961s ago: executing program 4 (id=17068): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x8000032, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0x7, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.964085379s ago: executing program 4 (id=17070): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000004000), 0x4, 0x0, 0x0, 0x0, 0x82020000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.652359431s ago: executing program 1 (id=17076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.103524361s ago: executing program 1 (id=17087): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="644ee8", 0x3}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x1], 0x0, 0x0, 0x1}}, 0x40) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1.068572963s ago: executing program 4 (id=17090): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 950.406893ms ago: executing program 4 (id=17094): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="f5201a6b6542be6cbad26e239346ffe3dbc7125e4eb0daba2e9ba73337e45b1a2c2828afbe1d99c856f2d7c9b91364a83e3c477d5e9569cf8787de2fd830003be5c3bbb4a246c4e13764c6e255ef511c263c70adb80380cc2b3247fb61ebddd2b945820fc646375953f1322be813b875bf64256ac7a8debe881f8352dc9fd70b9473bf07932110a5d1a94144b2ab0b4cd92458041eef085b29b5c115df0d7db2bea67006c66b64015fc980343e5ff451373afc63f2ae21d63cddeb3b0c53bbb4e0e31663f5b1b53de22517869df6114ac9047ee98a692b4f0e3e7cfc4e42368f217cc705f2bc5d10454ab30eda651c6ee29f0cc5a6ca7b384949955785844742121b5734a8cf3f3fe1d3e5c2085da26a028ba6c84d5cbce6afbe13cbb179d4c251e1d2d68e8c7d9c34eee698ceeb6e40aed55c62c45d8c7fcb2cfe95ce261238ca5c4458647ed7a001788e991e3d2ecfc77bedec164efda9e4a5d5f03043628fd8b5f906371c52e7de2e760b820dce5c3629610a48a036cd54f23ec3ef274f8da724f45c482505864c87359d4411cad79d7434c9a9d79323410b671880a344b933a47d735abd0e63308cf7f6e15790a50ccbcce072526952c763775066125af0fcde57ba3c514301aef17391c76adfc2419829a88e0d91b947d278cd03d94ce98ec639a6163eaa9755b1813685080ce588251fbd4240a7f65cdc1074503b0fe49b24996e52c6899ac90014d9a58566e841bcac357ed59f7e7274b6e94f7a526a5b420c5d6ababab7e7f8ba6ef6f3455a5aed80f4aaadb58fb38f725d524b4fd63238dc7936d62e81ef46bb7346d7f55c4fdbe7606b1053f6faf6d80612311823efe1e6522fd5bbb77c52c868362f263e56ea1447b612d681828561adefdd28fb855fd81f27e2698cc02bbcf7d653cf8dc9eea252f2b1f48c0d2ab70ece454daf9b5829d7106eb8ca8807eebd07d1bf6af6a4523577db893995778759e1be294aea8edb9226a9acbd44f98f60641f87195521491e621b10cc2032434f319e76743601a0bcc99fb3636389172a790e25260de7cb58961f9ad44d16c7604402bbca8cf82be528a64107c0dd114fd3458c0f1e97888c1c739dc678b43b202c603946cb5720a1e7331282a48afb12b461c41b6fd92b97c6960ac9f664f509b02c8267d722f372b007befada669d4cc36fb931763ffd8744b10e78cb849d40f88d190778a70f902faa4f34cae0b9e163b59b1bae96a933afecbc6a768f1d7ae20bf2771f28c1a3d333ae0b6f691d2f985e1ed6d0e1c29d7db36234b9bec18a1ee98b9ae90e4706d1c952f6059cc4d64bfc14152a88443f260d179c705df71e006a60981fefaa8a51c9c368680b830967b01b60734b9924335d7700b083bd7e87b3ad2f3d497e914368a15c5456d08861fb7513e96acb49935dc3f46fcaa297cdbdc759cb8a5a2515a482ca60440da8b7d5a8c79659d99e3892f9086b372d78622d3689267652c4dd60754cb8eb45028b0c237adff5ffaeaf78ed5a541c57feeb014a53e2a98042d5712d5f7a779b7a12bc120b8cf6df35b258fe1ad7ebdbee88d25355560fad504dce4bd878df5e43c55e765ac324dd8d65ce29c2a93f9e085bb51ff75dbbf314ed6aa3a36330fd146d28654c659f1c6c5089c3619be1c7707be835500fb15bf873ab35517b743207621346db75d16fb21624c04ceddda2d607642004f611db7414e1c593ef38c62e4d27a8b7833436609c284a46edc9b973e790aba0bf4c6bc0069ce9372c6c7b93d15740771ddf9c704338f4af870c649ecdaeab106b1242dbb74c284bfb5d87aa688d27befe1dc0d1019fde1842e89eee67e11f925672ebff47e4503e02fa989297e9461d540000b5e0ed2d957efc3b77a10181597c7fb2c94e62db50e46c46d10c1127573bae01166170467b7641d7e07dcd879f04b8dc08dcf460bef8e83aae33151a72eddf9ccac4eb95c48cb4008ba3fea542b2e3c6c4c07850cd4ca551536a20d18ed18852baaaf7339908583aae41f08f3c6f5811cd730e849dc8382e8bdf3519ab900d38a0a9822400d619b52a957b1bbe8384619e5d65588a2ca6bf068ca27fce9aa0448a60d04b3b230db3a939409ec7df45d70a944b34baaf0bf951d205667c8281e9e87468d1a2f6edf79a7d5df12a8564e56d3a952efa4c4be2b09be2c3d699b05268e8cfe998a9f37b8714c92647ada8a8129bc4084624c6f1059f834193deef961f5dbfe500c1bf781f45441984d52800d81d814a82ec4f859c7217146ac447c8462612574a1a8603148ed46bf3e195d417bbe43aa6bf83ea8fb525941ef8dd56149bd6fdcbf626609ddb699e40e83fa4792b39384eb0d1b78c97c6798537b192753caed3a5eaa4a33d54b473b43851cb282cd857ae11a4d34c6b53fc1c334f8ec42672295b88a326b65d338a70bb3d5d866ff55a9ce0345c7a890cd6dee36012c76d862802c9cbaf1abbab99dc898eb432f50474ae6c202121d19f8d0467fcb1279457accf9b777c75390756762dde795d94aaba4c1729f559adc33966fbf517fc91fae21bd8ef22e914bbe6bae774246749ad63d8d16f21c9aebc80a97be408443ae60af610dd3ad9964b2401e049b09dbb46f6126d3d534a7786bb3663719943111231d18e51ed534b1e28807c062280924e5d53a8a1316ca2b5936911a267d5b799fd7d8e5e725271d5b8eb90e3dd9ef9eb1400c68eb8f88622f548af7df4846758cfb74aeb48588d1820f504e97ae1d818feb7113175b04e7c0bae6239672c987253cdf0e9845119f3f200d40f586ab986312144c3525acb78a5784f5707217105bae651e0c000792f4e88c1a924d33fbe5474a71b1e193a8d3a6a65dc485f2a299e7d07a6cf621260dcfc5d79c9243618f57507ca025baa53b3e684667f33dfb8ab9065cc548ad5c881bceb5d937462ea850fc197f5ae8c9489815b2cff853895e987e684195a094d8460ee52ef9d8f6fa0ba01092f0cdffcc7a682ca3125058ce9ed0064d7d0a868b0419b49ded3d93f0c7e1d700288350ff4c130cf6e0b507ce6064623294536c8fc4011b9b40299bfe02144806411d5b36997db26033a5ddeecd6bf3faefd3ca0a6cb70b0561106b2dabb06cf88bb6fa283e43dcd2fa1f33063183e15450385ba6fed4436502211d3181351db793a76ae11ebde2b23f340b7522748a4602ec469b88eb7f3d1325baa536ab8096c58c6f2b4863a541f618112643e194a5873cdae4172bb3005743782d8af22dbf23ab60e7d0f4ceb3ef0c46e23e1ecee1839558bc5c146dd97aba7651dfd2401fb8aec4eda71b1b15a2570130f0f5ff489ad4355a708a6eafa9752eb5c9f7a83f43c3e3b317e7e68133573f585fc27c5cfc0d90016f5be8594e1cfac36b24570cebb5be46d3f5917441ccadc355536b8b9b455b87667edd802b77178251afdefe9a4b5f0ff7e59fa5cf9b449e18bc4bf8154f15913128a2584f7d60a3c09f467233783690df422d3d9982200eb604ec2ef50830bba6f82e8b91823808fac0b07bc0e51a671c32dea0f2f9aa2cfbbc91cdf54b719b6009ce750bab1680cac77398b2a619d550161fa70e7e8b86fb535f8797fca75708efba7f0d95da4ac235d9de68a50c998a72c0c2da90f511ea456f776c881b8416b894cd835ad13c62b035ef4d220a66c86c1c00de534690e42d064bf4fff946af98aec3f9490d6f0586e891d272a4bfb776ab84bd693af6526c4b09beab2460634d929bcc61cf75b041f067e7b503ecd6a80934e169ebb0ac926a85b53cb1d7b63eee6abcd9e250834da6e4da23b3b3d90c2f726861760ca14b78d5e895eb7fa2e8b39f724a0371412b1c94c6a42f1beeae2328e353971531bddcda730b6a0d90f7c58e3ce5953cf5a6c9e3fd657c92fe4b5b8b0b659353944afa5c69c309527d6d4039e78c675c8d2f527fbcb2b765864fed987f785221862bd7deb66e6676ddebdd19cf4cb26869f562928dc98088bb69281615fc6a2dafc466e70ff9ea1a411e1a3ba3f94ed7d429796afc9f0c95da19a4db691c36407985e5f08473dd8afd9de88b2c26b6ebd2ea35177238e18dfc36d579a80074c06f5cca60cf6d64d27eeb121c6c8e5e09aa3165c101068cb748694695e803540d947f33740d30616001448173ef57bbcb82fcb213348a2a58e2d14480b1ce1ad346729631b91f7e343e37abd8e787274ff4598acc99cc58f3578979e6e6a1926333bd8818a256b58e67c6f77145ee26f24998cab89021423e03326c175adaa8ea905122553948ece311cbcb770222e7f4f373398497c8c301480d031fc53c2a7018d91777cec253e89e28a82d15e01c12c0ccae1b56ecff35b90b19769bff4b786d4624679abe852780e9e4b9985e0564ee604027dc2a60f65d2fcf1d354e163a8465f77eb67e2a6c9fa89ea0768f9cf117fd1ea8969e592da11d34f6f9b7adb24f3261dd14199fea6da6b5d31f825b3706492b3305cbf6ef553fadfcad51a0484f09a8d2491c8a937fdd36d9e0b94fb6bdca6e80a6079739cc1d455fd735e89fe89938a7132dc0c9f181953dd9cf2d106a3f1478b46ddf35aae9bc6932227d79ac4f534967be2cbc30fa254658b61752b534257fc10bd8db219ec394b41e7fe541f9086ce19d28e13d2b3c384745fc88ed0cb5ef414e23e8782f99307c49121a733875e9fb9c8559d8ad6bab256dde2bfdee4286c1419b80acf55dd09da71116c0fa902d8e89465c313c311f272a11cd17417372dc74e01f3ba1a9afd8bcb9fad57cde63ad59a6999caaa359e6e5b4216dd3b0bc8d310e28c8a1232cefcbd5070d0537097e370433bc1017b7b1c4efa694a25b4385bccbdf79affb0b6d203b3cefe637fd6f7b51f5ec297471c874a57145b254bd14b89fe62709c94ca3cae304739294c7b4a871768e11cb7a2db0aaeff4abbd00c70b4d4e5e8f8c6d34afe3d619404e20ccf628f7902c17ab1200644fe465751587800d59acb3abd1f8ad9cbd8bfa64c94c44fb3086fd21c046d7430a1faadbd9b1625ee70c1071bede890f1c07113aed9b1a35ab0fb823e2cb38d2ee6376800f63d28326ec3be129333e1024d17c46198e329779a79f4ee69b56374268fefdd29995e411052bcc92318c636aa9fa634f3e537712f720a52cd95d5472cdd6b4eb66bd1ed2c41cb37c615eb486855671d964ba46ee44eb61ffcb0b22b20632ce3222e4c3037f348d5dec196f9e2bcc2335284f5529e4de9e6b4b84fc559de63357bc8ca0a00c16bdea79372b13abb251fd4bc52f1f732811b65b4c51715da133b20caba229244060fdec0ad4c47fdf1963b6aa1acf998585c59867b5afcd08958dceb9937a97e87b2153f45970ca77e5524c5160c69963717630795e3a4768e2521617bc211926e5cb08edea70cae99c6d7eff4c1e041c7ab0d3473d6ceb3cbc24a9f45c5818896463360490911b1fb77a24aa3b394e3ee1155ea2fbc6686db2c715670dc9187b33f3051b4b894b616bdf7fb287113c315413d83e0540676fe9a48d523bef3280611165fb77c7bb33c0a087fc06e7702fc7d8ea4f7aa264c7ed332af03ae3e392bc0f96ec11e3bca6604ccb7941043fb043b4880de676efaf3f0fba185e90db8e8e6718058fd1d26c49d0a163264d4aaf7094d02d6898f75c6edf2e49edf7b0a645018220535e8694baa1e910df6e493c0812c2cbb16966cb22af208279947f9490f2f5d3a49596050604f920af8fa41c5a339609659f331f24fa0aec3787d052a02541137dd1ccdc30970a879e4a42e491137bb3cddf2c87ea6368bc4d9aad9089af50b71d56bd296d891ac2fbec84303486739a44850680353efa2203d7fcfa00d9cd81433adcad3e6aac009784b63a3b7aca58155b24274b2d41de998321bdf0229ce74a0c61a24d74ceb30d4ba766632c4a48d9db4e3b3334830b12f3136158fb16fa745c2ebad16b65b279d28332894755de3e7ae2aa88f9e2af8a46200c427540eb68907152ee7d53212b55c170ab67c47c884db89757b09dc035ea59fe2be1f384b3edef6925c399753832d32296100ca4e2699154d6ed86bc145e92d699e43c2269ed359a004aee75ac5e730dffec87f239328bc95cc281a9c0bba661f6d36ac11d1151851c70cf39fbbabff2190b619294db73008e3d32acb0b29aa3d28d1e50784dbe35eb911d838bd710336612170666ea5f42b72c32be4d83c4ff61987acd1b1f0cebe281806af8ad4b6e7041c31bcb8a93cf0f44826821b0bb9c053468b4d8d034c084ba1c8dfcad9fac6ec379da5425492dc6f770000000050bd9a930ead9e4faf5b557eebe4461320476a7ae12b0dcc9d171f6d2737b824db7259e62915779dc5e8a08bc69c0c68784202aa3462bdff06af76bdf9f106dd6228211534c4433717947dfaca4b7b61a21d706217e3718b5ccac40c3c4692bd59f222d0c2e98af1ff1919256d7b0540ed69b11f212a9598c7499ba634d1677ecf17517e207d40baed5aa0e25b7e70b6b16f6d6f0c36a146db0644ababd31bc50f5039b3bc4f12b603da2675e121b09fe92c69548dfb9df18d0e50c1387280b7bb1366bf5bbabfcef5557a05ce24df1a02f22f791e06c5e3e21e5fd6db7f2c90ffb83b154b0fd9866c46609dc10b274954caf80e83693f5581f23fd765a18aa4e294bbf7a8721015ea6a6e1ba64f79f6609924d43757fd0752024af79e296415b42de3428f14d9d89f84c2e076a0821cc8921fff677ec7b91178bcbd755ece28477a6bd01fd429d824ddfb62edcdab7c4495edc5a3d27826ea4bddaeacfa7cb17632cee0095ca55d3973812033d96ec5e5ed6880b3a998b4998fb7441e11dd060515bdbfd5aa32aac6ae1fceb8e92d7e8985949946a458ca2f69637de6b92410986f8fa5ba4b1598d8383fdbff2e004dee71500302e3e9270371b39237260bde0888702c7b2bcff69192bd381cfe59b197b9dbe5e2eee27b64c17e95a1dade453a6f29dc8bef1bdd34a92a5275972a2cb18f6f553f99c6098f50198b68cd35d2877d9cdd15074422b43b03170f23138dda44b62b5e161705405d2e9a007f8cc9ec7920d1a6e947ccc57b1a51a728fe1afcb84115fe48be15c894cce96391ab3cdc1bd9aa4cf58213c15d1a849c3f38c8ee34b208766129bbb493558c139f2bfc39df29fc73422127823fc9c993f20d9df9e0acaf0b1729437458e0a857ebfe4a373fd491952a475e9c391b7ee02b79554807c0f12293aa385a3c6b18bfbfc690a7aa9bc85d8adb705eac642ec8611ac62d09d2a6892cd671629d457c2191eb5940114113ed8cd4e8411d96200d3d66f947baa7915610c396402d38f109837d29c8e937fb6223a9d0d605a3d91312908fb5a7df36122c35f7e47855d526915c3a7cea432ca4524fcae3b5c6fbad196c1efef0d129d9b3f9d23104fc3c8a90dbcea0400311e51de50c5abb62fcbedf998ebc1cf23fd76bcc2aea2451f6d0d3b8fdd337ce8d24d7ce2a5b29318df58adb0006d4295c138b4b03060134802626e31a5da92b5a7a8677132523affbdc8d958b955eb4615370497429cd3767f2f708c2cadc233bc3e5efc8c837385749da08c6dd573e3b105ce459d659f790dcaf53c1d0b4d8e0c64b6bce15559e59e66b3b0b2695703e9bd5b1c5bb3c5b1028441391f8fbeadc032e890fe5e3be78569056d147a891f4bc85406e78f962b532eb436b0e047a7d3c88bb89455ffbf1da360207af5d827e9fbbedd8393a828a92382329ff444d9a8128c40e302453550426de4babcdee45108e79533b9747fd21b8f775a76e1d4d54a8a98a65ee3c183be34172877c26e600c89949ced85004d69c24d4fee6f87d2ff24900d41577c78dfbff698d438c0e26ebe15d7b75b49a5b2a5c627da3b13f6458aeff3f0a1944a339b4be5e13d58a71928bb77053beaf7b68568205b62f5a4a9b3c0fef441ede90f012047b0cf2228481fab85d94219ce9f417e4e2b6018b319270a6b6f0de93d0147842f582bd4e41f00720626be2b2f9116875ea4f92e380bcfc33058505ee0336e10c71a5abf6f32c72fe68c68c166454db8e101b3a271f04e4dda8947743e0ac408c73cff69c10e7c015c6b078bab0a1c7aab14a26df087b2b4c859e684aebadff5033d1ebd6c6589a27ac75a075e6ef801f5dece0dbd1e477bb70d2b8553a88b13e304e00735e183feab89edf469cb90c0a5bbf778809a9996f4e72b16417672cd97bdd1c0baa64ea2d782aea9d58ea357b54d06f316076b5c413417061b3c7485b534fcc8bf25d2adf043b47a3d47f0755fe6225bba7569fe672d3507c8e15f7139ef7f606c616c52733413befb248eee53c4a9a16f952ac56e18e221626c4f51eb90c1314167c9677a7eb7004b9b42fd6ec21dd38d5b9032c441166be3f8e9dfed39fb0e654ca3126003decf8e50bf8ace994e16fdbe3f53a36a11ed6f06d1bb8e54f574a83035eba379f2453f2346d11414cafbde87cb5d66b650a5e25ebaced402188c1b4b941e788e1af908fff3ef84c1dadef0550687f0b6aeef6063dc1c8c8efe09d611253efb4d288ea407ef3c043aacc3dfc19a18449b38fb97d9fc0bb67de3e1744f782d3a9d1fc449c3a902b1ec8789e336f731a51cc7fefc43736e04942167fbfdac9f15c5b3f921aaa3df0c9709c21339ce890cd4054828615f18fd12548258440a06dbec3d72719b3e9f5f9967525f90f16993cab09c9eab2b27b29c959c002dbb028cc96297d40822772c16b4b786cc57cd581c02f143d6e728eeac1ab4eca6170748002c0e2269611a2b402f9fa8190d9216b1e1b7de8f81074b8dbb665f0d69c52cf573d07ca0752fd6fe7da88dcf4a915ab1533f5686b766393fe9bf1aeef9d17414d1803708e61973dd205097eb1ed466c8dcfb2c7710caf9df713a11c774fd0469880534ae2ccd1e40216ffa145f0fc832b166896810a678f3a47dd24bc2e6835c16e405a444971068dbd47926f430871121be8f19c8ac4fd0a9e3ff7cd961f90f24265de455694cc291de76437953ac314b1791acbe96d3fcae4fa397287a02eac86f13c931f4d4f49ad52cf1db0efdf7027ee8e468d64d316a2208ae33d8fc3274861b41f2e064c99fbba37b7a0c46a3df8dc4589de7ac28df63ed697a48011c863049345c371f10f7d53a56947e348d07e4ff71eaaaf9aaa09bf1147b80d62a60dcec6d7dd4cbf52f2b0b89d2c7de1f16d63ccc0260b0982fcf105736b50001c19eda998426284713670aab21ce128a80b57920d8c3436edb859d4afd7ed835985b5bec01df5447e66ee8511b28671646e71c0669ab2203c4c9a020000279ba87f089d04924cb33ff82f59da9399ce3f20932c073289938e4e7101d357cce920a2aae72f94d6e1aaf9a3905f4da18a7ee849a39f0d1e83adc67ffab826490d4bfff1f80e8c2c180b08e013daf6d054be660390fc4f872b8d60f14951f05ac0dcb4c4281f71ac2d4cb4d68ffdfe8f5c43160d99ea0077486219bb9400a8fc1faacf12878379a7ea5eae2adbbe2871c1664bea1985d594963935019446d605a61ff79802e114a34610d002cf27e0f4b96c6ff880785307161813f48b68c6f9130a6faee6f332e77755fb68b68248ec113030575b1c262c2430c000d11b269ce4e98a32eea3af403630e83aeaaed1420c9fd66eadcf34d6d1fbe457c5216481ddaf6b397912630999fbc5298eab15ab3cce9de7741367264a4e30a61ff7f1d5e7e64290218d9f6f5c9898cd23ee1ac35ab8d3691bf3df31cef54c161bdf3093390ad2322b6f71f22199ac68c5eab4aa7523b4957202751b675fe82c9d42432c92c2fec148da6e5514e9d5f2618d5a616cdbc4a560b3e36eb6cb8baca3251d8e819ea8f552f07ecca0664e7ef22a3a6c11d023eade70f1b872cf58e89c625f561e4858877e39d324dd448b041e4435b676ce0e86de9045e8b9e8305ae60cb7a41c01ce2318af7f9fa011d24aac2b2d31360ce7b437c46df5756d94d1005a0359b57534c49d1e8e173ba183666a19ff6e6c63388250985249eb40f0f981a2bc34e8196e9c468b1bf329c4ac9cf5f19e46734b1238f99f1e6d8c95ecca9cfafc15c756bb4780b675ec9781bfdb583bd91a7df33ed49daec1d65d14f26d7cfadb9e1de06e922939e924b034e4d128cd66a2f7a87c9399c622922e6e33af68c5115053f42c519a054e295b5f8e420630dc116bb2562ac87a6402e4635bd6c6b95943820f86acd5f48ac519b06f1b0bf1c7a70d69e84c95600e017a67e64536197447b810c21cf86a9d09c37aaf6cc39333b414844ce883cec0ffb23e36d5560e9ff6922a9237a6503c72346ebebf57e59c13e7320f670e1826c802b9cc674b55284ddb061e6e38b16c58532497709028ccc4c000604d4a72b3255170a217ac411ea68e64fb3b63653b985abc42bf21629775a05812ef159992320c3cb93805bbebb250e2f9f92b2c8795c388fea24de5e70d45f8ad1764a6e39a1d588191f77fd7bd0408252c784deef806464edc1b4d3de83df34f1b615e10ba20948ca9f28c4f435163e1f5a6fdd0bc8ef397c25b7d704e1ff1dca065022b99778c05ad39f806c3f7ae4278b768eac09b7d317ec5e07db3fc5579a29fb42658ba66c68afb3b8401b2e09c13bc0652309b26cfab2febc3e96a6da6341e6e860468aca74caf06bfc576124594c3f123d5e987319862b0700bd257cff3ea8abff23ebf1a62e575741db2902761578de5c72f4d37bf9186c2391dfff0fcdf2969df27ac0c34d3f07feb0d1887de871e96916add75c15ce2f795749ceadacca94df5808a1629ccd906b3776e7c2a9e94393243de87656432ec21be389731be9821fc035859fffd503f9c8279bd4a36f3be1e3ba0beecaaf6ee44203d8b76c4ca97da38f63fd07ed7812601ab9095a77d52397ecc31819b91d3c28f639bda94c46a5d527abe34bc579338a4db395c57dbeec31a37685ee8121284b63583e026783e47d58deaad78a17e9a946ae7a3db89d8d78d9f37ee5861de7ca92e7335dade99819ecfd63770413b17de97bf403a6d97e163f7eead7d8c182b77cc3d0e0f28f30839445ef751bcf4f21b5803a4e8754fd9a3addb2553ad1d81879addbdc2668e5f2e15926ed805ce7b4ae01be9677c322d59d619cfc806a4946f59010aac481e49d0a0b2ccd0fbd88abf07d4912a081c81633f4a6e0e68eceee686d58a43c45d3bec1046d3bb8d7fc727dda7cfe22af174219bc8e928ca15ff9ce2c707bcea190f8fdeb86a2dc99d7ca81b78efdb0062f1967bb66132164d227e149aa52f39af5e763705373c864323a5885dc6061b5a2ee5501d0b1aa465d93052f29d033a750b1b9cc85fddc0cf168ddc62fb2d1570458d246906fbb689bc8ee3864901eb43f96c19482a7ba7a52fe08b241a32aa9a2774359132b5e1905a08ba37244265070f6d69a428a5834f10d9ba45f476f9e88e856ac223d8cf6ff04894faa2590ecd0a3f6938d661d8aecf6223ae99c414962a86fdc1c2599cee39e9f0153a57ed809bd90023c8d688cc1aa7b5eec5fcd01d07d00100", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x0, 0x1, 0x40000000000, 0x400000004, 0x40000000000002, 0xe767, 0x6, 0xe96, 0x8000, 0x0, r4, r2, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 807.569041ms ago: executing program 0 (id=17098): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400123a0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 799.55442ms ago: executing program 0 (id=17100): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(r2) r3 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316}) io_uring_enter(r3, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000), 0x8) 786.20973ms ago: executing program 1 (id=17102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x101, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 727.347885ms ago: executing program 0 (id=17103): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 667.207448ms ago: executing program 1 (id=17105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 608.034131ms ago: executing program 0 (id=17106): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 511.731332ms ago: executing program 3 (id=17108): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 511.168824ms ago: executing program 3 (id=17109): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x5392, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xd89}], 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 437.547937ms ago: executing program 3 (id=17110): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x2004c8c0, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}], 0x1, 0x400c404) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000310000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003f8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3d1d, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x20000003, 0x20002ff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 437.213516ms ago: executing program 0 (id=17111): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 382.192937ms ago: executing program 3 (id=17112): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x40084) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001"], 0x28}}, 0x80) 319.050502ms ago: executing program 1 (id=17113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x300, 0x0, 0xff, 0x3, 0x3, 0xe}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 63.411493ms ago: executing program 1 (id=17114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000001c0)={0xf, 0x2, 'client0\x00', 0x6, "2f26199f7fdd6188", "a392f7896cf01b60a97b5696d6de30b14a9b127e400445ccf5e8ca146ccdccef", 0x2, 0x9}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 63.09273ms ago: executing program 3 (id=17115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r2) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 10.158643ms ago: executing program 4 (id=17116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43b"], 0x340a) 407.663µs ago: executing program 0 (id=17117): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r2, &(0x7f00000002c0)=""/153, 0x99) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) 0s ago: executing program 3 (id=17118): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0x3, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) kernel console output (not intermixed with test programs): ic_socket permissive=1 [ 525.350027][ T40] audit: type=1400 audit(2000000472.891:49316): avc: denied { mount } for pid=7384 comm="syz.3.15444" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 525.425528][ T40] audit: type=1400 audit(2000000472.965:49317): avc: denied { mount } for pid=7388 comm="syz.3.15447" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 525.447446][ T40] audit: type=1400 audit(2000000473.003:49318): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=59054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 525.473237][ T40] audit: type=1400 audit(2000000473.022:49319): avc: denied { name_bind } for pid=7392 comm="syz.3.15448" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 525.516420][ T40] audit: type=1400 audit(2000000473.059:49320): avc: denied { create } for pid=7396 comm="syz.3.15450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 525.527700][ T40] audit: type=1400 audit(2000000473.068:49321): avc: denied { map } for pid=7398 comm="syz.8.15451" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=145540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 525.538157][ T40] audit: type=1400 audit(2000000473.068:49322): avc: denied { read write } for pid=7398 comm="syz.8.15451" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=145540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 525.553007][ T40] audit: type=1400 audit(2000000473.068:49323): avc: denied { write } for pid=7396 comm="syz.3.15450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 525.575370][ T40] audit: type=1400 audit(2000000473.106:49324): avc: denied { create } for pid=7400 comm="syz.3.15452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 525.747683][ T50] delete_channel: no stack [ 525.887584][ T7413] fuse: Bad value for 'fd' [ 526.098927][ T9] page_pool_release_retry() stalled pool shutdown: id 96, 1 inflight 60 sec [ 526.309670][ T7423] fuse: Bad value for 'fd' [ 526.411086][ T5946] Bluetooth: hci2: ACL packet too small [ 527.037869][ T7462] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.15480'. [ 527.060685][ T7464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7464 comm=syz.3.15481 [ 527.066664][ T7464] netlink: 'syz.3.15481': attribute type 1 has an invalid length. [ 527.095216][ T7464] bond5: (slave bridge1): making interface the new active one [ 527.098052][ T7464] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 527.638402][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 527.640867][ T39] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 527.643069][ T39] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 528.170555][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15491'. [ 528.176085][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15491'. [ 528.179979][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15491'. [ 528.184653][ T7490] Bluetooth: hci0: unsupported parameter 255 [ 528.186614][ T7490] Bluetooth: hci0: unsupported parameter 255 [ 528.189347][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.189367][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15491'. [ 528.189380][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15491'. [ 528.193065][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.193105][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.205045][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15491'. [ 528.206994][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.361393][ T7508] fuse: Bad value for 'fd' [ 528.645207][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15509'. [ 528.654122][ T7529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.029407][ T7543] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 529.035910][ T7543] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 529.215870][ T7567] usb usb7: usbfs: process 7567 (syz.9.15526) did not claim interface 7 before use [ 529.219313][ T7562] ref_ctr_offset mismatch. inode: 0xd0a offset: 0x0 ref_ctr_offset(old): 0x16 ref_ctr_offset(new): 0x0 [ 529.268155][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15528'. [ 529.272001][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15528'. [ 529.276618][ T7571] netlink: 'syz.9.15528': attribute type 11 has an invalid length. [ 529.416404][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15535'. [ 529.541879][ T7588] fuse: Bad value for 'fd' [ 529.579883][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15537'. [ 530.118699][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 530.121334][ T39] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 530.123729][ T39] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 530.253557][ T7609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 530.353903][ T1193] batman_adv: batadv0: IGMP Querier disappeared - multicast optimizations disabled [ 531.147904][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 531.147926][ T40] audit: type=1400 audit(2000000478.335:49417): avc: denied { create } for pid=7629 comm="syz.9.15553" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 531.158747][ T40] audit: type=1400 audit(2000000478.335:49418): avc: denied { map } for pid=7629 comm="syz.9.15553" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=146455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 531.167506][ T40] audit: type=1400 audit(2000000478.335:49419): avc: denied { read write } for pid=7629 comm="syz.9.15553" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=146455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 531.276089][ T40] audit: type=1400 audit(2000000478.447:49420): avc: denied { read } for pid=7633 comm="syz.3.15554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 531.499306][ T40] audit: type=1400 audit(2000000478.662:49421): avc: denied { unlink } for pid=7643 comm="syz.8.15559" name="#2d" dev="tmpfs" ino=3390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 531.506853][ T40] audit: type=1400 audit(2000000478.662:49422): avc: denied { mount } for pid=7643 comm="syz.8.15559" name="/" dev="overlay" ino=3386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 531.523523][ T40] audit: type=1400 audit(2000000478.681:49423): avc: denied { unmount } for pid=2084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 531.568849][ T40] audit: type=1400 audit(2000000478.718:49424): avc: denied { mount } for pid=7646 comm="syz.8.15560" name="/" dev="ramfs" ino=144085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 531.618025][ T40] audit: type=1400 audit(2000000478.774:49425): avc: denied { ioctl } for pid=7639 comm="syz.3.15557" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=144082 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 531.742554][ T40] audit: type=1400 audit(2000000478.877:49426): avc: denied { create } for pid=7655 comm="syz.8.15564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 532.418059][ T7059] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 532.579314][ T7059] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.584741][ T7059] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.590216][ T7059] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.595770][ T7059] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.600506][ T7059] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.610491][ T7059] usb 14-1: config 0 descriptor?? [ 532.684415][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 532.685064][ T39] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 532.689772][ T39] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 533.057273][ T7723] overlayfs: failed to clone upperpath [ 533.062209][ T7059] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 533.080242][ T7059] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 533.260203][ T7740] netlink: 'syz.8.15603': attribute type 1 has an invalid length. [ 533.265941][ T7740] netlink: 'syz.8.15603': attribute type 4 has an invalid length. [ 533.342841][ T6001] usb 14-1: USB disconnect, device number 9 [ 534.350320][ T7770] xfrm0 speed is unknown, defaulting to 1000 [ 534.353275][ T7770] lo speed is unknown, defaulting to 1000 [ 534.739758][ T6665] IPVS: ip_vs_send_async error -101 [ 534.945047][ T7793] syz.9.15624 (7793): drop_caches: 2 [ 535.123366][ T7809] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 535.335969][ T480] Bluetooth: hci4: command 0xfc11 tx timeout [ 535.339557][ T5946] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 535.533338][ T7824] xfrm0 speed is unknown, defaulting to 1000 [ 535.536113][ T7824] lo speed is unknown, defaulting to 1000 [ 536.184512][ T7862] kvm: kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 536.189242][ T7862] kvm: kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 536.506337][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 536.506355][ T40] audit: type=1400 audit(2000000483.339:49554): avc: denied { mount } for pid=7858 comm="syz.9.15652" name="/" dev="9p" ino=72117551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 536.550208][ T40] audit: type=1400 audit(2000000483.376:49555): avc: denied { connect } for pid=7864 comm="syz.2.15654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 536.558898][ T40] audit: type=1400 audit(2000000483.376:49556): avc: denied { read } for pid=7864 comm="syz.2.15654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 536.606232][ T40] audit: type=1400 audit(2000000483.433:49557): avc: denied { write } for pid=7864 comm="syz.2.15654" path="socket:[145047]" dev="sockfs" ino=145047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 536.661597][ T40] audit: type=1400 audit(2000000483.489:49558): avc: denied { add_name } for pid=7858 comm="syz.9.15652" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.682786][ T40] audit: type=1400 audit(2000000483.489:49559): avc: denied { create } for pid=7858 comm="syz.9.15652" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 536.692559][ T40] audit: type=1400 audit(2000000483.489:49560): avc: denied { associate } for pid=7858 comm="syz.9.15652" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 536.714652][ T40] audit: type=1400 audit(2000000483.489:49561): avc: denied { read append } for pid=7858 comm="syz.9.15652" name="cpuset.effective_cpus" dev="9p" ino=72117621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 536.725503][ T40] audit: type=1400 audit(2000000483.489:49562): avc: denied { open } for pid=7858 comm="syz.9.15652" path="/501/file0/cpuset.effective_cpus" dev="9p" ino=72117621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 536.734709][ T40] audit: type=1400 audit(2000000483.507:49563): avc: denied { write } for pid=7858 comm="syz.9.15652" name="cpuset.effective_cpus" dev="9p" ino=72117621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 537.373707][ T7897] ªªªªªª: renamed from wg2 (while UP) [ 537.524957][ T7902] __nla_validate_parse: 7 callbacks suppressed [ 537.524984][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15669'. [ 537.644086][ T54] libceph: connect (1)[c::]:6789 error -101 [ 537.646951][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 537.724546][ T54] libceph: connect (1)[c::]:6789 error -101 [ 537.726616][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 537.924888][ T54] libceph: connect (1)[c::]:6789 error -101 [ 537.926936][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 537.997776][ T54] libceph: connect (1)[c::]:6789 error -101 [ 538.002744][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 538.443435][ T7955] netlink: 'syz.8.15690': attribute type 4 has an invalid length. [ 538.451412][ T7955] netlink: 'syz.8.15690': attribute type 4 has an invalid length. [ 538.468722][ T54] libceph: connect (1)[c::]:6789 error -101 [ 538.471062][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 538.519213][ T7906] ceph: No mds server is up or the cluster is laggy [ 538.523757][ T7914] ceph: No mds server is up or the cluster is laggy [ 538.547759][ T54] libceph: connect (1)[c::]:6789 error -101 [ 538.549779][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 538.768814][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15697'. [ 538.787925][ T7970] gtp0: entered promiscuous mode [ 538.804271][ T7972] fuse: Bad value for 'fd' [ 538.878892][ T7980] netlink: 'syz.9.15702': attribute type 1 has an invalid length. [ 538.990061][ T7980] bond1: (slave geneve2): making interface the new active one [ 538.995185][ T7980] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 538.998348][ T1193] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.014330][ T1193] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.019415][ T1193] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.044765][ T1193] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.360463][ T8015] netlink: 'syz.2.15714': attribute type 4 has an invalid length. [ 539.999671][ T8032] netlink: 'syz.9.15721': attribute type 4 has an invalid length. [ 540.197182][ T8048] o2cb: This node has not been configured. [ 540.199531][ T8048] o2cb: Cluster check failed. Fix errors before retrying. [ 540.202496][ T8048] (syz.3.15728,8048,3):user_dlm_register:674 ERROR: status = -22 [ 540.205149][ T8048] (syz.3.15728,8048,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 540.493012][ T8074] netlink: 750 bytes leftover after parsing attributes in process `syz.2.15741'. [ 540.501412][ T8075] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.15740'. [ 540.623771][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15746'. [ 540.749210][ T8099] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 541.652511][ T8164] netlink: 'syz.3.15781': attribute type 39 has an invalid length. [ 541.805875][ T8180] overlayfs: statfs failed on './file0' [ 541.873470][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 541.873483][ T40] audit: type=1400 audit(2000000488.362:49716): avc: denied { read write } for pid=8177 comm="syz.9.15785" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 541.888888][ T40] audit: type=1400 audit(2000000488.362:49717): avc: denied { open } for pid=8177 comm="syz.9.15785" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 541.904465][ T40] audit: type=1400 audit(2000000488.362:49718): avc: denied { append } for pid=8177 comm="syz.9.15785" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.927336][ T40] audit: type=1400 audit(2000000488.409:49719): avc: denied { recv } for pid=5917 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 542.027630][ T40] audit: type=1400 audit(2000000488.502:49720): avc: denied { create } for pid=8182 comm="syz.8.15789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 542.038412][ T40] audit: type=1400 audit(2000000488.512:49721): avc: denied { bind } for pid=8182 comm="syz.8.15789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 542.048040][ T40] audit: type=1400 audit(2000000488.512:49722): avc: denied { listen } for pid=8182 comm="syz.8.15789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 542.056467][ T40] audit: type=1400 audit(2000000488.512:49723): avc: denied { connect } for pid=8182 comm="syz.8.15789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 542.067346][ T40] audit: type=1400 audit(2000000488.512:49724): avc: denied { setopt } for pid=8182 comm="syz.8.15789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 542.084253][ T40] audit: type=1400 audit(2000000488.559:49725): avc: denied { create } for pid=8184 comm="syz.8.15790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 542.182927][ T8193] fuse: Bad value for 'fd' [ 542.238650][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15795'. [ 542.246927][ T8197] netlink: 7 bytes leftover after parsing attributes in process `syz.8.15795'. [ 542.668493][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15808'. [ 542.673112][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15808'. [ 542.966099][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15816'. [ 543.039419][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15816'. [ 543.133459][ T8251] fuse: Bad value for 'fd' [ 543.199430][ T676] udevd[676]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 543.766968][ T8304] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15840'. [ 543.817071][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.826930][ T8307] bridge_slave_1: left allmulticast mode [ 543.829456][ T8307] bridge_slave_1: left promiscuous mode [ 543.832179][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.844542][ T8307] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 544.075671][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x8000000f [ 544.080970][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x800000b8 [ 544.085728][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000028 [ 544.090288][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000078 [ 544.095494][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000068 [ 544.100699][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x80000038 [ 544.105890][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x800000a8 [ 544.110961][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x800000f8 [ 544.116168][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x800000e8 [ 544.120879][ T8322] kvm: kvm [8321]: vcpu0, guest rIP: 0x912e Unhandled WRMSR(0xc0010000) = 0x800000b8 [ 544.292401][ T8334] SELinux: unknown common r [ 544.294814][ T8334] SELinux: failed to load policy [ 544.341997][ T8340] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 544.344781][ T8340] overlayfs: failed to set xattr on upper [ 544.346765][ T8340] overlayfs: ...falling back to redirect_dir=nofollow. [ 544.352317][ T8340] overlayfs: ...falling back to index=off. [ 544.354687][ T8340] overlayfs: ...falling back to uuid=null. [ 544.356746][ T8340] overlayfs: maximum fs stacking depth exceeded [ 544.395000][ T8344] netlink: 'syz.8.15857': attribute type 4 has an invalid length. [ 544.404896][ T8344] netlink: 'syz.8.15857': attribute type 4 has an invalid length. [ 545.519195][ T8420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 545.723876][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.547253][ T3007] bridge0: port 3(syz_tun) entered disabled state [ 546.575339][ T3007] syz_tun (unregistering): left allmulticast mode [ 546.578032][ T3007] syz_tun (unregistering): left promiscuous mode [ 546.580315][ T3007] bridge0: port 3(syz_tun) entered disabled state [ 546.602557][ T60] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.614142][ T60] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.617199][ T60] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 546.620561][ T60] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.623595][ T60] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.635537][ T60] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 546.658486][ T60] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.662594][ T60] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.666228][ T60] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 546.669618][ T60] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.672669][ T60] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.675766][ T60] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 546.679879][ T8445] syz_tun: entered allmulticast mode [ 546.703928][ T8444] syz_tun: left allmulticast mode [ 546.895909][ T480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.904702][ T480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.909139][ T480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.918139][ T480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.921599][ T480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.937191][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.941827][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.944637][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.948273][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.956290][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.099301][ T8458] xfrm0 speed is unknown, defaulting to 1000 [ 547.107141][ T8458] lo speed is unknown, defaulting to 1000 [ 547.440136][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 547.440155][ T40] audit: type=1400 audit(2000000493.572:49943): avc: denied { ioctl } for pid=8468 comm="syz.3.15912" path="socket:[149108]" dev="sockfs" ino=149108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.518564][ T40] audit: type=1400 audit(2000000493.638:49944): avc: denied { module_request } for pid=8458 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 547.533546][ T40] audit: type=1400 audit(2000000493.638:49945): avc: denied { accept } for pid=8447 comm="syz.9.15904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 547.541434][ T40] audit: type=1400 audit(2000000493.657:49946): avc: denied { watch } for pid=8470 comm="syz.2.15913" path="/354/file0" dev="tmpfs" ino=1883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 547.576317][ T40] audit: type=1400 audit(2000000493.657:49947): avc: denied { watch_sb watch_reads } for pid=8470 comm="syz.2.15913" path="/354/file0" dev="tmpfs" ino=1883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 547.585755][ T40] audit: type=1326 audit(2000000493.657:49948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.15913" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71af39c799 code=0x0 [ 547.608428][ T40] audit: type=1400 audit(2000000493.703:49949): avc: denied { getopt } for pid=8475 comm="syz.3.15914" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.608659][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 547.699884][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.703133][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.706735][ T8458] bridge_slave_0: entered allmulticast mode [ 547.710078][ T8458] bridge_slave_0: entered promiscuous mode [ 547.715602][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.718641][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.722174][ T8458] bridge_slave_1: entered allmulticast mode [ 547.725467][ T8458] bridge_slave_1: entered promiscuous mode [ 547.754624][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.761769][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.791786][ T8458] team0: Port device team_slave_0 added [ 547.797516][ T8458] team0: Port device team_slave_1 added [ 547.835416][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.838437][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.851360][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.859285][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.862013][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.873637][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.880326][ T40] audit: type=1400 audit(2000000493.984:49950): avc: denied { name_bind } for pid=8485 comm="syz.3.15917" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 547.916394][ T8458] hsr_slave_0: entered promiscuous mode [ 547.920865][ T8458] hsr_slave_1: entered promiscuous mode [ 547.924191][ T8458] debugfs: 'hsr0' already exists in 'hsr' [ 547.926538][ T40] audit: type=1400 audit(2000000494.021:49951): avc: denied { name_bind } for pid=8487 comm="syz.9.15918" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 547.926817][ T8458] Cannot create hsr debugfs directory [ 547.961656][ T40] audit: type=1400 audit(2000000494.059:49952): avc: denied { read write } for pid=8491 comm="syz.9.15920" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 547.975865][ T8492] input: syz0 as /devices/virtual/input/input52 [ 548.232051][ T8458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.371684][ T8458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.591745][ T8458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.683858][ T8458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.175295][ T8458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 549.181393][ T8458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 549.188759][ T8458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 549.190871][ T5946] Bluetooth: hci2: command tx timeout [ 549.204087][ T8458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 549.329160][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.344187][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.353924][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.356885][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.371430][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.374183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.495701][ T8556] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 549.574217][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.631782][ T8565] netlink: 'syz.2.15946': attribute type 1 has an invalid length. [ 549.634434][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15946'. [ 549.785045][ T8458] veth0_vlan: entered promiscuous mode [ 549.796526][ T8458] veth1_vlan: entered promiscuous mode [ 549.828619][ T8458] veth0_macvtap: entered promiscuous mode [ 549.835526][ T8458] veth1_macvtap: entered promiscuous mode [ 549.856658][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.865941][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.876854][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.881041][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.885069][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.890643][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.923989][ T8599] binder: 8598:8599 ioctl c0306201 0 returned -14 [ 550.162317][ T8604] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.15953'. [ 550.166423][ T8604] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 550.217881][ T7059] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 550.220389][ T7059] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 550.486012][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.489025][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.529321][ T1193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.535345][ T1193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.575173][ T8616] policy can only be matched on NF_INET_PRE_ROUTING [ 550.575186][ T8616] unable to load match [ 550.715528][ T8624] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 552.276016][ T480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.283106][ T480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.288819][ T480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.310752][ T480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.314003][ T480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 552.350514][ T8685] xfrm0 speed is unknown, defaulting to 1000 [ 552.355980][ T8685] lo speed is unknown, defaulting to 1000 [ 552.442605][ T8693] all: renamed from bridge_slave_0 (while UP) [ 552.768195][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15999'. [ 552.818744][ T40] kauditd_printk_skb: 181 callbacks suppressed [ 552.818763][ T40] audit: type=1400 audit(2000000498.595:50134): avc: denied { create } for pid=8711 comm="syz.4.16000" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 552.845685][ T40] audit: type=1400 audit(2000000498.595:50135): avc: denied { ioctl } for pid=8711 comm="syz.4.16000" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=151561 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 552.877106][ T40] audit: type=1400 audit(2000000498.652:50136): avc: denied { module_request } for pid=8685 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 552.951952][ T8685] chnl_net:caif_netlink_parms(): no params data found [ 552.989063][ T40] audit: type=1400 audit(2000000498.764:50137): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=59054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 553.076582][ T8685] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.079715][ T8685] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.084387][ T8685] bridge_slave_0: entered allmulticast mode [ 553.088709][ T8685] bridge_slave_0: entered promiscuous mode [ 553.092067][ T8685] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.095846][ T8685] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.099113][ T8685] bridge_slave_1: entered allmulticast mode [ 553.104022][ T8685] bridge_slave_1: entered promiscuous mode [ 553.139168][ T8685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.156169][ T8685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.165248][ T40] audit: type=1400 audit(2000000498.923:50138): avc: denied { getopt } for pid=8721 comm="syz.4.16002" lport=39599 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 553.176163][ T8685] team0: Port device team_slave_0 added [ 553.179791][ T8685] team0: Port device team_slave_1 added [ 553.198027][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.202001][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.210346][ T40] audit: type=1400 audit(2000000498.960:50139): avc: denied { allowed } for pid=8723 comm="syz.4.16003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 553.211041][ T8685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.217340][ T40] audit: type=1400 audit(2000000498.960:50140): avc: denied { map } for pid=8723 comm="syz.4.16003" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=151562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 553.217375][ T40] audit: type=1400 audit(2000000498.960:50141): avc: denied { read write } for pid=8723 comm="syz.4.16003" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=151562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 553.224299][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.243602][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.253917][ T8685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.278172][ T8685] hsr_slave_0: entered promiscuous mode [ 553.280604][ T8685] hsr_slave_1: entered promiscuous mode [ 553.282931][ T8685] debugfs: 'hsr0' already exists in 'hsr' [ 553.285488][ T8685] Cannot create hsr debugfs directory [ 553.311480][ T40] audit: type=1400 audit(2000000499.063:50142): avc: denied { create } for pid=8726 comm="syz.4.16004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 553.328405][ T40] audit: type=1400 audit(2000000499.063:50143): avc: denied { setopt } for pid=8726 comm="syz.4.16004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 553.411199][ T8685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 553.527749][ T8685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 553.627402][ T8685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 553.731045][ T8685] bond0: (slave netdevsim0): Releasing backup interface [ 553.766860][ T8685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 553.839623][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16019'. [ 553.993353][ T8685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 553.999736][ T8685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.007125][ T8685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 554.012954][ T8685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 554.029780][ T8756] kvm_pr_unimpl_wrmsr: 4 callbacks suppressed [ 554.029797][ T8756] kvm: kvm [8755]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 554.103565][ T8685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.140806][ T8685] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.152913][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.155625][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.166328][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.169433][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.201763][ T8685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.344028][ T8685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.382744][ T8685] veth0_vlan: entered promiscuous mode [ 554.388833][ T8685] veth1_vlan: entered promiscuous mode [ 554.419833][ T8685] veth0_macvtap: entered promiscuous mode [ 554.427203][ T8685] veth1_macvtap: entered promiscuous mode [ 554.446250][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.462334][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.475906][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.480350][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.487171][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.491058][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.502610][ T5946] Bluetooth: hci0: command tx timeout [ 554.677341][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.680888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.722246][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.725661][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.888524][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15992'. [ 554.942328][ T8792] macvlan0: entered promiscuous mode [ 555.301986][ T8813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8813 comm=syz.1.16036 [ 555.310009][ T8813] netlink: 'syz.1.16036': attribute type 1 has an invalid length. [ 555.729594][ T8847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.935778][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16051'. [ 556.717803][ T5946] Bluetooth: hci0: command tx timeout [ 557.382410][ T8908] kvm_intel: kvm [8907]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x4a8b [ 557.410275][ T8908] kvm: kvm [8907]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xe935 [ 557.431907][ T8908] kvm: kvm [8907]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x18ba [ 557.606678][ T8935] binder: 8934:8935 ioctl c0306201 200000000180 returned -22 [ 557.696908][ T8937] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 558.218878][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 558.218891][ T40] audit: type=1400 audit(2000000503.647:50312): avc: denied { read write } for pid=8966 comm="syz.2.16090" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 558.239765][ T40] audit: type=1400 audit(2000000503.647:50313): avc: denied { open } for pid=8966 comm="syz.2.16090" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 558.250478][ T40] audit: type=1400 audit(2000000503.647:50314): avc: denied { mounton } for pid=8966 comm="syz.2.16090" path="/404/file0" dev="tmpfs" ino=2141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 558.260682][ T40] audit: type=1400 audit(2000000503.647:50315): avc: denied { mount } for pid=8966 comm="syz.2.16090" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 558.329689][ T40] audit: type=1400 audit(2000000503.749:50316): avc: denied { mounton } for pid=8972 comm="syz.4.16092" path="/40/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 558.339122][ T40] audit: type=1400 audit(2000000503.749:50317): avc: denied { unlink } for pid=8972 comm="syz.4.16092" name="#4b" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 558.350788][ T40] audit: type=1400 audit(2000000503.749:50318): avc: denied { mount } for pid=8972 comm="syz.4.16092" name="/" dev="overlay" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 558.363030][ T40] audit: type=1400 audit(2000000503.787:50319): avc: denied { unmount } for pid=8458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 558.392011][ T40] audit: type=1400 audit(2000000503.815:50320): avc: denied { name_bind } for pid=8974 comm="syz.1.16094" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 558.401776][ T40] audit: type=1400 audit(2000000503.815:50321): avc: denied { node_bind } for pid=8974 comm="syz.1.16094" saddr=::ffff:0.0.0.0 src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 558.588625][ T8991] overlayfs: failed to clone upperpath [ 558.761361][ T9003] netlink: 'syz.3.16106': attribute type 1 has an invalid length. [ 558.764862][ T9003] netlink: 'syz.3.16106': attribute type 4 has an invalid length. [ 558.768886][ T9003] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.16106'. [ 558.940752][ T5946] Bluetooth: hci0: command tx timeout [ 559.232364][ T9033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 559.238073][ T9033] block device autoloading is deprecated and will be removed. [ 560.222321][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16124'. [ 560.848573][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16131'. [ 560.903487][ T9066] overlay: filesystem on ./bus not supported [ 561.017079][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16135'. [ 561.164177][ T5946] Bluetooth: hci0: command tx timeout [ 562.017272][T29754] IPVS: starting estimator thread 0... [ 562.071556][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16143'. [ 562.136958][ T9092] IPVS: using max 45 ests per chain, 108000 per kthread [ 562.398052][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16144'. [ 562.629872][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16148'. [ 562.667178][ T9115] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 562.677134][ T9115] overlayfs: failed to set xattr on upper [ 562.679297][ T9115] overlayfs: ...falling back to redirect_dir=nofollow. [ 562.692932][ T9115] overlayfs: ...falling back to index=off. [ 562.695661][ T9115] overlayfs: ...falling back to uuid=null. [ 562.747559][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16154'. [ 562.818340][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16158'. [ 562.883542][ T9131] macvlan2: entered promiscuous mode [ 563.107500][ T9151] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 563.110278][ T9151] overlayfs: failed to set xattr on upper [ 563.112219][ T9151] overlayfs: ...falling back to redirect_dir=nofollow. [ 563.114673][ T9151] overlayfs: ...falling back to metacopy=off. [ 563.116868][ T9151] overlayfs: ...falling back to index=off. [ 563.119439][ T9151] overlayfs: ...falling back to uuid=null. [ 563.430736][ T357] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 563.596783][ T357] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.603110][ T357] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.606949][ T357] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.610460][ T357] usb 9-1: Product: syz [ 563.612026][ T357] usb 9-1: Manufacturer: syz [ 563.613974][ T357] usb 9-1: SerialNumber: syz [ 563.629586][ T40] kauditd_printk_skb: 144 callbacks suppressed [ 563.629604][ T40] audit: type=1400 audit(2000000508.707:50466): avc: denied { node_bind } for pid=9165 comm="syz.2.16172" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 563.701346][ T40] audit: type=1400 audit(2000000508.782:50467): avc: denied { create } for pid=9168 comm="syz.2.16173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 563.708035][ T40] audit: type=1400 audit(2000000508.782:50468): avc: denied { write } for pid=9168 comm="syz.2.16173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 563.717969][ T40] audit: type=1400 audit(2000000508.791:50469): avc: denied { create } for pid=9170 comm="syz.3.16174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.726151][ T40] audit: type=1400 audit(2000000508.801:50470): avc: denied { ioctl } for pid=9170 comm="syz.3.16174" path="socket:[154408]" dev="sockfs" ino=154408 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.740325][ T40] audit: type=1400 audit(2000000508.810:50471): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 563.752251][ T40] audit: type=1400 audit(2000000508.819:50472): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=59054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 563.786832][ T40] audit: type=1400 audit(2000000508.857:50473): avc: denied { create } for pid=9174 comm="syz.2.16176" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 563.811937][ T6000] libceph: connect (1)[c::]:6789 error -101 [ 563.816120][ T6000] libceph: mon0 (1)[c::]:6789 connect error [ 563.840696][ T40] audit: type=1400 audit(2000000508.913:50474): avc: denied { ioctl } for pid=9153 comm="syz.4.16167" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 563.859607][ T40] audit: type=1400 audit(2000000508.932:50475): avc: denied { ioctl } for pid=9174 comm="syz.2.16176" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=152090 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 563.924246][ T9177] ceph: No mds server is up or the cluster is laggy [ 564.075131][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16181'. [ 564.271949][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16186'. [ 564.724957][ T357] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 564.727796][ T357] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 564.731294][ T357] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 565.164192][ T357] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 565.193157][ T357] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 565.204492][ T357] usb 9-1: USB disconnect, device number 7 [ 565.208883][ T357] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 565.614667][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16212'. [ 565.660308][ T9271] netlink: 'syz.1.16214': attribute type 1 has an invalid length. [ 565.678781][ T9271] bond2: entered promiscuous mode [ 565.681353][ T9271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.705307][ T9275] xfrm0 speed is unknown, defaulting to 1000 [ 565.751591][ T9275] lo speed is unknown, defaulting to 1000 [ 565.761308][ T9271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.764642][ T9271] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 565.769002][ T9271] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 565.777737][ T9271] bond2: (slave vxcan3): making interface the new active one [ 565.780803][ T9271] vxcan3: entered promiscuous mode [ 565.785984][ T9271] vxcan3: left promiscuous mode [ 566.522559][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16224'. [ 566.640284][ T54] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 566.648997][ T9301] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 566.800232][ T54] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 566.803023][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.808001][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.813223][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.818630][ T54] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.822831][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.827957][ T54] usb 6-1: config 0 descriptor?? [ 567.272183][ T54] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 567.281500][ T54] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x148000) [ 567.549344][T29754] usb 6-1: USB disconnect, device number 9 [ 568.046438][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16231'. [ 568.249193][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16234'. [ 568.269302][ T9325] team0: Port device team_slave_0 removed [ 568.457887][ T9328] netlink: 'syz.4.16235': attribute type 12 has an invalid length. [ 568.461126][ T9328] netlink: 'syz.4.16235': attribute type 29 has an invalid length. [ 568.464416][ T9328] netlink: 148 bytes leftover after parsing attributes in process `syz.4.16235'. [ 568.469753][ T9328] netlink: 'syz.4.16235': attribute type 2 has an invalid length. [ 568.473080][ T9328] netlink: 23 bytes leftover after parsing attributes in process `syz.4.16235'. [ 569.117456][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 569.117479][ T40] audit: type=1400 audit(2000000513.842:50590): avc: denied { read write } for pid=9337 comm="syz.1.16240" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 569.131415][ T40] audit: type=1400 audit(2000000513.842:50591): avc: denied { open } for pid=9337 comm="syz.1.16240" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 569.143714][ T40] audit: type=1400 audit(2000000513.852:50592): avc: denied { ioctl } for pid=9337 comm="syz.1.16240" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 569.210892][ T9341] netlink: 10 bytes leftover after parsing attributes in process `syz.1.16241'. [ 569.301701][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 569.305151][ T1115] ata1: failed to read log page 10h (errno=-5) [ 569.307532][ T1115] ata1.00: exception Emask 0x1 SAct 0x4020 SErr 0x0 action 0x0 [ 569.311138][ T1115] ata1.00: irq_stat 0x41000000 [ 569.313156][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 569.315659][ T1115] ata1.00: cmd 61/18:28:86:18:10/00:00:00:00:00/40 tag 5 ncq dma 12288 out [ 569.315659][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 569.322998][ T1115] ata1.00: status: { DRDY } [ 569.326059][ T1115] ata1.00: error: { ABRT } [ 569.328172][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 569.331068][ T1115] ata1.00: cmd 60/40:70:a6:9a:03/0a:00:00:00:00/40 tag 14 ncq dma 1343488 in [ 569.331068][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 569.339295][ T1115] ata1.00: status: { DRDY } [ 569.341189][ T1115] ata1.00: error: { ABRT } [ 569.345494][ T1115] ata1.00: configured for UDMA/100 [ 569.348959][ T1115] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 569.353829][ T1115] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 569.356901][ T1115] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 569.360300][ T1115] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 9a a6 00 0a 40 00 [ 569.364977][ T1115] blk_print_req_error: 137 callbacks suppressed [ 569.364991][ T1115] I/O error, dev sda, sector 236198 op 0x0:(READ) flags 0x80700 phys_seg 79 prio class 2 [ 569.372289][ T1115] ata1: EH complete [ 569.380280][ T9343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 569.382513][ T9343] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 569.385465][ T9343] vhci_hcd vhci_hcd.0: Device attached [ 569.394855][ T40] audit: type=1400 audit(2000000514.104:50593): avc: denied { execmem } for pid=9342 comm="syz.1.16242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 569.403520][ T9344] vhci_hcd: connection closed [ 569.403948][ T60] vhci_hcd vhci_hcd.1: stop threads [ 569.410742][ T60] vhci_hcd vhci_hcd.1: release socket [ 569.413146][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 569.507554][ T9309] fido_id[9309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 569.729646][ T40] audit: type=1400 audit(2000000514.422:50594): avc: denied { read write } for pid=9346 comm="syz.4.16243" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 569.743917][ T40] audit: type=1400 audit(2000000514.422:50595): avc: denied { open } for pid=9346 comm="syz.4.16243" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 569.752776][ T40] audit: type=1400 audit(2000000514.422:50596): avc: denied { mounton } for pid=9346 comm="syz.4.16243" path="/65/file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 569.761598][ T40] audit: type=1400 audit(2000000514.422:50597): avc: denied { mount } for pid=9346 comm="syz.4.16243" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 569.973677][ T40] audit: type=1400 audit(2000000514.647:50598): avc: denied { write } for pid=9350 comm="syz.1.16244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 569.980737][ T40] audit: type=1400 audit(2000000514.647:50599): avc: denied { read } for pid=9350 comm="syz.1.16244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 570.046875][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16245'. [ 570.058740][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 570.062586][ T480] Bluetooth: hci4: command 0x1003 tx timeout [ 570.150985][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16247'. [ 570.219325][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16249'. [ 570.374581][ T9376] netlink: 188 bytes leftover after parsing attributes in process `syz.2.16252'. [ 570.378922][ T9376] netlink: 188 bytes leftover after parsing attributes in process `syz.2.16252'. [ 571.490021][ T9458] xfrm0 speed is unknown, defaulting to 1000 [ 571.494390][ T9458] lo speed is unknown, defaulting to 1000 [ 571.845976][ T9463] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 573.895677][ T9398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.978080][ T9479] __nla_validate_parse: 2 callbacks suppressed [ 573.978102][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16280'. [ 574.008548][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16283'. [ 574.106355][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16286'. [ 574.295370][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16293'. [ 574.535409][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 574.535426][ T40] audit: type=1400 audit(2000000518.912:50681): avc: denied { create } for pid=9515 comm="syz.4.16296" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 574.590832][ T40] audit: type=1400 audit(2000000518.959:50682): avc: denied { bpf } for pid=9517 comm="syz.2.16297" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 574.610137][ T40] audit: type=1400 audit(2000000518.959:50683): avc: denied { map_create } for pid=9517 comm="syz.2.16297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 574.640256][ T40] audit: type=1400 audit(2000000519.006:50684): avc: denied { name_connect } for pid=9519 comm="syz.2.16298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 574.673014][ T40] audit: type=1400 audit(2000000519.043:50685): avc: denied { setopt } for pid=9519 comm="syz.2.16298" lport=41783 faddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 574.792673][ T40] audit: type=1400 audit(2000000519.146:50686): avc: denied { map } for pid=9527 comm="syz.4.16301" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=158753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 574.803991][ T40] audit: type=1400 audit(2000000519.146:50687): avc: denied { read write } for pid=9527 comm="syz.4.16301" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=158753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 574.815123][ T40] audit: type=1400 audit(2000000519.146:50688): avc: denied { read } for pid=9527 comm="syz.4.16301" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 574.826299][ T40] audit: type=1400 audit(2000000519.146:50689): avc: denied { open } for pid=9527 comm="syz.4.16301" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 574.838242][ T40] audit: type=1400 audit(2000000519.146:50690): avc: denied { ioctl } for pid=9527 comm="syz.4.16301" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 575.097129][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16308'. [ 575.302090][ T9553] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 575.304599][ T9553] overlayfs: failed to set xattr on upper [ 575.307388][ T9553] overlayfs: ...falling back to redirect_dir=nofollow. [ 575.311619][ T9553] overlayfs: ...falling back to index=off. [ 575.314421][ T9553] overlayfs: ...falling back to uuid=null. [ 575.316986][ T9553] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 575.465769][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16318'. [ 575.591320][ T9570] netlink: 880 bytes leftover after parsing attributes in process `syz.3.16319'. [ 575.641545][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16321'. [ 575.647053][ T9574] netlink: 'syz.3.16320': attribute type 1 has an invalid length. [ 575.701956][ T9574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 575.706262][ T9573] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 575.716318][ T9576] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 575.808221][ T9584] io-wq is not configured for unbound workers [ 575.933829][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16329'. [ 576.047690][ T9599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16331'. [ 576.051558][ T9599] netlink: 'syz.3.16331': attribute type 7 has an invalid length. [ 576.054854][ T9599] netlink: 'syz.3.16331': attribute type 8 has an invalid length. [ 577.030433][ T9651] netlink: 'syz.3.16354': attribute type 1 has an invalid length. [ 577.077302][ T9651] bond7: entered promiscuous mode [ 577.079724][ T9651] 8021q: adding VLAN 0 to HW filter on device bond7 [ 577.173063][ T9653] bond7: (slave bridge8): making interface the new active one [ 577.175980][ T9653] bridge8: entered promiscuous mode [ 577.181069][ T9653] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 577.929788][ T9690] sctp: [Deprecated]: syz.2.16371 (pid 9690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.929788][ T9690] Use struct sctp_sack_info instead [ 577.969814][ T7059] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 578.010553][ T9696] netlink: 'syz.2.16374': attribute type 5 has an invalid length. [ 578.143437][ T7059] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.151422][ T7059] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.158838][ T7059] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.162530][ T7059] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.168802][ T9676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 578.178891][ T7059] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.472359][ T357] usb 9-1: USB disconnect, device number 8 [ 579.771875][ T9779] netlink: 'syz.3.16409': attribute type 10 has an invalid length. [ 579.779861][ T9779] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 579.784252][ T9779] team0: Failed to send options change via netlink (err -105) [ 579.789621][ T9779] team0: Port device netdevsim0 added [ 580.144205][ T40] kauditd_printk_skb: 159 callbacks suppressed [ 580.144225][ T40] audit: type=1400 audit(2000000524.160:50850): avc: denied { write } for pid=9785 comm="syz.4.16411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 580.207979][ T40] audit: type=1400 audit(2000000524.216:50851): avc: denied { create } for pid=9787 comm="syz.4.16412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 580.215544][ T40] audit: type=1400 audit(2000000524.216:50852): avc: denied { bind } for pid=9787 comm="syz.4.16412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 580.270622][ T40] audit: type=1400 audit(2000000524.282:50853): avc: denied { execute_no_trans } for pid=9789 comm="syz.4.16413" path="/102/file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 580.359385][ T9792] __nla_validate_parse: 10 callbacks suppressed [ 580.359402][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16414'. [ 580.368719][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16414'. [ 580.375496][ T40] audit: type=1400 audit(2000000524.384:50854): avc: denied { read } for pid=9791 comm="syz.4.16414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 580.469884][ T40] audit: type=1400 audit(2000000524.459:50855): avc: denied { ioctl } for pid=9793 comm="syz.4.16415" path="socket:[159995]" dev="sockfs" ino=159995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.531050][ T40] audit: type=1400 audit(2000000524.525:50856): avc: denied { create } for pid=9797 comm="syz.1.16417" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 580.538789][ T40] audit: type=1400 audit(2000000524.525:50857): avc: denied { ioctl } for pid=9797 comm="syz.1.16417" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=156526 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 580.611601][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16419'. [ 580.717849][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16420'. [ 580.747936][ T40] audit: type=1400 audit(2000000524.721:50858): avc: denied { create } for pid=9807 comm="syz.3.16422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 580.755802][ T40] audit: type=1400 audit(2000000524.731:50859): avc: denied { name_bind } for pid=9807 comm="syz.3.16422" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 581.499555][ T9843] netlink: 'syz.1.16436': attribute type 10 has an invalid length. [ 581.514492][ T9843] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 581.518527][ T9843] team0: Failed to send options change via netlink (err -105) [ 581.522751][ T9843] team0: Port device netdevsim0 added [ 581.986131][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16440'. [ 582.009743][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16442'. [ 582.013427][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16440'. [ 582.317545][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16450'. [ 582.371061][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16451'. [ 582.622138][ T357] libceph: connect (1)[c::]:6789 error -101 [ 582.625493][ T357] libceph: mon0 (1)[c::]:6789 connect error [ 582.723248][ T9900] ceph: No mds server is up or the cluster is laggy [ 583.171581][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16470'. [ 583.182203][ T9932] netlink: 'syz.3.16471': attribute type 1 has an invalid length. [ 583.216174][ T9932] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 583.219637][ T9932] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 583.224598][ T9932] bond8: (slave ip6gre1): making interface the new active one [ 583.228458][ T9932] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 583.371793][ T9937] SELinux: failed to load policy [ 583.414207][ T9942] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 583.416626][ T9942] overlayfs: failed to set xattr on upper [ 583.418657][ T9942] overlayfs: ...falling back to redirect_dir=nofollow. [ 583.421594][ T9942] overlayfs: ...falling back to index=off. [ 583.427280][ T9942] overlayfs: ...falling back to uuid=null. [ 583.430280][ T9942] overlayfs: ...falling back to xino=off. [ 583.433653][ T9942] overlayfs: conflicting lowerdir path [ 583.730182][ T9957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.862344][ T9961] netlink: 'syz.4.16483': attribute type 1 has an invalid length. [ 583.904718][ T9961] bond1: (slave geneve2): making interface the new active one [ 583.909599][ T9961] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 583.913344][ T106] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.924695][ T106] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.934525][ T9961] bond1 (unregistering): (slave geneve2): Releasing active interface [ 584.013426][ T9961] bond1 (unregistering): Released all slaves [ 584.039437][ T106] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 584.043060][ T106] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 584.105623][ T9979] netlink: 'syz.1.16491': attribute type 1 has an invalid length. [ 584.158894][ T9979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.165951][ T9979] bond3: (slave bond4): making interface the new active one [ 584.171423][ T9979] bond3: (slave bond4): Enslaving as an active interface with an up link [ 584.197817][ T9979] bond3: entered allmulticast mode [ 584.200442][ T9979] bond4: entered allmulticast mode [ 584.470811][T10011] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 584.473845][T10011] overlayfs: failed to set xattr on upper [ 584.478135][T10011] overlayfs: ...falling back to redirect_dir=nofollow. [ 584.485392][T10011] overlayfs: ...falling back to index=off. [ 584.491145][T10011] overlayfs: ...falling back to uuid=null. [ 584.511886][T10011] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 584.918012][T10048] 0xfffffffffffffffd-0x000000020000 : "" [ 584.923267][T10048] mtd: partition "" is out of reach -- disabled [ 584.947824][T10048] ftl_cs: FTL header not found. [ 585.090235][ T6001] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 585.252734][ T6001] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 585.255408][ T6001] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 585.259629][ T6001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 585.265072][ T6001] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 585.271112][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 585.275572][ T6001] usb 9-1: Product: syz [ 585.276996][ T6001] usb 9-1: Manufacturer: syz [ 585.278767][ T6001] usb 9-1: SerialNumber: syz [ 585.287025][ T6001] usb 9-1: config 0 descriptor?? [ 585.293948][ T6001] hub 9-1:0.0: bad descriptor, ignoring hub [ 585.297511][ T6001] hub 9-1:0.0: probe with driver hub failed with error -5 [ 585.303245][ T6001] usb 9-1: selecting invalid altsetting 0 [ 585.561133][ T40] kauditd_printk_skb: 246 callbacks suppressed [ 585.561149][ T40] audit: type=1400 audit(2000000529.230:51106): avc: denied { execmem } for pid=10080 comm="syz.3.16532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 585.652720][ T40] audit: type=1400 audit(2000000529.314:51107): avc: denied { write } for pid=10085 comm="syz.3.16534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 585.788203][ T40] audit: type=1400 audit(2000000529.436:51108): avc: denied { read write } for pid=10043 comm="syz.4.16517" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 585.797830][ T40] audit: type=1400 audit(2000000529.436:51109): avc: denied { open } for pid=10043 comm="syz.4.16517" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 585.808820][ T40] audit: type=1400 audit(2000000529.436:51110): avc: denied { ioctl } for pid=10043 comm="syz.4.16517" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 585.938698][ T40] audit: type=1400 audit(2000000529.576:51111): avc: denied { create } for pid=10093 comm="syz.3.16538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 585.955845][T10044] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 585.967091][ T40] audit: type=1400 audit(2000000529.613:51112): avc: denied { recv } for pid=30548 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 585.981970][ T40] audit: type=1400 audit(2000000529.623:51113): avc: denied { unmount } for pid=8685 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 586.039934][ T40] audit: type=1400 audit(2000000529.669:51114): avc: denied { read write } for pid=10098 comm="syz.1.16539" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 586.051378][ T40] audit: type=1400 audit(2000000529.669:51115): avc: denied { open } for pid=10098 comm="syz.1.16539" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 586.324978][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.355968][T10044] usb 9-1: failed to restore interface 0 altsetting 251 (error=-71) [ 586.365122][ T357] usb 9-1: USB disconnect, device number 9 [ 587.492284][T10168] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 587.506124][T10168] macsec2: entered promiscuous mode [ 587.508491][T10168] macsec2: entered allmulticast mode [ 587.522317][T10166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 587.534130][T10164] mtd partition "" doesn't have enough space: 0x20003 < 0x6000000000000, disabled [ 587.563416][T10164] ftl_cs: FTL header not found. [ 588.929464][T10240] kvm: Disabled LAPIC found during irq injection [ 590.136524][T10282] __nla_validate_parse: 12 callbacks suppressed [ 590.136548][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16614'. [ 590.149403][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16614'. [ 590.997545][T10297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16620'. [ 591.011072][T10297] ip6gre2: entered promiscuous mode [ 591.013968][T10297] ip6gre2: entered allmulticast mode [ 591.029136][T10297] netlink: 'syz.3.16620': attribute type 6 has an invalid length. [ 591.032470][T10297] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16620'. [ 591.085923][T10299] netlink: 'syz.3.16621': attribute type 1 has an invalid length. [ 591.116599][T10299] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.136966][T10299] bond9: entered allmulticast mode [ 591.173086][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 591.173104][ T40] audit: type=1400 audit(2000000534.468:51265): avc: denied { mount } for pid=10301 comm="syz.3.16622" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 591.187734][ T40] audit: type=1400 audit(2000000534.487:51266): avc: denied { search } for pid=10301 comm="syz.3.16622" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 591.197650][ T40] audit: type=1400 audit(2000000534.496:51267): avc: denied { search } for pid=10301 comm="syz.3.16622" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 591.206369][ T40] audit: type=1400 audit(2000000534.496:51268): avc: denied { read open } for pid=10301 comm="syz.3.16622" path="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 591.236950][ T40] audit: type=1400 audit(2000000534.534:51269): avc: denied { create } for pid=10303 comm="syz.4.16623" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 591.245756][ T40] audit: type=1400 audit(2000000534.534:51270): avc: denied { read write } for pid=10303 comm="syz.4.16623" name="file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 591.254652][ T40] audit: type=1400 audit(2000000534.534:51271): avc: denied { open } for pid=10303 comm="syz.4.16623" path="/146/file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 591.265080][ T40] audit: type=1400 audit(2000000534.543:51272): avc: denied { execmem } for pid=10303 comm="syz.4.16623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 591.277504][ T40] audit: type=1400 audit(2000000534.543:51273): avc: denied { cmd } for pid=10303 comm="syz.4.16623" path="/146/file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 591.306559][ T40] audit: type=1400 audit(2000000534.599:51274): avc: denied { unlink } for pid=8458 comm="syz-executor" name="file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 592.033416][T10319] overlayfs: failed to clone upperpath [ 592.174042][T10308] cgroup: fork rejected by pids controller in /syz4 [ 592.681747][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16640'. [ 593.119990][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16650'. [ 593.874596][T10422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16659'. [ 594.100195][T10437] netlink: 228 bytes leftover after parsing attributes in process `syz.3.16666'. [ 594.104325][T10437] netlink: 228 bytes leftover after parsing attributes in process `syz.3.16666'. [ 594.151226][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16667'. [ 594.155137][T10439] netlink: 'syz.4.16667': attribute type 7 has an invalid length. [ 594.159134][T10439] netlink: 'syz.4.16667': attribute type 8 has an invalid length. [ 594.386923][T10453] mkiss: ax0: crc mode is auto. [ 594.542104][T10463] netlink: 'syz.3.16677': attribute type 3 has an invalid length. [ 595.087389][T10485] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 595.090687][T10485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 595.095149][T10485] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 595.602443][T10508] __nla_validate_parse: 1 callbacks suppressed [ 595.602456][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16696'. [ 595.609534][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16696'. [ 595.945706][T10528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 595.957600][T10528] xt_hashlimit: max too large, truncated to 1048576 [ 596.262069][T10538] ref_ctr increment failed for inode: 0x37a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888031bfc980 [ 596.550223][ T40] kauditd_printk_skb: 174 callbacks suppressed [ 596.550238][ T40] audit: type=1400 audit(2000000539.510:51449): avc: denied { create } for pid=10546 comm="syz.3.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.566330][ T40] audit: type=1400 audit(2000000539.510:51450): avc: denied { read write } for pid=10545 comm="syz.4.16714" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 596.578146][ T40] audit: type=1400 audit(2000000539.510:51451): avc: denied { open } for pid=10545 comm="syz.4.16714" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 596.594293][ T40] audit: type=1400 audit(2000000539.510:51452): avc: denied { mount } for pid=10545 comm="syz.4.16714" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 596.606396][ T40] audit: type=1400 audit(2000000539.510:51453): avc: denied { bind } for pid=10546 comm="syz.3.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.614918][ T40] audit: type=1400 audit(2000000539.510:51454): avc: denied { listen } for pid=10546 comm="syz.3.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.615761][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16716'. [ 596.625866][ T40] audit: type=1400 audit(2000000539.510:51455): avc: denied { connect } for pid=10546 comm="syz.3.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.628710][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16716'. [ 596.638367][ T40] audit: type=1400 audit(2000000539.510:51456): avc: denied { write } for pid=10546 comm="syz.3.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.653930][ T40] audit: type=1400 audit(2000000539.510:51457): avc: denied { accept } for pid=10546 comm="syz.3.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.663512][ T40] audit: type=1400 audit(2000000539.510:51458): avc: denied { read } for pid=10546 comm="syz.3.16715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.905944][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16724'. [ 596.910920][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16724'. [ 596.932317][T10572] overlayfs: failed to clone upperpath [ 596.995331][T10574] overlayfs: failed to clone upperpath [ 597.233603][T10588] netlink: 136 bytes leftover after parsing attributes in process `syz.1.16731'. [ 597.271638][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16734'. [ 597.317479][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16734'. [ 597.704615][T10616] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 598.002069][T10633] netlink: 277 bytes leftover after parsing attributes in process `syz.4.16751'. [ 598.061000][T10635] binder: 10634:10635 unknown command 0 [ 598.063575][T10635] binder: 10634:10635 ioctl c0306201 200000000080 returned -22 [ 598.496221][T10655] netlink: 'syz.1.16761': attribute type 1 has an invalid length. [ 598.514693][T10655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 598.524046][T10658] overlayfs: failed to clone upperpath [ 598.529543][T10655] bond5: (slave dummy0): making interface the new active one [ 598.533818][T10655] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 599.292463][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x328 [ 599.306389][T10700] overlayfs: failed to clone upperpath [ 599.931231][T10729] uprobe: syz.4.16791:10729 failed to unregister, leaking uprobe [ 601.003015][T10761] netlink: 'syz.4.16804': attribute type 1 has an invalid length. [ 601.056520][T10761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.064133][T10761] bond1: (slave bond2): making interface the new active one [ 601.067214][T10761] bond1: (slave bond2): Enslaving as an active interface with an up link [ 601.088468][T10761] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 601.098752][T10761] __nla_validate_parse: 4 callbacks suppressed [ 601.098771][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16804'. [ 601.105078][T10761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.144483][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16805'. [ 601.149140][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16805'. [ 601.228881][T10767] Bluetooth: MGMT ver 1.23 [ 601.425049][T10771] tipc: Failed to remove unknown binding: 66,0,0/0:3428720113/3428720114 [ 601.431037][T10771] tipc: Failed to remove unknown binding: 66,0,0/0:3428720113/3428720114 [ 602.103104][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 602.103124][ T40] audit: type=1400 audit(2000000544.701:51692): avc: denied { create } for pid=10780 comm="syz.4.16813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 602.108351][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16813'. [ 602.115099][ T40] audit: type=1400 audit(2000000544.701:51693): avc: denied { ioctl } for pid=10780 comm="syz.4.16813" path="socket:[164477]" dev="sockfs" ino=164477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 602.136463][T10781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.288040][ T40] audit: type=1400 audit(2000000544.870:51694): avc: denied { read } for pid=10783 comm="syz.4.16814" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 602.301593][ T40] audit: type=1400 audit(2000000544.870:51695): avc: denied { open } for pid=10783 comm="syz.4.16814" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 602.345872][T10784] kvm: pic: non byte write [ 602.350015][T10784] kvm: pic: level sensitive irq not supported [ 602.350430][T10784] kvm: pic: non byte write [ 602.433522][T10694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.466095][ T40] audit: type=1400 audit(2000000545.038:51696): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=59054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 602.519272][ T40] audit: type=1400 audit(2000000545.094:51697): avc: denied { map_read map_write } for pid=10788 comm="syz.1.16816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.537384][T10793] netlink: 'syz.3.16818': attribute type 3 has an invalid length. [ 602.540491][T10793] netlink: 'syz.3.16818': attribute type 3 has an invalid length. [ 602.568549][ T40] audit: type=1400 audit(2000000545.132:51698): avc: denied { write } for pid=10794 comm="syz.1.16819" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 602.579189][ T40] audit: type=1400 audit(2000000545.150:51699): avc: denied { mount } for pid=10796 comm="syz.3.16820" name="/" dev="ramfs" ino=164546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 602.597823][T10795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.598756][T10791] kvm: pic: non byte write [ 602.605088][T10791] kvm: pic: non byte write [ 602.607886][T10791] kvm: pic: non byte write [ 602.610654][T10791] kvm: pic: non byte write [ 602.614144][T10791] kvm: pic: non byte write [ 602.617245][T10791] kvm: pic: non byte write [ 602.620388][T10791] kvm: pic: non byte write [ 602.623702][T10791] kvm: pic: non byte write [ 602.743879][ T40] audit: type=1400 audit(2000000545.300:51700): avc: denied { module_request } for pid=10801 comm="syz.3.16822" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 602.760417][T10802] xfrm0 speed is unknown, defaulting to 1000 [ 602.763833][T10802] lo speed is unknown, defaulting to 1000 [ 602.783917][ T40] audit: type=1400 audit(2000000545.337:51701): avc: denied { execute } for pid=10801 comm="syz.3.16822" name="file0" dev="tmpfs" ino=8377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 602.817747][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16824'. [ 603.907881][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16835'. [ 605.335190][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16846'. [ 605.503169][T10874] netlink: 'syz.4.16849': attribute type 3 has an invalid length. [ 605.614778][T10880] syzkaller0: create flow: hash 645591952 index 1 [ 605.637242][ T831] syzkaller0: tun_net_xmit 76 [ 605.674679][ T480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 605.683527][ T480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 605.688154][ T480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 605.694473][ T480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 605.699241][ T480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 605.740250][T10879] syzkaller0: delete flow: hash 645591952 index 1 [ 606.681502][T10903] overlayfs: failed to clone upperpath [ 607.634346][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 607.634366][ T40] audit: type=1400 audit(2000000549.874:51780): avc: denied { create } for pid=10907 comm="syz.1.16862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 607.682081][ T40] audit: type=1400 audit(2000000549.921:51781): avc: denied { create } for pid=10909 comm="syz.3.16863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 607.686371][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16863'. [ 607.693544][ T40] audit: type=1400 audit(2000000549.921:51782): avc: denied { connect } for pid=10909 comm="syz.3.16863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 607.701213][ T40] audit: type=1400 audit(2000000549.930:51783): avc: denied { setopt } for pid=10907 comm="syz.1.16862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 607.707811][ T40] audit: type=1400 audit(2000000549.930:51784): avc: denied { listen } for pid=10907 comm="syz.1.16862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 607.716428][ T40] audit: type=1400 audit(2000000549.930:51785): avc: denied { accept } for pid=10907 comm="syz.1.16862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 607.737205][ T40] audit: type=1400 audit(2000000549.968:51786): avc: denied { create } for pid=10912 comm="syz.3.16864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 607.752626][ T40] audit: type=1400 audit(2000000549.977:51787): avc: denied { module_request } for pid=10907 comm="syz.1.16862" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 607.774266][ T40] audit: type=1400 audit(2000000549.986:51788): avc: denied { dac_override } for pid=10914 comm="syz.3.16864" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 607.785115][ T40] audit: type=1400 audit(2000000550.014:51789): avc: denied { sys_module } for pid=10907 comm="syz.1.16862" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 607.919931][T10920] overlayfs: upper fs does not support tmpfile. [ 607.964137][ T5946] Bluetooth: hci4: command tx timeout [ 609.198338][T10883] xfrm0 speed is unknown, defaulting to 1000 [ 609.202246][T10883] lo speed is unknown, defaulting to 1000 [ 609.255762][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.263573][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.321572][T10949] tipc: Started in network mode [ 609.323450][T10949] tipc: Node identity c2119be0dd0f, cluster identity 4711 [ 609.328249][T10949] tipc: Enabled bearer , priority 0 [ 609.363680][T10949] syzkaller0: entered promiscuous mode [ 609.365899][T10949] syzkaller0: entered allmulticast mode [ 609.369587][T10949] tipc: Resetting bearer [ 609.405204][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.409419][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.425987][T10948] tipc: Resetting bearer [ 610.169918][ T5946] Bluetooth: hci4: command tx timeout [ 610.675838][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16884'. [ 612.393622][ T5946] Bluetooth: hci4: command tx timeout [ 612.522079][T10948] tipc: Disabling bearer [ 612.548303][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.553012][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.570745][ T39] tipc: Node number set to 522099680 [ 612.673523][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.678138][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.698368][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16889'. [ 612.723814][T10883] chnl_net:caif_netlink_parms(): no params data found [ 612.841786][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.855652][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.859121][T10883] bridge_slave_0: entered allmulticast mode [ 612.863715][T10883] bridge_slave_0: entered promiscuous mode [ 612.869077][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.872207][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.880838][T10883] bridge_slave_1: entered allmulticast mode [ 612.885945][T10883] bridge_slave_1: entered promiscuous mode [ 612.988334][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 612.988350][ T40] audit: type=1400 audit(2000000554.878:51868): avc: denied { read } for pid=11011 comm="syz.1.16895" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 613.007935][ T40] audit: type=1400 audit(2000000554.878:51869): avc: denied { open } for pid=11011 comm="syz.1.16895" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 613.016249][ T40] audit: type=1400 audit(2000000554.878:51870): avc: denied { ioctl } for pid=11011 comm="syz.1.16895" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 613.037821][ T40] audit: type=1400 audit(2000000554.935:51871): avc: denied { read } for pid=11011 comm="syz.1.16895" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 613.047979][ T40] audit: type=1400 audit(2000000554.935:51872): avc: denied { open } for pid=11011 comm="syz.1.16895" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 613.060562][ T40] audit: type=1400 audit(2000000554.944:51873): avc: denied { map } for pid=11011 comm="syz.1.16895" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 613.069903][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.075408][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.087306][ T40] audit: type=1400 audit(2000000554.972:51874): avc: denied { read } for pid=5640 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 613.088792][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.128029][T10883] team0: Port device team_slave_0 added [ 613.160968][T10883] team0: Port device team_slave_1 added [ 613.182396][T11013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.201260][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.204737][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.214923][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.220083][ T12] bridge_slave_1: left allmulticast mode [ 613.222476][ T12] bridge_slave_1: left promiscuous mode [ 613.225317][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.231391][ T12] bridge_slave_0: left allmulticast mode [ 613.234045][ T12] bridge_slave_0: left promiscuous mode [ 613.237162][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.266257][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.295016][ T40] audit: type=1400 audit(2000000555.168:51875): avc: denied { write } for pid=11016 comm="syz.1.16896" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 613.554433][ T40] audit: type=1400 audit(2000000555.412:51876): avc: denied { create } for pid=11020 comm="syz.1.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 613.570950][ T40] audit: type=1400 audit(2000000555.430:51877): avc: denied { bind } for pid=11020 comm="syz.1.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 613.615923][ T12] batman_adv: batadv0: Removing interface: gretap2 [ 613.960889][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.990513][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.030801][ T12] bond0 (unregistering): Released all slaves [ 614.036292][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.038922][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.048738][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.235258][T11039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.313293][T10883] hsr_slave_0: entered promiscuous mode [ 614.317068][T10883] hsr_slave_1: entered promiscuous mode [ 614.320215][T10883] debugfs: 'hsr0' already exists in 'hsr' [ 614.322510][T10883] Cannot create hsr debugfs directory [ 614.343007][T11039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.452912][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16908'. [ 614.487150][T11039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.591606][T11039] team0: Port device netdevsim0 removed [ 614.598236][T11039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.628004][ T5946] Bluetooth: hci4: command tx timeout [ 614.713816][T10883] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.811146][T10883] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.824843][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16911'. [ 614.926905][T10883] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.944850][ T12] hsr_slave_0: left promiscuous mode [ 614.947525][ T12] hsr_slave_1: left promiscuous mode [ 614.956189][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.960791][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.966459][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.968873][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.984309][ T12] veth1_macvtap: left promiscuous mode [ 614.986707][ T12] veth0_macvtap: left promiscuous mode [ 614.989036][ T12] veth1_vlan: left promiscuous mode [ 614.993626][ T12] veth0_vlan: left promiscuous mode [ 614.996773][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16911'. [ 615.255738][ T12] team0 (unregistering): Port device team_slave_1 removed [ 615.271087][ T12] team0 (unregistering): Port device team_slave_0 removed [ 615.412571][T10983] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.424613][T10883] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.455415][ T106] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.483163][ T106] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.506499][ T106] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.560905][T11078] netlink: 'syz.1.16914': attribute type 1 has an invalid length. [ 615.588566][T11078] 8021q: adding VLAN 0 to HW filter on device bond6 [ 615.608515][T11078] vlan2: entered allmulticast mode [ 615.610346][T11078] bond6: entered allmulticast mode [ 615.628800][T11078] bond6: (slave geneve2): making interface the new active one [ 615.631874][T11078] geneve2: entered allmulticast mode [ 615.639043][T11078] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 615.757898][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16916'. [ 615.839150][T10883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.869470][T10883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.876452][T10883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.891237][T10883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 615.897676][ T5946] Bluetooth: hci0: Malformed HCI Event [ 615.993354][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.004031][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.010370][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.012753][T10983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.022240][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.025398][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.164411][T11124] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 616.183069][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.226112][T10883] veth0_vlan: entered promiscuous mode [ 616.236311][T10883] veth1_vlan: entered promiscuous mode [ 616.261425][T10883] veth0_macvtap: entered promiscuous mode [ 616.268128][T10883] veth1_macvtap: entered promiscuous mode [ 616.290099][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.301863][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.331883][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.334851][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.358893][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.363596][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.653048][T11135] netlink: 'syz.1.16926': attribute type 5 has an invalid length. [ 616.698560][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.701066][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.734718][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.743989][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.875097][T11145] netlink: 'syz.1.16929': attribute type 1 has an invalid length. [ 616.901189][T11145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 616.984594][T11145] bond7: (slave veth11): Enslaving as an active interface with a down link [ 616.996932][T11152] vlan3: entered allmulticast mode [ 616.999981][T11152] bond7: entered allmulticast mode [ 617.007487][T11152] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 617.196657][T11159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.213808][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16934'. [ 617.215596][T11159] bond2: (slave ip6gretap1): speed changed to 0 on port 1 [ 617.222907][T11159] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 617.235450][T11163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11163 comm=syz.0.16934 [ 617.321419][T11169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 617.349699][ T106] bond0: (slave bond_slave_0): interface is now down [ 617.352829][ T106] bond0: (slave bond_slave_1): interface is now down [ 617.370943][ T106] bond0: (slave wlan1): interface is now down [ 617.388664][ T106] bond0: now running without any active interface! [ 617.841126][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16948'. [ 618.097142][T11206] binder: 11205:11206 ioctl c0306201 2000000001c0 returned -14 [ 618.355058][ T40] kauditd_printk_skb: 237 callbacks suppressed [ 618.355074][ T40] audit: type=1400 audit(2000000559.902:52115): avc: denied { create } for pid=11220 comm="syz.4.16959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 618.384906][ T40] audit: type=1400 audit(2000000559.911:52116): avc: denied { read } for pid=11222 comm="syz.0.16960" dev="nsfs" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 618.397032][ T40] audit: type=1400 audit(2000000559.911:52117): avc: denied { open } for pid=11222 comm="syz.0.16960" path="net:[4026532951]" dev="nsfs" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 618.407065][ T40] audit: type=1400 audit(2000000559.911:52118): avc: denied { bpf } for pid=11222 comm="syz.0.16960" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.415997][ T40] audit: type=1400 audit(2000000559.911:52119): avc: denied { perfmon } for pid=11222 comm="syz.0.16960" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.423388][ T40] audit: type=1400 audit(2000000559.911:52120): avc: denied { prog_run } for pid=11222 comm="syz.0.16960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 618.430101][ T40] audit: type=1400 audit(2000000559.939:52121): avc: denied { sys_admin } for pid=11220 comm="syz.4.16959" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 618.437722][ T40] audit: type=1400 audit(2000000559.967:52122): avc: denied { mounton } for pid=11227 comm="syz.0.16962" path="/13/bus" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 618.445991][ T40] audit: type=1400 audit(2000000559.967:52123): avc: denied { unlink } for pid=11227 comm="syz.0.16962" name="#76" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 618.466218][ T40] audit: type=1400 audit(2000000559.967:52124): avc: denied { mount } for pid=11227 comm="syz.0.16962" name="/" dev="overlay" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 618.626840][T11238] ref_ctr increment failed for inode: 0x219b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801b8ce200 [ 618.740875][ T106] bond0: (slave bond_slave_0): interface is now down [ 618.747507][ T106] bond0: (slave bond_slave_1): interface is now down [ 618.758845][ T106] bond0: now running without any active interface! [ 618.791191][ T208] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 618.797015][ T208] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 618.815113][ T208] bond0: active interface up! [ 619.205896][ T60] bond0: (slave bond_slave_0): interface is now down [ 619.209266][ T60] bond0: (slave bond_slave_1): interface is now down [ 619.233747][ T60] bond0: now running without any active interface! [ 619.247188][ T106] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 619.251479][ T106] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 619.260618][ T106] bond0: active interface up! [ 619.604068][T11282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16983'. [ 619.644912][T11282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11282 comm=syz.4.16983 [ 619.840434][T11287] bond5: (slave dummy0): Releasing active interface [ 619.882243][T11287] batman_adv: batadv0: Adding interface: dummy0 [ 619.885124][T11287] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.895109][T11287] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 620.256333][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16989'. [ 620.261542][T11296] kvm: Disabled LAPIC found during irq injection [ 620.278794][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16991'. [ 620.299061][T11303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11303 comm=syz.0.16991 [ 620.313079][T11299] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11299 comm=syz.4.16989 [ 620.352529][T11305] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 620.355844][T11305] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 620.389416][T11307] syzkaller0: entered promiscuous mode [ 620.392472][T11307] syzkaller0: entered allmulticast mode [ 620.455012][T11313] netlink: 'syz.3.16996': attribute type 1 has an invalid length. [ 620.491159][T11313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 620.517091][T11313] vlan4: entered allmulticast mode [ 620.519530][T11313] macsec0: entered allmulticast mode [ 620.522676][T11313] bond10: (slave vlan4): Error -34 calling dev_set_mtu [ 620.864548][T11327] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.17000'. [ 621.018594][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17001'. [ 621.582076][T11351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17008'. [ 621.586164][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17008'. [ 621.590320][T11351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17008'. [ 621.594909][T11351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17008'. [ 622.009951][T11359] overlayfs: failed to clone upperpath [ 623.066499][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17022'. [ 623.069481][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17022'. [ 623.798748][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 623.798760][ T40] audit: type=1400 audit(2000000564.990:52329): avc: denied { ioctl } for pid=11405 comm="syz.3.17026" path="socket:[168736]" dev="sockfs" ino=168736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.814920][ T40] audit: type=1400 audit(2000000566.880:52330): avc: denied { name_bind } for pid=11407 comm="syz.3.17028" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 625.826105][ T40] audit: type=1400 audit(2000000566.880:52331): avc: denied { node_bind } for pid=11407 comm="syz.3.17028" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 625.831432][T11412] netlink: 'syz.0.17029': attribute type 1 has an invalid length. [ 625.837847][ T40] audit: type=1400 audit(2000000566.880:52332): avc: denied { read write } for pid=11409 comm="syz.4.17027" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 625.847390][ T40] audit: type=1400 audit(2000000566.880:52333): avc: denied { open } for pid=11409 comm="syz.4.17027" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 625.850362][T11412] bond1: entered promiscuous mode [ 625.855687][ T40] audit: type=1400 audit(2000000566.880:52334): avc: denied { mounton } for pid=11409 comm="syz.4.17027" path="/276/file0" dev="tmpfs" ino=1530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 625.858453][T11412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.867026][ T40] audit: type=1400 audit(2000000566.889:52335): avc: denied { mount } for pid=11409 comm="syz.4.17027" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 625.882122][ T40] audit: type=1400 audit(2000000566.945:52336): avc: denied { read write } for pid=11409 comm="syz.4.17027" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 625.893101][ T40] audit: type=1400 audit(2000000566.945:52337): avc: denied { open } for pid=11409 comm="syz.4.17027" path="/276/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 625.899957][T11412] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 625.903006][ T40] audit: type=1400 audit(2000000566.954:52338): avc: denied { create } for pid=11411 comm="syz.0.17029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 625.907441][T11412] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 625.919514][T11412] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 625.951181][T11418] __nla_validate_parse: 1 callbacks suppressed [ 625.951196][T11418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17028'. [ 625.956211][T11418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17028'. [ 625.959291][T11418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17028'. [ 625.963117][T11418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17028'. [ 625.973518][T11420] bond0: (slave caif0): Error: Device type is different from other slaves [ 626.008957][T11420] netlink: 'syz.4.17031': attribute type 3 has an invalid length. [ 626.110462][T11425] bridge_slave_0: left allmulticast mode [ 626.119180][T11425] bridge_slave_0: left promiscuous mode [ 626.120645][T11423] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 626.129859][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.148753][T11425] bridge_slave_1: left allmulticast mode [ 626.151236][T11425] bridge_slave_1: left promiscuous mode [ 626.164683][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.178385][T11425] bond0: (slave bond_slave_0): Releasing backup interface [ 626.181148][T11431] netlink: 'syz.4.17035': attribute type 1 has an invalid length. [ 626.208715][T11429] kvm: user requested TSC rate below hardware speed [ 626.218702][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17033'. [ 626.223376][T11425] bond0: (slave bond_slave_1): Releasing backup interface [ 626.225979][T11429] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 626.229495][T11429] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 626.275749][T11425] team0: Port device team_slave_0 removed [ 626.283694][T11425] team0: Port device team_slave_1 removed [ 626.287866][T11425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.291421][T11425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.306754][T11425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.310084][T11425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.316286][T11425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 626.331109][T11427] team0: Mode changed to "loadbalance" [ 626.358893][T11431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.366369][T11438] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17035'. [ 626.411056][T11434] bond3: (slave veth15): Enslaving as an active interface with a down link [ 626.422419][T11436] bond3: (slave dummy0): making interface the new active one [ 626.425479][T11436] dummy0: entered promiscuous mode [ 626.427330][T11436] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 626.441567][T11438] bond3: (slave dummy0): Releasing active interface [ 626.444048][T11438] dummy0 (unregistering): left promiscuous mode [ 627.366143][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.369587][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.423087][T11485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 627.647872][T11477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.748295][T11495] netlink: 'syz.3.17057': attribute type 1 has an invalid length. [ 627.922834][T11500] syz.0.17059 (11500): drop_caches: 2 [ 627.985062][T11502] netlink: 'syz.1.17060': attribute type 6 has an invalid length. [ 628.040710][T11505] netlink: 'syz.1.17060': attribute type 4 has an invalid length. [ 628.043910][T11505] netlink: 17 bytes leftover after parsing attributes in process `syz.1.17060'. [ 628.300762][T11495] 8021q: adding VLAN 0 to HW filter on device bond11 [ 628.306076][T11497] bond11: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 628.311356][T11497] bond11: entered allmulticast mode [ 628.330104][T11498] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 628.335519][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.341107][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.367520][T11512] 8021q: adding VLAN 0 to HW filter on device bond4 [ 628.371821][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.396720][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.410404][T11512] bond4: (slave ip6gretap1): making interface the new active one [ 628.414361][T11512] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 628.505975][T11518] xfrm0 speed is unknown, defaulting to 1000 [ 628.510163][T11518] lo speed is unknown, defaulting to 1000 [ 628.758477][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17069'. [ 628.815995][T11544] bridge12: port 1(veth1) entered blocking state [ 628.819297][T11544] bridge12: port 1(veth1) entered disabled state [ 628.822620][T11544] veth1: entered allmulticast mode [ 628.828384][T11544] veth1: entered promiscuous mode [ 628.877499][T11544] bond6: (slave veth0_to_bond): Releasing active interface [ 628.916277][T11544] bridge12: port 2(veth0_to_bond) entered blocking state [ 628.921674][T11544] bridge12: port 2(veth0_to_bond) entered disabled state [ 628.924650][T11544] veth0_to_bond: entered allmulticast mode [ 628.928415][T11544] veth0_to_bond: entered promiscuous mode [ 629.162571][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 629.162586][ T40] audit: type=1400 audit(2000000570.013:52459): avc: denied { add_name } for pid=11571 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.189128][ T40] audit: type=1400 audit(2000000570.023:52460): avc: denied { read } for pid=11574 comm="syz.1.17076" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.200202][ T40] audit: type=1400 audit(2000000570.051:52461): avc: denied { open } for pid=11574 comm="syz.1.17076" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.220874][ T40] audit: type=1400 audit(2000000570.051:52462): avc: denied { ioctl } for pid=11574 comm="syz.1.17076" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.281141][ T40] audit: type=1400 audit(2000000570.116:52463): avc: denied { prog_load } for pid=11578 comm="syz.0.17077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 629.307111][ T40] audit: type=1400 audit(2000000570.125:52464): avc: denied { bpf } for pid=11578 comm="syz.0.17077" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 629.316941][ T40] audit: type=1400 audit(2000000570.125:52465): avc: denied { map_create } for pid=11578 comm="syz.0.17077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 629.323803][ T40] audit: type=1400 audit(2000000570.125:52466): avc: denied { allowed } for pid=11578 comm="syz.0.17077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 629.334750][ T40] audit: type=1400 audit(2000000570.125:52467): avc: denied { create } for pid=11578 comm="syz.0.17077" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 629.396812][ T40] audit: type=1400 audit(2000000570.228:52468): avc: denied { create } for pid=11585 comm="syz.0.17079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 629.526937][T11596] ip6t_REJECT: ECHOREPLY is not supported [ 629.727748][T11610] netlink: 'syz.4.17090': attribute type 1 has an invalid length. [ 629.741173][T11610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 629.752038][T11612] overlayfs: failed to clone upperpath [ 629.869674][T11626] ipt_REJECT: ECHOREPLY no longer supported. [ 630.815890][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17118'. [ 630.856783][T11674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11674 comm=syz.3.17118 [ 630.867383][ C1] ------------[ cut here ]------------ [ 630.869645][ C1] sk->sk_forward_alloc [ 630.869655][ C1] WARNING: net/ipv4/af_inet.c:163 at inet_sock_destruct+0x653/0x800, CPU#1: syz.3.17118/11673 [ 630.874646][ C1] Modules linked in: [ 630.877614][ C1] CPU: 1 UID: 0 PID: 11673 Comm: syz.3.17118 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.881402][ C1] Tainted: [L]=SOFTLOCKUP [ 630.882828][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 630.886360][ C1] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 630.888451][ C1] Code: e3 4e ff e9 06 fd ff ff e8 3a 48 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 2c 48 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 1e 48 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 10 48 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 630.894729][ C1] RSP: 0018:ffffc900006a0d98 EFLAGS: 00010246 [ 630.896657][ C1] RAX: 0000000000000000 RBX: ffff8880302af700 RCX: ffffffff8a09aec7 [ 630.899718][ C1] RDX: ffff888032cda4c0 RSI: ffffffff8a09afc2 RDI: ffff888032cda4c0 [ 630.903190][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 630.906356][ C1] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff8880302af700 [ 630.909627][ C1] R13: ffff8880302af790 R14: ffffffff81eebbdd R15: 0000000000000002 [ 630.913099][ C1] FS: 0000000000000000(0000) GS:ffff8880d643c000(0000) knlGS:0000000000000000 [ 630.916742][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.918887][ C1] CR2: 0000001b31d04ff8 CR3: 00000000483ad000 CR4: 0000000000352ef0 [ 630.921591][ C1] DR0: 0000000000000007 DR1: ffffffffffffff00 DR2: 400000000001001d [ 630.924107][ C1] DR3: fffffffffffffff6 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 630.926830][ C1] Call Trace: [ 630.928093][ C1] [ 630.929055][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 630.930861][ C1] ? rcu_core+0x59d/0x10d0 [ 630.932862][ C1] __sk_destruct+0x85/0xbb0 [ 630.935176][ C1] ? rcu_core+0x59d/0x10d0 [ 630.937131][ C1] rcu_core+0x5a2/0x10d0 [ 630.938756][ C1] ? __pfx_rcu_core+0x10/0x10 [ 630.940500][ C1] ? run_timer_base+0x121/0x190 [ 630.942167][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 630.943865][ C1] handle_softirqs+0x1eb/0x9e0 [ 630.945437][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 630.947138][ C1] __irq_exit_rcu+0xef/0x150 [ 630.948635][ C1] irq_exit_rcu+0x9/0x30 [ 630.950038][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 630.951903][ C1] [ 630.952919][ C1] [ 630.953898][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.955822][ C1] RIP: 0010:write_comp_data+0x7/0x90 [ 630.957618][ C1] Code: 98 16 00 00 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 59 4f 05 12 <49> 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 30 4f 05 12 a9 00 01 ff 00 [ 630.964392][ C1] RSP: 0018:ffffc90003cbf698 EFLAGS: 00000202 [ 630.966360][ C1] RAX: 0000000080000001 RBX: ffffea0001791a80 RCX: ffffffff82489a0b [ 630.968733][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 630.971291][ C1] RBP: 1ffff92000797ed6 R08: 0000000000000000 R09: fffff940002f2350 [ 630.974110][ C1] R10: ffffea0001791a87 R11: 0000000000000000 R12: ffffea0001791a88 [ 630.976963][ C1] R13: 0000000000000001 R14: ffff88803644bb80 R15: 800000005e46a025 [ 630.979769][ C1] ? folio_mark_accessed+0x26b/0x1040 [ 630.981663][ C1] folio_mark_accessed+0x26b/0x1040 [ 630.983373][ C1] ? __pfx_folio_mark_accessed+0x10/0x10 [ 630.985327][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 630.987334][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 630.989483][ C1] ? folio_remove_rmap_ptes+0x3de/0xff0 [ 630.991241][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 630.993480][ C1] unmap_page_range+0x1175/0x4840 [ 630.995157][ C1] ? __lock_acquire+0x4a5/0x2630 [ 630.996680][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 630.998401][ C1] ? __kernel_text_address+0xd/0x30 [ 631.000110][ C1] ? unwind_get_return_address+0x59/0xa0 [ 631.001942][ C1] ? arch_stack_walk+0xa6/0xf0 [ 631.003583][ C1] ? uprobe_munmap+0x9e/0x700 [ 631.005310][ C1] unmap_single_vma+0x153/0x240 [ 631.007370][ C1] unmap_vmas+0x295/0x590 [ 631.009005][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 631.010709][ C1] ? mas_next_slot+0x1003/0x18b0 [ 631.012309][ C1] exit_mmap+0x1ef/0xa30 [ 631.013708][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 631.015261][ C1] ? trace_contention_end+0x140/0x180 [ 631.017034][ C1] ? uprobe_clear_state+0x5f/0x360 [ 631.018701][ C1] ? uprobe_clear_state+0x5f/0x360 [ 631.020377][ C1] ? __lock_acquire+0x4a5/0x2630 [ 631.022275][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 631.024652][ C1] __mmput+0x12a/0x410 [ 631.026437][ C1] mmput+0x67/0x80 [ 631.027838][ C1] do_exit+0x819/0x2b60 [ 631.029279][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 631.030986][ C1] ? __pfx_do_exit+0x10/0x10 [ 631.032521][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 631.034449][ C1] do_group_exit+0xd5/0x2a0 [ 631.036397][ C1] __x64_sys_exit_group+0x3e/0x50 [ 631.038273][ C1] x64_sys_call+0x102c/0x1530 [ 631.039921][ C1] do_syscall_64+0x106/0xf80 [ 631.041610][ C1] ? clear_bhb_loop+0x40/0x90 [ 631.043441][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.045896][ C1] RIP: 0033:0x7f796a59c799 [ 631.047826][ C1] Code: Unable to access opcode bytes at 0x7f796a59c76f. [ 631.050941][ C1] RSP: 002b:00007ffecfb386d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 631.054436][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f796a59c799 [ 631.057884][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.061455][ C1] RBP: 00007ffecfb3873c R08: 0000000000000000 R09: 00000000000927c0 [ 631.064390][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000006ad [ 631.067017][ C1] R13: 00000000000927c0 R14: 00000000000917af R15: 00007ffecfb38790 [ 631.069528][ C1] [ 631.070627][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 631.072915][ C1] CPU: 1 UID: 0 PID: 11673 Comm: syz.3.17118 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.076644][ C1] Tainted: [L]=SOFTLOCKUP [ 631.078352][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 631.082387][ C1] Call Trace: [ 631.083790][ C1] [ 631.084687][ C1] dump_stack_lvl+0x100/0x190 [ 631.086228][ C1] vpanic+0x552/0x970 [ 631.087648][ C1] ? __pfx_vpanic+0x10/0x10 [ 631.089701][ C1] panic+0xd1/0xe0 [ 631.091508][ C1] ? __pfx_panic+0x10/0x10 [ 631.093475][ C1] ? check_panic_on_warn+0x1f/0x90 [ 631.095594][ C1] check_panic_on_warn.cold+0x19/0x34 [ 631.097691][ C1] ? inet_sock_destruct+0x653/0x800 [ 631.099434][ C1] __warn.cold+0x191/0x348 [ 631.100878][ C1] __report_bug+0x296/0x3d0 [ 631.102680][ C1] ? inet_sock_destruct+0x653/0x800 [ 631.105254][ C1] ? __pfx___report_bug+0x10/0x10 [ 631.107899][ C1] ? exit_mmap+0x1ef/0xa30 [ 631.109963][ C1] ? __mmput+0x12a/0x410 [ 631.111969][ C1] ? mmput+0x67/0x80 [ 631.113529][ C1] ? do_exit+0x819/0x2b60 [ 631.114932][ C1] ? do_group_exit+0xd5/0x2a0 [ 631.116440][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 631.118152][ C1] ? x64_sys_call+0x102c/0x1530 [ 631.119825][ C1] ? do_syscall_64+0x106/0xf80 [ 631.121471][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.123689][ C1] ? inet_sock_destruct+0x653/0x800 [ 631.126448][ C1] report_bug+0xb2/0x220 [ 631.128164][ C1] ? inet_sock_destruct+0x653/0x800 [ 631.130253][ C1] handle_bug+0x16a/0x2a0 [ 631.131794][ C1] exc_invalid_op+0x17/0x50 [ 631.133295][ C1] asm_exc_invalid_op+0x1a/0x20 [ 631.135135][ C1] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 631.137278][ C1] Code: e3 4e ff e9 06 fd ff ff e8 3a 48 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 2c 48 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 1e 48 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 10 48 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 631.143634][ C1] RSP: 0018:ffffc900006a0d98 EFLAGS: 00010246 [ 631.145755][ C1] RAX: 0000000000000000 RBX: ffff8880302af700 RCX: ffffffff8a09aec7 [ 631.148389][ C1] RDX: ffff888032cda4c0 RSI: ffffffff8a09afc2 RDI: ffff888032cda4c0 [ 631.151432][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 631.154179][ C1] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff8880302af700 [ 631.157048][ C1] R13: ffff8880302af790 R14: ffffffff81eebbdd R15: 0000000000000002 [ 631.159752][ C1] ? rcu_core+0x59d/0x10d0 [ 631.161395][ C1] ? inet_sock_destruct+0x557/0x800 [ 631.163138][ C1] ? inet_sock_destruct+0x652/0x800 [ 631.164921][ C1] ? inet_sock_destruct+0x652/0x800 [ 631.166872][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 631.168871][ C1] ? rcu_core+0x59d/0x10d0 [ 631.170417][ C1] __sk_destruct+0x85/0xbb0 [ 631.171989][ C1] ? rcu_core+0x59d/0x10d0 [ 631.173600][ C1] rcu_core+0x5a2/0x10d0 [ 631.174978][ C1] ? __pfx_rcu_core+0x10/0x10 [ 631.176673][ C1] ? run_timer_base+0x121/0x190 [ 631.178732][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 631.180927][ C1] handle_softirqs+0x1eb/0x9e0 [ 631.183049][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 631.185399][ C1] __irq_exit_rcu+0xef/0x150 [ 631.187209][ C1] irq_exit_rcu+0x9/0x30 [ 631.188821][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 631.190924][ C1] [ 631.192024][ C1] [ 631.193126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 631.195335][ C1] RIP: 0010:write_comp_data+0x7/0x90 [ 631.197373][ C1] Code: 98 16 00 00 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 59 4f 05 12 <49> 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 30 4f 05 12 a9 00 01 ff 00 [ 631.205667][ C1] RSP: 0018:ffffc90003cbf698 EFLAGS: 00000202 [ 631.208023][ C1] RAX: 0000000080000001 RBX: ffffea0001791a80 RCX: ffffffff82489a0b [ 631.210951][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 631.213858][ C1] RBP: 1ffff92000797ed6 R08: 0000000000000000 R09: fffff940002f2350 [ 631.217069][ C1] R10: ffffea0001791a87 R11: 0000000000000000 R12: ffffea0001791a88 [ 631.220354][ C1] R13: 0000000000000001 R14: ffff88803644bb80 R15: 800000005e46a025 [ 631.224039][ C1] ? folio_mark_accessed+0x26b/0x1040 [ 631.226115][ C1] folio_mark_accessed+0x26b/0x1040 [ 631.228086][ C1] ? __pfx_folio_mark_accessed+0x10/0x10 [ 631.230371][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 631.232750][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 631.235176][ C1] ? folio_remove_rmap_ptes+0x3de/0xff0 [ 631.237462][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 631.240311][ C1] unmap_page_range+0x1175/0x4840 [ 631.242434][ C1] ? __lock_acquire+0x4a5/0x2630 [ 631.244274][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 631.246292][ C1] ? __kernel_text_address+0xd/0x30 [ 631.248223][ C1] ? unwind_get_return_address+0x59/0xa0 [ 631.250673][ C1] ? arch_stack_walk+0xa6/0xf0 [ 631.252725][ C1] ? uprobe_munmap+0x9e/0x700 [ 631.254715][ C1] unmap_single_vma+0x153/0x240 [ 631.256675][ C1] unmap_vmas+0x295/0x590 [ 631.258340][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 631.260186][ C1] ? mas_next_slot+0x1003/0x18b0 [ 631.262084][ C1] exit_mmap+0x1ef/0xa30 [ 631.263772][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 631.265750][ C1] ? trace_contention_end+0x140/0x180 [ 631.267932][ C1] ? uprobe_clear_state+0x5f/0x360 [ 631.270124][ C1] ? uprobe_clear_state+0x5f/0x360 [ 631.272375][ C1] ? __lock_acquire+0x4a5/0x2630 [ 631.274365][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 631.276566][ C1] __mmput+0x12a/0x410 [ 631.278126][ C1] mmput+0x67/0x80 [ 631.279600][ C1] do_exit+0x819/0x2b60 [ 631.281446][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 631.283702][ C1] ? __pfx_do_exit+0x10/0x10 [ 631.285810][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 631.287958][ C1] do_group_exit+0xd5/0x2a0 [ 631.289859][ C1] __x64_sys_exit_group+0x3e/0x50 [ 631.292018][ C1] x64_sys_call+0x102c/0x1530 [ 631.293978][ C1] do_syscall_64+0x106/0xf80 [ 631.295816][ C1] ? clear_bhb_loop+0x40/0x90 [ 631.297649][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.300286][ C1] RIP: 0033:0x7f796a59c799 [ 631.302282][ C1] Code: Unable to access opcode bytes at 0x7f796a59c76f. [ 631.305176][ C1] RSP: 002b:00007ffecfb386d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 631.308192][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f796a59c799 [ 631.311266][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.314286][ C1] RBP: 00007ffecfb3873c R08: 0000000000000000 R09: 00000000000927c0 [ 631.317242][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000006ad [ 631.320094][ C1] R13: 00000000000927c0 R14: 00000000000917af R15: 00007ffecfb38790 [ 631.323191][ C1] [ 631.325114][ C1] Kernel Offset: disabled [ 631.326535][ C1] Rebooting in 86400 seconds..