last executing test programs: 4m41.11552192s ago: executing program 2 (id=1501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffc, &(0x7f0000000280)=""/1}) 4m35.977354765s ago: executing program 3 (id=1510): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) getsockname$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000340)=0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='tcpci 0x5', 0x9) 4m34.610085234s ago: executing program 2 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) 4m32.851642619s ago: executing program 2 (id=1515): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0xd7) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x121242, 0x0) 4m32.336188065s ago: executing program 3 (id=1517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 4m31.1999337s ago: executing program 2 (id=1518): file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000100)=0x1000010) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008732b0a0040000102030109024e00030109200c080b00"], 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x101002) tee(r0, r0, 0xffffffff80000002, 0xa) 4m31.164656639s ago: executing program 3 (id=1519): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a032090400000103000000092111010001221500070581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022150000000600ff0901a1018520150026ff007508950e8102c0"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000200)="200141002440000000000000") nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_usb_disconnect(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 4m28.287230039s ago: executing program 3 (id=1524): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m27.359838775s ago: executing program 2 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) io_cancel(0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) 4m26.810074386s ago: executing program 3 (id=1529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 4m24.299016634s ago: executing program 2 (id=1531): ioprio_set$pid(0x2, 0x0, 0x6000) timer_create(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m20.793932515s ago: executing program 3 (id=1532): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$MSR(0x0, 0x4, 0x0) ioctl(0xffffffffffffffff, 0x40104d01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 4m8.840291015s ago: executing program 32 (id=1531): ioprio_set$pid(0x2, 0x0, 0x6000) timer_create(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m8.758457214s ago: executing program 4 (id=1544): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x4048055) 4m3.131313721s ago: executing program 33 (id=1532): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$MSR(0x0, 0x4, 0x0) ioctl(0xffffffffffffffff, 0x40104d01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 4m1.897540506s ago: executing program 4 (id=1550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a1d0400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800024000000002240001800b0001007470726f78790000140002800800034000000016080001400000000a0900020073797a320000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 3m59.844164443s ago: executing program 4 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) pselect6(0x40, &(0x7f0000000080)={0xc}, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000300)={0x3, @pix={0x0, 0x3, 0x32315659, 0x0, 0x6, 0x5, 0x1, 0x50000, 0x1, 0x8, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='10', 0x2) 3m58.572251127s ago: executing program 4 (id=1555): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x1f00, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x8) 3m57.243161384s ago: executing program 4 (id=1558): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffc, &(0x7f0000000280)=""/1}) 3m55.057617373s ago: executing program 4 (id=1562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x703}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x40}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0xf000, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00', 0x4}, 0x18) 3m39.730221441s ago: executing program 34 (id=1562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x703}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x40}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0xf000, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00', 0x4}, 0x18) 13.109123387s ago: executing program 5 (id=1915): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffffff, 0x0, 0x1a0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x13, r4, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 13.096773013s ago: executing program 0 (id=1916): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x240) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x7) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) pread64(r3, 0x0, 0x0, 0x6) 11.885137955s ago: executing program 6 (id=1917): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d85f10"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x140, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x64, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0xfffffce1, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xaf6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe39c64e3f41b6e89}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x41) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) fcntl$lock(r3, 0x25, &(0x7f00000002c0)={0x1, 0x0, 0x6, 0x3, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000440), 0x3) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x10, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000041) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x20004890) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRESDEC=r7], 0x24}}, 0x4010) 10.758582231s ago: executing program 0 (id=1918): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4093) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xc0000008}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x2400) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000340)=0xe, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r6, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x20040080) 10.637874488s ago: executing program 5 (id=1919): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) 10.43615282s ago: executing program 0 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 8.59025504s ago: executing program 5 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) 8.531900995s ago: executing program 0 (id=1923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000001980)={r0, 0x58, &(0x7f0000000600)}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108f8ffffffffffffff070000000900010073797a30000000004c000000090a01042fbc47e500000000000000001700000008000a4053c154210900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000"], 0xe8}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 8.393555488s ago: executing program 1 (id=1924): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8.301984802s ago: executing program 6 (id=1925): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000280)=@secondary) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r5, 0x10d, 0x21}, 0x0, &(0x7f0000000780)="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"/269, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r3) 8.253798764s ago: executing program 7 (id=1926): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, 0x0, 0x0) 7.152577755s ago: executing program 5 (id=1927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.139797292s ago: executing program 6 (id=1928): bind(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 7.029706538s ago: executing program 7 (id=1929): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x2c}}, 0x18) 5.731170432s ago: executing program 6 (id=1930): openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) 5.656487758s ago: executing program 1 (id=1931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) getxattr(&(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000780)=""/32, 0x20) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 4.668816136s ago: executing program 7 (id=1932): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[], 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 3.968971277s ago: executing program 1 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000800)={&(0x7f00000003c0)={{@hyper, 0x7}, {@any, 0x1}, 0x400, "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"}, 0x418, 0x7}) 3.846843132s ago: executing program 7 (id=1934): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x2c, 0x2e, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x9}, {0xd, 0x1}}, [{0x8, 0xb, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000810) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 3.356103788s ago: executing program 5 (id=1935): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000300)="7800000018002507c9409b14ffff00000204be04020512050e0204094300090700000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250b6", 0x79, 0x800, 0x0, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 3.10015603s ago: executing program 0 (id=1936): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.765394492s ago: executing program 1 (id=1937): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000001c0)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002380)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='1', 0x1) 2.711740497s ago: executing program 7 (id=1938): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000040)=0x3) 2.223852685s ago: executing program 0 (id=1939): r0 = socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x102, 0x1, {0xe3, 0x5e, 0x2, 0x8}}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x21801, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.759985427s ago: executing program 1 (id=1940): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0xe00, 0x34324142, 0x640, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010003000000000000001c00000008"], 0x1c}}, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x7fffffffffffffff) 1.496734461s ago: executing program 7 (id=1941): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) socket(0xa, 0x1, 0x0) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 668.861602ms ago: executing program 6 (id=1942): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) fcntl$setsig(r0, 0xa, 0x25) socket$nl_rdma(0x10, 0x3, 0x14) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80c00, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmmsg(r1, &(0x7f0000004280)=[{{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000001580)=[{&(0x7f0000000540)=""/39, 0x27}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/221, 0xdd}, 0x9}, {{&(0x7f0000001e40)=@generic, 0x80, &(0x7f0000004180), 0x0, &(0x7f0000004200)=""/121, 0x79}, 0x8}], 0x3, 0x120, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x9) getpid() r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) 518.05728ms ago: executing program 1 (id=1943): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 360.066855ms ago: executing program 5 (id=1944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 6 (id=1945): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) kernel console output (not intermixed with test programs): 72909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 286.992911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 287.052914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 288.189777][ T9060] uprobe: syz.1.850:9060 failed to unregister, leaking uprobe [ 288.206470][ T9060] uprobe: syz.1.850:9060 failed to unregister, leaking uprobe [ 288.557625][ T30] audit: type=1400 audit(1791265902.268:700): avc: denied { listen } for pid=9074 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 288.559764][ T30] audit: type=1400 audit(1791265902.268:701): avc: denied { read } for pid=9074 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 288.972915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 289.032914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 290.127761][ T9086] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 291.229451][ T30] audit: type=1400 audit(1791265904.928:702): avc: denied { ioctl } for pid=9085 comm="syz.1.856" path="socket:[24827]" dev="sockfs" ino=24827 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.385014][ T9086] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 296.853107][ T9138] overlayfs: failed to clone upperpath [ 299.454052][ T3465] IPVS: starting estimator thread 0... [ 299.573140][ T9170] IPVS: using max 37 ests per chain, 88800 per kthread [ 299.578439][ T9175] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 300.090381][ T3465] IPVS: starting estimator thread 0... [ 300.184326][ T9190] IPVS: using max 32 ests per chain, 76800 per kthread [ 300.679723][ T9175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.031907][ T9177] bond4: (slave veth3): Enslaving as an active interface with a down link [ 301.101706][ T9181] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 301.110890][ T9181] bond4: (slave batadv1): making interface the new active one [ 301.117562][ T9181] batadv1: entered promiscuous mode [ 301.127019][ T9181] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 301.154481][ T9189] bond4 (unregistering): (slave veth3): Releasing active interface [ 301.155931][ T30] audit: type=1400 audit(1791265914.868:703): avc: denied { setopt } for pid=9208 comm="syz.0.885" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.206570][ T9189] bond4 (unregistering): (slave batadv1): Releasing active interface [ 301.206688][ T9189] batadv1: left promiscuous mode [ 301.243364][ T9189] bond4 (unregistering): Released all slaves [ 303.063051][ T5606] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 303.814898][ T5606] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 303.816130][ T5606] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 303.816158][ T5606] usb 3-1: config 0 has no interface number 0 [ 303.816196][ T5606] usb 3-1: config 0 interface 41 has no altsetting 0 [ 303.819607][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.819634][ T5606] usb 3-1: Product: syz [ 303.819651][ T5606] usb 3-1: Manufacturer: syz [ 303.819668][ T5606] usb 3-1: SerialNumber: syz [ 303.826021][ T5606] usb 3-1: config 0 descriptor?? [ 306.135997][ T5606] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 306.668222][ T9268] Device name cannot be null; rc = [-22] [ 307.882763][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.902'. [ 308.259395][ T5606] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 308.259776][ T5606] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 308.260298][ T5606] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 308.274687][ T5606] usb 3-1: USB disconnect, device number 7 [ 308.688143][ T9277] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 309.060832][ T9277] bond3: entered promiscuous mode [ 309.494362][ T9277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.504244][ T9288] ipvlan2: entered allmulticast mode [ 309.504265][ T9288] bond3: entered allmulticast mode [ 309.641340][ T9293] bond3: (slave bridge1): making interface the new active one [ 309.641368][ T9293] bridge1: entered promiscuous mode [ 309.641532][ T9293] bridge1: entered allmulticast mode [ 309.665015][ T9293] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 310.189362][ T9308] netlink: 112 bytes leftover after parsing attributes in process `syz.0.911'. [ 310.992058][ T5610] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 311.375146][ T9331] netlink: 68 bytes leftover after parsing attributes in process `syz.0.919'. [ 311.381265][ T30] audit: type=1400 audit(1791265925.088:704): avc: denied { name_bind } for pid=9330 comm="syz.0.919" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 312.751317][ T30] audit: type=1326 audit(1791265926.458:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 312.783790][ T30] audit: type=1326 audit(1791265926.498:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 312.785715][ T30] audit: type=1326 audit(1791265926.498:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 313.053314][ T30] audit: type=1326 audit(1791265926.758:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 313.053372][ T30] audit: type=1326 audit(1791265926.768:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 313.055022][ T30] audit: type=1326 audit(1791265926.768:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 313.055530][ T30] audit: type=1326 audit(1791265926.768:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 313.057134][ T30] audit: type=1326 audit(1791265926.768:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1aed55e9ce code=0x7ffc0000 [ 313.058530][ T30] audit: type=1326 audit(1791265926.768:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.921" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 315.358147][ T9358] syzkaller0: entered promiscuous mode [ 315.358172][ T9358] syzkaller0: entered allmulticast mode [ 315.421811][ T9361] overlayfs: missing 'lowerdir' [ 316.899576][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.933979][ T9374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.930'. [ 317.013206][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 317.013227][ T30] audit: type=1400 audit(1791265930.708:721): avc: denied { bind } for pid=9373 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.013277][ T30] audit: type=1400 audit(1791265930.708:722): avc: denied { node_bind } for pid=9373 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 317.144607][ T9374] bridge_slave_0: left allmulticast mode [ 317.144637][ T9374] bridge_slave_0: left promiscuous mode [ 317.144838][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.489967][ T9390] netlink: 64 bytes leftover after parsing attributes in process `syz.1.937'. [ 318.952909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 321.471608][ T9425] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 321.922780][ T30] audit: type=1400 audit(1791265935.628:723): avc: denied { write } for pid=9426 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 322.433537][ T30] audit: type=1400 audit(1791265936.148:724): avc: denied { shutdown } for pid=9435 comm="syz.3.953" lport=50524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.677541][ T30] audit: type=1400 audit(1791265936.238:725): avc: denied { shutdown } for pid=9432 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 322.678294][ T30] audit: type=1400 audit(1791265936.248:726): avc: denied { read } for pid=9432 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 322.853303][ T30] audit: type=1400 audit(1791265936.568:727): avc: denied { create } for pid=9435 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 322.933978][ T9436] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 322.934046][ T9436] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 322.939595][ T30] audit: type=1400 audit(1791265936.648:728): avc: denied { firmware_load } for pid=9435 comm="syz.3.953" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 322.939757][ T9436] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 325.076632][ T9487] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 325.413809][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 325.573296][ T9494] hsr_slave_1 (unregistering): left promiscuous mode [ 327.332296][ T9511] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 327.492051][ T9511] bond4: entered promiscuous mode [ 327.492440][ T9511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.525120][ T9512] fuse: fd is not a fuse device [ 327.628013][ T9514] ipvlan2: entered allmulticast mode [ 327.628036][ T9514] bond4: entered allmulticast mode [ 327.865455][ T9511] bond4: (slave bridge0): making interface the new active one [ 327.865512][ T9511] bridge0: entered promiscuous mode [ 327.880560][ T9511] bridge0: entered allmulticast mode [ 327.908260][ T9511] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 328.286107][ T30] audit: type=1326 audit(1791265941.998:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.286207][ T30] audit: type=1326 audit(1791265941.998:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.365051][ T30] audit: type=1326 audit(1791265942.078:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.373147][ T30] audit: type=1326 audit(1791265942.078:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.373380][ T30] audit: type=1326 audit(1791265942.078:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.403334][ T30] audit: type=1326 audit(1791265942.108:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.403421][ T30] audit: type=1326 audit(1791265942.108:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.435115][ T30] audit: type=1326 audit(1791265942.138:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.435208][ T30] audit: type=1326 audit(1791265942.138:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 328.435298][ T30] audit: type=1326 audit(1791265942.148:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.2.976" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aed59e199 code=0x7ffc0000 [ 333.272441][ T9604] tipc: Enabling of bearer rejected, failed to enable media [ 333.840072][ T9614] tc_dump_action: action bad kind [ 335.207207][ T5610] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 337.274494][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 337.274541][ T30] audit: type=1400 audit(1791265950.988:741): avc: denied { read } for pid=9647 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 337.330098][ T30] audit: type=1400 audit(1791265951.038:742): avc: denied { setopt } for pid=9647 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 339.222640][ T9685] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1011'. [ 339.255490][ T9672] bond1: entered allmulticast mode [ 339.255860][ T9672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.291156][ T9682] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 339.300970][ T9682] macvlan2: entered allmulticast mode [ 339.300995][ T9682] bond0: entered allmulticast mode [ 339.301010][ T9682] bond_slave_0: entered allmulticast mode [ 339.301030][ T9682] bond_slave_1: entered allmulticast mode [ 339.329037][ T9682] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 339.384092][ T6219] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 339.444279][ T9685] bond0 (unregistering): left allmulticast mode [ 339.444324][ T9685] bond_slave_0: left allmulticast mode [ 339.444374][ T9685] bond_slave_1: left allmulticast mode [ 339.567624][ T9685] bond1: (slave macvlan2): Releasing backup interface [ 339.577972][ T9685] macvlan2 (unregistering): left allmulticast mode [ 339.639213][ T30] audit: type=1400 audit(1791265953.348:743): avc: denied { getopt } for pid=9688 comm="syz.1.1014" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.697774][ T9685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.733658][ T9685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.740358][ T9685] bond0 (unregistering): Released all slaves [ 340.428049][ T30] audit: type=1400 audit(1791265953.908:744): avc: denied { ioctl } for pid=9694 comm="syz.0.1017" path="socket:[26301]" dev="sockfs" ino=26301 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.409238][ T9723] file system registered [ 341.439158][ T30] audit: type=1400 audit(1791265955.118:745): avc: denied { write } for pid=9721 comm="syz.2.1024" name="usb_gadget" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 341.439231][ T30] audit: type=1400 audit(1791265955.118:746): avc: denied { add_name } for pid=9721 comm="syz.2.1024" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 341.439299][ T30] audit: type=1400 audit(1791265955.118:747): avc: denied { create } for pid=9721 comm="syz.2.1024" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 341.439353][ T30] audit: type=1400 audit(1791265955.118:748): avc: denied { write } for pid=9721 comm="syz.2.1024" name="functions" dev="configfs" ino=26830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 341.439399][ T30] audit: type=1400 audit(1791265955.138:749): avc: denied { mount } for pid=9721 comm="syz.2.1024" name="/" dev="functionfs" ino=26836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 342.232220][ T9723] ffs_data_put(): freeing [ 342.776239][ T30] audit: type=1400 audit(1791265956.488:750): avc: denied { ioctl } for pid=9741 comm="syz.1.1030" path="socket:[26336]" dev="sockfs" ino=26336 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 344.343742][ T30] audit: type=1400 audit(1791265958.038:751): avc: denied { create } for pid=9752 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 344.343964][ T30] audit: type=1400 audit(1791265958.038:752): avc: denied { setopt } for pid=9752 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 348.442724][ T9772] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 348.580392][ T30] audit: type=1400 audit(1791265962.288:753): avc: denied { write } for pid=9767 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 348.717774][ T9780] ceph: separator ':' missing in source [ 350.363358][ T9796] fuse: Bad value for 'fd' [ 353.176381][ T30] audit: type=1400 audit(1791265966.888:754): avc: denied { bind } for pid=9826 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 353.476689][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 353.541897][ T30] audit: type=1400 audit(1791265967.248:755): avc: denied { bind } for pid=9829 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.653540][ T5610] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 357.365322][ T30] audit: type=1800 audit(1791265971.048:756): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1070" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 361.028619][ T9906] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1078'. [ 361.313449][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1082'. [ 361.612011][ T9920] fuse: fd is not a fuse device [ 362.381249][ T30] audit: type=1804 audit(1791265976.088:757): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1083" name="bus" dev="ramfs" ino=26573 res=1 errno=0 [ 362.383372][ T30] audit: type=1804 audit(1791265976.098:758): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1083" name="bus" dev="ramfs" ino=26573 res=1 errno=0 [ 363.902557][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 363.902584][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 363.902597][ T9930] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 367.183501][ T9979] bridge_slave_0: left allmulticast mode [ 367.183530][ T9979] bridge_slave_0: left promiscuous mode [ 367.183741][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.241291][ T9979] bridge_slave_1: left allmulticast mode [ 367.241320][ T9979] bridge_slave_1: left promiscuous mode [ 367.241544][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.525065][ T9979] bond0: (slave bond_slave_0): Releasing backup interface [ 368.566713][ T9979] bond0: (slave bond_slave_1): Releasing backup interface [ 368.629312][ T9979] team0: Port device team_slave_0 removed [ 368.663773][ T9979] team0: Port device team_slave_1 removed [ 368.683823][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.711253][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.734106][ T9979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.770348][ T5710] syz1: Port: 1 Link DOWN [ 368.821036][ T9979] team0: Mode changed to "broadcast" [ 369.022842][ T30] audit: type=1400 audit(1791265982.728:759): avc: denied { watch watch_reads } for pid=9995 comm="syz.3.1103" path="pipe:[4513]" dev="pipefs" ino=4513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 371.108238][T10018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1108'. [ 372.403338][T10035] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1114'. [ 374.054157][T10047] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 374.293409][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 374.855666][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.084499][T10047] bond0: (slave bridge2): making interface the new active one [ 375.108880][T10047] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 378.894116][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.561180][T10095] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5599] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10095] [ 382.250391][ T30] audit: type=1400 audit(1791265995.958:760): avc: denied { setattr } for pid=10117 comm="syz.2.1137" name="[io_uring]" dev="anon_inodefs" ino=27808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.288347][T10132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 383.407465][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 383.407489][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 383.433999][T10132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.457221][T10134] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 383.457245][T10134] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1140'. [ 383.481318][T10132] bond6: (slave bond0): making interface the new active one [ 383.567298][T10132] bond6: (slave bond0): Enslaving as an active interface with an up link [ 383.577484][T10134] .`: renamed from bond0 (while UP) [ 383.791957][T10136] fuse: Bad value for 'fd' [ 386.733578][T10167] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1147'. [ 386.734109][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 386.735535][T10167] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 387.135105][T10176] __vm_enough_memory: pid: 10176, comm: syz.0.1150, bytes: 4503599627366400 not enough memory for the allocation [ 390.789195][ T30] audit: type=1400 audit(1791266004.498:761): avc: denied { ioctl } for pid=10188 comm="syz.2.1154" path="socket:[27455]" dev="sockfs" ino=27455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.239465][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 392.239534][T10212] netlink: 'syz.2.1160': attribute type 7 has an invalid length. [ 392.239563][T10212] netlink: 'syz.2.1160': attribute type 8 has an invalid length. [ 392.239589][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 392.276424][T10212] syz_tun: entered promiscuous mode [ 392.709179][T10212] syz_tun: left promiscuous mode [ 393.050644][T10220] capability: warning: `syz.4.1164' uses 32-bit capabilities (legacy support in use) [ 393.131612][T10223] xt_hashlimit: max too large, truncated to 1048576 [ 393.131798][T10223] xt_hashlimit: overflow, rate too high: 0 [ 394.851301][ T5610] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 394.851867][ T5610] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 395.008159][ T5610] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 395.025432][ T5610] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 395.277579][ T5610] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 396.040073][ T5610] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 396.040146][ T5610] Bluetooth: hci2: unexpected event for opcode 0x042f [ 396.889466][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 397.118550][T10266] vlan2: entered allmulticast mode [ 397.118603][T10266] bridge2: entered allmulticast mode [ 397.129021][T10266] bridge2: port 1(erspan0) entered blocking state [ 397.129213][T10266] bridge2: port 1(erspan0) entered disabled state [ 397.129610][T10266] erspan0: entered allmulticast mode [ 397.453498][T10266] erspan0: entered promiscuous mode [ 397.475219][T10268] erspan0: left allmulticast mode [ 397.475247][T10268] erspan0: left promiscuous mode [ 397.475450][T10268] bridge2: port 1(erspan0) entered disabled state [ 397.479292][T10268] bridge_slave_0: left allmulticast mode [ 397.479319][T10268] bridge_slave_0: left promiscuous mode [ 397.479507][T10268] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.482056][T10268] bridge_slave_1: left allmulticast mode [ 397.482105][T10268] bridge_slave_1: left promiscuous mode [ 397.482322][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.557506][T10268] bond0: (slave bond_slave_0): Releasing backup interface [ 397.560954][T10268] bond0: (slave bond_slave_1): Releasing backup interface [ 397.578649][T10268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.588786][T10268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.589499][T10268] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.691556][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 402.579910][T10326] fuse: fd is not a fuse device [ 404.605965][T10349] ip_tables: iptables: counters copy to user failed while replacing table [ 404.638329][T10349] tipc: Started in network mode [ 404.638368][T10349] tipc: Node identity ac1414aa, cluster identity 4711 [ 404.640299][T10349] tipc: New replicast peer: 172.20.20.187 [ 404.640871][T10349] tipc: Enabled bearer , priority 10 [ 405.318336][ T30] audit: type=1400 audit(1791266018.958:762): avc: denied { setattr } for pid=10358 comm="syz.1.1203" name="TIPC" dev="sockfs" ino=28788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.400831][T10367] CIFS mount error: No usable UNC path provided in device string! [ 405.400831][T10367] [ 405.401162][T10367] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 405.787391][ T5606] tipc: Node number set to 2886997162 [ 406.070854][T10374] tipc: Enabling of bearer rejected, failed to enable media [ 409.265590][T10425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.280650][T10425] ip_tables: iptables: counters copy to user failed while replacing table [ 409.283824][T10425] ip_tables: iptables: counters copy to user failed while replacing table [ 409.780423][ T30] audit: type=1400 audit(1791266023.378:763): avc: denied { kexec_image_load } for pid=10427 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 411.488029][ T30] audit: type=1400 audit(1791266024.538:764): avc: denied { ioctl } for pid=10442 comm="syz.3.1228" path="socket:[28103]" dev="sockfs" ino=28103 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 413.220302][T10478] overlayfs: failed to clone upperpath [ 413.238208][T10477] jffs2: notice: (10477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 417.075003][T10504] veth0_macvtap: Caught tx_queue_len zero misconfig [ 419.039927][ T30] audit: type=1400 audit(1791266032.748:765): avc: denied { ioctl } for pid=10508 comm="syz.2.1246" path="socket:[29005]" dev="sockfs" ino=29005 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.919478][T10529] 9p: Bad value for 'rfdno' [ 427.753334][T10590] futex_wake_op: syz.0.1270 tries to shift op by 144; fix this program [ 427.759584][T10590] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1270'. [ 437.467462][ T30] audit: type=1400 audit(1791266051.178:766): avc: denied { accept } for pid=10647 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.332014][ T30] audit: type=1400 audit(1791266053.038:767): avc: denied { name_bind } for pid=10673 comm="syz.0.1292" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 439.788262][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.133036][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 445.644085][T10713] fuse: fd is not a fuse device [ 449.829897][T10717] netlink: Conntrack attr has 8 unknown bytes [ 449.829967][T10717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.360357][T10713] orangefs_mount: mount request failed with -4 [ 454.296637][T10740] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 454.689373][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.861916][T10742] macvlan2: entered promiscuous mode [ 454.861969][T10742] macvlan2: entered allmulticast mode [ 454.862459][T10742] bond0: entered allmulticast mode [ 454.862524][T10742] bond0: entered promiscuous mode [ 454.925540][T10742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.940620][T10742] team0: Port device macvlan2 added [ 455.155880][T10743] bond0: (slave ip6gretap1): making interface the new active one [ 455.155936][T10743] ip6gretap1: entered promiscuous mode [ 455.163880][T10743] ip6gretap1: entered allmulticast mode [ 455.215749][T10743] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 457.763280][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 458.640230][ T30] audit: type=1400 audit(1791266072.338:768): avc: denied { mount } for pid=10779 comm="syz.4.1318" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 461.703487][ T5610] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 464.933044][ T30] audit: type=1800 audit(1791266078.588:769): pid=10827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1333" name="nullb0" dev="tmpfs" ino=1260 res=0 errno=0 [ 467.290696][ T30] audit: type=1804 audit(1791266080.998:770): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1339" name="bus" dev="ramfs" ino=29389 res=1 errno=0 [ 467.316872][ T30] audit: type=1804 audit(1791266081.008:771): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1339" name="bus" dev="ramfs" ino=29389 res=1 errno=0 [ 467.369211][T10852] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 467.369277][T10852] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 467.369344][T10852] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 467.392707][T10852] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 475.350104][T10904] fuse: fd is not a fuse device [ 475.722516][T10910] tipc: Enabling of bearer rejected, already enabled [ 476.534974][ T30] audit: type=1400 audit(1791266090.248:772): avc: denied { connect } for pid=10916 comm="syz.4.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 476.755495][T10921] fuse: fd is not a fuse device [ 477.225606][T10935] lo: Caught tx_queue_len zero misconfig [ 478.963090][ T30] audit: type=1400 audit(1791266092.658:773): avc: denied { map } for pid=10949 comm="syz.2.1367" path="socket:[29528]" dev="sockfs" ino=29528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 478.963153][ T30] audit: type=1400 audit(1791266092.658:774): avc: denied { read } for pid=10949 comm="syz.2.1367" path="socket:[29528]" dev="sockfs" ino=29528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 486.790688][T11006] netlink: 'syz.1.1382': attribute type 1 has an invalid length. [ 486.841333][T11006] 8021q: adding VLAN 0 to HW filter on device bond4 [ 486.970351][T11009] macvlan2: entered promiscuous mode [ 486.970412][T11009] macvlan2: entered allmulticast mode [ 487.024684][T11009] bond4: (slave ip6gretap1): making interface the new active one [ 487.026291][T11009] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 487.328679][T11017] fuse: fd is not a fuse device [ 489.171992][ T30] audit: type=1400 audit(1791266102.878:775): avc: denied { ioctl } for pid=11025 comm="syz.0.1385" path="socket:[29641]" dev="sockfs" ino=29641 ioctlcmd=0x6184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 491.978460][ T30] audit: type=1804 audit(1791266105.688:776): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1388" name="bus" dev="ramfs" ino=29653 res=1 errno=0 [ 491.980310][ T30] audit: type=1804 audit(1791266105.688:777): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1388" name="bus" dev="ramfs" ino=29653 res=1 errno=0 [ 501.260573][ T1306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.269452][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.314177][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 509.945902][T11194] ip_tables: iptables: counters copy to user failed while replacing table [ 510.001099][T11194] ip_tables: iptables: counters copy to user failed while replacing table [ 511.650455][T11203] trusted_key: encrypted_key: key trusted:syz not found [ 512.766360][T11216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.840134][T11216] ip_tables: iptables: counters copy to user failed while replacing table [ 512.867889][T11216] ip_tables: iptables: counters copy to user failed while replacing table [ 512.916642][ T5606] libceph: connect (1)[c::]:6789 error -101 [ 512.941584][ T5606] libceph: mon0 (1)[c::]:6789 connect error [ 512.968398][T11219] ceph: No mds server is up or the cluster is laggy [ 513.037015][ T5606] libceph: connect (1)[c::]:6789 error -101 [ 513.037337][ T5606] libceph: mon0 (1)[c::]:6789 connect error [ 515.049753][ T5606] libceph: connect (1)[c::]:6789 error -101 [ 515.050099][ T5606] libceph: mon0 (1)[c::]:6789 connect error [ 516.074398][ T5606] libceph: connect (1)[c::]:6789 error -101 [ 516.074750][ T5606] libceph: mon0 (1)[c::]:6789 connect error [ 516.959715][T11240] 9p: Bad value for 'rfdno' [ 520.497860][T11267] CIFS mount error: No usable UNC path provided in device string! [ 520.497860][T11267] [ 520.497959][T11267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 521.787222][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 521.986482][T11281] vlan4: entered allmulticast mode [ 521.986522][T11281] bridge3: entered allmulticast mode [ 522.175198][T11277] bridge3: port 1(erspan0) entered blocking state [ 522.175367][T11277] bridge3: port 1(erspan0) entered disabled state [ 522.175660][T11277] erspan0: entered allmulticast mode [ 522.184890][T11277] erspan0: entered promiscuous mode [ 522.259775][T11281] erspan0: left allmulticast mode [ 522.259817][T11281] erspan0: left promiscuous mode [ 522.260176][T11281] bridge3: port 1(erspan0) entered disabled state [ 522.343794][T11281] bridge_slave_1: left allmulticast mode [ 522.343837][T11281] bridge_slave_1: left promiscuous mode [ 522.344164][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.432433][T11281] team0: Port device team_slave_0 removed [ 522.460985][T11281] team0: Port device team_slave_1 removed [ 522.471990][T11281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.484054][T11281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.564036][T11281] bond0: (slave bridge2): Releasing active interface [ 525.848268][T11296] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 527.293618][T11302] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1451'. [ 531.002578][ T30] audit: type=1400 audit(1791266144.708:778): avc: denied { map } for pid=11311 comm="syz.0.1454" path="socket:[30345]" dev="sockfs" ino=30345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.462135][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 532.696802][T11326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.529374][ T30] audit: type=1400 audit(1791266148.238:779): avc: denied { setopt } for pid=11331 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 534.545951][ T5610] Bluetooth: hci1: unexpected event for opcode 0x200a [ 538.577072][ T5610] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 538.582321][ T5610] Bluetooth: hci1: Injecting HCI hardware error event [ 538.599391][ T5610] Bluetooth: hci1: hardware error 0x00 [ 541.213103][ T5610] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 544.253771][T11403] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 544.255869][T11403] Error validating options; rc = [-22] [ 544.326195][T11404] vlan0: entered promiscuous mode [ 546.351648][T11415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1483'. [ 546.472815][T11417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1483'. [ 546.504423][T11415] 9p: Bad value for 'rfdno' [ 546.507563][T11416] bond1: left allmulticast mode [ 546.551003][T11416] vlan4: left allmulticast mode [ 546.551045][T11416] bridge3: left allmulticast mode [ 553.971654][T11472] macsec1: entered promiscuous mode [ 553.971710][T11472] virt_wifi0: entered promiscuous mode [ 555.114656][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 562.665689][ T1306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.670179][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.703567][T11556] overlayfs: failed to clone lowerpath [ 577.576736][T11590] futex_wake_op: syz.4.1534 tries to shift op by 144; fix this program [ 577.588362][T11590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1534'. [ 585.643552][ T30] audit: type=1400 audit(1791266198.508:780): avc: denied { write } for pid=11619 comm="syz.0.1541" name="file0" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 585.655836][ T30] audit: type=1400 audit(1791266198.508:781): avc: denied { open } for pid=11619 comm="syz.0.1541" path="/313/file0" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 585.665599][ T30] audit: type=1400 audit(1791266198.568:782): avc: denied { ioctl } for pid=11619 comm="syz.0.1541" path="/313/file0" dev="tmpfs" ino=1677 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 587.581558][ T30] audit: type=1326 audit(1791266201.288:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.4.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aea19e199 code=0x0 [ 589.035068][T11363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.061255][T11363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.063223][T11363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.084773][T11363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.085989][T11363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.577446][T11363] Bluetooth: hci5: command tx timeout [ 593.192411][T11652] bond1: entered allmulticast mode [ 593.192469][T11652] wireguard0: entered allmulticast mode [ 594.508695][ T5610] Bluetooth: hci5: command tx timeout [ 595.424017][T11363] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 595.425453][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1553'. [ 595.428142][T11363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 595.443405][T11363] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 595.463031][T11363] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 595.481092][T11363] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 595.776996][ T5598] syz_tun (unregistering): left allmulticast mode [ 596.229401][ T6188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.573447][ T5610] Bluetooth: hci5: command tx timeout [ 596.698881][ T6188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.027499][ T6188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.457093][ T6188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.544758][ T5610] Bluetooth: hci6: command tx timeout [ 598.276322][T11705] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 598.703105][T11363] Bluetooth: hci5: command tx timeout [ 599.613566][ T5610] Bluetooth: hci6: command tx timeout [ 602.476818][T11363] Bluetooth: hci6: command tx timeout [ 605.050646][ T5610] Bluetooth: hci6: command tx timeout [ 606.765789][ T30] audit: type=1400 audit(1791266220.478:784): avc: denied { write } for pid=11726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.946885][ T30] audit: type=1400 audit(1791266222.648:785): avc: denied { write } for pid=11754 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.242004][ T6188] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 609.242126][ T6188] bridge0 (unregistering): left promiscuous mode [ 609.242162][ T6188] bridge0 (unregistering): left allmulticast mode [ 609.253371][T11759] fuse: fd is not a fuse device [ 609.315435][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.318252][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.319560][ T6188] bond0 (unregistering): Released all slaves [ 609.338154][ T6188] bond1 (unregistering): Released all slaves [ 609.362815][ T6188] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 609.362858][ T6188] wireguard0: left promiscuous mode [ 609.417149][ T6188] bond2 (unregistering): Released all slaves [ 609.450321][ T6188] bond3 (unregistering): Released all slaves [ 609.496133][ T6188] bond4 (unregistering): Released all slaves [ 609.577136][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 614.733700][ T30] audit: type=1400 audit(1791266228.438:786): avc: denied { write } for pid=11777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.857463][T11796] veth0: Caught tx_queue_len zero misconfig [ 615.003883][ T30] audit: type=1400 audit(1791266228.708:787): avc: denied { write } for pid=11806 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.191584][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.191767][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.192027][T11638] bridge_slave_0: entered allmulticast mode [ 615.213335][T11638] bridge_slave_0: entered promiscuous mode [ 615.271738][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.271926][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.272186][T11638] bridge_slave_1: entered allmulticast mode [ 615.315028][T11638] bridge_slave_1: entered promiscuous mode [ 615.460081][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 615.577758][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 615.578144][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 615.599550][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 615.599844][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 615.603066][T11814] ceph: No mds server is up or the cluster is laggy [ 615.921703][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 615.922066][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 615.992813][T11813] team_slave_1: Caught tx_queue_len zero misconfig [ 616.102400][T11821] CIFS mount error: No usable UNC path provided in device string! [ 616.102400][T11821] [ 616.102528][T11821] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 616.816190][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 616.816549][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 617.027824][T11363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 617.044207][T11363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 617.053641][T11363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 617.070937][T11363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 617.096179][T11363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 617.171614][T11638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.238858][T11638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.213681][ T5610] Bluetooth: hci3: command tx timeout [ 619.518502][ T6188] hsr_slave_0: left promiscuous mode [ 620.455925][ T6188] hsr_slave_1: left promiscuous mode [ 620.533543][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.582407][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.602234][ T6188] virt_wifi0: left promiscuous mode [ 621.291078][ T6188] team0 (unregistering): Port device team_slave_1 removed [ 621.294544][ T5610] Bluetooth: hci3: command tx timeout [ 621.314591][ T6188] team0 (unregistering): Port device team_slave_0 removed [ 621.649159][T11638] team0: Port device team_slave_0 added [ 621.696056][T11665] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.696295][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.696516][T11665] bridge_slave_0: entered allmulticast mode [ 621.705074][T11665] bridge_slave_0: entered promiscuous mode [ 621.731067][T11638] team0: Port device team_slave_1 added [ 621.833598][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.833781][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.834015][T11665] bridge_slave_1: entered allmulticast mode [ 621.843940][T11665] bridge_slave_1: entered promiscuous mode [ 621.909557][T11873] jffs2: notice: (11873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 621.934583][ T30] audit: type=1400 audit(1791266235.648:788): avc: denied { mount } for pid=11871 comm="syz.1.1589" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 621.946583][T11638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.946614][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.946665][T11638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.120101][T11638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.120131][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.120183][T11638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.181928][T11665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.279052][T11665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.600095][T11665] team0: Port device team_slave_0 added [ 622.619029][T11665] team0: Port device team_slave_1 added [ 622.850522][T11638] hsr_slave_0: entered promiscuous mode [ 623.363275][T11638] hsr_slave_1: entered promiscuous mode [ 623.373250][ T5610] Bluetooth: hci3: command tx timeout [ 623.387765][T11888] lo: entered allmulticast mode [ 623.564054][T11665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.564088][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.564145][T11665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.569266][T11665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.569296][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.569335][T11665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.755167][ T30] audit: type=1400 audit(1791266237.468:789): avc: denied { write } for pid=11872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.097363][ T1306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.098067][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.176646][ T30] audit: type=1400 audit(1791266237.888:790): avc: denied { write } for pid=11900 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.276330][T11665] hsr_slave_0: entered promiscuous mode [ 625.280950][T11665] hsr_slave_1: entered promiscuous mode [ 625.297304][T11665] debugfs: 'hsr0' already exists in 'hsr' [ 625.297398][T11665] Cannot create hsr debugfs directory [ 625.453382][ T5610] Bluetooth: hci3: command tx timeout [ 625.875850][T11909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1593'. [ 626.746131][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 630.141161][ T30] audit: type=1400 audit(1791266243.848:791): avc: denied { write } for pid=11928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.235940][T11638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 631.535673][T11638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.578108][ T30] audit: type=1400 audit(1791266245.288:792): avc: denied { write } for pid=11956 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.609859][T11638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 632.021573][T11638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.696459][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 632.701853][T11638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 632.941831][T11638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.943924][T11638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 633.521941][T11638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.361330][T11822] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.361512][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.361781][T11822] bridge_slave_0: entered allmulticast mode [ 635.406011][T11822] bridge_slave_0: entered promiscuous mode [ 635.445107][T11822] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.445273][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.445546][T11822] bridge_slave_1: entered allmulticast mode [ 635.463585][T11822] bridge_slave_1: entered promiscuous mode [ 637.213843][T11822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.449918][T11822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.481831][T11665] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 637.540728][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.972555][T11665] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 639.028341][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.097542][T11665] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 639.121263][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.126896][T11665] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 639.158108][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.185109][T11822] team0: Port device team_slave_0 added [ 639.214734][ T30] audit: type=1400 audit(1791266252.928:793): avc: denied { ioctl } for pid=12004 comm="syz.1.1608" path="socket:[33206]" dev="sockfs" ino=33206 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 639.304510][T11822] team0: Port device team_slave_1 added [ 639.462108][T11822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.462140][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.462191][T11822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.467174][T11822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.467205][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.467245][T11822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.423025][T11822] hsr_slave_0: entered promiscuous mode [ 641.424630][T11822] hsr_slave_1: entered promiscuous mode [ 641.425692][T11822] debugfs: 'hsr0' already exists in 'hsr' [ 641.425742][T11822] Cannot create hsr debugfs directory [ 642.529467][ T30] audit: type=1400 audit(1791266256.238:794): avc: denied { write } for pid=12018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.569554][T12032] 9p: Bad value for 'rfdno' [ 642.615406][T11638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.837921][ T30] audit: type=1400 audit(1791266256.548:795): avc: denied { write } for pid=12037 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.958003][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.995673][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.995844][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.007541][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 643.146948][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.147105][ T6158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.278246][T11665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.395094][ T6188] bridge_slave_1: left allmulticast mode [ 643.395136][ T6188] bridge_slave_1: left promiscuous mode [ 643.397761][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.430270][ T6188] bond1: left allmulticast mode [ 643.430323][ T6188] wireguard0: left allmulticast mode [ 643.620457][ T6188] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 643.620517][ T6188] ip6gretap1 (unregistering): left allmulticast mode [ 643.775589][ T6188] bond4 (unregistering): (slave gretap1): Releasing active interface [ 643.805467][ T6188] bond3 (unregistering): (slave geneve3): Releasing active interface [ 643.826214][ T6188] bond2 (unregistering): (slave geneve2): Releasing active interface [ 643.876706][ T6188] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 643.876765][ T6188] bridge1 (unregistering): left promiscuous mode [ 643.876802][ T6188] bridge1 (unregistering): left allmulticast mode [ 643.914941][ T6188] bond6 (unregistering): (slave .`): Releasing backup interface [ 643.933428][ T6188] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.938174][ T6188] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.939526][ T6188] .` (unregistering): Released all slaves [ 643.972422][ T6188] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 643.974457][ T6188] bond1 (unregistering): Released all slaves [ 643.996774][ T6188] bond2 (unregistering): Released all slaves [ 644.038907][ T6188] bond3 (unregistering): Released all slaves [ 644.080038][ T6188] bond4 (unregistering): Released all slaves [ 644.099630][ T6188] bond5 (unregistering): Released all slaves [ 644.121432][ T6188] bond6 (unregistering): Released all slaves [ 644.149614][ T6188] bond0 (unregistering): left allmulticast mode [ 644.149696][ T6188] bond0 (unregistering): left promiscuous mode [ 644.168486][ T6188] team0: Port device macvlan2 removed [ 644.187201][ T6188] bond0 (unregistering): Released all slaves [ 644.460016][ T6188] bond0 (unregistering): Released all slaves [ 644.527665][ T6214] smbdirect: ib_dev[syz1] removed [ 644.542340][T11665] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.705996][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.706157][ T6170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.755894][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.756003][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.966709][ T6188] tipc: Disabling bearer [ 644.995699][ T6188] tipc: Left network mode [ 645.553104][T11822] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 645.576181][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.610256][T11822] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 645.625264][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.718842][T11822] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 645.779411][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.861425][T11822] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 645.879578][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.937153][ T30] audit: type=1400 audit(1791266259.648:796): avc: denied { write } for pid=12046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.210016][ T30] audit: type=1400 audit(1791266259.918:797): avc: denied { write } for pid=12070 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.624068][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 646.702183][ T6188] batman_adv: batadv0: Removing interface: macvtap1 [ 646.756815][T11363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.775583][T11363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.777160][T11363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.781246][T11363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.782135][T11363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 647.078526][T11822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.306742][ T6188] hsr_slave_0: left promiscuous mode [ 647.311259][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.323313][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.358078][ T6188] hsr_slave_0: left promiscuous mode [ 647.359292][ T6188] hsr_slave_1: left promiscuous mode [ 647.718573][ T6188] team0 (unregistering): Port device team_slave_1 removed [ 647.750160][ T6188] team0 (unregistering): Port device team_slave_0 removed [ 647.822062][ T30] audit: type=1400 audit(1791266261.528:798): avc: denied { write } for pid=12087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.019271][ T30] audit: type=1400 audit(1791266261.728:799): avc: denied { write } for pid=12098 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.424713][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 648.448144][T11822] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.481578][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.481737][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.500284][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.500437][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.835621][T11665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.897219][ T5610] Bluetooth: hci2: command tx timeout [ 649.603454][ T30] audit: type=1400 audit(1791266263.318:800): avc: denied { write } for pid=12111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.700626][T11665] veth0_vlan: entered promiscuous mode [ 649.751242][ T6188] IPVS: stop unused estimator thread 0... [ 649.760891][ T6188] IPVS: stop unused estimator thread 0... [ 649.803143][ T30] audit: type=1400 audit(1791266263.508:801): avc: denied { write } for pid=12136 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.816217][T11665] veth1_vlan: entered promiscuous mode [ 649.973489][T11665] veth0_macvtap: entered promiscuous mode [ 649.991756][T11665] veth1_macvtap: entered promiscuous mode [ 650.032220][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 650.065106][T11665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.080631][T11665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.403667][T11822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.640336][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.640359][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.668132][T12080] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.668222][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.668369][T12080] bridge_slave_0: entered allmulticast mode [ 650.675478][T12080] bridge_slave_0: entered promiscuous mode [ 650.681506][T12080] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.681638][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.681758][T12080] bridge_slave_1: entered allmulticast mode [ 650.690881][T12080] bridge_slave_1: entered promiscuous mode [ 650.849014][ T30] audit: type=1400 audit(1791266264.558:802): avc: denied { write } for pid=12146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.885760][T12080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.941226][T12080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.978106][ T5610] Bluetooth: hci2: command tx timeout [ 651.031100][T12080] team0: Port device team_slave_0 added [ 651.040034][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.040055][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.051006][T12080] team0: Port device team_slave_1 added [ 651.104747][ T30] audit: type=1400 audit(1791266264.818:803): avc: denied { write } for pid=12166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.125726][T12080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.125745][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.125769][T12080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.127362][T12080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.127375][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.127399][T12080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.155748][ T30] audit: type=1400 audit(1791266264.868:804): avc: denied { unmount } for pid=11665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 651.208304][ T30] audit: type=1400 audit(1791266264.918:805): avc: denied { mounton } for pid=11665 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 651.225764][T12080] hsr_slave_0: entered promiscuous mode [ 651.226651][T12080] hsr_slave_1: entered promiscuous mode [ 651.227281][T12080] debugfs: 'hsr0' already exists in 'hsr' [ 651.227299][T12080] Cannot create hsr debugfs directory [ 651.315011][ T6170] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.433538][ T6172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.434542][ T6172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.434585][ T6172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.440285][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 652.115838][T12177] overlayfs: failed to clone lowerpath [ 652.563175][ T30] audit: type=1400 audit(1791266266.258:806): avc: denied { write } for pid=12171 comm="syz.6.1549" name="functions" dev="configfs" ino=26830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.563276][ T30] audit: type=1400 audit(1791266266.278:807): avc: denied { write } for pid=12171 comm="syz.6.1549" name="midi2.0" dev="configfs" ino=33717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.564091][ T6158] bridge_slave_1: left allmulticast mode [ 652.564128][ T6158] bridge_slave_1: left promiscuous mode [ 652.564478][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.667006][ T6158] bridge_slave_0: left allmulticast mode [ 652.667035][ T6158] bridge_slave_0: left promiscuous mode [ 652.668530][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.679286][ T30] audit: type=1400 audit(1791266266.388:808): avc: denied { unmount } for pid=11665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 653.668038][T12185] overlayfs: failed to clone lowerpath [ 653.727867][ T5610] Bluetooth: hci2: command tx timeout [ 654.071830][ T6158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.088098][ T6158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.089505][ T6158] bond0 (unregistering): Released all slaves [ 655.036375][ T30] audit: type=1400 audit(1791266268.748:809): avc: denied { ioctl } for pid=12197 comm="syz.6.1615" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 656.356786][ T5610] Bluetooth: hci2: command tx timeout [ 656.463157][ T5726] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 656.495108][ T6158] hsr_slave_0: left promiscuous mode [ 656.499821][ T6158] hsr_slave_1: left promiscuous mode [ 656.502796][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.509121][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.620788][ T5726] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 656.623004][ T5726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.947570][ T5726] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 657.201295][ T189] usb 7-1: USB disconnect, device number 2 [ 658.335111][ T30] audit: type=1400 audit(1791266272.048:810): avc: denied { write } for pid=12196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.513117][ T6158] team0 (unregistering): Port device team_slave_1 removed [ 659.483462][ T6158] team0 (unregistering): Port device team_slave_0 removed [ 659.590302][ T30] audit: type=1400 audit(1791266273.298:811): avc: denied { write } for pid=12227 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.958344][T11822] veth0_vlan: entered promiscuous mode [ 660.717900][T11822] veth1_vlan: entered promiscuous mode [ 661.429454][ T30] audit: type=1400 audit(1791266274.988:812): avc: denied { read } for pid=12246 comm="syz.6.1625" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 661.429703][ T30] audit: type=1400 audit(1791266274.988:813): avc: denied { open } for pid=12246 comm="syz.6.1625" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 663.066091][T11822] veth0_macvtap: entered promiscuous mode [ 663.100817][T11822] veth1_macvtap: entered promiscuous mode [ 663.180986][T11822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.220401][T11822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.483912][ T6188] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.868691][T12265] SET target dimension over the limit! [ 664.167171][ T6188] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.167482][ T6188] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.256950][ T6219] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.285682][ T30] audit: type=1400 audit(1791266277.998:814): avc: denied { write } for pid=12239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.546402][ T6219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.546438][ T6219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.681376][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.681410][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.066243][ T30] audit: type=1400 audit(1791266278.778:815): avc: denied { write } for pid=12274 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.377403][ T30] audit: type=1400 audit(1791266279.088:816): avc: denied { connect } for pid=12276 comm="syz.6.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 665.437561][T12080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 665.460885][T12080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.479473][T12277] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1633'. [ 665.480335][T12080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 665.504802][T12080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.514343][T12080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 665.587301][T12080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.592478][T12080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 665.593034][ T5726] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 665.629027][T12080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.863690][ T5726] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 665.864622][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.902251][ T5726] usb 8-1: config 0 descriptor?? [ 666.436156][ T5726] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 667.288933][ T30] audit: type=1400 audit(1791266280.948:817): avc: denied { associate } for pid=12301 comm="syz.6.1635" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 667.293110][ T30] audit: type=1400 audit(1791266280.998:818): avc: denied { mounton } for pid=12296 comm="syz.6.1635" path="/proc/26/task" dev="proc" ino=35982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 667.428853][ T5726] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 667.428881][ T5726] [drm] Initialized udl on minor 1 [ 667.558066][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.635992][T12080] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.655641][ T5726] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 667.709129][ T5726] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 667.802307][T12080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 667.802332][T12080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.862816][ T5726] usb 8-1: USB disconnect, device number 2 [ 667.923538][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.923644][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.937104][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.937198][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.798342][T12316] syzkaller0: entered promiscuous mode [ 668.798380][T12316] syzkaller0: entered allmulticast mode [ 669.056157][T12323] bridge0: port 1(netdevsim0) entered blocking state [ 669.056245][T12323] bridge0: port 1(netdevsim0) entered disabled state [ 669.056600][T12323] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 669.060741][T12323] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 670.749909][ T30] audit: type=1400 audit(1791266283.658:819): avc: denied { read } for pid=12329 comm="syz.7.1639" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 670.749967][ T30] audit: type=1400 audit(1791266283.668:820): avc: denied { open } for pid=12329 comm="syz.7.1639" path="/dev/usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 671.038471][ T30] audit: type=1400 audit(1791266284.748:821): avc: denied { write } for pid=12299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.483567][ T30] audit: type=1400 audit(1791266285.198:822): avc: denied { write } for pid=12342 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.599843][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 675.790428][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.752667][ T30] audit: type=1400 audit(1791266290.458:823): avc: denied { write } for pid=12351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.904635][T12080] veth0_vlan: entered promiscuous mode [ 677.139308][T12080] veth1_vlan: entered promiscuous mode [ 678.089775][T12080] veth0_macvtap: entered promiscuous mode [ 678.118735][T12080] veth1_macvtap: entered promiscuous mode [ 678.144433][ T30] audit: type=1400 audit(1791266291.848:824): avc: denied { write } for pid=12397 comm="syz.7.1651" name="nullb" dev="configfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 678.195583][ T30] audit: type=1400 audit(1791266291.898:825): avc: denied { write } for pid=12398 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.063142][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.223442][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.363448][ T6170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.363535][ T6170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.363573][ T6170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.363610][ T6170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.612333][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.612385][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.349772][ T6158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.349795][ T6158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.726238][ T30] audit: type=1400 audit(1791266295.438:826): avc: denied { ioctl } for pid=12441 comm="syz.0.1660" path="socket:[36140]" dev="sockfs" ino=36140 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 681.788489][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 683.035958][ T30] audit: type=1400 audit(1791266296.748:827): avc: denied { write } for pid=12423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.177739][T12459] pim6reg: entered allmulticast mode [ 684.346735][T12469] bridge0: port 3(syz_tun) entered blocking state [ 684.346830][T12469] bridge0: port 3(syz_tun) entered disabled state [ 684.346987][T12469] syz_tun: entered allmulticast mode [ 684.350409][T12469] syz_tun: entered promiscuous mode [ 684.653232][T12469] bridge0: port 3(syz_tun) entered blocking state [ 684.653330][T12469] bridge0: port 3(syz_tun) entered forwarding state [ 684.976828][ T30] audit: type=1400 audit(1791266298.678:828): avc: denied { write } for pid=12477 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.417296][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 685.546223][ T1306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.546681][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.113817][ T30] audit: type=1400 audit(1791266299.788:829): avc: denied { cmd } for pid=12493 comm="iou-wrk-12495" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 686.113872][ T30] audit: type=1400 audit(1791266299.808:830): avc: denied { read } for pid=12492 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 686.113913][ T30] audit: type=1400 audit(1791266299.818:831): avc: denied { open } for pid=12492 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 686.113958][ T30] audit: type=1400 audit(1791266299.818:832): avc: denied { getattr } for pid=12492 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 686.880204][ T30] audit: type=1800 audit(1791266300.588:833): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1675" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 687.025941][ T30] audit: type=1400 audit(1791266300.738:834): avc: denied { write } for pid=12486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.036994][ T30] audit: type=1400 audit(1791266300.748:835): avc: denied { create } for pid=12486 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.050592][ T30] audit: type=1400 audit(1791266300.758:836): avc: denied { write } for pid=12486 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2413 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 688.218301][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 688.218320][ T30] audit: type=1400 audit(1791266301.928:838): avc: denied { write } for pid=12526 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.283209][ T30] audit: type=1400 audit(1791266301.988:839): avc: denied { unlink } for pid=12526 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2413 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 688.500604][ T30] audit: type=1400 audit(1791266302.208:840): avc: denied { connect } for pid=12529 comm="syz.7.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 690.841817][T12556] overlayfs: failed to clone upperpath [ 690.846465][T12556] overlayfs: failed to clone upperpath [ 692.902851][T12566] syzkaller0: entered promiscuous mode [ 692.902919][T12566] syzkaller0: entered allmulticast mode [ 695.462362][ T30] audit: type=1800 audit(1791266309.168:841): pid=12585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1692" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 695.622284][ T30] audit: type=1400 audit(1791266309.328:842): avc: denied { write } for pid=12546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.569351][ T30] audit: type=1400 audit(1791266313.278:843): avc: denied { write } for pid=12603 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.336243][ T6160] IPVS: starting estimator thread 0... [ 701.382040][T12609] netlink: 'syz.5.1696': attribute type 1 has an invalid length. [ 701.382065][T12609] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1696'. [ 701.483020][T12613] IPVS: using max 63 ests per chain, 151200 per kthread [ 701.637815][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12 [ 702.471825][T12627] overlayfs: failed to clone upperpath [ 708.927819][T12078] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 709.075023][T12078] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 709.076994][T12078] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 709.077027][T12078] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.077055][T12078] usb 6-1: config 0 interface 0 has no altsetting 0 [ 709.077086][T12078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.082690][T12078] usb 6-1: config 0 descriptor?? [ 711.053702][ T30] audit: type=1400 audit(1791266324.768:844): avc: denied { append } for pid=12678 comm="syz.5.1709" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 711.056392][ T30] audit: type=1400 audit(1791266324.768:845): avc: denied { open } for pid=12678 comm="syz.5.1709" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 711.134881][ T30] audit: type=1400 audit(1791266324.838:846): avc: denied { getopt } for pid=12691 comm="syz.6.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 711.457233][T12078] elan 0003:04F3:074D.0002: ignoring exceeding usage max [ 711.682222][T12706] netlink: 'syz.1.1714': attribute type 10 has an invalid length. [ 711.742318][T12706] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 711.782765][T12078] elan 0003:04F3:074D.0002: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.5-1/input0 [ 711.843075][T12078] usb 6-1: USB disconnect, device number 2 [ 713.556979][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 713.557182][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 713.579949][T12709] fido_id[12709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 713.608352][T12724] ceph: No mds server is up or the cluster is laggy [ 713.734111][T12729] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1719'. [ 713.909104][T12078] libceph: connect (1)[c::]:6789 error -101 [ 713.945708][T12078] libceph: mon0 (1)[c::]:6789 connect error [ 714.044154][T12741] jffs2: notice: (12741) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 714.051445][T12731] ceph: No mds server is up or the cluster is laggy [ 714.594599][ T5709] libceph: connect (1)[c::]:6789 error -101 [ 714.599972][ T5709] libceph: mon0 (1)[c::]:6789 connect error [ 714.947004][T12748] ip_tables: iptables: counters copy to user failed while replacing table [ 716.463378][ T5710] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 716.657594][ T5710] usb 8-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 716.690362][ T5710] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 716.690500][ T5710] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.691238][ T5710] usb 8-1: config 0 interface 0 has no altsetting 0 [ 716.692167][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.865805][ T5710] usb 8-1: config 0 descriptor?? [ 716.883652][T12766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 717.429072][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x2 [ 717.429114][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x6 [ 717.429144][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429170][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429196][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429221][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429247][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429273][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429300][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429326][ T5710] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 717.429386][ T5710] logitech 0003:046D:C50C.0003: item fetching failed at offset 23/36 [ 717.528297][ T5710] logitech 0003:046D:C50C.0003: parse failed [ 717.528413][ T5710] logitech 0003:046D:C50C.0003: probe with driver logitech failed with error -22 [ 717.729436][ T30] audit: type=1400 audit(1791266331.438:847): avc: denied { write } for pid=12753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.071267][T12761] : entered promiscuous mode [ 718.162910][T12781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 718.167500][T12787] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 718.243221][ T30] audit: type=1400 audit(1791266331.948:848): avc: denied { write } for pid=12791 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.316473][T12766] openvswitch: : Dropping previously announced user features [ 718.369954][T12175] usb 8-1: USB disconnect, device number 3 [ 718.413000][T11363] Bluetooth: hci6: command 0x0406 tx timeout [ 718.593278][T12792] syzkaller0: entered promiscuous mode [ 718.593304][T12792] syzkaller0: entered allmulticast mode [ 718.651896][ T30] audit: type=1400 audit(1791266332.358:849): avc: denied { read write } for pid=12798 comm="syz.6.1730" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 718.652300][ T30] audit: type=1400 audit(1791266332.358:850): avc: denied { open } for pid=12798 comm="syz.6.1730" path="/30/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 718.807402][ T30] audit: type=1400 audit(1791266332.518:851): avc: denied { ioctl } for pid=12798 comm="syz.6.1730" path="/30/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 720.793372][ T30] audit: type=1804 audit(1791266334.508:852): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1735" name="bus" dev="ramfs" ino=37711 res=1 errno=0 [ 720.795647][ T30] audit: type=1804 audit(1791266334.508:853): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1735" name="bus" dev="ramfs" ino=37711 res=1 errno=0 [ 721.161300][T12827] openvswitch: netlink: IP tunnel dst address not specified [ 721.161368][T12827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.088635][ T30] audit: type=1400 audit(1791266335.798:854): avc: denied { read write } for pid=12823 comm="syz.7.1738" name="mouse0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 725.626847][ T30] audit: type=1400 audit(1791266339.338:855): avc: denied { write } for pid=12860 comm="syz.5.1746" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 725.626903][ T30] audit: type=1400 audit(1791266339.338:856): avc: denied { open } for pid=12860 comm="syz.5.1746" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 725.657999][ T30] audit: type=1400 audit(1791266339.348:857): avc: denied { write } for pid=12822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.710419][ T30] audit: type=1400 audit(1791266339.398:858): avc: denied { ioctl } for pid=12860 comm="syz.5.1746" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 727.680577][ T30] audit: type=1400 audit(1791266341.388:859): avc: denied { write } for pid=12870 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.353890][T12897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1751'. [ 730.353927][T12897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1751'. [ 730.353951][T12897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1751'. [ 730.756899][ T30] audit: type=1400 audit(1791266344.468:860): avc: denied { mount } for pid=12904 comm="syz.6.1753" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 731.077977][ T30] audit: type=1400 audit(1791266344.788:861): avc: denied { setopt } for pid=12908 comm="syz.5.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 731.219291][ T30] audit: type=1400 audit(1791266344.928:862): avc: denied { unmount } for pid=11665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 732.545686][ T6160] IPVS: starting estimator thread 0... [ 732.693163][T12927] IPVS: using max 36 ests per chain, 86400 per kthread [ 732.809540][ T30] audit: type=1400 audit(1791266346.518:863): avc: denied { write } for pid=12894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.397506][T12939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.399874][ T30] audit: type=1400 audit(1791266349.108:864): avc: denied { write } for pid=12945 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.757578][T12956] kAFS: No cell specified [ 738.845025][ T30] audit: type=1400 audit(1791266352.558:865): avc: denied { getopt } for pid=12975 comm="syz.6.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 738.857607][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.865117][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.990439][ T30] audit: type=1400 audit(1791266353.698:866): avc: denied { write } for pid=12954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.242854][ T30] audit: type=1400 audit(1791266353.948:867): avc: denied { write } for pid=12997 comm="syz.5.1767" name="target" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 740.281797][ T30] audit: type=1400 audit(1791266353.988:868): avc: denied { write } for pid=12997 comm="syz.5.1767" name="target" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 740.329241][ T30] audit: type=1400 audit(1791266354.028:869): avc: denied { remove_name } for pid=12997 comm="syz.5.1767" name="usb_gadget" dev="configfs" ino=37987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 740.351104][ T30] audit: type=1400 audit(1791266354.058:870): avc: denied { rmdir } for pid=12997 comm="syz.5.1767" name="usb_gadget" dev="configfs" ino=37987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 740.708540][ T30] audit: type=1400 audit(1791266354.418:871): avc: denied { write } for pid=13004 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.880153][ T30] audit: type=1400 audit(1791266354.578:872): avc: denied { read write } for pid=13009 comm="syz.7.1774" name="idVendor" dev="configfs" ino=38003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 740.880258][ T30] audit: type=1400 audit(1791266354.588:873): avc: denied { open } for pid=13009 comm="syz.7.1774" path="/22/config/usb_gadget/g1/idVendor" dev="configfs" ino=38003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 740.968247][ T30] audit: type=1400 audit(1791266354.678:874): avc: denied { write } for pid=13009 comm="syz.7.1774" name="strings" dev="configfs" ino=26832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 741.122682][T13015] Need at least one configuration in g1. [ 741.177337][T13015] udc dummy_udc.0: failed to start g1: -22 [ 741.177396][T13015] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 741.259584][T13015] UDC core: g1: couldn't find an available UDC or it's busy [ 744.843535][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 746.099201][T12078] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 746.575242][T12078] usb 8-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 747.795302][T13053] overlayfs: failed to clone upperpath [ 748.853969][ T1306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.854692][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.479751][T12078] usb 8-1: unable to read config index 0 descriptor/all [ 749.479857][T12078] usb 8-1: can't read configurations, error -71 [ 750.197952][T12078] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 750.344857][T12078] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 750.364181][T12078] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 750.364233][T12078] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.364257][T12078] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 750.364283][T12078] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 750.438645][T12078] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 750.438711][T12078] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.438735][T12078] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 750.438761][T12078] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 750.506739][T12078] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.506767][T12078] usb 8-1: Product: syz [ 750.506783][T12078] usb 8-1: Manufacturer: syz [ 750.506801][T12078] usb 8-1: SerialNumber: syz [ 750.563982][T12078] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 750.595149][T12078] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 750.630178][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 750.630197][ T30] audit: type=1400 audit(1791266364.338:876): avc: denied { write } for pid=13014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.670750][T12078] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 750.894426][T13058] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 750.913755][T13058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.942286][T12078] usb 8-1: USB disconnect, device number 5 [ 751.027073][T12078] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 751.062550][T12078] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 751.063342][T12078] ti_usb_3410_5052 8-1:2.0: device disconnected [ 751.371311][ T30] audit: type=1400 audit(1791266365.078:877): avc: denied { write } for pid=13067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.711181][ T30] audit: type=1400 audit(1791266369.418:878): avc: denied { write } for pid=13072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.715085][T13116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1793'. [ 758.435039][ T30] audit: type=1400 audit(1791266372.148:879): avc: denied { write } for pid=13134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.609444][T13139] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1799'. [ 758.677919][T13140] jffs2: notice: (13140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 758.998661][T13159] netlink: 'syz.1.1801': attribute type 10 has an invalid length. [ 759.461961][T13138] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 760.202985][ T30] audit: type=1400 audit(1791266373.908:880): avc: denied { write } for pid=13146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.469320][T13179] netlink: 'syz.1.1806': attribute type 1 has an invalid length. [ 760.520151][T13179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 760.638481][ T30] audit: type=1400 audit(1791266374.348:881): avc: denied { write } for pid=13173 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.698617][T13179] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 760.843266][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 760.959975][T13179] bridge3: entered promiscuous mode [ 761.076475][T13179] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 762.408211][T13226] netlink: 'syz.7.1815': attribute type 1 has an invalid length. [ 763.218589][ T30] audit: type=1400 audit(1791266376.928:882): avc: denied { write } for pid=13191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.277923][T13226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.815556][T13241] xt_hashlimit: size too large, truncated to 1048576 [ 763.815595][T13241] xt_hashlimit: max too large, truncated to 1048576 [ 764.563031][T13231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 764.563397][T13231] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 764.564207][T13231] bond2: (slave gre1): Error -95 calling set_mac_address [ 764.660048][T13233] gretap1: entered promiscuous mode [ 764.663306][T13233] bond2: (slave gretap1): making interface the new active one [ 764.663732][T13233] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 765.018249][T13226] macvlan2: entered promiscuous mode [ 765.018287][T13226] macvlan2: entered allmulticast mode [ 765.046331][T13226] bond2: entered promiscuous mode [ 765.487803][T13226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 765.577975][ T30] audit: type=1400 audit(1791266379.288:883): avc: denied { write } for pid=13242 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.769645][T13226] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 765.839210][T13226] bond2: left promiscuous mode [ 769.681178][T13280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.838242][T11363] Bluetooth: hci2: command 0x0406 tx timeout [ 769.951562][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1828'. [ 769.951602][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'. [ 770.253019][ T30] audit: type=1400 audit(1791266383.958:884): avc: denied { execute } for pid=13292 comm="syz.5.1830" path="/dev/dsp" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 770.349781][T13280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.362272][T13280] bond1: (slave bond0): making interface the new active one [ 770.379079][T13280] bond1: (slave bond0): Enslaving as an active interface with an up link [ 770.556985][T12048] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 770.763441][T12048] usb 6-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 770.816040][T12048] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.816080][T12048] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.816109][T12048] usb 6-1: config 0 interface 0 has no altsetting 0 [ 770.816143][T12048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.824036][T12048] usb 6-1: config 0 descriptor?? [ 771.503030][T12048] asus 0003:0B05:1807.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.5-1/input0 [ 771.840245][T12048] usb 6-1: USB disconnect, device number 3 [ 772.525332][ T30] audit: type=1326 audit(1791266385.638:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525403][ T30] audit: type=1326 audit(1791266385.638:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525444][ T30] audit: type=1326 audit(1791266385.638:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525488][ T30] audit: type=1326 audit(1791266385.638:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525531][ T30] audit: type=1326 audit(1791266385.638:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525575][ T30] audit: type=1326 audit(1791266385.648:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525615][ T30] audit: type=1326 audit(1791266385.648:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525656][ T30] audit: type=1326 audit(1791266385.648:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 772.525695][ T30] audit: type=1326 audit(1791266385.648:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.1.1836" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e039e199 code=0x7ffc0000 [ 773.871282][T13325] fido_id[13325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 774.383609][ T5610] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 775.504802][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 775.504838][ T30] audit: type=1400 audit(1791266389.198:954): avc: denied { create } for pid=13340 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 775.504977][ T30] audit: type=1400 audit(1791266389.208:955): avc: denied { connect } for pid=13340 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 775.505088][ T30] audit: type=1400 audit(1791266389.208:956): avc: denied { bind } for pid=13340 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 775.505218][ T30] audit: type=1400 audit(1791266389.208:957): avc: denied { write } for pid=13340 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 780.557305][T13380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.565493][T13380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.293392][T13380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 781.293420][T13380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.436006][T13380] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 781.440884][T13380] veth1_vlan: left promiscuous mode [ 781.443423][T13380] vlan0: left promiscuous mode [ 781.445532][T13380] veth1_vlan: entered promiscuous mode [ 781.453960][T13380] veth1_macvtap: left promiscuous mode [ 781.454969][T13380] veth0_macvtap: left promiscuous mode [ 781.455910][T13380] veth0_macvtap: entered promiscuous mode [ 781.456656][T13380] veth1_macvtap: entered promiscuous mode [ 781.465497][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 781.467290][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.468407][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.469500][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.471994][T13380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.476343][T13380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.479502][T13380] bond3: left promiscuous mode [ 781.479519][T13380] bridge1: left promiscuous mode [ 781.480494][T13380] ipvlan2: left allmulticast mode [ 781.480509][T13380] bond3: left allmulticast mode [ 781.480522][T13380] bridge1: left allmulticast mode [ 781.481518][T13380] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 781.485189][T13380] vlan2: left allmulticast mode [ 781.485206][T13380] bridge2: left allmulticast mode [ 781.489975][T13380] bond4: entered allmulticast mode [ 781.489992][T13380] ip6gretap1: entered allmulticast mode [ 781.490064][T13380] ip6gretap1: entered promiscuous mode [ 781.490079][T13380] bond4: entered promiscuous mode [ 781.490425][T13380] macvlan2: left promiscuous mode [ 781.490439][T13380] bond4: left promiscuous mode [ 781.490695][T13380] macvlan2: left allmulticast mode [ 781.490709][T13380] bond4: left allmulticast mode [ 781.490721][T13380] ip6gretap1: left allmulticast mode [ 781.491649][T13380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 781.514111][T13380] bridge3: left promiscuous mode [ 781.933780][ T6172] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.933816][ T6172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.002677][T13389] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1853'. [ 783.762978][ T6158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.763012][ T6158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.778286][ T6158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.778344][ T6158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.778414][ T6158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.778469][ T6158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.878384][ T30] audit: type=1400 audit(1791266397.588:958): avc: denied { setopt } for pid=13386 comm="syz.7.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 785.672181][T13410] netlink: 'syz.7.1860': attribute type 12 has an invalid length. [ 785.702473][ T30] audit: type=1400 audit(1791266399.398:959): avc: denied { read } for pid=13409 comm="syz.7.1860" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 789.141210][ T30] audit: type=1400 audit(1791266402.838:960): avc: denied { read } for pid=13423 comm="syz.5.1864" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 789.141267][ T30] audit: type=1400 audit(1791266402.838:961): avc: denied { open } for pid=13423 comm="syz.5.1864" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 789.305937][ T30] audit: type=1400 audit(1791266403.018:962): avc: denied { ioctl } for pid=13423 comm="syz.5.1864" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 789.306015][T13425] binder: 13423:13425 ioctl c0306201 200000000040 returned -22 [ 789.616607][ T5724] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 789.843325][ T5724] usb 6-1: not running at top speed; connect to a high speed hub [ 789.843391][ T5724] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 789.846844][ T5724] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.846967][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.006666][T13427] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.007254][T13427] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.071801][ T5724] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 790.311788][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.316233][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.614580][ T5724] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 790.615174][ T5724] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 790.615293][ T5724] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 790.771221][ T5724] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 790.798249][ T5724] usb 6-1: USB disconnect, device number 4 [ 791.386356][T12078] libceph: connect (1)[c::]:6789 error -101 [ 791.386553][T12078] libceph: mon0 (1)[c::]:6789 connect error [ 791.433907][T13442] ceph: No mds server is up or the cluster is laggy [ 791.831316][ T6198] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.831367][ T6198] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.831401][ T6198] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.831434][ T6198] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.564964][ T30] audit: type=1400 audit(1791266409.278:963): avc: denied { setopt } for pid=13468 comm="syz.0.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 800.547187][ T30] audit: type=1400 audit(1791266414.258:964): avc: denied { read } for pid=13487 comm="syz.0.1883" lport=54683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 803.229734][ T30] audit: type=1400 audit(1791266416.938:965): avc: denied { bind } for pid=13520 comm="syz.5.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 803.320007][ T30] audit: type=1400 audit(1791266417.028:966): avc: denied { nlmsg_tty_audit } for pid=13520 comm="syz.5.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 808.294169][ T30] audit: type=1400 audit(1791266421.998:967): avc: denied { nlmsg_write } for pid=13538 comm="syz.5.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 808.294219][ T30] audit: type=1107 audit(1791266422.008:968): pid=13538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 810.049588][ T1306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.050074][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.646776][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 811.695302][ T5610] Bluetooth: hci6: unexpected event for opcode 0x0403 [ 817.960548][T13602] Cannot find set identified by id 0 to match [ 818.009232][ T30] audit: type=1400 audit(1791266431.708:969): avc: denied { read } for pid=13597 comm="syz.5.1911" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 818.010908][ T30] audit: type=1400 audit(1791266431.708:970): avc: denied { open } for pid=13597 comm="syz.5.1911" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 818.010960][ T30] audit: type=1400 audit(1791266431.708:971): avc: denied { ioctl } for pid=13597 comm="syz.5.1911" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 818.466426][T13604] block device autoloading is deprecated and will be removed. [ 819.124666][T13560] syz.6.1902 (13560): drop_caches: 2 [ 821.745017][T13616] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 821.745046][T13616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 821.747228][T13616] vhci_hcd vhci_hcd.0: Device attached [ 822.252399][T13617] vhci_hcd: connection closed [ 822.574996][ T1153] vhci_hcd vhci_hcd.6: stop threads [ 822.578886][ T1153] vhci_hcd vhci_hcd.6: release socket [ 822.579100][ T1153] vhci_hcd vhci_hcd.6: disconnect device [ 823.182980][ T30] audit: type=1400 audit(1791266436.888:972): avc: denied { lock } for pid=13623 comm="syz.6.1917" path="socket:[39258]" dev="sockfs" ino=39258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 826.529101][ T30] audit: type=1800 audit(1791266440.238:973): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1922" name="syzkaller0" dev="sda1" ino=2055 res=0 errno=0 [ 830.090284][T13673] tipc: Started in network mode [ 830.090532][T13673] tipc: Node identity c23ba81d79c2, cluster identity 4711 [ 830.091781][T13673] tipc: Enabled bearer , priority 0 [ 830.214267][T13666] syzkaller0: entered promiscuous mode [ 830.214290][T13666] syzkaller0: entered allmulticast mode [ 830.962388][T13682] tipc: Resetting bearer [ 830.993765][T13661] tipc: Resetting bearer [ 831.159467][T13690] netlink: 'syz.7.1934': attribute type 1 has an invalid length. [ 831.185151][T13661] tipc: Disabling bearer [ 831.209826][ T5709] tipc: Node number set to 3153700893 [ 831.313187][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1934'. [ 831.353659][T13690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 831.427809][T13696] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 831.602676][T13698] bridge2: entered promiscuous mode [ 831.649760][T13698] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 831.695791][T13702] netlink: 'syz.5.1935': attribute type 5 has an invalid length. [ 834.094777][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1941'. [ 834.202987][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1941'. [ 834.243789][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1941'. [ 834.270821][ T30] audit: type=1400 audit(1791266447.978:974): avc: denied { load_policy } for pid=13727 comm="syz.6.1942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 834.432989][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1941'. [ 834.470863][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1941'. [ 834.471475][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1941'. [ 834.477643][ T3465] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479083][ T3465] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479118][ T3465] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479151][ T3465] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479184][ T3465] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479216][ T3465] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479250][ T3465] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479282][ T3465] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479315][ T3465] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479348][ T3465] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479380][ T3465] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479414][ T3465] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479447][ T3465] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479481][ T3465] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479515][ T3465] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.479547][ T3465] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.732879][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 939.739853][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13736/1:b..l P13730/1:b..l [ 939.749076][ C1] rcu: (detected by 1, t=10502 jiffies, g=69837, q=568 ncpus=2) [ 939.756785][ C1] task:syz.7.1941 state:R running task stack:23672 pid:13730 tgid:13720 ppid:11822 task_flags:0x40054c flags:0x00080000 [ 939.770299][ C1] Call Trace: [ 939.773568][ C1] [ 939.776496][ C1] __schedule+0x1259/0x6920 [ 939.780998][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 939.786218][ C1] ? __pfx___schedule+0x10/0x10 [ 939.791081][ C1] ? folio_mark_accessed+0xf3/0x1040 [ 939.796386][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 939.801768][ C1] preempt_schedule_common+0x3c/0xb0 [ 939.807064][ C1] preempt_schedule_thunk+0x16/0x40 [ 939.812274][ C1] _raw_spin_unlock+0x3e/0x50 [ 939.816970][ C1] __zap_vma_range+0x16b0/0x48e0 [ 939.821946][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 939.827236][ C1] ? mas_next_slot+0xc05/0x13a0 [ 939.832200][ C1] unmap_vmas+0x299/0x5f0 [ 939.836539][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 939.841482][ C1] ? mas_next_slot+0xc05/0x13a0 [ 939.846380][ C1] exit_mmap+0x1ef/0xa00 [ 939.850646][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 939.855420][ C1] ? rcu_is_watching+0x13/0xc0 [ 939.860206][ C1] ? find_held_lock+0x2b/0x80 [ 939.864885][ C1] ? uprobe_clear_state+0x5f/0x250 [ 939.870005][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 939.875657][ C1] __mmput+0x12a/0x410 [ 939.879723][ C1] mmput+0x67/0x80 [ 939.883441][ C1] do_exit+0x83b/0x2a50 [ 939.887597][ C1] ? lock_acquire+0x1d1/0x380 [ 939.892269][ C1] ? cgroup1_freezing+0x27/0x3b0 [ 939.897204][ C1] ? find_held_lock+0x2b/0x80 [ 939.901884][ C1] ? __pfx_do_exit+0x10/0x10 [ 939.906474][ C1] ? find_held_lock+0x2b/0x80 [ 939.911156][ C1] ? get_signal+0x7e0/0x21e0 [ 939.915757][ C1] do_group_exit+0xd5/0x2a0 [ 939.920263][ C1] get_signal+0x1ec7/0x21e0 [ 939.924774][ C1] ? __pfx_get_signal+0x10/0x10 [ 939.929624][ C1] ? do_futex+0x190/0x440 [ 939.933962][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 939.939517][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 939.946041][ C1] exit_to_user_mode_loop+0x139/0x700 [ 939.951412][ C1] ? rcu_is_watching+0x13/0xc0 [ 939.956181][ C1] do_syscall_64+0x661/0x790 [ 939.960771][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.966659][ C1] RIP: 0033:0x7f7b5919e199 [ 939.971066][ C1] RSP: 002b:00007f7b5a01d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 939.979482][ C1] RAX: fffffffffffffe00 RBX: 00007f7b59426098 RCX: 00007f7b5919e199 [ 939.987443][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b59426098 [ 939.995401][ C1] RBP: 00007f7b59426090 R08: 0000000000000000 R09: 0000000000000000 [ 940.003363][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.011323][ C1] R13: 00007f7b59426128 R14: 00007fff8b9d6bc0 R15: 00007fff8b9d6ca8 [ 940.019308][ C1] [ 940.022315][ C1] task:syz.5.1944 state:R running task stack:27312 pid:13736 tgid:13733 ppid:12080 task_flags:0x400040 flags:0x00080000 [ 940.035817][ C1] Call Trace: [ 940.039086][ C1] [ 940.042008][ C1] __schedule+0x1259/0x6920 [ 940.046525][ C1] ? __pfx___schedule+0x10/0x10 [ 940.051369][ C1] ? mark_held_locks+0x40/0x70 [ 940.056136][ C1] preempt_schedule_irq+0x4e/0x90 [ 940.061153][ C1] irqentry_exit+0x205/0xa10 [ 940.065751][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 940.071731][ C1] RIP: 0010:unwind_next_frame+0x2a0/0x2090 [ 940.077543][ C1] Code: 28 89 74 24 20 44 89 5c 24 18 e8 9b 11 c6 00 48 8b 54 24 30 8b 4c 24 28 8b 74 24 20 44 8b 5c 24 18 89 cf 8b 14 95 a0 78 a8 92 <48> 8d 04 7f 48 8d 84 00 38 6d de 91 83 c2 01 48 3d 9e 78 a8 92 0f [ 940.097142][ C1] RSP: 0018:ffffc9000dd26fc8 EFLAGS: 00000246 [ 940.103200][ C1] RAX: 0000000000000003 RBX: 0000000000000001 RCX: 000000000003bab2 [ 940.111158][ C1] RDX: 000000000003bab2 RSI: 00000000000ad708 RDI: 000000000003bab2 [ 940.119116][ C1] RBP: ffffc9000dd27080 R08: 0000000000000000 R09: 0000000000000007 [ 940.127075][ C1] R10: 0000000000000200 R11: 00000000000159c7 R12: ffffc9000dd27088 [ 940.135035][ C1] R13: ffffc9000dd27038 R14: ffffc9000dd2706d R15: ffffffff8259c72a [ 940.143004][ C1] ? shmem_get_folio_gfp+0x75a/0x1980 [ 940.148383][ C1] ? unwind_next_frame+0x6fa/0x2090 [ 940.153581][ C1] ? shmem_get_folio_gfp+0x75b/0x1980 [ 940.158948][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 940.165096][ C1] arch_stack_walk+0x94/0xf0 [ 940.169693][ C1] ? shmem_get_folio_gfp+0x75b/0x1980 [ 940.175068][ C1] stack_trace_save+0x8e/0xc0 [ 940.179736][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 940.185106][ C1] ? lock_acquire+0x1d1/0x380 [ 940.189793][ C1] save_stack+0x162/0x1e0 [ 940.194124][ C1] ? __pfx_save_stack+0x10/0x10 [ 940.198974][ C1] ? post_alloc_hook+0xfd/0x120 [ 940.203817][ C1] ? get_page_from_freelist+0x110d/0x35d0 [ 940.209531][ C1] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 940.215596][ C1] ? alloc_pages_mpol+0x201/0x550 [ 940.220624][ C1] ? folio_alloc_mpol_noprof+0x36/0x260 [ 940.226165][ C1] ? shmem_alloc_folio+0x135/0x160 [ 940.231279][ C1] ? shmem_alloc_and_add_folio+0x371/0xd40 [ 940.237087][ C1] ? shmem_get_folio_gfp+0x75b/0x1980 [ 940.242454][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 940.247393][ C1] __set_page_owner+0x8c/0x540 [ 940.252164][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 940.257535][ C1] ? bad_range+0x257/0x3f0 [ 940.261953][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 940.267152][ C1] ? get_page_from_freelist+0x10e6/0x35d0 [ 940.272872][ C1] post_alloc_hook+0xfd/0x120 [ 940.277544][ C1] get_page_from_freelist+0x110d/0x35d0 [ 940.283107][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 940.288998][ C1] ? prepare_alloc_pages+0x1f0/0x5b0 [ 940.294281][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 940.299223][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 940.305114][ C1] ? lock_acquire+0x1d1/0x380 [ 940.309784][ C1] ? __page_table_check_ptes_set+0x1d5/0x530 [ 940.315768][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 940.322102][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 940.328432][ C1] ? find_held_lock+0x2b/0x80 [ 940.333113][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 940.337871][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 940.342642][ C1] ? do_anonymous_page+0x922/0x2050 [ 940.347856][ C1] ? __pfx_do_anonymous_page+0x10/0x10 [ 940.353320][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 940.358074][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 940.362829][ C1] ? __pte_offset_map+0x179/0x310 [ 940.367848][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 940.373742][ C1] ? policy_nodemask+0xed/0x4f0 [ 940.378597][ C1] alloc_pages_mpol+0x201/0x550 [ 940.383454][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 940.388834][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 940.394476][ C1] folio_alloc_mpol_noprof+0x36/0x260 [ 940.399841][ C1] shmem_alloc_folio+0x135/0x160 [ 940.404782][ C1] shmem_alloc_and_add_folio+0x371/0xd40 [ 940.410436][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 940.416596][ C1] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 940.422581][ C1] ? __bpf_trace_sched_util_est_se_tp+0xb0/0xc0 [ 940.428824][ C1] shmem_get_folio_gfp+0x75b/0x1980 [ 940.434021][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 940.439659][ C1] shmem_write_begin+0x1a4/0x420 [ 940.444595][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 940.450051][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 940.456904][ C1] generic_perform_write+0x292/0xa40 [ 940.462210][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 940.468021][ C1] ? mnt_put_write_access_file+0x4e/0x100 [ 940.473742][ C1] ? file_update_time_flags+0x38c/0x520 [ 940.479287][ C1] shmem_file_write_iter+0x10e/0x140 [ 940.484573][ C1] vfs_write+0x6af/0x1050 [ 940.488903][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 940.494712][ C1] ? __pfx_vfs_write+0x10/0x10 [ 940.499468][ C1] ? find_held_lock+0x2b/0x80 [ 940.504168][ C1] ksys_write+0x12a/0x250 [ 940.508494][ C1] ? __pfx_ksys_write+0x10/0x10 [ 940.513351][ C1] do_syscall_64+0x123/0x790 [ 940.517950][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.523836][ C1] RIP: 0033:0x7f0315d9e199 [ 940.528242][ C1] RSP: 002b:00007f0316bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 940.536659][ C1] RAX: ffffffffffffffda RBX: 00007f0316026090 RCX: 00007f0315d9e199 [ 940.544631][ C1] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000007 [ 940.552591][ C1] RBP: 00007f0315e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 940.560549][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.568510][ C1] R13: 00007f0316026128 R14: 00007f0316026090 R15: 00007ffcf8a2b1c8 [ 940.576492][ C1] [ 940.579515][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g69837 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 940.590524][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 940.600476][ C1] rcu: RCU grace-period kthread stack dump: [ 940.606345][ C1] task:rcu_preempt state:R running task stack:27400 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 940.619844][ C1] Call Trace: [ 940.623111][ C1] [ 940.626035][ C1] __schedule+0x1259/0x6920 [ 940.630534][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 940.635486][ C1] ? __pfx___schedule+0x10/0x10 [ 940.640327][ C1] ? find_held_lock+0x2b/0x80 [ 940.645006][ C1] ? schedule+0x225/0x2c0 [ 940.649336][ C1] schedule+0xdd/0x2c0 [ 940.653396][ C1] schedule_timeout+0x127/0x280 [ 940.658251][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 940.663633][ C1] ? __pfx_process_timeout+0x10/0x10 [ 940.668937][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 940.674750][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 940.680238][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 940.685020][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 940.690317][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 940.695264][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 940.700466][ C1] rcu_gp_kthread+0x17a/0x220 [ 940.705140][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 940.710334][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 940.716137][ C1] ? __kthread_parkme+0x18f/0x230 [ 940.721174][ C1] ? kthread+0x13a/0x450 [ 940.725436][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 940.730635][ C1] kthread+0x373/0x450 [ 940.734716][ C1] ? __pfx_kthread+0x10/0x10 [ 940.739315][ C1] ret_from_fork+0x730/0xd60 [ 940.743913][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 940.749025][ C1] ? __switch_to+0x800/0x10f0 [ 940.753707][ C1] ? __pfx_kthread+0x10/0x10 [ 940.758300][ C1] ret_from_fork_asm+0x1a/0x30 [ 940.763079][ C1] [ 940.766103][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 940.772414][ C1] CPU: 1 UID: 0 PID: 13737 Comm: syz.1.1943 Not tainted syzkaller #0 PREEMPT(full) [ 940.781786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 940.791829][ C1] RIP: 0010:smp_call_function_many_cond+0x8f0/0x18c0 [ 940.798504][ C1] Code: 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 08 49 89 ce 83 e1 07 49 c1 ee 03 49 89 cd 49 01 c6 41 83 c5 03 e8 52 c4 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 ca 0d 00 00 8b 45 08 31 ff [ 940.818107][ C1] RSP: 0018:ffffc9000e06fb60 EFLAGS: 00000246 [ 940.824169][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90004621000 [ 940.832133][ C1] RDX: 0000000000080000 RSI: ffffffff81ff839e RDI: ffff888030e84b00 [ 940.840094][ C1] RBP: ffff8880b8443e00 R08: 0000000000000005 R09: 0000000000000000 [ 940.848056][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10061d0c13 [ 940.856017][ C1] R13: 0000000000000003 R14: ffffed10170887c1 R15: 0000000000000001 [ 940.863976][ C1] FS: 00007fa0e12c86c0(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000 [ 940.872909][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.879498][ C1] CR2: 00007fa0e03877c0 CR3: 000000006b9ca000 CR4: 00000000003526f0 [ 940.887469][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 940.895433][ C1] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 940.903405][ C1] Call Trace: [ 940.906673][ C1] [ 940.909600][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 940.915342][ C1] ? clock_was_set+0x212/0x910 [ 940.920119][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 940.926448][ C1] ? find_held_lock+0x2b/0x80 [ 940.931139][ C1] ? mark_held_locks+0x40/0x70 [ 940.935921][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 940.941727][ C1] clock_was_set+0x672/0x910 [ 940.946318][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 940.951426][ C1] ? rcu_is_watching+0x13/0xc0 [ 940.956190][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 940.961998][ C1] do_settimeofday64+0x330/0x4d0 [ 940.966936][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 940.972389][ C1] ? security_capable+0x80/0x260 [ 940.977326][ C1] ? command_out_completed+0x183/0x350 [ 940.982786][ C1] ? capable+0xd3/0xf0 [ 940.986853][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 940.992138][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 940.997591][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 941.003573][ C1] do_syscall_64+0x123/0x790 [ 941.008161][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.014050][ C1] RIP: 0033:0x7fa0e039e199 [ 941.018460][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.038061][ C1] RSP: 002b:00007fa0e12c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 941.046734][ C1] RAX: ffffffffffffffda RBX: 00007fa0e0625fa0 RCX: 00007fa0e039e199 [ 941.054698][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 941.062659][ C1] RBP: 00007fa0e04358e0 R08: 0000000000000000 R09: 0000000000000000 [ 941.070622][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.078582][ C1] R13: 00007fa0e0626038 R14: 00007fa0e0625fa0 R15: 00007fff01c3eb68 [ 941.086560][ C1]