last executing test programs: 8m27.321448399s ago: executing program 0 (id=4720): cachestat(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xd6f}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) 8m27.0904741s ago: executing program 0 (id=4724): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000130000000000000005000100070000"], 0x1c}}, 0x0) 8m26.408370109s ago: executing program 0 (id=4728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 8m26.334575741s ago: executing program 0 (id=4729): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 8m26.24302051s ago: executing program 0 (id=4732): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000480)=0x69) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={r1, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) 8m25.700257922s ago: executing program 0 (id=4741): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 8m25.414134655s ago: executing program 32 (id=4741): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 5m12.140983739s ago: executing program 4 (id=6719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 5m11.713874551s ago: executing program 4 (id=6723): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000006000/0x2000)=nil, 0x2000) shmctl$IPC_RMID(r0, 0x0) 5m11.32822047s ago: executing program 4 (id=6727): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5m10.957163076s ago: executing program 4 (id=6730): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m10.67291173s ago: executing program 4 (id=6732): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m9.811990969s ago: executing program 4 (id=6739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) shutdown(r0, 0x1) 5m9.044280896s ago: executing program 33 (id=6739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) shutdown(r0, 0x1) 14.446775124s ago: executing program 2 (id=8603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 12.611113768s ago: executing program 2 (id=8605): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4800) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r8, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x80, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x1, 0xb9c, 0x0, 0x0}}, 0x0) 11.841552323s ago: executing program 3 (id=8607): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x40851) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x8, 0xa, "922d86138749c5786c3c"}, 0x12) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 10.743113244s ago: executing program 3 (id=8610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000003, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 10.543930356s ago: executing program 5 (id=8613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x4000000, 0x0, "", [@typed={0x7, 0x4a, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 9.615796031s ago: executing program 3 (id=8615): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 9.480252306s ago: executing program 5 (id=8617): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x1f1, 0x1) read$msr(r2, &(0x7f0000000380)=""/116, 0x74) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x3ff, 0x7, 0x0, 0xfffd, 0x0, 0x6f0a, 0x1, {0x0, @in={{0x2, 0x4e21, @remote}}, 0xffff, 0x80, 0xbc0, 0x5, 0x6}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 9.258663802s ago: executing program 5 (id=8620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 8.881933939s ago: executing program 5 (id=8621): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 8.874459314s ago: executing program 1 (id=8622): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfb}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) listen(r2, 0x3) r3 = accept4(r2, 0x0, 0x0, 0x80000) write(r3, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r3, &(0x7f0000000a00)='\x00', 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) 8.674146833s ago: executing program 5 (id=8623): socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x26c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e84bd2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x304d36d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd590c38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x186f78b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x164, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c8f92c0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x176b0cac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b2f119}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72841ea3}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3749781a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f665e51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3003026}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4908c589}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15f6d151}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30e485e4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59d1d631}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x468e7006}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc53238a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a6e73ec}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x582df8ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60c3dedc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34c9bb69}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba9e642}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a0bcd23}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6773d76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x783831b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfc2ffe3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdc0caf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1201dcae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4352fe87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c7d6b7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fc8564b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21b5470a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ac5d7b5}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4044}, 0x81) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.631234693s ago: executing program 1 (id=8624): socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x3c}}, 0x8004042) 8.474148197s ago: executing program 5 (id=8625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000140), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 8.032464243s ago: executing program 6 (id=8626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4d}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) 7.874845402s ago: executing program 1 (id=8627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 6.983740274s ago: executing program 6 (id=8628): io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/4096) landlock_restrict_self(0xffffffffffffffff, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x43, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.299626827s ago: executing program 1 (id=8629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x36, 0x301, 0x70bd2d, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 4.150966067s ago: executing program 1 (id=8630): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x683}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 4.090762534s ago: executing program 3 (id=8631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 3.85529615s ago: executing program 6 (id=8632): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.817796444s ago: executing program 2 (id=8633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0xfffffffffffffdfc, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)='0') 1.523006857s ago: executing program 1 (id=8634): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0x4, 0x8, 0x8, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x6, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 1.476749751s ago: executing program 2 (id=8635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.30770135s ago: executing program 6 (id=8636): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10000, 0x0, 0x0, 0x11908, 0x8}, 0x30, 0x2) dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 1.097323297s ago: executing program 6 (id=8637): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.020240537s ago: executing program 3 (id=8638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xd, 0x9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='GPL\x00', 0xf, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.019178517s ago: executing program 2 (id=8639): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 175.72694ms ago: executing program 2 (id=8640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_io_uring_setup(0x7b1d, &(0x7f0000000100)={0x0, 0xf40, 0x20, 0x3, 0xab}, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 65.633412ms ago: executing program 6 (id=8641): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x43, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "431600", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xff00000000000000}, @loopback}}}}}}, 0x0) 0s ago: executing program 3 (id=8642): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}]}, 0x24}}, 0x884c) kernel console output (not intermixed with test programs): 34.402600][T22011] ref_ctr_offset mismatch. inode: 0x1ecc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 634.597128][T22019] netlink: 'syz.4.6648': attribute type 1 has an invalid length. [ 634.623540][T22020] overlayfs: failed to clone upperpath [ 634.801593][T22024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6649'. [ 634.818322][T22019] bond4: entered promiscuous mode [ 634.861442][T22019] 8021q: adding VLAN 0 to HW filter on device bond4 [ 635.110009][T22025] 8021q: adding VLAN 0 to HW filter on device bond4 [ 635.125556][T22025] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 635.158052][T22025] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 635.267245][T22025] bond4: (slave ip6gre1): making interface the new active one [ 635.303231][T22025] ip6gre1: entered promiscuous mode [ 635.331812][T22025] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 635.335468][T22038] overlayfs: failed to clone upperpath [ 635.388697][T22024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6649'. [ 635.802069][T22056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.458534][ T30] audit: type=1400 audit(2000001010.474:1449): avc: denied { write } for pid=22086 comm="syz.1.6675" path="socket:[78161]" dev="sockfs" ino=78161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 637.740665][T22099] fuse: fd is not a fuse device [ 637.917339][ T9] Process accounting resumed [ 640.903749][T22157] SELinux: failed to load policy [ 641.233094][T22169] xt_hashlimit: size too large, truncated to 1048576 [ 641.638599][T22135] veth0_vlan: left promiscuous mode [ 642.017310][T22135] geneve2: left promiscuous mode [ 642.040628][T22135] bridge1: left promiscuous mode [ 642.082455][T22135] bridge1: left allmulticast mode [ 642.651814][T22135] bond1: left promiscuous mode [ 642.659512][T22135] ipip0: left promiscuous mode [ 642.728405][T12005] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.777043][T12005] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 56754 - 0 [ 642.827797][T12005] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.865246][T12005] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.900877][T12005] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 56754 - 0 [ 642.942066][T12005] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.979815][T12005] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.020289][T12005] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 56754 - 0 [ 643.053937][T12005] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 643.103670][T12005] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.134655][T12005] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 56754 - 0 [ 643.159689][T12005] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 643.236683][T22205] bond1: entered allmulticast mode [ 643.254630][T22205] ipip0: entered allmulticast mode [ 643.290512][T22203] bond1: left allmulticast mode [ 643.328611][T22203] ipip0: left allmulticast mode [ 643.831501][ T30] audit: type=1400 audit(2000001016.844:1450): avc: denied { write } for pid=22195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.873281][ T5730] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 644.055170][ T5730] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 644.079046][ T5730] usb 2-1: config 0 has no interface number 0 [ 644.103099][ T5730] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 644.157282][ T5730] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.203253][ T30] audit: type=1400 audit(2000001017.214:1451): avc: denied { write } for pid=22233 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.222215][ T5730] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 644.257882][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.322844][ T5730] usb 2-1: Product: syz [ 644.339805][ T5730] usb 2-1: Manufacturer: syz [ 644.362189][ T5730] usb 2-1: SerialNumber: syz [ 644.415008][ T5730] usb 2-1: config 0 descriptor?? [ 644.448477][T22217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 644.476342][ T5730] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 644.522599][ T5730] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 644.563366][ T5730] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 645.476106][ T30] audit: type=1400 audit(2000001018.494:1452): avc: denied { write } for pid=22244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.914169][ T30] audit: type=1400 audit(2000001018.924:1453): avc: denied { write } for pid=22273 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.398970][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.425747][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.448393][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.470515][ T4926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.479384][ T4926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.811837][ T5730] usb 2-1: USB disconnect, device number 81 [ 646.875592][T22300] fuse: fd is not a fuse device [ 646.889754][ T5730] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 646.957982][ T5730] cyberjack 2-1:0.69: device disconnected [ 647.599486][ T30] audit: type=1400 audit(2000001020.614:1454): avc: denied { write } for pid=22278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.060339][T22280] lo speed is unknown, defaulting to 1000 [ 648.152495][ T30] audit: type=1400 audit(2000001021.154:1455): avc: denied { write } for pid=22324 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.478949][ T30] audit: type=1326 audit(2000001021.494:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 648.604109][ T4926] Bluetooth: hci1: command tx timeout [ 648.649319][ T30] audit: type=1326 audit(2000001021.494:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 648.723078][ T30] audit: type=1326 audit(2000001021.494:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 648.846008][ T30] audit: type=1326 audit(2000001021.494:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 648.939213][ T30] audit: type=1326 audit(2000001021.494:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.036254][ T30] audit: type=1326 audit(2000001021.494:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.159371][ T30] audit: type=1326 audit(2000001021.494:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.283486][ T30] audit: type=1326 audit(2000001021.494:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.402093][ T30] audit: type=1326 audit(2000001021.494:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.521285][ T30] audit: type=1326 audit(2000001021.494:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.551209][ T30] audit: type=1326 audit(2000001021.494:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.579727][ T30] audit: type=1326 audit(2000001021.494:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.641022][ T30] audit: type=1326 audit(2000001021.494:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.2.6751" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 649.911671][T22348] netlink: 'syz.2.6757': attribute type 4 has an invalid length. [ 649.951515][T22348] netlink: 'syz.2.6757': attribute type 4 has an invalid length. [ 650.233978][T22351] SELinux: failed to load policy [ 650.237721][T22280] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.247454][T22280] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.256403][T22280] bridge_slave_0: entered allmulticast mode [ 650.264600][T22280] bridge_slave_0: entered promiscuous mode [ 650.273903][T22280] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.281163][T22280] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.289015][T22280] bridge_slave_1: entered allmulticast mode [ 650.297267][T22280] bridge_slave_1: entered promiscuous mode [ 650.431446][T22280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.468438][T22280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.663265][T22280] team0: Port device team_slave_0 added [ 650.683820][ T4926] Bluetooth: hci1: command tx timeout [ 650.695730][T22280] team0: Port device team_slave_1 added [ 650.918400][T22280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.958211][T22280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.028634][T22280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.075958][T22280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.096450][T22280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.318448][T22280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.571270][T22280] hsr_slave_0: entered promiscuous mode [ 651.580594][T22280] hsr_slave_1: entered promiscuous mode [ 651.590817][T22280] debugfs: 'hsr0' already exists in 'hsr' [ 651.602624][T22280] Cannot create hsr debugfs directory [ 651.790824][T22386] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.798562][T22386] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.252777][T22386] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 652.275343][T22386] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 652.661882][T22386] ip6tnl2: left promiscuous mode [ 652.729812][T22392] bond0: (slave bond_slave_0): Releasing backup interface [ 652.759373][T22392] bond0: (slave bond_slave_1): Releasing backup interface [ 652.767463][ T4926] Bluetooth: hci1: command tx timeout [ 652.791599][T22392] team0: Port device team_slave_0 removed [ 652.809211][T22392] team0: Port device team_slave_1 removed [ 652.827155][T22392] team0: Port device bridge1 removed [ 652.839754][T22392] bond1: (slave ipip0): Releasing backup interface [ 652.857243][ T78] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.883386][ T78] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.979186][ T78] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.001658][ T78] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.037524][ T78] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.071468][ T78] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.118243][ T78] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.128916][ T78] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.317267][T22408] overlayfs: failed to clone lowerpath [ 653.610424][T22413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.811488][T22280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 653.933977][T22280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.954465][T22280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 653.977769][T22280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.009012][T22280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 654.032315][T22280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.055279][T22280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 654.067539][T22280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.405715][T22280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.490400][T22280] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.542481][T22288] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.549756][T22288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.581508][T22289] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.588732][T22289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.843053][ T4926] Bluetooth: hci1: command tx timeout [ 655.781263][T22280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.297314][T22496] netlink: 'syz.5.6802': attribute type 2 has an invalid length. [ 656.931072][T22506] fuse: fd is not a fuse device [ 657.021533][T22280] veth0_vlan: entered promiscuous mode [ 657.127458][T22280] veth1_vlan: entered promiscuous mode [ 657.282160][T22280] veth0_macvtap: entered promiscuous mode [ 657.346660][T22280] veth1_macvtap: entered promiscuous mode [ 657.490055][T22280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.590198][T22280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.647720][T20643] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.679473][T20643] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.715876][T20643] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.761075][T20643] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.847857][T22538] netlink: 'syz.2.6814': attribute type 1 has an invalid length. [ 658.081930][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 658.097173][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6818'. [ 658.106941][T22538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.319137][T22541] bond3: (slave bridge1): making interface the new active one [ 658.368256][T22541] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 658.529090][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 658.583502][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6818'. [ 658.662572][T22562] overlayfs: failed to clone upperpath [ 658.964174][T22288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.980958][T22288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.059837][T22290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.108541][T22290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.392229][T22580] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6830'. [ 659.452296][T22580] gretap0: entered promiscuous mode [ 659.466032][T22580] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6830'. [ 659.501435][T22580] 0{X: renamed from gretap0 [ 659.530132][T22580] 0{X: left promiscuous mode [ 659.551834][T22580] 0{X: entered allmulticast mode [ 659.590730][T22580] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 659.867162][T22592] netlink: 'syz.3.6833': attribute type 1 has an invalid length. [ 660.068026][T22595] bond2: (slave geneve3): making interface the new active one [ 660.144888][T22595] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 660.165479][T22288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 660.191074][T22288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 660.232412][T22288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 660.268106][T22288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 660.656044][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554e3400: rx timeout, send abort [ 660.685021][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880554e3400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 660.700105][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 660.700126][ T30] audit: type=1400 audit(2000001033.694:1489): avc: denied { read } for pid=4957 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 660.747374][ T30] audit: type=1400 audit(2000001033.694:1490): avc: denied { search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.784166][ T30] audit: type=1400 audit(2000001033.694:1491): avc: denied { write search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.834976][ T30] audit: type=1400 audit(2000001033.694:1492): avc: denied { add_name } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.861062][ T30] audit: type=1400 audit(2000001033.694:1493): avc: denied { create } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 660.896938][ T30] audit: type=1400 audit(2000001033.694:1494): avc: denied { append open } for pid=4957 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 660.945467][ T30] audit: type=1400 audit(2000001033.694:1495): avc: denied { getattr } for pid=4957 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 661.087909][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6846'. [ 661.097734][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6846'. [ 661.108199][T22627] netlink: 'syz.2.6846': attribute type 12 has an invalid length. [ 661.364780][T22637] xt_hashlimit: size too large, truncated to 1048576 [ 662.380730][T22668] netlink: 'syz.5.6862': attribute type 1 has an invalid length. [ 662.389177][T22668] netlink: 'syz.5.6862': attribute type 4 has an invalid length. [ 662.398202][T22668] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6862'. [ 662.451964][ T30] audit: type=1400 audit(2000001035.464:1496): avc: denied { setopt } for pid=22669 comm="syz.3.6863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 662.486497][ T30] audit: type=1400 audit(2000001035.494:1497): avc: denied { node_bind } for pid=22671 comm="syz.5.6864" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 662.562037][T22675] netlink: 'syz.3.6865': attribute type 10 has an invalid length. [ 662.587231][T22675] bond0 (unregistering): Released all slaves [ 662.744771][T22680] netlink: 'syz.6.6867': attribute type 1 has an invalid length. [ 662.772224][T22682] erspan0: left promiscuous mode [ 662.813626][T22684] overlayfs: failed to clone upperpath [ 662.816035][T22682] 8021q: adding VLAN 0 to HW filter on device  [ 662.860875][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6868'. [ 662.919784][T22682] batadv_slave_1: left promiscuous mode [ 662.966087][T22682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 662.977387][T22682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.993748][T22682] veth1_vlan: left promiscuous mode [ 663.000266][T22682] veth0_vlan: left promiscuous mode [ 663.008399][T22682] veth0_vlan: entered promiscuous mode [ 663.016383][T22682] veth1_vlan: entered promiscuous mode [ 663.034701][T22682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.042080][T22682] batadv_slave_1: entered promiscuous mode [ 663.049539][T22682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.058809][T22682] erspan0: entered promiscuous mode [ 663.066305][T22682] 8021q: adding VLAN 0 to HW filter on device eth0 [ 663.074361][T22682] 8021q: adding VLAN 0 to HW filter on device eth1 [ 663.082213][T22682] 8021q: adding VLAN 0 to HW filter on device eth2 [ 663.092379][T22682] 8021q: adding VLAN 0 to HW filter on device eth3 [ 663.205679][T22682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.251591][T22682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 663.279310][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.286544][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.300435][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.307663][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.404880][T22687] erspan1: entered allmulticast mode [ 663.480536][T22288] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.504345][T22288] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.529551][T22288] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.547230][T22288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.619391][T22288] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.652009][T22288] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.669990][T22288] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.705030][T22288] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.301561][T22706] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.309280][T22706] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.537569][T22706] batman_adv: batadv0: Interface deactivated: dummy0 [ 664.763569][T22706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.833159][T22706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.556882][T22738] input: syz1 as /devices/virtual/input/input68 [ 665.885260][T22294] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.903272][T22294] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 665.930319][T22294] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.959169][T22294] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.979801][T22294] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 665.999514][T22294] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.031762][T22294] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.052635][T22294] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 666.063870][T22294] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.993560][T22294] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.009844][T22294] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 667.019149][T22294] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.152398][T22763] ip6gretap1: entered promiscuous mode [ 668.027027][ T4926] Bluetooth: hci1: Unable to find connection for big 0x00 [ 668.300843][T22784] overlayfs: failed to clone upperpath [ 668.941195][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6906'. [ 669.945926][T22813] overlayfs: failed to clone upperpath [ 670.080811][T22820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6918'. [ 671.886745][T22856] netlink: 820 bytes leftover after parsing attributes in process `syz.6.6931'. [ 671.937262][T22856] netlink: 820 bytes leftover after parsing attributes in process `syz.6.6931'. [ 674.700693][ T30] audit: type=1326 audit(2000001047.714:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22870 comm="syz.1.6940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7fc00000 [ 674.765928][ T805] IPVS: starting estimator thread 0... [ 674.873141][T22887] IPVS: using max 37 ests per chain, 88800 per kthread [ 675.161319][T22873] xt_hashlimit: size too large, truncated to 1048576 [ 675.341716][ T30] audit: type=1326 audit(2000001048.354:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22870 comm="syz.1.6940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f402f73f219 code=0x7fc00000 [ 675.418594][T22906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6950'. [ 675.433425][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6950'. [ 675.487565][T22906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6950'. [ 675.507204][ T30] audit: type=1400 audit(2000001048.524:1500): avc: denied { create } for pid=22907 comm="syz.6.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 675.525949][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6950'. [ 675.618137][ T30] audit: type=1400 audit(2000001048.554:1501): avc: denied { write } for pid=22907 comm="syz.6.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 675.689195][ T30] audit: type=1400 audit(2000001048.554:1502): avc: denied { nlmsg_write } for pid=22907 comm="syz.6.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 676.340421][T22926] lo speed is unknown, defaulting to 1000 [ 676.559790][T22933] fuse: fd is not a fuse device [ 679.630775][T22994] overlayfs: failed to clone upperpath [ 680.840539][T23023] syzkaller1: entered promiscuous mode [ 680.861847][T23023] syzkaller1: entered allmulticast mode [ 683.238280][T23061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7009'. [ 684.262661][T23099] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7026'. [ 684.815261][T23116] netlink: 'syz.2.7032': attribute type 10 has an invalid length. [ 684.942300][T23116] : (slave veth0_to_bond): Enslaving as an active interface with an up link [ 684.970786][T23122] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7035'. [ 685.807157][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.816927][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.767230][T23175] batadv_slave_1: entered promiscuous mode [ 686.894043][T23170] batadv_slave_1: left promiscuous mode [ 688.419533][T23222] fuse: fd is not a fuse device [ 689.314608][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7090'. [ 689.347151][T23256] netlink: 'syz.3.7090': attribute type 5 has an invalid length. [ 689.375706][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7090'. [ 689.404223][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7090'. [ 689.465493][T23258] netlink: 'syz.3.7090': attribute type 5 has an invalid length. [ 689.495297][T23258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7090'. [ 689.531969][T23261] fuse: fd is not a fuse device [ 689.544259][T22289] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.586535][T22289] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.621727][T22289] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.647148][T22289] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.473142][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7101'. [ 690.570692][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7101'. [ 690.645693][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7102'. [ 690.805489][T23283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.841918][T23283] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.880514][T23283] batman_adv: batadv0: Interface activated: dummy0 [ 690.923124][T23283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.072613][T23283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.135975][T23283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.199831][T23283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 691.227637][T23283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 691.271161][T23283] veth1_vlan: left promiscuous mode [ 691.280231][T23283] veth0_vlan: left promiscuous mode [ 691.289750][T23283] veth0_vlan: entered promiscuous mode [ 691.300405][T23283] veth1_vlan: entered promiscuous mode [ 691.329403][T23283] veth1_macvtap: left promiscuous mode [ 691.338915][T23283] veth0_macvtap: left promiscuous mode [ 691.347647][T23283] veth0_macvtap: entered promiscuous mode [ 691.357115][T23283] veth1_macvtap: entered promiscuous mode [ 691.379525][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.396731][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.412777][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.460479][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.480687][T23283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.512320][T23283] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 691.533941][T23283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.579275][T22290] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.608868][T22289] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.616153][T22289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.643903][T22289] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.651182][T22289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.797635][T22290] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.822069][T22290] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.891228][T22290] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.934491][T22290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.979130][T22290] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 692.022306][T22290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.051768][T22290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.082089][T22290] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 692.110851][T22290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.134501][T20643] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.165034][T20643] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 692.212812][T20643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.305825][T23314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7113'. [ 692.320331][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7113'. [ 692.361420][T20643] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.406746][T20643] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 692.434011][T20643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.810773][ T30] audit: type=1400 audit(2000001065.824:1503): avc: denied { mounton } for pid=23334 comm="syz.3.7122" path="/bus" dev="hugetlbfs" ino=85785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 693.295800][T23335] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 693.387849][T23335] overlayfs: failed to set xattr on upper [ 693.432124][T23335] overlayfs: ...falling back to redirect_dir=nofollow. [ 693.481124][T23335] overlayfs: ...falling back to index=off. [ 693.560229][T23335] overlayfs: ...falling back to uuid=null. [ 693.623962][T23335] overlayfs: ...falling back to xino=off. [ 693.690124][T23335] overlayfs: maximum fs stacking depth exceeded [ 694.474357][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7132'. [ 695.734286][ T29] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 695.856094][ T29] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 696.869324][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7152'. [ 697.205226][T23441] tipc: Started in network mode [ 697.231699][T23441] tipc: Node identity 4, cluster identity 4711 [ 697.244131][T23441] tipc: Node number set to 4 [ 697.961507][T23462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23462 comm=syz.6.7165 [ 698.095104][T23462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23462 comm=syz.6.7165 [ 699.716043][T23516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7185'. [ 699.971105][T23521] 9pnet: p9_errstr2errno: server reported unknown error  [ 700.324170][T23528] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 700.353417][T23528] batman_adv: batadv0: Adding interface: gretap2 [ 700.390193][T23528] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.443858][T23528] batman_adv: batadv0: Interface activated: gretap2 [ 700.702300][ T30] audit: type=1400 audit(2000001074.711:1504): avc: denied { read } for pid=23533 comm="syz.6.7193" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 701.459520][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7199'. [ 701.500610][T23539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 701.568056][T23539] block device autoloading is deprecated and will be removed. [ 702.221628][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7209'. [ 702.720640][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7214'. [ 702.776955][T23596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7214'. [ 702.815038][T23600] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7216'. [ 703.042715][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7219'. [ 703.148087][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7219'. [ 703.689462][ T30] audit: type=1400 audit(2000001077.701:1505): avc: denied { sys_admin } for pid=23621 comm="syz.1.7225" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 707.272274][T23712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7255'. [ 707.962062][T23727] xt_hashlimit: size too large, truncated to 1048576 [ 709.756592][T23749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7268'. [ 709.828865][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7268'. [ 712.352189][T23810] overlayfs: failed to clone upperpath [ 712.845473][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7293'. [ 713.447768][T23837] netlink: 'syz.6.7298': attribute type 4 has an invalid length. [ 713.562805][T23841] netlink: 'syz.6.7298': attribute type 4 has an invalid length. [ 714.158146][T23845] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.165754][T23845] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.599924][T23856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7303'. [ 716.231961][ T57] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.317417][ T57] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.402764][ T57] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.439305][ T57] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.477644][ T57] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.526877][ T57] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.564414][ T57] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.573341][T23860] lo speed is unknown, defaulting to 1000 [ 716.592465][ T57] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.882456][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7312'. [ 718.348694][T23916] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 720.939159][T23967] fuse: fd is not a fuse device [ 721.490437][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7346'. [ 721.926576][T23985] fuse: fd is not a fuse device [ 722.513431][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7352'. [ 722.706903][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7354'. [ 722.734219][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7354'. [ 722.773978][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7354'. [ 722.870283][ T30] audit: type=1326 audit(2000001096.881:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24002 comm="syz.5.7355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7fc00000 [ 723.002701][ T30] audit: type=1326 audit(2000001096.891:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24002 comm="syz.5.7355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc8b6f9de99 code=0x7fc00000 [ 723.449635][T24024] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7362'. [ 724.565467][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 724.589725][T24045] ceph: No mds server is up or the cluster is laggy [ 724.622728][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 724.873553][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7370'. [ 725.193441][ T30] audit: type=1400 audit(2000001099.181:1508): avc: denied { read } for pid=24055 comm="syz.2.7374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 725.232104][T24060] netlink: 'syz.6.7372': attribute type 1 has an invalid length. [ 725.239891][T24060] netlink: 'syz.6.7372': attribute type 4 has an invalid length. [ 725.247632][T24060] netlink: 9491 bytes leftover after parsing attributes in process `syz.6.7372'. [ 725.422584][ T30] audit: type=1400 audit(2000001099.431:1509): avc: denied { read } for pid=24066 comm="syz.6.7378" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 725.488829][T24067] lo speed is unknown, defaulting to 1000 [ 725.493023][ T30] audit: type=1400 audit(2000001099.431:1510): avc: denied { open } for pid=24066 comm="syz.6.7378" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 726.842010][T24098] overlayfs: invalid redirect ((null)) [ 729.673697][T24140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.759912][T24140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.187103][T24151] netlink: 'syz.3.7408': attribute type 1 has an invalid length. [ 730.220989][T24151] bond0: entered promiscuous mode [ 730.227849][T24151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.357903][T24151] bond0: (slave gretap0): making interface the new active one [ 730.370044][T24151] gretap0: entered promiscuous mode [ 730.401888][T24151] gretap0: left promiscuous mode [ 731.099677][T24178] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.7416'. [ 731.123031][T24178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7416'. [ 731.806229][ T30] audit: type=1326 audit(2000001105.821:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.2.7421" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x0 [ 733.282170][T24216] macvtap1: entered promiscuous mode [ 733.331346][T24216] vlan0: entered promiscuous mode [ 733.379222][T24216] team0: Device macvtap1 failed to register rx_handler [ 733.429303][T24216] vlan0: left promiscuous mode [ 733.536827][T24224] fuse: fd is not a fuse device [ 733.910897][T24234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7437'. [ 734.799595][T24251] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3063460621/3063460623 [ 734.927624][T24255] overlayfs: failed to clone upperpath [ 735.083236][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7447'. [ 738.560741][T24324] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7472'. [ 738.581216][T24324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7472'. [ 738.972093][T24335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7476'. [ 740.423801][T24364] cgroup: Unknown subsys name 'cpuset' [ 740.639923][ T30] audit: type=1400 audit(2000001114.641:1512): avc: denied { create } for pid=24366 comm="syz.5.7487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 740.687369][ T30] audit: type=1400 audit(2000001114.641:1513): avc: denied { connect } for pid=24366 comm="syz.5.7487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 741.451610][T24385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7494'. [ 741.641553][T24389] overlayfs: failed to clone upperpath [ 743.458052][T24422] io-wq is not configured for unbound workers [ 743.516963][T24423] overlayfs: failed to clone upperpath [ 743.721336][T24435] raw_sendmsg: syz.3.7515 forgot to set AF_INET. Fix it! [ 743.777850][T24438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7516'. [ 743.812045][T24438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7516'. [ 744.007864][ T30] audit: type=1400 audit(2000001118.021:1514): avc: denied { ioctl } for pid=24444 comm="syz.1.7519" path="/1352/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 744.035842][T24445] sd 0:0:1:0: PR command failed: 1026 [ 744.060383][T24445] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 744.091109][T24445] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 744.359365][T24459] netlink: 168 bytes leftover after parsing attributes in process `syz.5.7525'. [ 744.830180][T24475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7530'. [ 744.967843][T24480] fuse: fd is not a fuse device [ 745.874306][T24498] netlink: 'syz.2.7540': attribute type 1 has an invalid length. [ 746.025540][T24498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 746.042456][T24502] 0{X: left allmulticast mode [ 746.512793][T24524] overlayfs: failed to clone upperpath [ 746.932099][T24534] overlayfs: failed to clone upperpath [ 747.139152][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7554'. [ 747.325125][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.331542][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.442939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 747.906823][T24554] lo speed is unknown, defaulting to 1000 [ 748.824260][T24570] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 749.983819][T24595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7571'. [ 751.500797][T24619] netlink: 'syz.2.7579': attribute type 1 has an invalid length. [ 751.594191][T24619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 751.768571][T24619] vlan2: entered allmulticast mode [ 751.794689][T24619] bond5: entered allmulticast mode [ 752.005359][T24628] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 752.546842][T24636] netlink: 'syz.6.7585': attribute type 1 has an invalid length. [ 752.745742][T24636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.968240][T24639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 753.012782][T24639] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 753.076180][T24639] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 753.224757][T24641] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 753.252446][T24641] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 753.921585][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7597'. [ 753.949464][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7597'. [ 754.511810][ T30] audit: type=1326 audit(2000001128.521:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24682 comm="syz.2.7599" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x0 [ 756.395763][T24701] netlink: 'syz.5.7605': attribute type 13 has an invalid length. [ 756.534107][T24701] syz_tun: left promiscuous mode [ 756.580843][T24701] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.588150][T24701] bridge0: port 2(bridge_slave_1) entered listening state [ 756.595688][T24701] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.602881][T24701] bridge0: port 1(bridge_slave_0) entered listening state [ 759.010904][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7620'. [ 759.471182][T24751] lo speed is unknown, defaulting to 1000 [ 759.990213][T24773] netlink: 'syz.3.7631': attribute type 1 has an invalid length. [ 760.153776][T24773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.210876][T24782] netlink: 'syz.3.7631': attribute type 10 has an invalid length. [ 760.223037][T24782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7631'. [ 760.314866][T24775] bond3: (slave gretap0): Enslaving as a backup interface with an up link [ 760.393862][T12005] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 760.419891][T24776] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 760.474222][T24782] dummy0: entered promiscuous mode [ 760.501436][T24782] bond3: (slave dummy0): Releasing backup interface [ 760.550748][T24787] overlayfs: failed to clone upperpath [ 760.589035][T24785] tipc: Enabling of bearer rejected, failed to enable media [ 760.599859][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 761.224907][T24801] overlayfs: upper fs does not support file handles, falling back to index=off. [ 761.369490][T24808] overlayfs: failed to clone upperpath [ 762.503198][T24831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7650'. [ 762.539653][T24831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7650'. [ 762.844527][ T30] audit: type=1326 audit(2000001136.841:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 763.002759][ T30] audit: type=1326 audit(2000001136.861:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 763.160963][ T30] audit: type=1326 audit(2000001136.861:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 763.314479][ T30] audit: type=1326 audit(2000001136.891:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 763.478307][ T30] audit: type=1326 audit(2000001136.901:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 763.723078][ T30] audit: type=1326 audit(2000001136.951:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 764.034876][ T30] audit: type=1326 audit(2000001136.951:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 764.249456][ T30] audit: type=1326 audit(2000001136.951:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 764.276440][ T30] audit: type=1326 audit(2000001136.951:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc8b6f5e6ce code=0x7ffc0000 [ 764.361914][ T30] audit: type=1326 audit(2000001136.971:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24834 comm="syz.5.7652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc8b6f5e6ce code=0x7ffc0000 [ 764.521071][T24863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.086242][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7663'. [ 765.096449][T24872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.158384][T24872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.624624][T24878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7665'. [ 765.650848][T24878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7665'. [ 765.746553][T24885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7668'. [ 766.412767][T24905] overlayfs: failed to clone upperpath [ 766.860031][T24924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7681'. [ 767.982170][T24964] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.7688'. [ 768.015480][T24964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7688'. [ 768.079209][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 768.079247][ T30] audit: type=1400 audit(2000001142.091:1568): avc: denied { shutdown } for pid=24960 comm="syz.5.7687" lport=60302 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 768.942117][T24978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7694'. [ 768.965035][T24978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7694'. [ 769.235434][T24986] lo speed is unknown, defaulting to 1000 [ 769.803882][T24957] Bluetooth: hci1: command 0x0406 tx timeout [ 771.146653][T25023] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7712'. [ 772.019788][T25042] fuse: fd is not a fuse device [ 772.203104][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 772.210464][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 773.555433][T25066] overlayfs: failed to clone upperpath [ 775.121541][T25083] lo speed is unknown, defaulting to 1000 [ 776.203348][T23879] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 776.374587][T23879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.408889][T23879] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 776.426432][T23879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.522004][T23879] usb 2-1: config 0 descriptor?? [ 776.783059][T23879] usbhid 2-1:0.0: can't add hid device: -71 [ 776.815286][T23879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 776.891837][T23879] usb 2-1: USB disconnect, device number 82 [ 777.500254][T23879] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 777.539861][T25132] overlayfs: failed to clone upperpath [ 777.786740][T23879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.824931][T23879] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 777.859565][T23879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.909300][T23879] usb 2-1: config 0 descriptor?? [ 777.955162][T25137] netlink: 'syz.5.7747': attribute type 1 has an invalid length. [ 778.140612][ T30] audit: type=1400 audit(2000001152.151:1569): avc: denied { ioctl } for pid=25136 comm="syz.5.7747" path="socket:[93143]" dev="sockfs" ino=93143 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 778.286799][T25137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 778.452702][T25142] 9p: Bad value for 'rfdno' [ 778.514013][T25138] bond2: (slave dummy0): making interface the new active one [ 778.547932][T25138] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 778.693091][T25139] : renamed from dummy0 (while UP) [ 778.774036][T23879] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 778.781505][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.806858][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.807469][T23879] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input69 [ 779.232431][ T13] bridge_slave_1: left allmulticast mode [ 779.254629][ T13] bridge_slave_1: left promiscuous mode [ 779.299558][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.507554][ T13] x9: left allmulticast mode [ 779.536600][ T13] x9: left promiscuous mode [ 779.558781][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 779.567044][T23879] usb 2-1: USB disconnect, device number 83 [ 779.567148][ T13] bridge0: port 1(1x9) entered disabled state [ 779.678107][T25164] fuse: fd is not a fuse device [ 780.102362][ T13] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 780.139737][ T30] audit: type=1400 audit(2000001154.151:1570): avc: denied { write } for pid=25147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.216838][ T13] ip6gre1 (unregistering): left promiscuous mode [ 780.358738][ T30] audit: type=1400 audit(2000001154.361:1571): avc: denied { write } for pid=25183 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.733086][ T30] audit: type=1326 audit(2000001155.741:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz.6.7767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb9f79de99 code=0x0 [ 781.790356][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 781.986071][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'. [ 782.011728][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'. [ 782.029520][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.056512][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.080196][ T13] bond0 (unregistering): Released all slaves [ 782.084113][T25219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7773'. [ 782.096150][T25219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7773'. [ 782.135642][ T13] bond1 (unregistering): Released all slaves [ 782.234423][ T13] bond2 (unregistering): Released all slaves [ 782.255451][ T13] bond3 (unregistering): Released all slaves [ 782.273685][ T13] bond4 (unregistering): Released all slaves [ 782.295109][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 782.590236][T25231] overlayfs: failed to clone upperpath [ 782.905605][ T13] tipc: Disabling bearer [ 782.988356][ T13] tipc: Left network mode [ 783.513952][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7783'. [ 784.468833][ T30] audit: type=1400 audit(2000001158.471:1573): avc: denied { write } for pid=25233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.757902][T25293] fuse: fd is not a fuse device [ 784.948054][ T30] audit: type=1400 audit(2000001158.961:1574): avc: denied { write } for pid=25292 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.280906][T25306] netlink: 'syz.1.7796': attribute type 1 has an invalid length. [ 785.334739][T25308] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 785.366776][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 785.521277][T25306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 785.574853][T25320] overlayfs: failed to clone upperpath [ 785.615391][T25307] 8021q: adding VLAN 0 to HW filter on device bond6 [ 785.674094][T25309] bond3: (slave veth1): Enslaving as an active interface with a down link [ 785.746835][T25310] bond6: (slave veth7): Enslaving as an active interface with an up link [ 785.771147][T25311] batman_adv: batadv0: Interface deactivated: dummy0 [ 785.821042][T25311] batman_adv: batadv0: Removing interface: dummy0 [ 785.851764][T25311] bond3: (slave dummy0): making interface the new active one [ 785.862516][T25311] dummy0: entered promiscuous mode [ 785.880267][T25311] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 786.024872][T25312] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 786.209490][T25316] bond6 (unregistering): (slave veth7): Releasing backup interface [ 786.235633][T25316] bond6 (unregistering): (slave dummy0): Releasing backup interface [ 786.272852][T25316] bond6 (unregistering): Released all slaves [ 786.347727][T25317] bond3 (unregistering): (slave veth1): Releasing active interface [ 786.419033][T25317] bond3 (unregistering): (slave dummy0): Releasing active interface [ 786.534918][T25317] bond3 (unregistering): Released all slaves [ 787.563068][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.570373][ C1] bridge0: topology change detected, propagating [ 787.577129][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.584415][ C1] bridge0: topology change detected, propagating [ 787.629026][ T13] hsr_slave_0: left promiscuous mode [ 787.645289][ T13] hsr_slave_1: left promiscuous mode [ 787.660454][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.727976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.595475][ T30] audit: type=1400 audit(2000001162.611:1575): avc: denied { write } for pid=25353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.953482][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7814'. [ 788.999550][ T30] audit: type=1400 audit(2000001163.011:1576): avc: denied { write } for pid=25387 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.104150][ T13] team0 (unregistering): Port device team_slave_1 removed [ 791.199602][ T13] team0 (unregistering): Port device team_slave_0 removed [ 791.552925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 792.078315][T25431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25431 comm=syz.2.7827 [ 792.146992][T25431] netlink: 'syz.2.7827': attribute type 1 has an invalid length. [ 792.602762][ T1068] smc: removing ib device syz2 [ 792.715625][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 792.950818][T25431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 793.124633][T25434] vlan4: entered allmulticast mode [ 793.137470][T25434] veth0_to_bond: entered allmulticast mode [ 793.233386][T25434] bond6: (slave vlan4): Opening slave failed [ 793.917857][ T1068] smbdirect: ib_dev[syz2] removed [ 793.976050][T25455] fuse: fd is not a fuse device [ 794.672026][T25474] overlayfs: failed to clone upperpath [ 795.345829][T25489] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 795.829083][ T30] audit: type=1400 audit(2000001169.841:1577): avc: denied { write } for pid=25466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.316463][ T30] audit: type=1400 audit(2000001170.331:1578): avc: denied { write } for pid=25504 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.458153][T25510] fuse: fd is not a fuse device [ 796.579281][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 797.229165][T25522] netlink: 'syz.5.7849': attribute type 13 has an invalid length. [ 797.666363][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7852'. [ 797.716763][T25536] netlink: 'syz.6.7852': attribute type 11 has an invalid length. [ 797.977230][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7852'. [ 797.988034][T22296] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.012417][T25536] netlink: 'syz.6.7852': attribute type 11 has an invalid length. [ 798.024815][T22296] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.067061][T22296] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.118129][T22296] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.905618][ T13] IPVS: stop unused estimator thread 0... [ 798.933967][T25560] overlayfs: failed to clone upperpath [ 800.202930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 800.996716][T25602] netlink: 'syz.1.7874': attribute type 2 has an invalid length. [ 801.603957][T25602] : entered promiscuous mode [ 802.459178][T25635] overlayfs: failed to clone upperpath [ 803.305358][T25659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7894'. [ 803.439143][T25665] syzkaller0: entered promiscuous mode [ 803.450605][T25665] syzkaller0: entered allmulticast mode [ 803.459387][T25659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7894'. [ 804.091932][T25677] netlink: 'syz.5.7900': attribute type 1 has an invalid length. [ 804.161274][T25677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.307409][T25686] overlayfs: failed to clone upperpath [ 806.135797][T25722] overlayfs: conflicting options: nfs_export=on,index=off [ 806.189641][T25725] netlink: 'syz.6.7913': attribute type 11 has an invalid length. [ 806.221393][T25725] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7913'. [ 806.534572][ T30] audit: type=1804 audit(2000001180.551:1579): pid=25733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.7916" name="/newroot/189/file0" dev="tmpfs" ino=1001 res=1 errno=0 [ 807.473726][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7923'. [ 808.597563][T25782] netlink: 'syz.1.7931': attribute type 1 has an invalid length. [ 808.685579][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.693686][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.758949][ T30] audit: type=1400 audit(2000001182.771:1580): avc: denied { write } for pid=25757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.801077][T25790] fuse: fd is not a fuse device [ 808.832496][T25782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 809.250364][ T30] audit: type=1400 audit(2000001183.261:1581): avc: denied { write } for pid=25800 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.089080][T25823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7942'. [ 810.132192][T25823] netlink: 'syz.2.7942': attribute type 7 has an invalid length. [ 810.173167][T25823] netlink: 'syz.2.7942': attribute type 8 has an invalid length. [ 810.207165][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7942'. [ 810.212961][T25827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7942'. [ 810.281009][T25827] netlink: 'syz.2.7942': attribute type 7 has an invalid length. [ 810.316543][T25827] netlink: 'syz.2.7942': attribute type 8 has an invalid length. [ 810.367875][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7942'. [ 810.586082][ T30] audit: type=1400 audit(2000001184.601:1582): avc: denied { write } for pid=25814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.989676][ T30] audit: type=1400 audit(2000001185.001:1583): avc: denied { write } for pid=25845 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.450985][ T30] audit: type=1400 audit(2000001185.441:1584): avc: denied { setattr } for pid=25836 comm="syz.6.7945" name="ns" dev="proc" ino=97095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 811.562928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 812.506761][ T30] audit: type=1400 audit(2000001186.511:1585): avc: denied { write } for pid=25860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.866893][T25897] loop5: detected capacity change from 0 to 7 [ 812.899321][T25897] loop5: [POWERTEC] p1 p2 p3 [ 812.929909][T25897] loop5: p1 size 1919942656 extends beyond EOD, truncated [ 812.980332][T25897] loop5: p2 start 876163636 is beyond EOD, truncated [ 813.027204][T25897] loop5: p3 start 29360128 is beyond EOD, truncated [ 813.043561][ T30] audit: type=1400 audit(2000001187.051:1586): avc: denied { write } for pid=25898 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.281185][T25807] udevd[25807]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 813.852424][T25931] netlink: zone id is out of range [ 813.857717][T25931] netlink: zone id is out of range [ 814.064911][ T30] audit: type=1400 audit(2000001188.081:1587): avc: denied { write } for pid=25913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.456443][ T30] audit: type=1400 audit(2000001188.461:1588): avc: denied { write } for pid=25936 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.880451][T25948] bond0: Caught tx_queue_len zero misconfig [ 814.989366][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7970'. [ 815.488124][T25967] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 815.512389][T25972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7979'. [ 817.760364][T26017] pim6reg: entered allmulticast mode [ 817.781623][T26019] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 817.875489][T26021] pim6reg: left allmulticast mode [ 817.892031][T26017] fuse: fd is not a fuse device [ 818.176888][ T30] audit: type=1326 audit(2000001192.191:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.183750][T26034] netlink: 'syz.3.7999': attribute type 1 has an invalid length. [ 818.281881][T26034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 818.293183][ T30] audit: type=1326 audit(2000001192.191:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.398388][ T30] audit: type=1326 audit(2000001192.231:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.438615][T26038] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 818.502038][ T30] audit: type=1326 audit(2000001192.231:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.537759][T26038] bond4: entered allmulticast mode [ 818.557225][ T30] audit: type=1326 audit(2000001192.231:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.584236][ T30] audit: type=1326 audit(2000001192.231:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.678639][ T30] audit: type=1326 audit(2000001192.231:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.782232][ T30] audit: type=1326 audit(2000001192.231:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.859653][ T30] audit: type=1326 audit(2000001192.231:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.888554][ T30] audit: type=1326 audit(2000001192.231:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.2.7998" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ac79de99 code=0x7ffc0000 [ 818.945035][T26047] netlink: 'syz.3.8000': attribute type 1 has an invalid length. [ 819.624484][T26057] fuse: fd is not a fuse device [ 820.207628][T26067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8007'. [ 820.594320][T26074] netlink: 'syz.5.8008': attribute type 2 has an invalid length. [ 820.615272][T26074] netlink: 'syz.5.8008': attribute type 2 has an invalid length. [ 820.630649][T26076] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 822.474107][T26103] md: md2 stopped. [ 823.324025][ T805] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 823.540408][ T805] usb 2-1: config index 0 descriptor too short (expected 65281, got 36) [ 823.583257][ T805] usb 2-1: config 9 has too many interfaces: 144, using maximum allowed: 32 [ 823.620216][ T805] usb 2-1: config 9 has an invalid descriptor of length 20, skipping remainder of the config [ 823.647391][ T805] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 144 [ 823.701993][ T805] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.725993][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.762015][ T805] usb 2-1: Product: syz [ 823.786798][ T805] usb 2-1: Manufacturer: syz [ 823.818311][ T805] usb 2-1: SerialNumber: syz [ 824.008478][T26128] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8031'. [ 824.096755][T26128] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.104610][T26128] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.125078][T26130] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8031'. [ 824.295517][ T805] usb 2-1: USB disconnect, device number 84 [ 824.346717][T26130] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.357928][T26130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.366178][T26130] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.373907][T26130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.424363][T26130] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8031'. [ 824.574082][T26130] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.581942][T26130] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.156454][T10820] libceph: connect (1)[c::]:6789 error -101 [ 825.184538][T26143] ceph: No mds server is up or the cluster is laggy [ 825.206666][T10820] libceph: mon0 (1)[c::]:6789 connect error [ 825.453165][ T805] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 825.628688][ T805] usb 7-1: Using ep0 maxpacket: 8 [ 825.640064][T26156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8041'. [ 825.665016][ T805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 825.688910][ T805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 825.714149][ T805] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 825.728751][ T805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 825.766680][ T805] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 825.779209][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8041'. [ 825.810907][ T805] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 825.837899][ T805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.860494][ T805] usb 7-1: config 0 descriptor?? [ 826.192716][ T805] usb 7-1: USB disconnect, device number 2 [ 827.042029][T26180] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 827.497838][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 827.497861][ T30] audit: type=1400 audit(2000001201.501:1812): avc: denied { name_bind } for pid=26190 comm="syz.3.8053" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 828.394264][ T30] audit: type=1804 audit(2000001202.401:1813): pid=26200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.8057" name="file0" dev="tmpfs" ino=3601 res=1 errno=0 [ 828.436223][T26209] netlink: 276 bytes leftover after parsing attributes in process `syz.6.8061'. [ 828.745295][T26218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8065'. [ 828.820727][T26218] 8021q: adding VLAN 0 to HW filter on device bond7 [ 830.555652][T26259] 8021q: adding VLAN 0 to HW filter on device bond6 [ 830.850972][T26265] bond6: (slave veth3): Enslaving as an active interface with an up link [ 830.909875][T26266] dummy0: left promiscuous mode [ 830.922699][T26271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8078'. [ 830.996272][T26266] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 831.201220][T26259] bond6 (unregistering): (slave veth3): Releasing backup interface [ 831.244079][T26259] bond6 (unregistering): (slave dummy0): Releasing backup interface [ 831.369193][T26259] bond6 (unregistering): Released all slaves [ 831.777815][T26279] netlink: 'syz.2.8080': attribute type 83 has an invalid length. [ 831.919250][T26287] netlink: 'syz.2.8080': attribute type 83 has an invalid length. [ 832.166844][ T30] audit: type=1400 audit(2000001206.181:1814): avc: denied { nlmsg_read } for pid=26294 comm="syz.6.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 833.047886][ T4926] block nbd1: Receive control failed (result -32) [ 833.091605][ T30] audit: type=1400 audit(2000001207.091:1815): avc: denied { read write } for pid=26318 comm="syz.1.8096" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 833.146391][ T30] audit: type=1400 audit(2000001207.091:1816): avc: denied { open } for pid=26318 comm="syz.1.8096" path="/1458/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 833.393195][T26328] fuse: fd is not a fuse device [ 833.679993][T26330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 833.698614][T26340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8103'. [ 833.724709][T26340] unsupported nlmsg_type 40 [ 834.336355][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8113'. [ 834.573904][T26362] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8114'. [ 835.235408][ T5732] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 835.251702][T26378] fuse: fd is not a fuse device [ 835.396586][T26387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8123'. [ 835.419782][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.462185][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.487335][ T5732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 835.533201][ T5732] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 835.560985][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.620793][ T5732] usb 2-1: config 0 descriptor?? [ 835.875177][T26393] fuse: fd is not a fuse device [ 836.070918][ T5732] plantronics 0003:047F:FFFF.0044: reserved main item tag 0xd [ 836.090935][ T5732] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 836.112407][ T5732] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 836.171932][ T5732] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 836.430010][ T5732] usb 2-1: USB disconnect, device number 85 [ 837.199392][T26410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.395101][T26418] bond4: (slave veth7): Enslaving as an active interface with an up link [ 837.684978][T26426] bond4 (unregistering): (slave veth7): Releasing backup interface [ 837.702650][T26426] bond4 (unregistering): Released all slaves [ 839.212932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 839.443501][ T4926] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 839.652921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 840.280376][T26468] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 840.330710][T26468] lo: Caught tx_queue_len zero misconfig [ 841.066613][T26483] fuse: Bad value for 'rootmode' [ 841.112172][T26483] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZIh~"G [ 841.293946][T26486] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 841.502157][T26505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8166'. [ 841.610125][T26502] bond8: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 841.635584][T26502] bond8: entered allmulticast mode [ 841.671693][T26509] bridge7: entered promiscuous mode [ 841.688874][T26509] bridge7: entered allmulticast mode [ 841.695875][T26509] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 841.726455][T26516] netlink: 'syz.6.8169': attribute type 39 has an invalid length. [ 842.270961][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 842.318526][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 842.344985][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 842.361310][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 842.410000][T26533] ceph: No mds server is up or the cluster is laggy [ 842.669783][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 842.701225][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 843.105281][T26551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 843.260175][ T30] audit: type=1400 audit(2000001217.261:1817): avc: denied { unlink } for pid=26545 comm="syz.1.8175" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 843.601990][T26562] fuse: fd is not a fuse device [ 843.684495][T26565] tipc: Started in network mode [ 843.698957][T26565] tipc: Node identity 2007ff, cluster identity 4711 [ 843.715963][T26565] tipc: Node number set to 2099199 [ 844.055306][T26569] input: syz1 as /devices/virtual/input/input70 [ 844.628241][T26578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8187'. [ 845.550001][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8190'. [ 846.167109][ T30] audit: type=1400 audit(2000001220.181:1818): avc: denied { mount } for pid=26607 comm="syz.1.8197" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 846.547594][T26617] kvm: pic: level sensitive irq not supported [ 846.637848][T26623] fuse: fd is not a fuse device [ 846.821843][ T5731] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 847.640440][ T5731] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 847.653991][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.672811][ T5731] usb 7-1: Product: syz [ 847.678049][ T5731] usb 7-1: Manufacturer: syz [ 847.685440][T26627] veth1_macvtap: left promiscuous mode [ 847.693180][ T5731] usb 7-1: SerialNumber: syz [ 848.109298][ T5731] rtl8150 7-1:1.0: couldn't reset the device [ 848.125610][ T5731] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 848.149910][ T5731] usb 7-1: USB disconnect, device number 3 [ 848.226045][T26643] uprobe: syz.3.8208:26643 failed to unregister, leaking uprobe [ 848.432297][T26643] uprobe: syz.3.8208:26643 failed to unregister, leaking uprobe [ 848.877814][T26661] sch_tbf: burst 1520 is lower than device lo mtu (32783) ! [ 849.112922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 849.746549][ T30] audit: type=1400 audit(2000001223.761:1819): avc: denied { write } for pid=26649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.872923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 849.939127][T26684] netlink: 'syz.5.8216': attribute type 21 has an invalid length. [ 849.988513][T26684] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8216'. [ 850.029805][T26684] netlink: 'syz.5.8216': attribute type 5 has an invalid length. [ 850.063916][T26684] netlink: 'syz.5.8216': attribute type 6 has an invalid length. [ 850.098036][T26684] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8216'. [ 850.246982][ T30] audit: type=1400 audit(2000001224.261:1820): avc: denied { write } for pid=26688 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.517221][ T5270] veth1_macvtap: entered promiscuous mode [ 851.632693][T26706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8223'. [ 851.686893][T26706] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8223'. [ 852.416419][ T30] audit: type=1400 audit(2000001226.421:1821): avc: denied { write } for pid=26707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.546615][ T30] audit: type=1400 audit(2000001226.501:1822): avc: denied { write } for pid=26727 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.258638][T26759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8234'. [ 854.836411][ T30] audit: type=1326 audit(2000001228.851:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 854.928993][ T30] audit: type=1326 audit(2000001228.851:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 854.966525][ T30] audit: type=1326 audit(2000001228.881:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 855.031907][ T30] audit: type=1326 audit(2000001228.881:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 855.130016][ T30] audit: type=1326 audit(2000001228.881:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 855.204100][ T30] audit: type=1326 audit(2000001228.881:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 855.252931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 855.262179][ T30] audit: type=1326 audit(2000001228.931:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 855.302635][ T30] audit: type=1326 audit(2000001228.931:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x7ffc0000 [ 855.399826][ T30] audit: type=1326 audit(2000001228.931:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f402f75e6ce code=0x7ffc0000 [ 855.540043][ T30] audit: type=1326 audit(2000001228.931:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26768 comm="syz.1.8238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f402f75e6ce code=0x7ffc0000 [ 856.355625][T26796] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 856.479624][T26803] netlink: zone id is out of range [ 856.491372][T26803] netlink: zone id is out of range [ 856.502128][T26803] netlink: zone id is out of range [ 856.512842][T26803] netlink: zone id is out of range [ 856.556984][T26803] netlink: zone id is out of range [ 856.567156][T26803] netlink: zone id is out of range [ 856.575450][T26803] netlink: zone id is out of range [ 856.598372][T26803] netlink: zone id is out of range [ 856.609903][T26803] netlink: zone id is out of range [ 856.632238][T26803] netlink: zone id is out of range [ 858.388169][T26840] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 859.775111][T26859] overlayfs: failed to clone lowerpath [ 862.311516][T26893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8277'. [ 862.434010][T26893] bpf: Bad value for 'context' [ 864.359846][T26932] netlink: 'syz.5.8288': attribute type 4 has an invalid length. [ 864.384237][T26931] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 864.451347][T26935] netlink: 'syz.5.8288': attribute type 4 has an invalid length. [ 865.056295][ T4926] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 865.157985][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 865.158006][ T30] audit: type=1400 audit(2000001239.161:1855): avc: denied { write } for pid=26920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.688572][ T30] audit: type=1400 audit(2000001239.701:1856): avc: denied { write } for pid=26969 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.030946][T26981] xt_hashlimit: size too large, truncated to 1048576 [ 866.636599][T26994] kvm: pic: non byte read [ 866.660180][T26994] kvm: pic: non byte read [ 866.688968][T26994] kvm: pic: non byte read [ 866.715085][T26994] kvm: pic: non byte read [ 866.737894][T26994] kvm: pic: non byte read [ 866.755263][T26994] kvm: pic: non byte read [ 866.776890][T26994] kvm: pic: non byte read [ 866.793327][T26994] kvm: pic: non byte read [ 866.813432][T26994] kvm: pic: non byte read [ 866.826284][T26994] kvm: pic: non byte read [ 867.247908][T27011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8308'. [ 867.381005][T27016] netlink: 'syz.6.8308': attribute type 5 has an invalid length. [ 867.434270][ T30] audit: type=1400 audit(2000001241.441:1857): avc: denied { write } for pid=26984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.448090][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8308'. [ 867.771405][T27020] comedi comedi3: comedi_config --init_data is deprecated [ 867.968723][T27021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8310'. [ 868.430206][ T30] audit: type=1400 audit(2000001242.441:1858): avc: denied { write } for pid=27024 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.838903][T27035] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 869.121201][T27043] sctp: [Deprecated]: syz.1.8317 (pid 27043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.121201][T27043] Use struct sctp_sack_info instead [ 869.280073][ T30] audit: type=1400 audit(2000001243.291:1859): avc: denied { bind } for pid=27046 comm="syz.2.8319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 869.794057][T27062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8324'. [ 869.911948][T27059] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 869.929699][T27067] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27067 comm=syz.5.8324 [ 870.127886][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.136553][T27064] 8021q: adding VLAN 0 to HW filter on device bond9 [ 870.137374][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.204285][T27068] bond9: (slave ip6erspan0): making interface the new active one [ 870.228523][T27068] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 870.438328][T27076] fuse: fd is not a fuse device [ 871.831777][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8338'. [ 871.965538][T27115] netlink: 'syz.2.8340': attribute type 1 has an invalid length. [ 872.006329][T27111] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.013950][T27111] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.203601][T27111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.676426][T27111] syzkaller0: left promiscuous mode [ 872.696798][T27111] syzkaller0: left allmulticast mode [ 873.207281][T27111] batman_adv: batadv0: Interface deactivated: gretap2 [ 873.332617][T27112] geneve4: entered promiscuous mode [ 873.343826][T27112] geneve4: entered allmulticast mode [ 873.503350][T27115] 8021q: adding VLAN 0 to HW filter on device bond10 [ 873.864224][T27117] bond10: (slave veth9): Enslaving as an active interface with a down link [ 874.006767][T27120] erspan0: left promiscuous mode [ 874.294027][T27120] 8021q: adding VLAN 0 to HW filter on device  [ 874.649632][ T30] audit: type=1400 audit(2000001248.661:1860): avc: denied { write } for pid=27147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.664545][T27120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.759822][T27120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.922849][T27120] veth1_vlan: left promiscuous mode [ 875.001378][T27120] veth0_vlan: left promiscuous mode [ 875.069758][ T30] audit: type=1400 audit(2000001249.081:1861): avc: denied { write } for pid=27189 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 875.075067][T27120] veth0_vlan: entered promiscuous mode [ 875.228077][T27120] veth1_vlan: entered promiscuous mode [ 875.407941][T27120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 875.442141][T27120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 875.489052][T27120] erspan0: entered promiscuous mode [ 875.526745][T27120] 8021q: adding VLAN 0 to HW filter on device eth0 [ 875.563879][T27120] 8021q: adding VLAN 0 to HW filter on device eth1 [ 875.588342][T27120] 8021q: adding VLAN 0 to HW filter on device eth2 [ 875.615651][T27120] 8021q: adding VLAN 0 to HW filter on device eth3 [ 875.864271][T27120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.929134][ T30] audit: type=1326 audit(2000001249.931:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 876.126750][T27120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 876.193892][ T30] audit: type=1326 audit(2000001249.971:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 876.711600][ T30] audit: type=1326 audit(2000001249.981:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 876.820148][T27120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 876.871342][T27120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 876.882783][ T30] audit: type=1326 audit(2000001249.991:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 876.949844][T27120] vlan2: left allmulticast mode [ 876.974805][T27120] bond5: left allmulticast mode [ 877.032140][ T30] audit: type=1326 audit(2000001249.991:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc8b6f9de99 code=0x7ffc0000 [ 877.068244][T27120] 8021q: adding VLAN 0 to HW filter on device bond6 [ 877.129589][T27120] 8021q: adding VLAN 0 to HW filter on device bond7 [ 877.238646][T27120] bond8: left allmulticast mode [ 877.250618][ T30] audit: type=1326 audit(2000001250.041:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc8b6f5e6ce code=0x7ffc0000 [ 877.300679][T27120] bridge7: left allmulticast mode [ 877.342669][T27120] 8021q: adding VLAN 0 to HW filter on device bond8 [ 877.392826][T27120] bridge7: left promiscuous mode [ 877.446344][ T30] audit: type=1326 audit(2000001250.041:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc8b6f5e6ce code=0x7ffc0000 [ 877.605648][T27124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.660024][ T30] audit: type=1326 audit(2000001250.051:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.5.8357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc8b6f5e6ce code=0x7ffc0000 [ 877.702024][T27124] bond10: (slave batadv0): making interface the new active one [ 877.769985][T27124] batadv0: entered promiscuous mode [ 877.791865][T27124] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 877.859984][ T1068] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.920389][ T1068] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 877.957837][ T1068] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.985645][ T1068] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 877.996180][ T1068] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.006312][ T1068] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 878.015932][ T1068] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.025814][ T1068] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 878.077019][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.084840][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.305588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.312758][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.475654][ T1068] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.485093][ T1068] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 878.494136][ T1068] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.504713][ T1068] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 878.543819][ T1068] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.553861][ T1068] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 878.562828][ T1068] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.605198][ T1068] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 878.658764][ T1068] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.671063][ T1068] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.692757][ T1068] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.711041][ T1068] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.956138][T23350] bond8: (slave bridge7): link status definitely up, 0 Mbps full duplex [ 879.238516][T23350] bond8: active interface up! [ 879.280778][ T1068] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.319959][ T1068] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.429358][ T57] bond10: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 879.455354][ T1068] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.519393][ T1068] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.329700][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 880.329722][ T30] audit: type=1400 audit(2000001254.341:1893): avc: denied { write } for pid=27258 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.731955][T27267] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 881.271384][ T30] audit: type=1326 audit(2000001255.281:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 881.387092][ T30] audit: type=1326 audit(2000001255.281:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 881.462201][ T30] audit: type=1326 audit(2000001255.281:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 881.556380][ T30] audit: type=1326 audit(2000001255.281:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 881.617411][ T30] audit: type=1326 audit(2000001255.281:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 881.771931][ T30] audit: type=1326 audit(2000001255.281:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 881.849529][ T30] audit: type=1326 audit(2000001255.281:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 881.986825][ T30] audit: type=1326 audit(2000001255.281:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f75b359de99 code=0x7ffc0000 [ 882.105832][ T30] audit: type=1326 audit(2000001255.281:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.3.8380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f75b3597c17 code=0x7ffc0000 [ 882.224533][T27289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8382'. [ 882.420818][T27289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27289 comm=syz.5.8382 [ 882.563169][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8385'. [ 882.896010][T27309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=27309 comm=syz.5.8386 [ 882.931703][T27309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27309 comm=syz.5.8386 [ 882.965810][T27309] netlink: 'syz.5.8386': attribute type 27 has an invalid length. [ 883.012111][T27309] netlink: 'syz.5.8386': attribute type 4 has an invalid length. [ 883.042082][T27309] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8386'. [ 883.526854][T27323] : renamed from vlan0 (while UP) [ 885.000901][T27347] overlayfs: failed to clone upperpath [ 885.421547][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8401'. [ 885.457732][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8401'. [ 887.238805][T27382] batadv_slave_0: entered promiscuous mode [ 887.249413][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8407'. [ 887.369785][T27382] batadv_slave_0 (unregistering): left promiscuous mode [ 889.512935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 889.835676][T27408] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.843014][T27408] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.854618][T27421] netlink: 'syz.3.8417': attribute type 1 has an invalid length. [ 891.248086][T27421] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 891.258123][T27423] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 891.399686][T27427] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 891.451213][T20645] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.673666][T20645] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.698866][T20645] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.707355][T20645] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.722537][T20645] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.731112][T20645] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.742315][ T1068] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.733156][ T1068] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.301411][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8420'. [ 893.354963][T27442] macsec2: entered promiscuous mode [ 893.372380][T27442] virt_wifi0: entered promiscuous mode [ 893.801516][T27451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8424'. [ 894.833074][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 894.833119][ T30] audit: type=1400 audit(2000001268.751:1964): avc: denied { ioctl } for pid=27452 comm="syz.2.8425" path="socket:[103172]" dev="sockfs" ino=103172 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 894.990241][T27463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8429'. [ 895.161132][T27467] netlink: 'syz.6.8430': attribute type 4 has an invalid length. [ 895.220058][T27469] netlink: 'syz.6.8430': attribute type 4 has an invalid length. [ 896.354670][T27489] netlink: 'syz.1.8437': attribute type 1 has an invalid length. [ 896.541579][T27489] bond4: entered promiscuous mode [ 896.557528][T27489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.701230][T27491] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 896.766092][T27491] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 896.843581][T27491] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 897.339267][T27492] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 897.376285][T27492] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 897.399350][T27498] netlink: 'syz.5.8439': attribute type 1 has an invalid length. [ 897.407330][T27498] netlink: 'syz.5.8439': attribute type 1 has an invalid length. [ 897.866978][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8441'. [ 899.397968][T27548] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 900.633035][ T5732] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 900.823226][ T5732] usb 7-1: Using ep0 maxpacket: 8 [ 900.862317][ T5732] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 900.887024][ T5732] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.949027][ T5732] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 900.967125][ T5732] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 901.012302][ T5732] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.067616][ T5732] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 901.087790][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.213773][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8470'. [ 901.318821][T27584] hsr_slave_0 (unregistering): left promiscuous mode [ 901.392584][ T5732] usb 7-1: GET_CAPABILITIES returned 0 [ 901.407235][ T5732] usbtmc 7-1:16.0: can't read capabilities [ 901.788996][ T5732] usb 7-1: USB disconnect, device number 4 [ 902.918647][T27608] fuse: fd is not a fuse device [ 903.833070][ T30] audit: type=1326 audit(2000001277.831:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9f79de99 code=0x7ffc0000 [ 903.968943][ T30] audit: type=1326 audit(2000001277.831:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9f79de99 code=0x7ffc0000 [ 904.042677][ T30] audit: type=1326 audit(2000001277.831:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9f79de99 code=0x7ffc0000 [ 904.072110][ T30] audit: type=1326 audit(2000001277.831:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdb9f79de99 code=0x7ffc0000 [ 904.100672][ T30] audit: type=1326 audit(2000001277.881:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb9f75e6ce code=0x7ffc0000 [ 904.127344][ T30] audit: type=1326 audit(2000001277.881:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb9f75e6ce code=0x7ffc0000 [ 904.154325][ T30] audit: type=1326 audit(2000001277.881:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb9f75e6ce code=0x7ffc0000 [ 904.766394][ T30] audit: type=1326 audit(2000001277.881:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb9f75e6ce code=0x7ffc0000 [ 904.802814][ T30] audit: type=1326 audit(2000001277.901:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb9f75e6ce code=0x7ffc0000 [ 904.890866][ T30] audit: type=1326 audit(2000001277.901:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.6.8479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb9f75e6ce code=0x7ffc0000 [ 905.055638][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 905.096136][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 905.108043][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 905.129414][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 905.144594][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 905.166030][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 909.003830][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 909.003858][ T30] audit: type=1804 audit(2000001283.011:2033): pid=27686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.8499" name="bus" dev="ramfs" ino=104879 res=1 errno=0 [ 909.165182][ T30] audit: type=1804 audit(2000001283.121:2034): pid=27687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.8499" name="bus" dev="ramfs" ino=104879 res=1 errno=0 [ 910.029225][T27704] netlink: 'syz.5.8503': attribute type 1 has an invalid length. [ 910.138589][T27707] kAFS: No cell specified [ 911.047091][T27704] 8021q: adding VLAN 0 to HW filter on device bond4 [ 912.080861][T27708] vlan0: entered allmulticast mode [ 912.109619][T27708] bond4: entered allmulticast mode [ 914.626828][T27731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.716106][T27731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.664859][T27731] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 915.711760][T27748] netlink: 'syz.5.8518': attribute type 3 has an invalid length. [ 915.730056][T27748] netlink: 'syz.5.8518': attribute type 3 has an invalid length. [ 915.780868][T23354] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.828919][T23354] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.873406][T23354] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.937577][T23354] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.990177][T23354] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.999441][T23354] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.012868][T23354] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.024686][T23354] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.059129][T27772] geneve4: left promiscuous mode [ 917.083012][T27772] geneve4: left allmulticast mode [ 917.104875][T27772] bond4: left promiscuous mode [ 917.161925][T23356] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 917.207468][T23356] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 917.251295][T23356] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 917.285900][T23356] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 917.395706][T27777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8526'. [ 917.493257][T27777] 8021q: adding VLAN 0 to HW filter on device bond5 [ 917.557230][T27779] macvlan2: entered promiscuous mode [ 917.615770][T27779] macvlan2: entered allmulticast mode [ 917.637974][T27779] bond5: entered promiscuous mode [ 917.667788][T27779] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 917.749207][T27779] bond5: left promiscuous mode [ 918.065185][T27781] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 918.223419][ T30] audit: type=1400 audit(2000001292.231:2035): avc: denied { nlmsg_read } for pid=27787 comm="syz.5.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 918.336186][T27790] netlink: 'syz.3.8530': attribute type 1 has an invalid length. [ 918.589457][T27797] bond6: (slave gretap1): making interface the new active one [ 918.653360][T27797] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 919.021769][T27794] 8021q: adding VLAN 0 to HW filter on device bond7 [ 919.055269][T27794] bond6: (slave bond7): Enslaving as a backup interface with an up link [ 919.104821][T27790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 920.305584][T27823] tipc: New replicast peer: 255.255.255.255 [ 920.331509][T27823] tipc: Enabled bearer , priority 10 [ 923.150057][T27853] netlink: 'syz.2.8548': attribute type 1 has an invalid length. [ 923.275361][T27853] 8021q: adding VLAN 0 to HW filter on device bond11 [ 923.430122][T27859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8550'. [ 925.602085][T27889] fuse: fd is not a fuse device [ 925.629549][T27889] overlayfs: failed to clone upperpath [ 926.085819][ T30] audit: type=1804 audit(2000001300.091:2036): pid=27896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.8560" name="file0" dev="tmpfs" ino=4160 res=1 errno=0 [ 926.094125][T27896] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 926.526565][ T30] audit: type=1326 audit(2000001300.501:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.1.8561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f402f79de99 code=0x0 [ 926.832702][T27896] ref_ctr increment failed for inode: 0x1040 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880762c9980 [ 926.908700][T27901] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 926.944746][T27901] ref_ctr decrement failed for inode: 0x1040 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880762c9980 [ 927.018801][T27901] uprobe: syz.5.8560:27901 failed to unregister, leaking uprobe [ 927.176486][ T4926] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 928.619840][T27927] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8569'. [ 928.849405][ T30] audit: type=1400 audit(2000001302.841:2038): avc: denied { map } for pid=27926 comm="syz.1.8569" path="socket:[105438]" dev="sockfs" ino=105438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 929.348525][ T4926] Bluetooth: hci1: command 0x0406 tx timeout [ 929.830810][T27942] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 931.519910][T24957] Bluetooth: hci1: command 0x0406 tx timeout [ 931.587930][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.595979][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.860613][T27964] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 932.100781][T27965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8581'. [ 932.832704][T27977] overlayfs: failed to clone upperpath [ 938.520593][T28007] overlayfs: failed to clone lowerpath [ 939.910551][T28025] fuse: Bad value for 'fd' [ 939.932123][T28025] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8597'. [ 940.212504][ T30] audit: type=1400 audit(2000001314.221:2039): avc: denied { watch watch_reads } for pid=28030 comm="syz.1.8599" path="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 940.273817][T28038] overlayfs: failed to clone upperpath [ 944.150256][T28066] netlink: 2092 bytes leftover after parsing attributes in process `syz.1.8609'. [ 945.887635][T28103] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8618'. [ 951.006940][T28144] netlink: 'syz.3.8631': attribute type 1 has an invalid length. [ 951.124620][T28148] netlink: 'syz.1.8630': attribute type 1 has an invalid length. [ 951.133896][T28148] netlink: 'syz.1.8630': attribute type 4 has an invalid length. [ 951.145098][T28148] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.8630'. [ 951.186586][T28144] 8021q: adding VLAN 0 to HW filter on device bond8 [ 951.301445][T28152] 0x000000000007-0x000000020000 : "" [ 951.827115][T28152] ftl_cs: FTL header corrupt! [ 952.822792][T28147] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 953.520285][T28149] bond8: entered promiscuous mode [ 953.529672][T28149] bond8: entered allmulticast mode [ 953.719886][T28144] macvlan2: entered promiscuous mode [ 953.738759][T28144] macvlan2: entered allmulticast mode [ 953.763251][T28144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1060.042923][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1060.049949][ C1] rcu: 0-...!: (0 ticks this GP) idle=ccdc/1/0x4000000000000000 softirq=167632/167632 fqs=0 [ 1060.062648][ C1] rcu: (detected by 1, t=10502 jiffies, g=183853, q=169 ncpus=2) [ 1060.070477][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1060.070522][ C0] NMI backtrace for cpu 0 [ 1060.070546][ C0] CPU: 0 UID: 0 PID: 28184 Comm: syz.1.8634 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.070573][ C0] Tainted: [L]=SOFTLOCKUP [ 1060.070584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1060.070597][ C0] RIP: 0010:__lock_acquire+0x851/0x1a40 [ 1060.070628][ C0] Code: 05 04 0a 85 14 0f 83 b2 09 00 00 49 be eb 83 b5 80 46 86 c8 61 48 8b 4c 24 08 4c 0f af f1 49 c1 ee 2d 4a 8b 04 f5 a0 ee a7 97 <4e> 8d 2c f5 a0 ee a7 97 48 85 c0 74 1f 48 83 e8 08 48 85 c0 74 16 [ 1060.070646][ C0] RSP: 0018:ffffc90000007c58 EFLAGS: 00000006 [ 1060.070662][ C0] RAX: ffffffff946b1708 RBX: ffff888051295670 RCX: 07b24d8723fa41a2 [ 1060.070675][ C0] RDX: 000000004760b322 RSI: 000000008948774e RDI: 00000000acaee8ce [ 1060.070688][ C0] RBP: ffff888051294a80 R08: 00000000bc101d9a R09: 0000000000000000 [ 1060.070700][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 07b24d8723fa41a2 [ 1060.070712][ C0] R13: 0000000000000002 R14: 00000000000171dd R15: 0000000000000002 [ 1060.070723][ C0] FS: 00007f402d9b46c0(0000) GS:ffff888123de6000(0000) knlGS:0000000000000000 [ 1060.070742][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1060.070754][ C0] CR2: 00007f402d9b3ff8 CR3: 000000002a83b000 CR4: 00000000003526f0 [ 1060.070767][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000086 [ 1060.070779][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1060.070791][ C0] Call Trace: [ 1060.070799][ C0] [ 1060.070818][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1060.070846][ C0] lock_acquire+0x1b9/0x370 [ 1060.070866][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 1060.070890][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1060.070917][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1060.070944][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 1060.070965][ C0] debug_object_deactivate+0x135/0x3b0 [ 1060.070988][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1060.071012][ C0] ? timerqueue_linked_add+0x260/0x430 [ 1060.071039][ C0] __hrtimer_run_queues+0x2e9/0x9c0 [ 1060.071070][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1060.071104][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1060.071130][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1060.071157][ C0] [ 1060.071163][ C0] [ 1060.071170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1060.071191][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 1060.071214][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 1060.071232][ C0] RSP: 0018:ffffc9001018fa00 EFLAGS: 00000287 [ 1060.071246][ C0] RAX: 000000000000057b RBX: 0000000000000001 RCX: ffffc900115d1000 [ 1060.071258][ C0] RDX: 0000000000080000 RSI: ffffffff81fd46d7 RDI: ffff888051294a80 [ 1060.071270][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 1060.071282][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1060.071293][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 1060.071309][ C0] ? smp_call_function_many_cond+0x587/0x16c0 [ 1060.071335][ C0] ? __pfx_retrigger_next_event+0x10/0x10 [ 1060.071364][ C0] ? clock_was_set+0x1c3/0x850 [ 1060.071389][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1060.071414][ C0] ? mark_held_locks+0x40/0x70 [ 1060.071434][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1060.071462][ C0] clock_was_set+0x61c/0x850 [ 1060.071491][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 1060.071517][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1060.071540][ C0] do_adjtimex+0x302/0x370 [ 1060.071563][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 1060.071594][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1060.071620][ C0] __do_sys_clock_adjtime+0x177/0x290 [ 1060.071645][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1060.071680][ C0] ? kcov_ioctl+0x17a/0x750 [ 1060.071716][ C0] do_syscall_64+0x115/0x870 [ 1060.071734][ C0] ? clear_bhb_loop+0x40/0x90 [ 1060.071755][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.071774][ C0] RIP: 0033:0x7f402f79de99 [ 1060.071791][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.071815][ C0] RSP: 002b:00007f402d9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1060.071833][ C0] RAX: ffffffffffffffda RBX: 00007f402fa26180 RCX: 00007f402f79de99 [ 1060.071846][ C0] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 1060.071859][ C0] RBP: 00007f402f833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1060.071871][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.071883][ C0] R13: 00007f402fa26218 R14: 00007f402fa26180 R15: 00007ffcf2ff93e8 [ 1060.071904][ C0] [ 1060.072528][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g183853 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1060.557403][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1060.567372][ C1] rcu: RCU grace-period kthread stack dump: [ 1060.573254][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1060.586792][ C1] Call Trace: [ 1060.590070][ C1] [ 1060.593003][ C1] __schedule+0x125c/0x6730 [ 1060.597541][ C1] ? __pfx___schedule+0x10/0x10 [ 1060.602402][ C1] ? find_held_lock+0x2b/0x80 [ 1060.607096][ C1] ? schedule+0x225/0x2c0 [ 1060.611443][ C1] schedule+0xdd/0x2c0 [ 1060.615529][ C1] schedule_timeout+0x127/0x280 [ 1060.620391][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1060.625781][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1060.631093][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1060.636923][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1060.642413][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1060.647184][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1060.652477][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1060.657423][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1060.662625][ C1] ? rcu_is_watching+0x12/0xc0 [ 1060.667404][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1060.673232][ C1] rcu_gp_kthread+0x179/0x230 [ 1060.677921][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1060.683123][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1060.688951][ C1] ? __kthread_parkme+0x18c/0x230 [ 1060.693995][ C1] ? kthread+0x13a/0x450 [ 1060.698261][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1060.703469][ C1] kthread+0x370/0x450 [ 1060.707816][ C1] ? __pfx_kthread+0x10/0x10 [ 1060.712424][ C1] ret_from_fork+0x72b/0xd50 [ 1060.717034][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1060.722161][ C1] ? __switch_to+0x800/0x10f0 [ 1060.726847][ C1] ? __pfx_kthread+0x10/0x10 [ 1060.731461][ C1] ret_from_fork_asm+0x1a/0x30 [ 1060.736267][ C1] [ 1060.739282][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1060.745607][ C1] CPU: 1 UID: 0 PID: 805 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.756466][ C1] Tainted: [L]=SOFTLOCKUP [ 1060.760786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1060.770846][ C1] Workqueue: events drain_vmap_area_work [ 1060.776495][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 1060.783177][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 1060.802792][ C1] RSP: 0018:ffffc90004547930 EFLAGS: 00000293 [ 1060.808863][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd46fd [ 1060.816836][ C1] RDX: ffff888026b64a80 RSI: ffffffff81fd46d7 RDI: ffff888026b64a80 [ 1060.824899][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1060.832881][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1060.840853][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1060.848836][ C1] FS: 0000000000000000(0000) GS:ffff888123ee6000(0000) knlGS:0000000000000000 [ 1060.857774][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1060.864361][ C1] CR2: 00007f45aca27dac CR3: 0000000023b02000 CR4: 00000000003526f0 [ 1060.872341][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1060.880316][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1060.888289][ C1] Call Trace: [ 1060.891568][ C1] [ 1060.894504][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 1060.899900][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1060.906242][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 1060.912691][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 1060.918520][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 1060.923902][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1060.929036][ C1] flush_tlb_kernel_range+0x1d6/0x220 [ 1060.934422][ C1] purge_vmap_node+0x2a0/0xb40 [ 1060.939206][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 1060.944513][ C1] ? on_each_cpu_cond_mask+0x63/0x90 [ 1060.949810][ C1] __purge_vmap_area_lazy+0x90a/0xc00 [ 1060.955202][ C1] drain_vmap_area_work+0x27/0x40 [ 1060.960247][ C1] process_one_work+0xa23/0x1940 [ 1060.965212][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1060.970605][ C1] ? __pfx_drain_vmap_area_work+0x10/0x10 [ 1060.976341][ C1] worker_thread+0x5ef/0xe50 [ 1060.980954][ C1] ? kthread+0x13a/0x450 [ 1060.985215][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1060.990333][ C1] kthread+0x370/0x450 [ 1060.994427][ C1] ? __pfx_kthread+0x10/0x10 [ 1060.999036][ C1] ret_from_fork+0x72b/0xd50 [ 1061.003637][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1061.008760][ C1] ? __switch_to+0x800/0x10f0 [ 1061.013440][ C1] ? __pfx_kthread+0x10/0x10 [ 1061.018135][ C1] ret_from_fork_asm+0x1a/0x30 [ 1061.022929][ C1]