last executing test programs: 16m30.123802695s ago: executing program 32 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x2, 0x0, [{0x203, 0x0, 0x3}, {0x119, 0x0, 0x10000}]}) 14m58.858038537s ago: executing program 33 (id=1748): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000000280)={0x2, 0x24e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\x00', 0x1, 0x8045, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8905, &(0x7f00000001c0)) 10m7.605734759s ago: executing program 2 (id=3107): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c000980080001400001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 10m3.74091731s ago: executing program 2 (id=3108): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 10m2.784574138s ago: executing program 3 (id=3113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="c461fd10690b66ba200066ed440f22c366ba2100b000ee66b878008ee8b9800000c00f3235001000000f300f01d60f850000000066baf80cb8e8ce9f83ef66bafc0cb89c000000ef66b89c008ec8", 0x4e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m1.407363113s ago: executing program 3 (id=3117): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 10m0.157781347s ago: executing program 2 (id=3121): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004094}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m59.741010971s ago: executing program 3 (id=3122): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000004200)=[{&(0x7f0000000400)='j&', 0x2}, {0x0, 0x500}], 0x2) 9m58.320161392s ago: executing program 2 (id=3125): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r1], 0x20}}, 0x4040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x81) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 9m58.028484275s ago: executing program 2 (id=3127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 9m56.577992311s ago: executing program 3 (id=3128): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9m54.94877192s ago: executing program 6 (id=3131): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 9m53.441146161s ago: executing program 6 (id=3133): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = epoll_create(0x1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc}) dup3(r3, r0, 0x80000) 9m52.438267617s ago: executing program 3 (id=3134): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 9m51.978618267s ago: executing program 5 (id=3136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x100000000) 9m51.323226307s ago: executing program 5 (id=3137): ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) 9m50.887815998s ago: executing program 3 (id=3138): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 9m50.211399764s ago: executing program 5 (id=3139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x5) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m50.097371471s ago: executing program 6 (id=3140): r0 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r3], 0x20}}, 0x2000c004) close(r0) 9m49.655152219s ago: executing program 4 (id=3141): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 9m49.007719573s ago: executing program 5 (id=3142): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000300)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x45833af92e4b38ff, 0x0) 9m48.613441182s ago: executing program 4 (id=3143): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40012100) 9m48.378536001s ago: executing program 6 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x31c000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) readv(r1, &(0x7f0000002a00)=[{&(0x7f00000005c0)=""/143, 0x8f}], 0x1) 9m47.894255715s ago: executing program 4 (id=3145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000100)='./file0\x00', 0x8c2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x14, 0x12012, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 9m47.52477126s ago: executing program 4 (id=3146): socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7305b74df2ce0fa7c19d1309abf30890997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 9m47.078733763s ago: executing program 5 (id=3147): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 9m46.19355106s ago: executing program 4 (id=3148): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x4d) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r1, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d000000198401fa2441ce000000000000000000000002fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 9m46.094368661s ago: executing program 4 (id=3149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 9m45.968143133s ago: executing program 5 (id=3150): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000cc0000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 9m35.476857574s ago: executing program 34 (id=3127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 9m35.33531382s ago: executing program 35 (id=3138): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 9m35.296461693s ago: executing program 6 (id=3153): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x476c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x67) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) 9m30.107967782s ago: executing program 36 (id=3150): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000cc0000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 9m27.199768162s ago: executing program 37 (id=3149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 9m26.628492s ago: executing program 6 (id=3156): accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) close_range(r0, 0xffffffffffffffff, 0x0) 9m6.104658598s ago: executing program 38 (id=3156): accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.197546231s ago: executing program 9 (id=4821): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 58.312945371s ago: executing program 9 (id=4826): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 57.266888901s ago: executing program 9 (id=4831): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x1, 0x14800821, 0x200, 0x8, 0x10, 0x401, 0x0, 0x0, 0x20, 0x80000001}}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c040}, 0x8004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) write$binfmt_script(r2, &(0x7f0000000ac0)={'#! ', './file0'}, 0xb) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1faffffffeef1884366a578bb3fb7dbfc", 0x0, 0x7, 0x0, 0x3, 0xfffffffffffffd86, &(0x7f00000000c0)="6d48e5", 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003100)=ANY=[@ANYRES16], 0x48) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) 54.014254976s ago: executing program 9 (id=4839): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffee8, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) 52.952090076s ago: executing program 9 (id=4840): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) 51.596651613s ago: executing program 9 (id=4847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) 36.052154326s ago: executing program 39 (id=4847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) 15.543324779s ago: executing program 7 (id=4925): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) 14.533860804s ago: executing program 7 (id=4929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 13.468818243s ago: executing program 7 (id=4933): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) fsopen(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x310) syz_open_procfs(0xffffffffffffffff, 0x0) 9.360102686s ago: executing program 7 (id=4943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 8.254804959s ago: executing program 8 (id=4945): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.653401314s ago: executing program 7 (id=4947): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3df250100000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) syz_io_uring_setup(0x3917, &(0x7f0000000080)={0x0, 0x10, 0x40, 0x0, 0x273, 0x0, 0x0}, &(0x7f0000003000), &(0x7f0000000140), &(0x7f0000000180)) getpgrp(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e", 0x2c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6.28284601s ago: executing program 1 (id=4949): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140), 0x5, 0x40000) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x94953cc3c616bc35, {0x9, 0xbde, 0x3, 0x10302}}) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000000200), 0x40) 6.119602928s ago: executing program 8 (id=4950): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x149383, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$netlink(0x10, 0x3, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 4.814884471s ago: executing program 8 (id=4952): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.564680805s ago: executing program 1 (id=4953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x9, 0xe, 0x4, {0x1, 0x1, 0x8, 0x1, 0x200, 0x6}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0xe}, 0x8, 0x80, 0x6f8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff8e, 0x8, 0x1ff, 0x7b7e, 0xc0, 0xa, 0x401, 0x4, 0x6, 0x0, 0xd3d, 0x6, 0x2, 0x5, 0x4, 0x6, 0x8e01, 0x6, 0x7, 0x4, 0xea7, 0x31, 0x20000000, 0x8001, 0x1, 0x100, 0x6, 0x0, 0x0, 0x7, 0xb7, 0x7, 0x2, 0xc6e, 0x400000, 0xf79, 0xec9e, 0x5, 0x6, 0x6, 0x40, 0x401, 0xffffff54, 0x4, 0x3, 0x95, 0xf, 0x9, 0x4, 0xfffffffa, 0x0, 0x3, 0x3, 0x0, 0x100, 0x200, 0x8, 0x2, 0x4, 0x3, 0x4, 0xffffffa8, 0x0, 0x2, 0x47, 0x85ff, 0x4, 0x0, 0x964d, 0x5f, 0xfffffffd, 0x1, 0x8d5f, 0x4, 0x6, 0xffff, 0x2, 0x80000000, 0x384a, 0x8, 0x3, 0x5, 0x7f, 0x80, 0xffffeb06, 0xf93, 0x9, 0xfffffcfc, 0x5, 0xfffffe00, 0xed, 0x401, 0x80000000, 0x80000001, 0x5a57ee2d, 0xfffffffd, 0x8, 0x6, 0x9, 0x5, 0x0, 0x1, 0xfffffffd, 0x4, 0x8, 0x6, 0x6, 0x2, 0x8, 0x4, 0x4b4, 0x2, 0xc6cd, 0xc4, 0x3, 0x7f, 0x4, 0x0, 0xfe, 0x9, 0x7, 0x6, 0x5, 0x5, 0xfffffffb, 0x6, 0x0, 0x6, 0x4, 0x3, 0x0, 0x6, 0x49a, 0xcb, 0x8, 0x7, 0x2, 0x2, 0x8, 0xa, 0x5, 0x6, 0x30, 0x6, 0x9, 0x85398d5, 0x0, 0xfffffe01, 0x3, 0x0, 0x9, 0x5, 0x7, 0xc, 0xe571, 0x0, 0xfffffff9, 0x2a, 0x0, 0xfffffff7, 0xa4, 0xfffffffe, 0x1000, 0x3d1e, 0x0, 0x0, 0x3, 0x5, 0xec2b, 0x2, 0x2, 0xfffffffb, 0x0, 0x6, 0x9, 0x4, 0x80000000, 0x6, 0x869, 0x1ff, 0x8, 0x8, 0x9, 0x175, 0x9, 0xffffffff, 0x2, 0x8, 0x6, 0x0, 0x9, 0x9, 0x10000, 0x5, 0x5, 0x7fff, 0x0, 0x3, 0x5, 0x5, 0x0, 0x4cf, 0xa0000000, 0x8000, 0xc, 0x7, 0x8, 0x9, 0x401, 0xd, 0x9, 0xfffffffa, 0x4c, 0x9, 0x0, 0x8, 0x100, 0x9, 0x9, 0x8, 0xb, 0x7, 0x800, 0x3, 0xff, 0x4, 0x5, 0x0, 0x8, 0xff, 0x1, 0xe, 0x9, 0x2, 0x62, 0x0, 0x1, 0xc, 0x5, 0x7, 0x6, 0x7, 0x6, 0x80000, 0x9, 0x0, 0x0, 0x7f, 0x9, 0x80000000, 0x0, 0x5ae, 0x3, 0x2, 0xf1, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x9d7b, 0x2, 0xffffffff, 0x2, 0x7, 0x9, 0x2, 0x5, 0x1ff, 0x2, 0xc516, 0x0, 0xfffff0b5, 0x3, 0x3, 0x3, 0x8, 0x3ff, 0x2, 0x2, 0x3, 0xfffffffd, 0x41c, 0x46, 0x3, 0x76, 0x800, 0x3, 0x133, 0x6, 0x8, 0x6, 0x3, 0x9eca, 0x4, 0x8, 0x101, 0xa, 0x8, 0x2, 0x7ff, 0xfffff800, 0x3, 0x8001, 0x4, 0x2, 0x0, 0x0, 0x2, 0xfffffffb, 0x4, 0x7f, 0x141, 0x1f8, 0x1000, 0x5, 0x0, 0x7, 0xd3, 0xfffffffc, 0x2, 0x5, 0xc8d, 0x9, 0x6, 0xc, 0x0, 0x6, 0x8, 0x7, 0x5, 0x1, 0x1, 0x2, 0x6, 0xf1, 0xa, 0xfffffff9, 0x5, 0x2, 0x1327d97c, 0xffff527b, 0x9, 0xffffffff, 0x5, 0x7, 0x4, 0x8001, 0xff, 0xffff, 0x8, 0x7, 0x9000000, 0xde, 0x12a, 0xc, 0x8, 0xfffffeff, 0x6, 0x8, 0x76d4, 0x1, 0x7, 0x0, 0xebe2, 0xbe5, 0x3, 0x7f, 0xf, 0x9, 0x2, 0x0, 0x6, 0x8, 0x1, 0x0, 0x3, 0x8, 0x7fff, 0x5, 0xe0d3, 0x3, 0x6, 0x5, 0x9, 0x4, 0x1000, 0x2, 0x5, 0x400, 0x8, 0x8, 0xff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x1000, 0x80000000, 0xc, 0x3, 0x2fb, 0x5, 0x1, 0x9, 0x40, 0x1, 0xb1, 0xb, 0x4, 0x6, 0x4d444d0a, 0x100, 0xe5, 0x8, 0xfffffffe, 0x9, 0x100, 0x3, 0x4, 0x9, 0x0, 0x1, 0x0, 0xb, 0x8, 0xffff0001, 0x5, 0x1000, 0x8d9, 0x101, 0x8db, 0x8, 0x5, 0x6, 0x8, 0x7, 0x0, 0x57, 0x8, 0x7, 0x3, 0xc, 0x2, 0x0, 0x7, 0x2, 0x2, 0x9, 0x80, 0x9, 0x6, 0x401, 0x0, 0xfae, 0xb6, 0x7, 0x1, 0x2, 0xba8b, 0xe3b426a, 0x1ff, 0x5, 0x6, 0x2, 0x5, 0x931e, 0x5, 0x2, 0x36bf9f05, 0xeb, 0x9, 0x9, 0x1ff, 0x7fff, 0x1, 0x8001, 0x9, 0x8, 0x80, 0x200, 0x8, 0x0, 0x7, 0x100, 0x16, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x4d9, 0x7, 0x5c4, 0x2, 0x6, 0x8, 0x7, 0x4, 0x400000, 0x0, 0x7, 0x9, 0xb20, 0xff, 0x6cb7db37, 0x4, 0x2, 0x7, 0x1, 0x2, 0x4, 0x4, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44) 4.30375213s ago: executing program 0 (id=4954): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000840), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, r3, 0x100000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000fc0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r7, 0x3, {0x1, 0xff, 0x3}}, 0x18) getpeername(r0, 0x0, &(0x7f0000000480)) read(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) 3.862597523s ago: executing program 0 (id=4955): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100405, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000380)=0x102) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 3.815548448s ago: executing program 1 (id=4956): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) gettid() recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffd6a, 0x6, 0x0, 0x0, @uid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4040) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) read(r0, &(0x7f00000001c0)=""/93, 0x5d) 3.032748652s ago: executing program 0 (id=4957): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, 0x0, &(0x7f0000000940)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000080)=@tcp6, 0x1}, 0x20) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.926119634s ago: executing program 8 (id=4958): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000004c0)="fa885cc15d54b790c33a5036a6aca454b0457f5c37eb004de43a6a616213ca604c8858b8cf58e0e283751263f8718e126349c7e03f29020a0ee3acbdaee83c358d53a10cb4979a2528cb9d8698c03f74d29c340ea8716793fb925028e084c00b449914c35a84628f5ead271d4fc184d6e05f5be5b7f7389e7f6a74c726b6cba92f46bd", 0x83) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xda) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/11, @ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) close_range(r0, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000340)='-1\x00', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.873981463s ago: executing program 0 (id=4959): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 2.758300325s ago: executing program 1 (id=4960): mount$9p_rdma(0x0, 0x0, &(0x7f0000001440), 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.624395763s ago: executing program 1 (id=4961): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x6) mmap(&(0x7f000042f000/0x3000)=nil, 0x3000, 0x3000007, 0x30, r0, 0x2d40e000) io_setup(0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.460732211s ago: executing program 0 (id=4962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x808, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0xfffd, @local}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'erspan0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000300)={{0x3, 0x0, 0x8, 0x9, 'syz0\x00', 0x5}, 0x2, 0x2, 0x79f7, 0x0, 0x0, 0xfffffffb, 'syz0\x00', &(0x7f0000000100)}) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$setopts(0x4206, r4, 0x10001, 0x41) 1.114185664s ago: executing program 8 (id=4963): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 835.718408ms ago: executing program 1 (id=4964): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xee01, 0xee01) socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8990, &(0x7f0000000080)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="a0bce3cb5f08d24c8a4e248afb6d569da2f14274e369f3c33f24aabe7e6fe7ebef67b12d31e50416af0e547b583a69990d050bc42f4cca82c8caab2341a9b0f8cb97d75a7340a8d4415f975cf097bf532feb53d5d580226c7ea27922e6a7a0046802a4ef32447947e70c1e0b9feca36fc6ef1fa921eac0fcf8dfe2a2a5ed5303ea75c603468a57a8064f239274d6b78c824b90c7309620", 0x97}], 0x1) 607.499291ms ago: executing program 0 (id=4965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_getlink={0x74, 0x12, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x502f1, 0x200}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x7fff}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_PHYS_SWITCH_ID={0x13, 0x24, "dd3f688397cae0ec010cdcf811ece3"}, @IFLA_EXT_MASK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000000c0)='./file1\x00') chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 579.924242ms ago: executing program 2 (id=4879): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 479.915526ms ago: executing program 7 (id=4966): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) 0s ago: executing program 8 (id=4967): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'gre0\x00', 0x0}) r1 = socket$inet(0x2, 0x400000000008080a, 0x4) r2 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): =1 [ 677.228911][ T29] audit: type=1400 audit(1779418184.909:1114): avc: denied { read } for pid=16267 comm="syz.9.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 677.401630][T14197] Bluetooth: hci7: command 0x0406 tx timeout [ 678.295493][ T29] audit: type=1400 audit(1779418185.929:1115): avc: denied { link } for pid=16276 comm="syz.8.3555" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 678.308768][T16263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.544049][T16263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.790258][ T3284] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.800669][ T3284] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.853171][ T3284] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.911606][ T3284] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.364462][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.202285][T16313] netlink: 132732 bytes leftover after parsing attributes in process `syz.9.3566'. [ 681.311976][T16316] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 683.296194][ T29] audit: type=1326 audit(1779418191.049:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.0.3570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 683.413274][ T29] audit: type=1326 audit(1779418191.049:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.0.3570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 683.500734][ T29] audit: type=1326 audit(1779418191.049:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.0.3570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 683.565794][ T29] audit: type=1326 audit(1779418191.079:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.0.3570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 683.660254][ T29] audit: type=1326 audit(1779418191.079:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.0.3570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 684.616545][ T29] audit: type=1804 audit(1779418192.359:1121): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3580" name="bus" dev="ramfs" ino=61777 res=1 errno=0 [ 684.671961][ T29] audit: type=1804 audit(1779418192.399:1122): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.3580" name="bus" dev="ramfs" ino=61777 res=1 errno=0 [ 684.906319][ T29] audit: type=1400 audit(1779418192.659:1123): avc: denied { connect } for pid=16352 comm="syz.9.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 686.100645][T16370] netlink: 'syz.1.3587': attribute type 1 has an invalid length. [ 686.231362][T16372] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 686.241786][T16372] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 686.255041][T16372] bond2: (slave vxcan3): making interface the new active one [ 686.268781][T16372] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 686.298083][T16374] netlink: 'syz.8.3588': attribute type 1 has an invalid length. [ 686.361057][T16374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.437658][T16374] bond1: (slave veth3): Enslaving as an active interface with a down link [ 686.492898][T16370] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 686.505938][T16374] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3588'. [ 686.543987][T16370] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 686.597037][T16376] bond1: (slave dummy0): making interface the new active one [ 686.622833][T16376] dummy0: entered promiscuous mode [ 686.640321][T16376] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 686.696787][T16374] bond1: (slave dummy0): Releasing active interface [ 686.748137][T16374] dummy0 (unregistering): left promiscuous mode [ 687.360868][T16383] lo: Caught tx_queue_len zero misconfig [ 691.170318][T16448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'. [ 691.317821][T16448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16448 comm=syz.0.3612 [ 691.941704][T14500] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 692.027153][ T29] audit: type=1400 audit(1779418199.769:1124): avc: denied { view } for pid=16467 comm="syz.7.3618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 692.133849][T14500] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.145020][T14500] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 692.182774][T14500] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 692.207055][T14500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 692.238825][T14500] usb 1-1: SerialNumber: syz [ 692.873187][T16479] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3621'. [ 693.189592][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3624'. [ 694.170074][T14500] usb 1-1: skipping empty audio interface (v1) [ 694.298700][T14500] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 694.329345][T14500] usb 1-1: USB disconnect, device number 20 [ 694.342415][T12987] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 694.361712][T14217] udevd[14217]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.504121][T12987] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 694.519645][T12987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.538111][T12987] usb 9-1: config 0 descriptor?? [ 694.554596][T12987] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 694.569421][T16499] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 694.791351][T12987] gp8psk: usb in 128 operation failed. [ 695.678889][T12987] gp8psk: usb in 146 operation failed. [ 695.699433][T12987] gp8psk: failed to get FW version [ 695.724613][T12987] gp8psk: usb in 149 operation failed. [ 695.730091][T12987] gp8psk: failed to get FPGA version [ 695.735839][T12987] gp8psk: usb in 138 operation failed. [ 695.741301][T12987] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 695.752870][T12987] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 695.775887][T12987] usb 9-1: USB disconnect, device number 6 [ 696.157593][ T29] audit: type=1400 audit(1779418203.909:1125): avc: denied { shutdown } for pid=16514 comm="syz.0.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.021254][ T29] audit: type=1400 audit(1779418207.769:1126): avc: denied { listen } for pid=16546 comm="syz.8.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 702.401187][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3651'. [ 705.720124][T16624] netlink: 'syz.7.3666': attribute type 2 has an invalid length. [ 705.768318][T16624] netlink: 'syz.7.3666': attribute type 2 has an invalid length. [ 705.782869][T16622] netlink: 'syz.9.3668': attribute type 32 has an invalid length. [ 707.025370][T16665] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 707.040483][T16665] Error validating options; rc = [-22] [ 711.253580][ T29] audit: type=1400 audit(1779418219.009:1127): avc: denied { mounton } for pid=16704 comm="syz.8.3691" path="/105/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 711.260741][T16710] veth0: entered allmulticast mode [ 711.383803][ T29] audit: type=1400 audit(1779418219.139:1128): avc: denied { getopt } for pid=16714 comm="syz.9.3694" lport=51054 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 711.642957][T16720] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 711.863024][T16728] netlink: 'syz.0.3698': attribute type 1 has an invalid length. [ 712.011176][T16728] 8021q: adding VLAN 0 to HW filter on device bond4 [ 712.098885][T16729] bond4: (slave geneve2): making interface the new active one [ 712.150672][T16729] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 712.177348][T16734] syz_tun: entered allmulticast mode [ 712.199522][T16732] syz_tun: left allmulticast mode [ 713.285898][ T29] audit: type=1400 audit(1779418221.039:1129): avc: denied { read write } for pid=16759 comm="syz.8.3708" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 713.378373][ T29] audit: type=1400 audit(1779418221.069:1130): avc: denied { open } for pid=16759 comm="syz.8.3708" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 713.713775][T16768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 714.447341][T16781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3713'. [ 715.051667][T12987] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 715.223347][T12987] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 715.264773][T12987] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.316842][T12987] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 715.354124][T12987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.438124][T12987] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 715.474378][T12987] usb 9-1: invalid MIDI out EP 0 [ 715.896477][T12987] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 715.919864][T12987] usb 9-1: USB disconnect, device number 7 [ 716.297219][T16805] fuse: fd is not a fuse device [ 716.546012][T16812] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 716.893758][ T29] audit: type=1400 audit(1779418224.649:1131): avc: denied { ioctl } for pid=16819 comm="syz.7.3726" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 716.923389][ T5842] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 717.006670][T14500] kernel write not supported for file /input/event2 (pid: 14500 comm: kworker/1:8) [ 717.101942][ T5842] usb 9-1: Using ep0 maxpacket: 16 [ 717.118627][ T5842] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.142225][ T5842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 717.184394][ T5842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 717.205431][ T5842] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 717.225531][ T5842] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.253757][ T5842] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 717.269132][ T5842] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 717.306762][ T5842] usb 9-1: Manufacturer: syz [ 717.327465][ T5842] usb 9-1: config 0 descriptor?? [ 717.632939][ T5842] rc_core: IR keymap rc-hauppauge not found [ 717.647963][ T5842] Registered IR keymap rc-empty [ 717.659109][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 717.702601][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 717.737796][ T5842] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 717.771331][ T5842] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input55 [ 717.810755][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 717.837689][ C1] rc rc0: IR event FIFO is full! [ 717.843185][T16836] rc rc0: two consecutive events of type pulse [ 717.843963][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 717.892052][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 717.922998][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 717.951717][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 717.972443][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 718.011711][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 718.031893][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 718.067125][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 718.124832][ T5842] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 718.186288][ T5842] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 718.224342][ T5842] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 718.353081][ T5842] usb 9-1: USB disconnect, device number 8 [ 718.983160][T16847] tipc: Started in network mode [ 718.991250][T16847] tipc: Node identity 4, cluster identity 4711 [ 719.002724][T16847] tipc: Node number set to 4 [ 719.826086][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3735'. [ 719.951634][T12987] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 720.022892][T16863] xt_hashlimit: size too large, truncated to 1048576 [ 720.103209][T12987] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 720.119355][T12987] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 720.130088][T12987] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 720.151068][T16865] ¾x9ÿ: renamed from bridge_slave_0 [ 720.159297][T12987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.185956][T16856] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 720.209952][T12987] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 720.509994][T14500] usb 1-1: USB disconnect, device number 21 [ 720.768946][T16882] netlink: 'syz.8.3746': attribute type 4 has an invalid length. [ 720.783595][T16882] netlink: 'syz.8.3746': attribute type 4 has an invalid length. [ 721.428386][T16889] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 722.703058][T16904] lo: Caught tx_queue_len zero misconfig [ 722.836514][ T29] audit: type=1400 audit(1779418230.439:1132): avc: denied { bind } for pid=16903 comm="syz.7.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 723.095635][ T5842] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 723.112002][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3756'. [ 723.126052][ T5842] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 726.211707][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3774'. [ 726.291185][T16970] bpf: Bad value for 'context' [ 726.571627][T14500] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 726.723798][T14500] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.727333][T16975] netlink: 'syz.7.3775': attribute type 1 has an invalid length. [ 726.763729][T14500] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 726.793915][T14500] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.833754][T14500] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 726.889844][T14500] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 726.939319][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3775'. [ 726.964692][T14500] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.992163][T14500] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 727.027355][T14500] usb 2-1: Product: syz [ 727.044362][T14500] usb 2-1: Manufacturer: syz [ 727.065489][T16977] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 727.100770][T16977] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 727.104393][T14500] cdc_wdm 2-1:1.0: skipping garbage [ 727.148111][T14500] cdc_wdm 2-1:1.0: skipping garbage [ 727.183017][T16977] bond1: (slave vxcan1): making interface the new active one [ 727.217041][T16977] bond1: (slave vxcan1): Enslaving as an active interface with an up link [ 727.234779][T14500] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 727.258364][T14500] cdc_wdm 2-1:1.0: Unknown control protocol [ 727.336366][T16975] bond1 (unregistering): (slave vxcan1): Releasing backup interface [ 727.440177][T16975] bond1 (unregistering): Released all slaves [ 729.339821][ T29] audit: type=1400 audit(1779418237.089:1133): avc: denied { mount } for pid=16998 comm="syz.8.3782" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 729.473300][T16997] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3780'. [ 729.555440][T17006] syzkaller0: entered promiscuous mode [ 729.571928][T17006] syzkaller0: entered allmulticast mode [ 731.141742][ T5842] usb 2-1: USB disconnect, device number 25 [ 731.755892][ T5842] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 732.488145][ T5842] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.496282][ T5842] usb 2-1: config 0 has no interface number 0 [ 732.508418][ T5842] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 732.532463][ T5842] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 732.554618][ T5842] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 732.566784][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.642466][ T5842] usb 2-1: config 0 descriptor?? [ 732.660772][T17013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 732.735741][ T5842] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 732.876747][ T29] audit: type=1400 audit(1779418240.629:1134): avc: denied { watch } for pid=17028 comm="syz.7.3792" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 732.941403][ T29] audit: type=1400 audit(1779418240.629:1135): avc: denied { watch_sb watch_reads } for pid=17028 comm="syz.7.3792" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 733.094748][ T5842] usb 2-1: USB disconnect, device number 26 [ 733.286997][T17039] netlink: 'syz.7.3795': attribute type 1 has an invalid length. [ 733.761746][T17042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 734.328997][T17042] bond1: (slave bond2): making interface the new active one [ 734.402624][T17042] bond1: (slave bond2): Enslaving as an active interface with an up link [ 734.507245][T17043] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 734.663901][T17039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.142684][T17069] tipc: Started in network mode [ 736.152135][T17069] tipc: Node identity 2280e9d80fca, cluster identity 4711 [ 736.184374][T17069] tipc: Enabled bearer , priority 0 [ 736.239706][T17068] tipc: Resetting bearer [ 736.338338][T17068] tipc: Disabling bearer [ 738.752701][T17094] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 738.762796][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3810'. [ 739.339165][T17110] fuse: fd is not a fuse device [ 739.656694][T17117] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3819'. [ 740.074315][T17127] fuse: fd is not a fuse device [ 740.221956][ T5721] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 740.426663][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 740.446388][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.483580][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.514127][ T5721] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 740.549896][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.593674][ T5721] usb 2-1: config 0 descriptor?? [ 740.632607][ T5721] hub 2-1:0.0: USB hub found [ 741.003462][T17139] netlink: 'syz.8.3828': attribute type 1 has an invalid length. [ 741.102688][T17143] netlink: 'syz.9.3830': attribute type 1 has an invalid length. [ 741.548443][ T5721] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 741.558638][T17139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.580356][ T5721] usbhid 2-1:0.0: can't add hid device: -71 [ 741.586543][ T5721] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 741.600437][T17143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.613246][T17144] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 741.625675][ T5721] usb 2-1: USB disconnect, device number 27 [ 741.644531][T17146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.659478][T17146] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 741.673268][T17146] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 741.758083][T17149] gretap1: entered promiscuous mode [ 741.783767][T17149] bond2: (slave gretap1): making interface the new active one [ 741.798355][T17149] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 741.808244][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.295775][T17193] binder_alloc: 17192: binder_alloc_buf, no vma [ 745.322928][ T29] audit: type=1326 audit(1779418253.079:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 745.372481][ T29] audit: type=1326 audit(1779418253.099:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 745.417795][T14197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 745.428262][T14197] CPU: 1 UID: 0 PID: 14197 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.428297][T14197] Tainted: [L]=SOFTLOCKUP [ 745.428304][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.428325][T14197] Workqueue: hci6 hci_rx_work [ 745.428363][T14197] Call Trace: [ 745.428371][T14197] [ 745.428380][T14197] dump_stack_lvl+0x100/0x190 [ 745.428411][T14197] sysfs_warn_dup.cold+0x1c/0x28 [ 745.428456][T14197] sysfs_create_dir_ns+0x24b/0x2b0 [ 745.428487][T14197] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 745.428515][T14197] ? find_held_lock+0x2b/0x80 [ 745.428535][T14197] ? kobject_add_internal+0x25f/0x930 [ 745.428558][T14197] ? kobject_add_internal+0x25f/0x930 [ 745.428584][T14197] ? do_raw_spin_unlock+0x145/0x1e0 [ 745.428621][T14197] kobject_add_internal+0x2c8/0x930 [ 745.428650][T14197] kobject_add+0x16a/0x1e0 [ 745.428673][T14197] ? __pfx_kobject_add+0x10/0x10 [ 745.428695][T14197] ? class_to_subsys+0x10f/0x150 [ 745.428731][T14197] ? kobject_put+0xb9/0x640 [ 745.428750][T14197] ? _raw_spin_unlock+0x28/0x50 [ 745.428788][T14197] device_add+0x294/0x1950 [ 745.428816][T14197] ? __pfx_dev_set_name+0x10/0x10 [ 745.428845][T14197] ? __pfx_device_add+0x10/0x10 [ 745.428873][T14197] ? mgmt_send_event_skb+0x2fb/0x460 [ 745.428911][T14197] hci_conn_add_sysfs+0x1a3/0x260 [ 745.428946][T14197] le_conn_complete_evt+0x11eb/0x1f60 [ 745.428983][T14197] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 745.429022][T14197] hci_le_conn_complete_evt+0x23c/0x3a0 [ 745.429055][T14197] ? skb_pull_data+0x15f/0x1e0 [ 745.429088][T14197] hci_le_meta_evt+0x34a/0x5f0 [ 745.429120][T14197] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 745.429154][T14197] hci_event_packet+0x51c/0xcd0 [ 745.429185][T14197] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 745.429219][T14197] ? __pfx_hci_event_packet+0x10/0x10 [ 745.429258][T14197] ? kcov_remote_start+0x374/0x660 [ 745.429287][T14197] ? lockdep_hardirqs_on+0x78/0x100 [ 745.429328][T14197] hci_rx_work+0x451/0xfc0 [ 745.429364][T14197] process_one_work+0xa0e/0x1980 [ 745.429408][T14197] ? __pfx_process_one_work+0x10/0x10 [ 745.429456][T14197] ? __pfx_hci_rx_work+0x10/0x10 [ 745.429491][T14197] worker_thread+0x5ef/0xe50 [ 745.429531][T14197] ? __pfx_worker_thread+0x10/0x10 [ 745.429564][T14197] ? kthread+0x13a/0x450 [ 745.429589][T14197] ? __pfx_worker_thread+0x10/0x10 [ 745.429618][T14197] kthread+0x370/0x450 [ 745.429645][T14197] ? __pfx_kthread+0x10/0x10 [ 745.429675][T14197] ret_from_fork+0x72b/0xd50 [ 745.429706][T14197] ? __pfx_ret_from_fork+0x10/0x10 [ 745.429734][T14197] ? __switch_to+0x800/0x1100 [ 745.429764][T14197] ? __pfx_kthread+0x10/0x10 [ 745.429792][T14197] ret_from_fork_asm+0x1a/0x30 [ 745.429842][T14197] [ 745.429943][T14197] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 745.431173][ T29] audit: type=1326 audit(1779418253.099:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 745.441412][T14197] Bluetooth: hci6: failed to register connection device [ 745.490092][ T29] audit: type=1326 audit(1779418253.099:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 745.958004][ T29] audit: type=1326 audit(1779418253.109:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 746.001630][ T29] audit: type=1326 audit(1779418253.159:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 746.030886][ T29] audit: type=1326 audit(1779418253.159:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 746.595087][ T29] audit: type=1326 audit(1779418253.159:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 746.814950][ T29] audit: type=1326 audit(1779418253.159:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffaf695d68e code=0x7ffc0000 [ 746.868105][ T29] audit: type=1326 audit(1779418253.159:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17206 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffaf695d68e code=0x7ffc0000 [ 747.581744][T17235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3855'. [ 749.566105][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3863'. [ 749.576424][T17256] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3863'. [ 750.041303][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3867'. [ 750.084727][T17300] veth0: Caught tx_queue_len zero misconfig [ 750.233126][T17308] netlink: 'syz.1.3869': attribute type 1 has an invalid length. [ 750.266686][T17308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.414089][T17308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.435022][T17308] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 750.725837][T17308] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 750.974268][T17311] gretap1: entered promiscuous mode [ 751.086983][T17311] bond3: (slave gretap1): making interface the new active one [ 751.155110][T17311] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 751.175673][T17317] netlink: 'syz.7.3872': attribute type 1 has an invalid length. [ 751.238605][T17317] bond3: entered promiscuous mode [ 751.244846][T17317] bond3: entered allmulticast mode [ 751.250335][T17317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.300955][T17321] erspan2: entered allmulticast mode [ 751.333565][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3872'. [ 751.352509][T17321] bond3: (slave erspan2): making interface the new active one [ 751.360267][T17321] erspan2: entered promiscuous mode [ 751.369336][T17321] bond3: (slave erspan2): Enslaving as an active interface with an up link [ 751.391053][T17317] bond3 (unregistering): (slave erspan2): Releasing active interface [ 751.411939][T17317] erspan2: left promiscuous mode [ 751.432911][T17317] bond3 (unregistering): Released all slaves [ 751.642805][T14197] Bluetooth: hci6: command 0x0406 tx timeout [ 752.421607][ T5721] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 752.631600][ T5721] usb 9-1: Using ep0 maxpacket: 16 [ 752.645224][ T5721] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.668890][ T5721] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.684076][ T5721] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.715069][ T5721] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 752.744017][ T5721] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.793285][ T5721] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 752.812935][ T5721] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 752.837472][ T5721] usb 9-1: Manufacturer: syz [ 752.869812][ T5721] usb 9-1: config 0 descriptor?? [ 753.030079][T17357] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3886'. [ 753.118626][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3886'. [ 753.251603][ T5721] rc_core: IR keymap rc-hauppauge not found [ 753.277454][ T5721] Registered IR keymap rc-empty [ 753.291058][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.331643][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.382679][ T5721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 753.451669][ T5721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input56 [ 753.508480][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.561997][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.601984][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.642125][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.671670][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.712662][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.732188][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.761685][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.832943][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.851678][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 753.900186][ T5721] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 754.256953][ T5721] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 754.363512][ T5721] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 754.423278][ T5721] usb 9-1: USB disconnect, device number 9 [ 754.457167][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3891'. [ 754.586628][T17377] bond3: entered promiscuous mode [ 754.634314][T17377] bond3: entered allmulticast mode [ 754.955240][T17393] netlink: 'syz.8.3898': attribute type 32 has an invalid length. [ 754.978823][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3898'. [ 755.090507][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 755.090526][ T29] audit: type=1326 audit(1779418262.839:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 755.177384][ T29] audit: type=1326 audit(1779418262.839:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 755.333132][ T29] audit: type=1326 audit(1779418262.839:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 755.458572][ T29] audit: type=1326 audit(1779418262.839:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 755.486984][ T29] audit: type=1326 audit(1779418262.849:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 755.516206][ T29] audit: type=1326 audit(1779418262.969:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc80f5d68e code=0x7ffc0000 [ 755.548113][ T29] audit: type=1326 audit(1779418262.969:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc80f5d68e code=0x7ffc0000 [ 755.579920][ T29] audit: type=1326 audit(1779418262.979:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc80f5d68e code=0x7ffc0000 [ 755.622900][ T29] audit: type=1326 audit(1779418262.979:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc80f5d68e code=0x7ffc0000 [ 755.650990][ T29] audit: type=1326 audit(1779418262.979:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.0.3897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc80f5d68e code=0x7ffc0000 [ 759.004744][T17435] xt_ecn: cannot match TCP bits for non-tcp packets [ 760.013051][ T5714] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 760.184829][ T5714] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 760.201807][ T5714] usb 9-1: config 0 has no interface number 0 [ 760.219878][ T5714] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.220166][ T5714] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 761.254635][ T5714] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 761.482133][ T5714] usb 9-1: Product: syz [ 761.486336][ T5714] usb 9-1: SerialNumber: syz [ 761.499398][ T5714] usb 9-1: config 0 descriptor?? [ 761.524442][ T5714] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 761.821610][ T5842] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 762.559470][T17444] Invalid option length (1048308) for dns_resolver key [ 762.784499][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 762.784540][ T29] audit: type=1400 audit(1779418270.539:1335): avc: denied { ioctl } for pid=17443 comm="syz.8.3915" path="socket:[66952]" dev="sockfs" ino=66952 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 762.913026][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 762.944226][ T5842] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 762.964238][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.966520][ T5714] usb 9-1: USB disconnect, device number 10 [ 762.986720][ T5842] usb 2-1: Product: syz [ 763.019187][ T5842] usb 2-1: Manufacturer: syz [ 763.031240][T17476] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 763.036566][ T29] audit: type=1400 audit(1779418270.779:1336): avc: denied { append } for pid=17475 comm="syz.7.3925" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 763.077296][ T5842] usb 2-1: SerialNumber: syz [ 763.093722][ T5842] usb 2-1: config 0 descriptor?? [ 763.129569][T17466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 763.153891][ T5842] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input57 [ 763.411890][ T29] audit: type=1804 audit(1779418271.159:1337): pid=17483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3928" name="/newroot/156/file0" dev="tmpfs" ino=827 res=1 errno=0 [ 763.415430][T17483] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 763.446690][T17483] ref_ctr increment failed for inode: 0x33b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888076966200 [ 763.507522][T17485] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 763.526729][T17485] ref_ctr decrement failed for inode: 0x33b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888076966200 [ 763.555120][T17485] uprobe: syz.7.3928:17485 failed to unregister, leaking uprobe [ 764.629597][ T5714] usb 2-1: USB disconnect, device number 28 [ 764.905877][ T29] audit: type=1400 audit(1779418272.659:1338): avc: denied { ioctl } for pid=17506 comm="syz.9.3934" path="socket:[67149]" dev="sockfs" ino=67149 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 767.862197][T14197] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 768.469934][T17558] ref_ctr_offset mismatch. inode: 0x32e offset: 0x0 ref_ctr_offset(old): 0x800000004 ref_ctr_offset(new): 0x2000000002c0 [ 770.651209][T17600] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3961'. [ 770.782454][T17597] hub 8-0:1.0: USB hub found [ 770.808633][ T29] audit: type=1400 audit(1779418278.559:1339): avc: denied { setopt } for pid=17593 comm="syz.7.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 770.886000][T17597] hub 8-0:1.0: 1 port detected [ 771.911990][ T29] audit: type=1400 audit(1779418279.379:1340): avc: denied { write } for pid=17605 comm="syz.0.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 772.430235][T17617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3966'. [ 772.623137][T17625] hsr0: entered promiscuous mode [ 772.631904][T13993] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 772.642894][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3968'. [ 772.657365][T17624] syzkaller0: entered promiscuous mode [ 772.670943][T17624] syzkaller0: entered allmulticast mode [ 772.689110][T17625] hsr_slave_0: left promiscuous mode [ 772.706029][T17625] hsr_slave_1: left promiscuous mode [ 772.720778][T17625] hsr0 (unregistering): left promiscuous mode [ 772.801704][T13993] usb 9-1: Using ep0 maxpacket: 8 [ 772.808729][T13993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.820130][T13993] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 772.830622][T13993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.844170][T13993] usb 9-1: config 0 descriptor?? [ 773.062369][T13993] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 773.525483][T17651] netlink: 'syz.0.3977': attribute type 1 has an invalid length. [ 773.709375][ T10] usb 9-1: USB disconnect, device number 11 [ 774.239488][T17651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.646866][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3979'. [ 777.448897][T17705] bridge_slave_0: left allmulticast mode [ 777.454723][T17705] bridge_slave_0: left promiscuous mode [ 777.460474][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.486583][T17705] bridge_slave_1: left allmulticast mode [ 777.492368][T17705] bridge_slave_1: left promiscuous mode [ 777.498163][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.612474][T17705] bond0: (slave bond_slave_0): Releasing backup interface [ 777.635440][T17705] bond0: (slave bond_slave_1): Releasing backup interface [ 777.654042][T17705] team0: Port device team_slave_0 removed [ 777.668944][T17705] team0: Port device team_slave_1 removed [ 777.677189][T17705] bond2: (slave gretap1): Releasing active interface [ 777.783064][T17706] team0: Mode changed to "loadbalance" [ 781.195559][ T29] audit: type=1400 audit(1779418288.949:1341): avc: denied { getopt } for pid=17745 comm="syz.9.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 782.738344][ T29] audit: type=1400 audit(1779418290.489:1342): avc: denied { execute_no_trans } for pid=17773 comm="syz.1.4012" path="/file1" dev="ramfs" ino=67526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 782.842198][T17778] overlayfs: missing 'lowerdir' [ 783.175967][T17792] x_tables: duplicate underflow at hook 1 [ 784.036363][T17809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.258874][T17819] fuse: fd is not a fuse device [ 784.551501][ T29] audit: type=1400 audit(1779418292.299:1343): avc: denied { getopt } for pid=17808 comm="syz.1.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 784.856959][ T29] audit: type=1400 audit(1779418292.609:1344): avc: denied { append } for pid=17834 comm="syz.0.4030" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 786.303713][T17858] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 786.329876][T17858] CIFS mount error: No usable UNC path provided in device string! [ 786.329876][T17858] [ 786.340344][T17858] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 788.095827][T17875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4043'. [ 788.185417][T17875] ip6gre1: entered promiscuous mode [ 788.201645][T17875] ip6gre1: entered allmulticast mode [ 788.280337][T17875] netlink: 'syz.7.4043': attribute type 6 has an invalid length. [ 788.302139][T17875] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4043'. [ 789.080051][T17893] fuse: Bad value for 'fd' [ 790.195439][ T29] audit: type=1400 audit(1779418297.949:1345): avc: denied { connect } for pid=17920 comm="syz.1.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 790.273357][T17921] siw: device registration error -23 [ 794.323930][T14197] Bluetooth: hci5: unexpected event 0x04 length: 245 > 10 [ 794.324164][T14197] Bluetooth: hci5: connection err: -111 [ 795.633797][T17976] xt_nat: multiple ranges no longer supported [ 796.372306][T17986] fuse: fd is not a fuse device [ 796.380949][ T29] audit: type=1326 audit(1779418304.129:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.8.4078" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab0259ce59 code=0x0 [ 797.876622][ T29] audit: type=1400 audit(1779418305.629:1347): avc: denied { setopt } for pid=18002 comm="syz.8.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 800.720223][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4093'. [ 800.742226][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4093'. [ 801.911904][ T29] audit: type=1400 audit(1779418309.469:1348): avc: denied { setopt } for pid=18049 comm="syz.1.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 802.622934][ T29] audit: type=1400 audit(1779418310.379:1349): avc: denied { getopt } for pid=18060 comm="syz.1.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 802.733826][ T29] audit: type=1400 audit(1779418310.489:1350): avc: denied { lock } for pid=18069 comm="syz.7.4102" path="socket:[68982]" dev="sockfs" ino=68982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 802.829266][T18073] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4100'. [ 802.939615][T18073] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4100'. [ 802.972003][T18073] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4100'. [ 803.257322][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.711767][T12987] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 803.814396][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4107'. [ 803.845818][ T29] audit: type=1326 audit(1779418311.599:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.7.4106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0225f9ce59 code=0x7ffc0000 [ 803.875129][T12922] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.875141][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4107'. [ 803.901750][T12987] usb 1-1: Using ep0 maxpacket: 32 [ 803.909220][T12987] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 803.913767][T12922] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.933328][T12987] usb 1-1: config 0 has no interface number 0 [ 803.936377][ T29] audit: type=1326 audit(1779418311.599:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.7.4106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0225f9ce59 code=0x7ffc0000 [ 803.978220][T12922] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.001228][T12922] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.023596][T12987] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 804.031934][ T29] audit: type=1326 audit(1779418311.599:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.7.4106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0225f9ce59 code=0x7ffc0000 [ 804.111626][T12987] usb 1-1: config 0 interface 1 has no altsetting 0 [ 804.126853][ T29] audit: type=1326 audit(1779418311.599:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.7.4106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0225f9ce59 code=0x7ffc0000 [ 804.128959][T12987] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 804.181149][T12987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.189606][T12987] usb 1-1: Product: syz [ 804.195579][T12987] usb 1-1: Manufacturer: syz [ 804.200363][T12987] usb 1-1: SerialNumber: syz [ 804.213848][ T29] audit: type=1326 audit(1779418311.599:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.7.4106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0225f9ce59 code=0x7ffc0000 [ 804.243052][T12987] usb 1-1: config 0 descriptor?? [ 804.248262][ T29] audit: type=1326 audit(1779418311.599:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.7.4106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0225f9ce59 code=0x7ffc0000 [ 804.323433][ T29] audit: type=1326 audit(1779418311.649:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.7.4106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0225f9ce59 code=0x7ffc0000 [ 804.933656][T12987] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 804.991009][T12987] cx231xx 1-1:0.1: Failed to read PCB config [ 804.999166][T12987] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 805.012786][T12987] usb 1-1: USB disconnect, device number 22 [ 806.571662][ T5842] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 806.754704][ T5842] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 806.782450][ T5842] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 806.818646][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 806.843426][ T5842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 806.879683][ T5842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 806.906755][ T5842] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 807.008019][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 807.016543][ T5842] usb 1-1: Product: syz [ 807.020737][ T5842] usb 1-1: Manufacturer: syz [ 807.066752][ T5842] cdc_wdm 1-1:1.0: skipping garbage [ 807.280115][ T5842] cdc_wdm 1-1:1.0: skipping garbage [ 807.445957][ T5842] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 807.452499][ T5842] cdc_wdm 1-1:1.0: Unknown control protocol [ 810.769766][T12987] usb 1-1: USB disconnect, device number 23 [ 811.913450][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 811.913468][ T29] audit: type=1400 audit(1779418319.669:1415): avc: denied { getopt } for pid=18170 comm="syz.1.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 813.513604][T18207] xt_ecn: cannot match TCP bits for non-tcp packets [ 818.384645][T18253] xt_nat: multiple ranges no longer supported [ 818.636451][T18255] overlayfs: failed to clone upperpath [ 819.312170][T18281] CIFS mount error: No usable UNC path provided in device string! [ 819.312170][T18281] [ 819.322300][T18281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 820.607363][T18307] xt_nat: multiple ranges no longer supported [ 821.117253][T18300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.164195][T18300] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.186833][T18300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.496446][T18300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.522756][T18300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.557704][T18300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 821.601301][T18300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.664845][T18300] veth1_vlan: left promiscuous mode [ 821.697329][T18300] veth0_vlan: left promiscuous mode [ 821.728808][T18300] veth0_vlan: entered promiscuous mode [ 821.753850][T18300] veth1_vlan: entered promiscuous mode [ 821.796141][T18300] veth1_macvtap: left promiscuous mode [ 821.824887][T18300] veth0_macvtap: left promiscuous mode [ 821.840756][T18300] veth0_macvtap: entered promiscuous mode [ 821.850314][T18300] veth1_macvtap: entered promiscuous mode [ 821.872633][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.889232][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.903025][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.914984][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.054246][T18300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.069808][T18300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 822.573923][T17266] bridge0: port 1(1¾x9ÿ) entered blocking state [ 822.580395][T17266] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 822.678912][T17266] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.686091][T17266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.870458][T17284] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.938242][T18326] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4182'. [ 823.099075][T18331] CIFS mount error: No usable UNC path provided in device string! [ 823.099075][T18331] [ 823.109128][T18331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 823.695591][T17285] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 823.708975][T17285] bond1: (slave veth3): making interface the new active one [ 823.733033][T17285] bond1: active interface up! [ 823.890980][T17284] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.949676][T17284] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.976128][T17284] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.222307][T18345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4189'. [ 824.402201][T18345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18345 comm=syz.1.4189 [ 825.092733][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4191'. [ 825.412792][T18366] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 829.500443][T16239] tipc: Subscription rejected, illegal request [ 829.587486][T18413] sch_tbf: burst 0 is lower than device veth1 mtu (1550) ! [ 830.208752][T18417] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4206'. [ 830.217941][T18417] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4206'. [ 831.613343][T18436] o2cb: This node has not been configured. [ 831.619342][T18436] o2cb: Cluster check failed. Fix errors before retrying. [ 831.626489][T18436] (syz.9.4211,18436,1):user_dlm_register:674 ERROR: status = -22 [ 831.634953][T18436] (syz.9.4211,18436,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 831.649296][T18435] ceph: No mds server is up or the cluster is laggy [ 831.652527][T18439] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4213'. [ 831.664922][ T29] audit: type=1400 audit(1779418339.359:1416): avc: denied { write } for pid=18434 comm="syz.9.4211" name="/" dev="ocfs2_dlmfs" ino=69659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 831.664973][ T29] audit: type=1400 audit(1779418339.369:1417): avc: denied { add_name } for pid=18434 comm="syz.9.4211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 831.665017][ T29] audit: type=1400 audit(1779418339.369:1418): avc: denied { create } for pid=18434 comm="syz.9.4211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 831.665058][ T29] audit: type=1400 audit(1779418339.369:1419): avc: denied { associate } for pid=18434 comm="syz.9.4211" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 831.693886][T12987] libceph: connect (1)[c::]:6789 error -101 [ 831.845768][T12987] libceph: mon0 (1)[c::]:6789 connect error [ 834.273340][T18488] netlink: 'syz.1.4227': attribute type 11 has an invalid length. [ 835.943744][T18498] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18501] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18498] [ 836.681857][ T29] audit: type=1326 audit(1779418344.419:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90959ce59 code=0x7fc00000 [ 836.770733][ T29] audit: type=1326 audit(1779418344.419:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff90959ce59 code=0x7fc00000 [ 837.665227][T18527] netlink: 'syz.1.4239': attribute type 1 has an invalid length. [ 844.894250][T18527] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 844.984686][T18529] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 846.390842][T18588] xt_nat: multiple ranges no longer supported [ 847.096394][T18592] tipc: New replicast peer: 255.255.255.255 [ 847.103667][T18592] tipc: Enabled bearer , priority 10 [ 849.347508][T18611] tipc: Failed to remove unknown binding: 66,0,0/4:3236450226/3236450228 [ 849.373549][T18611] tipc: Failed to remove unknown binding: 66,0,0/4:3236450226/3236450227 [ 849.970113][T18629] batadv_slave_0: entered promiscuous mode [ 850.047204][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4269'. [ 850.408974][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4273'. [ 850.490067][T18628] batadv_slave_0: left promiscuous mode [ 850.841281][T18656] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4276'. [ 850.855076][T18655] fuse: fd is not a fuse device [ 850.884443][T18656] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4276'. [ 850.920886][T18656] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4276'. [ 851.645486][ T29] audit: type=1400 audit(1779418359.189:1422): avc: denied { wake_alarm } for pid=18658 comm="syz.7.4277" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 851.827495][T18666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4279'. [ 851.925390][T18668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18668 comm=syz.1.4279 [ 852.000353][T18666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4279'. [ 855.774616][T18704] syzkaller0: entered promiscuous mode [ 855.798611][T18704] syzkaller0: entered allmulticast mode [ 855.836424][T18706] fuse: fd is not a fuse device [ 855.901825][ T5842] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 856.182879][ T5842] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 856.218985][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.231779][ T5842] usb 1-1: config 0 has no interfaces? [ 856.237280][ T5842] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 856.251580][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.710519][ T5842] usb 1-1: config 0 descriptor?? [ 857.073221][T18717] netlink: 'syz.8.4294': attribute type 11 has an invalid length. [ 857.504493][ T10] usb 1-1: USB disconnect, device number 24 [ 860.037727][T18737] batman_adv: batadv0: Adding interface: macvtap1 [ 860.060241][T18737] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.117954][T18737] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 860.338733][T18741] batman_adv: batadv0: Removing interface: macvtap1 [ 860.580831][T18739] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4301'. [ 861.259246][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4306'. [ 861.366644][T18764] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18764 comm=syz.1.4306 [ 861.744579][ T29] audit: type=1400 audit(1779418369.499:1423): avc: denied { create } for pid=18773 comm="syz.7.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 862.551758][T18788] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 864.686991][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.716752][ T29] audit: type=1326 audit(1779418372.259:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18787 comm="syz.8.4315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0259ce59 code=0x7fc00000 [ 864.843277][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4318'. [ 864.852420][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4318'. [ 864.861413][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4318'. [ 868.515474][ T29] audit: type=1400 audit(1779418376.269:1425): avc: denied { execute_no_trans } for pid=18838 comm="syz.7.4328" path=2F6D656D66643A2D45D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=70150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 869.206268][T14197] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 869.654520][T18870] fuse: fd is not a fuse device [ 869.695594][T18872] netlink: 'syz.8.4340': attribute type 1 has an invalid length. [ 869.819302][T18874] bond3: entered promiscuous mode [ 869.851516][T18874] bond3: entered allmulticast mode [ 870.023310][T18874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 871.139474][T18872] bridge2: entered promiscuous mode [ 871.168487][T18872] bridge2: entered allmulticast mode [ 871.198313][T18872] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 871.215008][T17266] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 871.310898][T18874] bridge3: entered promiscuous mode [ 871.317523][T18874] bridge3: entered allmulticast mode [ 871.325872][T18874] bond3: (slave bridge3): Enslaving as a backup interface with a down link [ 871.404117][T17285] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 872.297063][T18874] bridge4: entered promiscuous mode [ 872.332977][T18874] bridge4: entered allmulticast mode [ 872.388001][T18874] bond3: (slave bridge4): Enslaving as a backup interface with a down link [ 874.467666][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4351'. [ 875.789701][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 878.025864][T18976] futex_wake_op: syz.1.4362 tries to shift op by 144; fix this program [ 878.605993][T18979] netlink: 'syz.8.4363': attribute type 10 has an invalid length. [ 879.967322][T19000] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.521653][ T29] audit: type=1400 audit(1779418389.269:1426): avc: denied { connect } for pid=19006 comm="syz.9.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 882.215283][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4377'. [ 882.296365][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4377'. [ 882.403309][T19029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.430382][T19027] netlink: 'syz.9.4377': attribute type 4 has an invalid length. [ 882.468971][T19027] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4377'. [ 882.518264][T19029] bond4: (slave bond0): making interface the new active one [ 882.554137][T19029] bond4: (slave bond0): Enslaving as an active interface with an up link [ 882.593620][T19027] .`: renamed from bond0 (while UP) [ 883.242167][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.329798][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4384'. [ 885.201516][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4384'. [ 885.490788][T19061] overlayfs: failed to clone upperpath [ 891.648611][T19106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.671657][T19106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.495580][T19110] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 892.515005][T19110] bond4: (slave lo): Enslaving as an active interface with an up link [ 892.527533][T19110] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 896.597164][T12987] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 897.744119][T12987] usb 9-1: Using ep0 maxpacket: 32 [ 897.770678][T12987] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.809999][T12987] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 897.848514][T12987] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 897.893770][T19167] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4416'. [ 897.904845][T12987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.950795][T12987] usb 9-1: Product: syz [ 897.984303][T12987] usb 9-1: Manufacturer: syz [ 898.007973][T12987] usb 9-1: SerialNumber: syz [ 898.075000][T12987] usb 9-1: config 0 descriptor?? [ 900.325914][T12987] usb 9-1: USB disconnect, device number 12 [ 902.550721][T19201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 903.966858][T19224] netlink: 'syz.8.4432': attribute type 1 has an invalid length. [ 904.961809][T19232] fuse: fd is not a fuse device [ 905.842224][T19235] netlink: 'syz.8.4436': attribute type 2 has an invalid length. [ 905.849986][T19235] netlink: 'syz.8.4436': attribute type 2 has an invalid length. [ 915.051223][T19290] netlink: 'syz.1.4452': attribute type 12 has an invalid length. [ 915.517810][T19299] fuse: Bad value for 'fd' [ 916.736618][ T29] audit: type=1400 audit(1779418424.489:1427): avc: denied { associate } for pid=19311 comm="syz.8.4459" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 917.599631][T19320] veth0_to_team: entered promiscuous mode [ 917.744916][T19330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4466'. [ 917.917979][T19330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19330 comm=syz.1.4466 [ 918.279654][T19340] netlink: 'syz.8.4469': attribute type 10 has an invalid length. [ 918.287802][T19340] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4469'. [ 918.396457][T19346] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14226] was attempted by " [ 920.339785][T19352] openvswitch: netlink: Flow key attr not present in new flow. [ 921.900608][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 922.061655][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 922.073151][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 922.098365][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 922.132532][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 922.158331][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 922.175865][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.190573][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 922.200744][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.314641][ T10] usb 1-1: usb_control_msg returned -71 [ 923.321836][ T10] usbtmc 1-1:16.0: can't read capabilities [ 923.344235][ T10] usb 1-1: USB disconnect, device number 25 [ 925.431052][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4491'. [ 925.473803][T19393] fuse: fd is not a fuse device [ 925.950764][T19422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4495'. [ 926.017661][T19420] syzkaller0: create flow: hash 1767729177 index 2 [ 926.042972][T19425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4496'. [ 926.133593][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.543914][T19423] syzkaller0: delete flow: hash 1767729177 index 2 [ 928.653884][T19458] netlink: 'syz.8.4507': attribute type 1 has an invalid length. [ 928.798513][T19461] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4507'. [ 933.639702][T19458] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 933.741934][T19477] tipc: Enabling of bearer rejected, failed to enable media [ 933.815942][ T5714] IPVS: starting estimator thread 0... [ 933.982128][T19488] IPVS: using max 35 ests per chain, 84000 per kthread [ 939.959702][T19520] sock: sock_set_timeout: `syz.7.4520' (pid 19520) tries to set negative timeout [ 939.968303][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4523'. [ 940.025537][T12987] IPVS: starting estimator thread 0... [ 940.134063][T19524] IPVS: using max 42 ests per chain, 100800 per kthread [ 943.319808][T19581] tipc: Enabling of bearer rejected, already enabled [ 946.582052][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 946.604223][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.691697][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.703919][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 947.718612][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 947.730045][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.762749][T19622] netlink: 'syz.9.4548': attribute type 1 has an invalid length. [ 947.779975][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 947.810361][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.831391][ T10] usb 1-1: Product: syz [ 947.859289][ T10] usb 1-1: Manufacturer: syz [ 947.884151][ T10] usb 1-1: SerialNumber: syz [ 947.915250][ T10] usb 1-1: config 0 descriptor?? [ 947.956973][ T10] adutux 1-1:0.0: interrupt endpoints not found [ 948.123179][T19625] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 948.511456][T19625] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 948.516005][ T10] usb 1-1: USB disconnect, device number 26 [ 948.793606][T19622] bond0: (slave bridge3): Enslaving as an active interface with a down link [ 948.852815][T19630] macvlan2: entered promiscuous mode [ 948.875045][T19630] macvlan2: entered allmulticast mode [ 948.912225][T19630] bond0: entered promiscuous mode [ 948.933695][T19630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 948.990583][T19630] bond0: left promiscuous mode [ 950.975946][T19676] syz_tun: entered allmulticast mode [ 953.404739][T19676] dvmrp6: entered allmulticast mode [ 953.737779][T19689] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 953.802270][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 954.348827][ T29] audit: type=1400 audit(1779418462.099:1428): avc: denied { read } for pid=19690 comm="syz.1.4566" path="socket:[73871]" dev="sockfs" ino=73871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 959.291140][ T29] audit: type=1400 audit(1779418467.039:1429): avc: denied { setopt } for pid=19718 comm="syz.0.4574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 960.658424][ T29] audit: type=1400 audit(1779418468.409:1430): avc: denied { create } for pid=19747 comm="syz.9.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 962.384889][T19770] syzkaller0: entered promiscuous mode [ 962.415668][T19770] syzkaller0: entered allmulticast mode [ 962.447772][T19775] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4591'. [ 962.557612][T19777] Option 'D' to dns_resolver key: bad/missing value [ 963.036397][T19788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4595'. [ 964.739475][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4598'. [ 966.801202][T19831] netlink: 'syz.8.4605': attribute type 2 has an invalid length. [ 966.810116][T19831] netlink: 'syz.8.4605': attribute type 1 has an invalid length. [ 966.819002][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4605'. [ 966.904423][ T29] audit: type=1400 audit(1779418474.659:1431): avc: denied { read } for pid=19828 comm="syz.9.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 967.502735][T19837] syz_tun: entered allmulticast mode [ 967.903800][ T29] audit: type=1400 audit(1779418475.659:1432): avc: denied { lock } for pid=19848 comm="syz.0.4611" path="socket:[73116]" dev="sockfs" ino=73116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 969.823519][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 970.570893][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 970.626204][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.643807][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 970.656287][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 970.684039][T19860] ref_ctr increment failed for inode: 0x62f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807b9a8c40 [ 971.116836][T19868] vxlan0: entered promiscuous mode [ 971.126354][T19868] vxlan0: entered allmulticast mode [ 971.143554][T17291] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.164764][T17291] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.169472][ T10] usb 1-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 971.181612][T17291] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.254133][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.531066][T17291] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.590830][ T10] usb 1-1: can't set config #1, error -71 [ 971.617950][ T10] usb 1-1: USB disconnect, device number 27 [ 974.007159][T19898] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 974.304084][T19907] tipc: Enabling of bearer rejected, failed to enable media [ 975.522518][T19930] fuse: fd is not a fuse device [ 976.666972][T19943] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4640'. [ 977.566197][T19943] netlink: 'syz.7.4640': attribute type 15 has an invalid length. [ 977.606361][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4640'. [ 977.639792][T19943] netlink: 'syz.7.4640': attribute type 15 has an invalid length. [ 977.642694][T17269] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 977.674028][T17269] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 977.684868][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4640'. [ 977.728655][T17269] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 977.776589][T17269] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 978.846378][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4645'. [ 979.233483][T19979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4650'. [ 982.180260][T14197] Bluetooth: hci6: unexpected event for opcode 0x080b [ 982.703934][T20016] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4660'. [ 983.489158][T20026] vlan2: entered promiscuous mode [ 983.509755][T20026] hsr0: entered promiscuous mode [ 983.568581][T20026] vlan2: entered allmulticast mode [ 983.591593][T20026] hsr0: entered allmulticast mode [ 983.606168][T20026] hsr_slave_0: entered allmulticast mode [ 983.632050][T20026] hsr_slave_1: entered allmulticast mode [ 983.655690][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4663'. [ 983.725535][T20033] hsr_slave_1 (unregistering): left promiscuous mode [ 983.952238][T20031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.097215][T20035] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4666'. [ 984.108665][T20035] openvswitch: netlink: Flow key attr not present in new flow. [ 986.423097][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 986.447687][T20084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4675'. [ 986.622097][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 986.840430][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.274266][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.343832][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 987.567796][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.590517][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.239220][ T10] usb 1-1: config 0 descriptor?? [ 988.303899][ T10] hub 1-1:0.0: USB hub found [ 989.426435][ T10] hub 1-1:0.0: 1 port detected [ 990.119660][ T10] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 990.123633][T14500] usb 1-1: USB disconnect, device number 28 [ 993.265319][T20162] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4694'. [ 993.424110][ T29] audit: type=1326 audit(1779418501.169:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 993.537965][ T29] audit: type=1326 audit(1779418501.209:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 993.934035][ T29] audit: type=1326 audit(1779418501.209:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 993.978732][ T29] audit: type=1326 audit(1779418501.209:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 994.014423][ T29] audit: type=1326 audit(1779418501.609:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 994.043958][ T29] audit: type=1326 audit(1779418501.609:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 994.073334][ T29] audit: type=1326 audit(1779418501.649:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 994.138383][ T29] audit: type=1326 audit(1779418501.649:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 994.216805][ T29] audit: type=1326 audit(1779418501.649:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 994.299050][ T29] audit: type=1326 audit(1779418501.649:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20165 comm="syz.1.4692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 995.953105][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4701'. [ 995.964786][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4701'. [ 995.974505][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4701'. [ 995.983740][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4701'. [ 995.992826][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4701'. [ 1000.966973][T20222] tipc: Started in network mode [ 1000.971997][T20222] tipc: Node identity 2007ff, cluster identity 4711 [ 1000.978710][T20222] tipc: Node number set to 2099199 [ 1008.109317][T14500] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1008.952144][T14500] usb 1-1: Using ep0 maxpacket: 32 [ 1009.228243][T14500] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1009.239396][T14500] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1009.277841][T14500] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1009.314434][T14500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.364255][T14500] usb 1-1: Product: syz [ 1009.383987][T14500] usb 1-1: Manufacturer: syz [ 1009.408987][T14500] usb 1-1: SerialNumber: syz [ 1010.181337][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1010.181354][ T29] audit: type=1400 audit(1779418517.929:1451): avc: denied { ioctl } for pid=20277 comm="syz.0.4724" path="socket:[75119]" dev="sockfs" ino=75119 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1011.751277][T14500] usb 1-1: Fast Track Pro switching to config #2 [ 1012.091106][T14500] usb 1-1: USB disconnect, device number 29 [ 1023.518655][ T29] audit: type=1326 audit(1779418531.269:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1023.657788][ T29] audit: type=1326 audit(1779418531.309:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1023.941927][ T29] audit: type=1326 audit(1779418531.309:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1023.983247][ T29] audit: type=1326 audit(1779418531.309:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1024.100763][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4761'. [ 1024.127118][ T29] audit: type=1326 audit(1779418531.269:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1024.269041][ T29] audit: type=1326 audit(1779418531.309:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1024.437950][ T29] audit: type=1326 audit(1779418531.309:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1024.584516][ T29] audit: type=1326 audit(1779418531.309:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1024.727763][ T29] audit: type=1326 audit(1779418531.309:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1024.836906][ T29] audit: type=1326 audit(1779418531.309:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.0.4756" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc80f9ce59 code=0x7ffc0000 [ 1025.270516][T20413] tipc: Enabled bearer , priority 10 [ 1026.518342][ T5842] tipc: Node number set to 759884248 [ 1029.496763][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1029.496794][ T29] audit: type=1326 audit(1779418537.249:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20448 comm="syz.8.4771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab0259ce59 code=0x0 [ 1031.103519][T14197] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 1031.336100][T20470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.283676][ T29] audit: type=1400 audit(1779418539.939:1473): avc: denied { mounton } for pid=20484 comm="syz.0.4780" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1032.872357][ T29] audit: type=1400 audit(1779418540.539:1474): avc: denied { setopt } for pid=20491 comm="syz.7.4783" lport=64860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1035.651700][T20516] vlan0: entered promiscuous mode [ 1036.274493][T20530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.712402][T20537] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1043.284509][T20572] tipc: Enabled bearer , priority 0 [ 1043.339835][T20573] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 1043.404550][T20573] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 1044.624773][T20573] tipc: Resetting bearer [ 1047.436610][T14015] bond3: (slave bridge2): link status up again after 0 ms [ 1047.473116][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1047.806348][T14015] bond3: (slave bridge2): failed to get link speed/duplex [ 1048.036260][T17289] bond3: (slave bridge2): failed to get link speed/duplex [ 1048.436634][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1048.695790][T17270] bond3: (slave bridge2): failed to get link speed/duplex [ 1049.020684][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.212160][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1049.361729][T14015] bond3: (slave bridge2): failed to get link speed/duplex [ 1049.572948][T17258] bond3: (slave bridge2): failed to get link speed/duplex [ 1049.803900][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4814'. [ 1049.872439][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1050.264922][T20607] team0: Port device team_slave_0 removed [ 1052.458175][T12922] net_ratelimit: 7 callbacks suppressed [ 1052.458266][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1053.511650][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1054.188967][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4818'. [ 1054.489213][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1054.535927][T20640] PKCS8: Unsupported PKCS#8 version [ 1054.683141][T14015] bond3: (slave bridge2): failed to get link speed/duplex [ 1055.293094][T20643] tipc: Enabling of bearer rejected, failed to enable media [ 1055.531801][T17258] bond3: (slave bridge2): failed to get link speed/duplex [ 1055.665506][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1056.071922][T17289] bond3: (slave bridge2): failed to get link speed/duplex [ 1056.203763][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1056.538275][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1056.830349][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1057.014610][T20676] bridge0: entered allmulticast mode [ 1057.040190][T20676] bridge_slave_1: left allmulticast mode [ 1057.063922][T20676] bridge_slave_1: left promiscuous mode [ 1057.098108][T20676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.106486][T20674] GUP no longer grows the stack in syz.1.4833 (20674): 200000004000-200000005000 (200000001000) [ 1057.120556][T20674] CPU: 0 UID: 0 PID: 20674 Comm: syz.1.4833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.120597][T20674] Tainted: [L]=SOFTLOCKUP [ 1057.120606][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1057.120620][T20674] Call Trace: [ 1057.120628][T20674] [ 1057.120638][T20674] dump_stack_lvl+0x100/0x190 [ 1057.120676][T20674] gup_vma_lookup.cold+0x83/0x96 [ 1057.120713][T20674] __get_user_pages+0x241/0x32a0 [ 1057.120750][T20674] ? down_read_killable+0x307/0x4b0 [ 1057.120777][T20674] ? __pfx___get_user_pages+0x10/0x10 [ 1057.120815][T20674] __gup_longterm_locked+0x87d/0x16f0 [ 1057.120844][T20674] ? __lock_acquire+0x4a5/0x2630 [ 1057.120883][T20674] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1057.120912][T20674] ? lock_acquire+0x1b1/0x370 [ 1057.120953][T20674] gup_fast_fallback+0x16dc/0x2790 [ 1057.121003][T20674] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1057.121035][T20674] ? __lock_acquire+0x4a5/0x2630 [ 1057.121065][T20674] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1057.121096][T20674] get_user_pages_fast+0xa7/0xf0 [ 1057.121125][T20674] ? __pfx_get_user_pages_fast+0x10/0x10 [ 1057.121163][T20674] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 1057.121204][T20674] ? __mutex_lock+0x26d/0x1b10 [ 1057.121240][T20674] ? pipe_lock+0x69/0x80 [ 1057.121273][T20674] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 1057.121311][T20674] ? __pfx___mutex_lock+0x10/0x10 [ 1057.121345][T20674] ? find_held_lock+0x2b/0x80 [ 1057.121367][T20674] ? futex_unqueue+0x133/0x2c0 [ 1057.121399][T20674] ? import_ubuf+0x1b6/0x220 [ 1057.121436][T20674] iov_iter_get_pages2+0xa3/0x100 [ 1057.121481][T20674] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 1057.121519][T20674] ? wait_for_space+0x2ca/0x3b0 [ 1057.121553][T20674] __do_sys_vmsplice+0x7dd/0x13c0 [ 1057.121594][T20674] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 1057.121623][T20674] ? get_signal+0x1985/0x2210 [ 1057.121663][T20674] ? __pfx_futex_wait+0x10/0x10 [ 1057.121697][T20674] ? __pfx_get_signal+0x10/0x10 [ 1057.121745][T20674] ? irqentry_exit+0x24d/0x7e0 [ 1057.121779][T20674] ? lockdep_hardirqs_on+0x78/0x100 [ 1057.121835][T20674] ? do_syscall_64+0x10b/0xf80 [ 1057.121868][T20674] do_syscall_64+0x10b/0xf80 [ 1057.121901][T20674] ? clear_bhb_loop+0x40/0x90 [ 1057.121929][T20674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.121953][T20674] RIP: 0033:0x7ffaf699ce59 [ 1057.121972][T20674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.121995][T20674] RSP: 002b:00007ffaf77db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1057.122018][T20674] RAX: ffffffffffffffda RBX: 00007ffaf6c15fa0 RCX: 00007ffaf699ce59 [ 1057.122034][T20674] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 1057.122048][T20674] RBP: 00007ffaf6a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1057.122063][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.122077][T20674] R13: 00007ffaf6c16038 R14: 00007ffaf6c15fa0 R15: 00007ffc7c27d748 [ 1057.122109][T20674] [ 1057.565072][T20676] bridge_slave_0: left allmulticast mode [ 1057.593182][T20676] bridge_slave_0: left promiscuous mode [ 1057.616206][T20676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.972516][ T29] audit: type=1804 audit(1779418566.719:1475): pid=20669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4831" name="file1" dev="tmpfs" ino=1981 res=1 errno=0 [ 1059.030481][ T29] audit: type=1804 audit(1779418566.779:1476): pid=20669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4831" name="file0" dev="tmpfs" ino=1980 res=1 errno=0 [ 1059.054863][T20682] lo speed is unknown, defaulting to 1000 [ 1059.060660][T20682] lo speed is unknown, defaulting to 1000 [ 1059.067125][T20682] lo speed is unknown, defaulting to 1000 [ 1059.073812][T20682] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1059.088275][T20682] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1059.105212][T20682] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1059.114222][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1059.126321][T20682] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1059.173999][T20682] lo speed is unknown, defaulting to 1000 [ 1059.181676][T20682] lo speed is unknown, defaulting to 1000 [ 1059.188924][T20682] lo speed is unknown, defaulting to 1000 [ 1059.196196][T20682] lo speed is unknown, defaulting to 1000 [ 1059.203935][T20682] lo speed is unknown, defaulting to 1000 [ 1059.211111][T20682] lo speed is unknown, defaulting to 1000 [ 1059.221781][T20682] lo speed is unknown, defaulting to 1000 [ 1059.242495][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1059.336117][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1059.462431][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1060.554479][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1060.684231][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1060.791913][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1061.100554][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1061.500534][T20712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.509002][T20712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.520973][T20712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.699568][T20712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.709075][T20712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.835089][T14015] bond3: (slave bridge2): failed to get link speed/duplex [ 1062.053627][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1062.613562][ T29] audit: type=1400 audit(1779418570.369:1477): avc: denied { getopt } for pid=20715 comm="syz.8.4844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1064.162481][T17269] net_ratelimit: 5 callbacks suppressed [ 1064.162500][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1064.685038][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1065.132028][T17270] bond3: (slave bridge2): failed to get link speed/duplex [ 1065.364703][T17270] bond3: (slave bridge2): failed to get link speed/duplex [ 1065.453918][T20756] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4853'. [ 1065.513716][T17270] bond3: (slave bridge2): failed to get link speed/duplex [ 1065.621716][T17270] bond3: (slave bridge2): failed to get link speed/duplex [ 1065.731668][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1065.871787][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1065.951660][ T5714] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1065.991729][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1067.179255][T17289] bond3: (slave bridge2): failed to get link speed/duplex [ 1067.643057][T20774] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1067.651969][T20774] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1067.662858][T20774] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1067.678375][ T29] audit: type=1400 audit(1779418575.409:1478): avc: denied { firmware_load } for pid=20773 comm="syz.8.4861" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1068.264043][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1068.297227][ T5714] usb 1-1: can't read configurations, error -71 [ 1070.203503][T17269] net_ratelimit: 15 callbacks suppressed [ 1070.203538][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1070.476204][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1070.611707][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1070.821849][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1073.614684][T17258] bond3: (slave bridge2): failed to get link speed/duplex [ 1073.782664][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1075.291017][T17291] bond3: (slave bridge2): failed to get link speed/duplex [ 1075.798534][T17289] bond3: (slave bridge2): failed to get link speed/duplex [ 1076.054597][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1077.111246][T17289] bond3: (slave bridge2): failed to get link speed/duplex [ 1077.407691][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1077.712082][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1077.925605][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1078.115720][T20848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.128875][T20848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.138961][T20848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.171786][T20855] netlink: 'syz.7.4878': attribute type 9 has an invalid length. [ 1078.186152][T20848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.201983][T20848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1078.291936][T17258] bond3: (slave bridge2): failed to get link speed/duplex [ 1078.412853][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1078.643578][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1080.281876][T14197] Bluetooth: hci0: command tx timeout [ 1080.419255][T17258] net_ratelimit: 4 callbacks suppressed [ 1080.419274][T17258] bond3: (slave bridge2): failed to get link speed/duplex [ 1081.047768][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1081.291142][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1081.421735][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1081.646595][T17291] bond3: (slave bridge2): failed to get link speed/duplex [ 1081.692016][T20847] lo speed is unknown, defaulting to 1000 [ 1082.057448][T20727] syz_tun (unregistering): left allmulticast mode [ 1082.321653][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1082.364100][T14197] Bluetooth: hci0: command tx timeout [ 1082.719677][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1083.200922][T17289] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.692529][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1084.442499][T14197] Bluetooth: hci0: command tx timeout [ 1084.442654][T17258] bond3: (slave bridge2): failed to get link speed/duplex [ 1084.595728][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1084.776142][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1084.785543][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1084.792887][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1084.799799][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1084.853813][T17289] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.853929][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1084.874031][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1084.882906][T20927] netlink: 'syz.7.4892': attribute type 14 has an invalid length. [ 1085.139828][T20934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1085.725038][T12987] libceph: connect (1)[c::]:6789 error -101 [ 1085.732431][T12987] libceph: mon0 (1)[c::]:6789 connect error [ 1085.814283][T17289] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.848036][T20847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.859635][T20847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.868747][T20847] bridge_slave_0: entered allmulticast mode [ 1085.876797][T20847] bridge_slave_0: entered promiscuous mode [ 1085.885151][T20847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.892299][T20847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.899456][T20847] bridge_slave_1: entered allmulticast mode [ 1085.906860][T20847] bridge_slave_1: entered promiscuous mode [ 1085.938323][T20847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.950308][T20847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.083850][T20921] ceph: No mds server is up or the cluster is laggy [ 1086.111417][T20847] team0: Port device team_slave_0 added [ 1086.203808][T20847] team0: Port device team_slave_1 added [ 1086.378544][T17289] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.469883][T20847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.493595][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.526564][T14197] Bluetooth: hci0: command tx timeout [ 1086.534015][T20847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.553320][T17291] bond3: (slave bridge2): failed to get link speed/duplex [ 1086.577430][T20847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.587391][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.614656][T20847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.687453][T20949] netlink: 'syz.8.4897': attribute type 1 has an invalid length. [ 1086.704787][T20847] hsr_slave_0: entered promiscuous mode [ 1086.711373][T20847] hsr_slave_1: entered promiscuous mode [ 1086.718234][T20847] debugfs: 'hsr0' already exists in 'hsr' [ 1086.724285][T20847] Cannot create hsr debugfs directory [ 1087.536435][T20949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1087.566725][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1087.616652][T20952] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1087.626076][T20952] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1087.643630][T20952] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1088.257310][T20953] gretap1: entered promiscuous mode [ 1088.377976][T20953] bond4: (slave gretap1): making interface the new active one [ 1088.486088][T20953] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1088.512207][T17270] bond3: (slave bridge2): failed to get link speed/duplex [ 1089.015906][T20954] macvlan2: entered promiscuous mode [ 1089.021350][T20954] macvlan2: entered allmulticast mode [ 1089.159289][T20954] bond4: entered promiscuous mode [ 1089.168820][T20954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1089.179848][T20954] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1089.192600][T20954] bond4: left promiscuous mode [ 1090.482570][ T29] audit: type=1400 audit(1779418598.239:1479): avc: denied { write } for pid=20979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.538315][ T29] audit: type=1400 audit(1779418598.289:1480): avc: denied { write } for pid=20997 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.647661][T20999] siw: device registration error -23 [ 1091.783040][T17289] bond0 (unregistering): (slave bridge3): Releasing active interface [ 1093.172078][T17289] bond4 (unregistering): (slave .`): Releasing backup interface [ 1093.276114][T17289] .` (unregistering): Released all slaves [ 1093.325218][T17289] bond1 (unregistering): Released all slaves [ 1093.384903][T17289] bond2 (unregistering): Released all slaves [ 1093.460904][T17289] bond3 (unregistering): Released all slaves [ 1093.517433][T17289] bond4 (unregistering): Released all slaves [ 1093.551746][T12987] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1093.563844][T17289] bond0 (unregistering): Released all slaves [ 1093.662107][T21000] lo speed is unknown, defaulting to 1000 [ 1093.679123][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1093.751765][T12987] usb 1-1: Using ep0 maxpacket: 32 [ 1093.770709][T17291] bond3: (slave bridge2): failed to get link speed/duplex [ 1093.807725][T12987] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1093.833580][T12987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.883952][T12987] usb 1-1: config 0 descriptor?? [ 1093.913940][T17291] bond3: (slave bridge2): failed to get link speed/duplex [ 1094.100348][T12987] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1094.262188][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1094.271239][T21042] tipc: Enabling of bearer rejected, failed to enable media [ 1094.388077][T17291] bond3: (slave bridge2): failed to get link speed/duplex [ 1094.915480][ T29] audit: type=1400 audit(1779418602.659:1481): avc: denied { write } for pid=21038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.970443][T20847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.541922][ T29] audit: type=1400 audit(1779418603.269:1482): avc: denied { write } for pid=21066 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.561235][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1096.568722][T17268] bond3: (slave bridge2): link status up again after 0 ms [ 1096.590231][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1096.686460][T20847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.722652][T17258] bond3: (slave bridge2): link status up again after 0 ms [ 1096.766449][ T29] audit: type=1800 audit(1779418604.519:1483): pid=21072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4922" name="nullb0" dev="tmpfs" ino=1959 res=0 errno=0 [ 1096.829192][T17285] bond3: (slave bridge2): link status up again after 0 ms [ 1096.853894][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1096.979420][T20847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.023124][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1097.125030][ T29] audit: type=1400 audit(1779418604.879:1484): avc: denied { write } for pid=21074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.332545][ T29] audit: type=1400 audit(1779418605.079:1485): avc: denied { write } for pid=21090 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.418565][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4925'. [ 1098.460080][T12987] gspca_vc032x: reg_r err -71 [ 1098.464878][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.470216][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.475563][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.480881][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.486205][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.491571][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.496891][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.502219][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.507541][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.512870][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.518199][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.523525][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.528846][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.534164][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.539478][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.544791][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.550104][T12987] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.555470][T12987] gspca_vc032x: Unknown sensor... [ 1098.668343][T12987] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1098.830147][T12987] usb 1-1: USB disconnect, device number 32 [ 1098.980364][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1099.047126][T20847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1099.806425][T17268] net_ratelimit: 2 callbacks suppressed [ 1099.806443][T17268] bond3: (slave bridge2): failed to get link speed/duplex [ 1099.834908][T21118] fuse: fd is not a fuse device [ 1099.933464][T21121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4930'. [ 1100.114081][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4931'. [ 1100.347655][T21125] bridge_slave_0 (unregistering): left allmulticast mode [ 1100.355200][T21125] bridge_slave_0 (unregistering): left promiscuous mode [ 1100.362287][T21125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.403639][T21121] xt_nfacct: accounting object `syz1' does not exist [ 1100.482907][T21121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21121 comm=syz.0.4930 [ 1100.514046][T12922] bond3: (slave bridge2): failed to get link speed/duplex [ 1101.072307][ T29] audit: type=1400 audit(1779418608.819:1486): avc: denied { write } for pid=21124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.304320][T17268] bond3: (slave bridge2): failed to get link speed/duplex [ 1101.327684][T17289] IPVS: stop unused estimator thread 0... [ 1101.360947][T20847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1101.420010][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1101.444239][T20847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1101.465268][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1101.533775][ T29] audit: type=1400 audit(1779418609.189:1487): avc: denied { write } for pid=21155 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.589045][T20847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1102.045816][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1102.445168][ T29] audit: type=1326 audit(1779418609.569:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1102.545619][T20847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1102.547323][ T29] audit: type=1326 audit(1779418609.579:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1102.635594][T21171] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4939'. [ 1102.712342][T20847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1102.743822][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1102.801905][T17268] bond3: (slave bridge2): failed to get link speed/duplex [ 1103.695288][ T29] audit: type=1326 audit(1779418609.679:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1103.719728][T16239] bond3: (slave bridge2): failed to get link speed/duplex [ 1104.154403][ T29] audit: type=1326 audit(1779418609.689:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1104.232705][ T29] audit: type=1326 audit(1779418609.689:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1104.259247][ T29] audit: type=1326 audit(1779418609.699:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1105.107025][T17289] bond3: (slave bridge2): failed to get link speed/duplex [ 1105.148255][T20847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.320653][T17270] bond3: (slave bridge2): failed to get link speed/duplex [ 1105.342731][ T29] audit: type=1326 audit(1779418609.699:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1105.369907][ T29] audit: type=1326 audit(1779418609.709:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.4938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf699ce59 code=0x7ffc0000 [ 1105.920857][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1106.020113][T20847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.044193][T16239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.051358][T16239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.081436][T16239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.088596][T16239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.368129][T16239] bond3: (slave bridge2): failed to get link speed/duplex [ 1107.542753][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1107.577866][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1107.577882][ T29] audit: type=1400 audit(1779418615.329:1502): avc: denied { accept } for pid=21213 comm="syz.1.4949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1107.673202][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1107.782143][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1107.916788][T17268] bond3: (slave bridge2): failed to get link speed/duplex [ 1108.082171][T17268] bond3: (slave bridge2): failed to get link speed/duplex [ 1108.929016][T17268] bond3: (slave bridge2): failed to get link speed/duplex [ 1109.500846][ T29] audit: type=1400 audit(1779418617.249:1503): avc: denied { execute } for pid=21248 comm="syz.0.4954" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1109.800668][T20847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.905336][T21256] bridge_slave_0: left allmulticast mode [ 1109.921761][T21256] bridge_slave_0: left promiscuous mode [ 1109.927503][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.942541][T21256] bridge_slave_1: left allmulticast mode [ 1109.948292][T21256] bridge_slave_1: left promiscuous mode [ 1109.954088][T21256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.967970][T21256] bond0: (slave bond_slave_0): Releasing backup interface [ 1109.984756][T21256] bond0: (slave bond_slave_1): Releasing backup interface [ 1109.998896][T21256] team0: Port device team_slave_0 removed [ 1110.009234][T21256] team0: Port device team_slave_1 removed [ 1110.067618][T21256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.084026][T21256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.118928][T21256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.137806][T21256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.166346][T21256] net_ratelimit: 7 callbacks suppressed [ 1110.166376][T21256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1110.288146][T21260] jý: entered promiscuous mode [ 1110.404544][T21261] team0: Port device vlan0 added [ 1110.443608][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.466778][T20847] veth0_vlan: entered promiscuous mode [ 1110.492246][T20847] veth1_vlan: entered promiscuous mode [ 1110.566490][T20847] veth0_macvtap: entered promiscuous mode [ 1110.583123][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1110.607927][T20847] veth1_macvtap: entered promiscuous mode [ 1110.659362][T20847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.695901][T20847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.744600][T17289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.753340][T17289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.794414][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1110.924025][T17268] bond3: (slave bridge2): failed to get link speed/duplex [ 1110.951779][T17289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.178220][T17289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.246129][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1112.295901][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1112.304785][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1112.551997][T17269] bond3: (slave bridge2): failed to get link speed/duplex [ 1112.729440][T17269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.737278][T17269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.831858][T14015] bond3: (slave bridge2): failed to get link speed/duplex [ 1112.840664][T17269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.874399][T17269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.989027][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1113.122143][T17285] bond3: (slave bridge2): failed to get link speed/duplex [ 1113.268572][T17263] bond3: (slave bridge2): failed to get link speed/duplex [ 1113.437025][T21296] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1113.475253][ T29] audit: type=1400 audit(1779418621.229:1504): avc: denied { read } for pid=21292 comm="syz.2.4879" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1113.614501][ T29] audit: type=1400 audit(1779418621.229:1505): avc: denied { open } for pid=21292 comm="syz.2.4879" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1113.615714][T21302] fuse: fd is not a fuse device [ 1219.662622][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1219.669613][ C1] rcu: 0-...!: (1 GPs behind) idle=6ed4/0/0x1 softirq=139899/139899 fqs=1 [ 1219.679775][ C1] rcu: (detected by 1, t=10502 jiffies, g=131173, q=394 ncpus=2) [ 1219.687592][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1219.687631][ C0] NMI backtrace for cpu 0 [ 1219.687650][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.687676][ C0] Tainted: [L]=SOFTLOCKUP [ 1219.687682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1219.687694][ C0] RIP: 0010:timerqueue_linked_add+0x4/0x430 [ 1219.687720][ C0] Code: 5b c3 cc cc cc cc e8 9b c1 81 f6 31 db 48 89 d8 5b e9 10 5c 07 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 49 89 ff 41 56 41 55 41 54 49 89 f4 55 53 e8 67 c1 81 f6 4c [ 1219.687738][ C0] RSP: 0000:ffffc90000007e50 EFLAGS: 00000046 [ 1219.687753][ C0] RAX: 0000000000000000 RBX: ffff8880b8428600 RCX: 0000000000000001 [ 1219.687764][ C0] RDX: 0000000000000000 RSI: ffff88802cb6c300 RDI: ffff8880b8428658 [ 1219.687776][ C0] RBP: ffff88802cb6c300 R08: 0000000000000005 R09: 000000000000001f [ 1219.687787][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880b84284c0 [ 1219.687798][ C0] R13: 0000000000000002 R14: ffff8880b8428608 R15: ffff8880b8428650 [ 1219.687810][ C0] FS: 0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 1219.687827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1219.687838][ C0] CR2: 000000110c2e2bc4 CR3: 0000000069155000 CR4: 00000000003526f0 [ 1219.687850][ C0] Call Trace: [ 1219.687856][ C0] [ 1219.687863][ C0] enqueue_hrtimer+0x1ad/0x2f0 [ 1219.687894][ C0] __hrtimer_run_queues+0x73d/0xa00 [ 1219.687924][ C0] ? rcu_is_watching+0x12/0xc0 [ 1219.687952][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1219.687976][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1219.688003][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1219.688029][ C0] [ 1219.688035][ C0] [ 1219.688042][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1219.688062][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1219.688087][ C0] Code: 76 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 71 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1219.688103][ C0] RSP: 0000:ffffffff8e407e00 EFLAGS: 00000246 [ 1219.688116][ C0] RAX: 0000000001cd7e39 RBX: ffffffff8e4955c0 RCX: ffffffff8b8b2095 [ 1219.688128][ C0] RDX: 0000000000000000 RSI: ffffffff8df23d5c RDI: ffffffff8c1c4200 [ 1219.688140][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 1219.688151][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 1219.688161][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d7e050 [ 1219.688176][ C0] ? ct_kernel_exit+0x125/0x180 [ 1219.688206][ C0] default_idle+0x9/0x10 [ 1219.688222][ C0] default_idle_call+0x6c/0xb0 [ 1219.688238][ C0] do_idle+0x464/0x590 [ 1219.688261][ C0] ? __pfx_do_idle+0x10/0x10 [ 1219.688276][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 1219.688298][ C0] cpu_startup_entry+0x4f/0x60 [ 1219.688316][ C0] rest_init+0x251/0x260 [ 1219.688333][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1219.688353][ C0] start_kernel+0x484/0x490 [ 1219.688381][ C0] x86_64_start_reservations+0x24/0x30 [ 1219.688409][ C0] x86_64_start_kernel+0x12b/0x130 [ 1219.688437][ C0] common_startup_64+0x13e/0x148 [ 1219.688470][ C0] [ 1219.688622][ C1] rcu: rcu_preempt kthread starved for 10442 jiffies! g131173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1220.014023][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1220.023980][ C1] rcu: RCU grace-period kthread stack dump: [ 1220.029850][ C1] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1220.043349][ C1] Call Trace: [ 1220.046614][ C1] [ 1220.049539][ C1] __schedule+0x1295/0x67a0 [ 1220.054062][ C1] ? __pfx___schedule+0x10/0x10 [ 1220.058912][ C1] ? find_held_lock+0x2b/0x80 [ 1220.063581][ C1] ? schedule+0x2bf/0x390 [ 1220.067914][ C1] schedule+0xdd/0x390 [ 1220.071982][ C1] schedule_timeout+0x127/0x280 [ 1220.076831][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1220.082200][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1220.087482][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1220.093287][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1220.098753][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1220.103517][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1220.108799][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 1220.114254][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1220.119189][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1220.124384][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1220.130193][ C1] rcu_gp_kthread+0x179/0x230 [ 1220.134865][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1220.140057][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1220.145865][ C1] ? __kthread_parkme+0x18c/0x230 [ 1220.150884][ C1] ? kthread+0x13a/0x450 [ 1220.155120][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1220.160315][ C1] kthread+0x370/0x450 [ 1220.164378][ C1] ? __pfx_kthread+0x10/0x10 [ 1220.168965][ C1] ret_from_fork+0x72b/0xd50 [ 1220.173555][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1220.178663][ C1] ? __switch_to+0x800/0x1100 [ 1220.183341][ C1] ? __pfx_kthread+0x10/0x10 [ 1220.187932][ C1] ret_from_fork_asm+0x1a/0x30 [ 1220.192711][ C1] [ 1220.195725][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1220.202039][ C1] CPU: 1 UID: 0 PID: 5274 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 1220.212569][ C1] Tainted: [L]=SOFTLOCKUP [ 1220.216875][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1220.226915][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1220.232283][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 9b 2f e7 f5 cc [ 1220.251877][ C1] RSP: 0018:ffffc900032e7610 EFLAGS: 00000293 [ 1220.257933][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc2d8d [ 1220.265893][ C1] RDX: ffff88802e072500 RSI: ffffffff81fc2d67 RDI: ffff88802e072500 [ 1220.273852][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 1220.281812][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1220.289768][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 1220.297732][ C1] FS: 00007f4c2dd2e780(0000) GS:ffff88812446a000(0000) knlGS:0000000000000000 [ 1220.306651][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1220.313225][ C1] CR2: 000055f55e33e450 CR3: 0000000038869000 CR4: 00000000003526f0 [ 1220.321186][ C1] Call Trace: [ 1220.324453][ C1] [ 1220.327372][ C1] smp_call_function_many_cond+0x587/0x1700 [ 1220.333271][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1220.338471][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1220.344793][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1220.349730][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1220.354673][ C1] ? rcu_is_watching+0x12/0xc0 [ 1220.359445][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1220.364639][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1220.369752][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1220.374862][ C1] ? dup_mmap+0x12cd/0x2180 [ 1220.379362][ C1] ? dup_mmap+0x12cd/0x2180 [ 1220.383865][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1220.389406][ C1] ? up_write+0x28c/0x4f0 [ 1220.393742][ C1] dup_mmap+0x12e8/0x2180 [ 1220.398079][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1220.402749][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1220.408559][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1220.413495][ C1] ? find_held_lock+0x2b/0x80 [ 1220.418160][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1220.424079][ C1] copy_process+0x6c78/0x7ed0 [ 1220.428761][ C1] ? __pfx_copy_process+0x10/0x10 [ 1220.433784][ C1] ? sk_setsockopt+0x46b/0x5c40 [ 1220.438629][ C1] ? sk_setsockopt+0x46b/0x5c40 [ 1220.443473][ C1] ? rcu_is_watching+0x12/0xc0 [ 1220.448237][ C1] ? sk_setsockopt+0x46b/0x5c40 [ 1220.453082][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 1220.458373][ C1] kernel_clone+0x12e/0x9c0 [ 1220.462867][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1220.467886][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1220.472834][ C1] ? find_held_lock+0x2b/0x80 [ 1220.477500][ C1] ? __might_fault+0xc5/0x140 [ 1220.482184][ C1] __do_sys_clone+0xd9/0x120 [ 1220.486767][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1220.491967][ C1] ? __sys_setsockopt+0x1b5/0x220 [ 1220.496984][ C1] ? rcu_is_watching+0x12/0xc0 [ 1220.501754][ C1] do_syscall_64+0x10b/0xf80 [ 1220.506346][ C1] ? clear_bhb_loop+0x40/0x90 [ 1220.511019][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.516905][ C1] RIP: 0033:0x7f4c2de02636 [ 1220.521313][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1220.540913][ C1] RSP: 002b:00007fff002ea5c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1220.549315][ C1] RAX: ffffffffffffffda RBX: 00007fff002ea5c8 RCX: 00007f4c2de02636 [ 1220.557275][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1220.565231][ C1] RBP: 00007fff0030ab10 R08: 0000000000000000 R09: 0000000000000001 [ 1220.573191][ C1] R10: 00007f4c2dd2ea50 R11: 0000000000000246 R12: 00007fff002ea700 [ 1220.581151][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 000055f555e49ac0 [ 1220.589125][ C1]