last executing test programs: 4m20.203633482s ago: executing program 4 (id=78): openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x1001, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x363, 0x4, 0x0, 0x0) 4m20.115382545s ago: executing program 4 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xfffffffffffffcaa}, {0xc}}}]}]}, 0xe94}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 4m19.99937497s ago: executing program 4 (id=84): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="0500000000c21faf16da1f9ea8c3646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ff21a74a5652", 0x38}]) 4m19.81219033s ago: executing program 4 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m19.707736436s ago: executing program 4 (id=90): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 4m19.332880254s ago: executing program 4 (id=97): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 4m19.1237629s ago: executing program 32 (id=97): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 2m31.760593339s ago: executing program 0 (id=1865): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) 2m31.590129012s ago: executing program 0 (id=1867): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m31.42550884s ago: executing program 0 (id=1870): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000fddbdf250200000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 2m31.290538365s ago: executing program 0 (id=1872): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m30.989513859s ago: executing program 0 (id=1878): r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) 2m30.86202369s ago: executing program 0 (id=1882): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 2m16.548113958s ago: executing program 33 (id=1882): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 2m8.984133397s ago: executing program 2 (id=2285): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 2m8.883629353s ago: executing program 2 (id=2288): r0 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.724243104s ago: executing program 2 (id=2292): r0 = socket(0x1, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2m8.505112596s ago: executing program 2 (id=2296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x4) 2m8.368682965s ago: executing program 2 (id=2301): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 2m8.008872349s ago: executing program 2 (id=2304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x44, r1, 0x103, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 2m7.864416322s ago: executing program 34 (id=2304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x44, r1, 0x103, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 1m46.82150081s ago: executing program 3 (id=2675): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 1m46.722636023s ago: executing program 3 (id=2676): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xf6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1fffffffffffff08, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1m46.156318566s ago: executing program 3 (id=2682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m46.043704887s ago: executing program 3 (id=2683): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 1m45.912433022s ago: executing program 3 (id=2685): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "35e0ca5c3342d2e47982708490a3eac9f2f3d8ac5e2c14e3abf18e52e3a9a25a819167bed5391b56a6b761ecc312911264415f673089de83410994923b3ad262", 0x2f}, 0x48, 0xfffffffffffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1) keyctl$invalidate(0x15, r0) 1m45.609857322s ago: executing program 3 (id=2691): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 1m45.424216925s ago: executing program 35 (id=2691): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 56.044532282s ago: executing program 1 (id=3538): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x157) 55.811778897s ago: executing program 1 (id=3539): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write(r1, 0x0, 0x0) 54.007275167s ago: executing program 1 (id=3554): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4) bind$can_raw(r0, &(0x7f00000000c0), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) 53.965418997s ago: executing program 1 (id=3556): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 53.909792581s ago: executing program 1 (id=3558): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 53.604563262s ago: executing program 1 (id=3559): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 53.42646162s ago: executing program 36 (id=3559): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 16.337404044s ago: executing program 6 (id=4248): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0xa4000061) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 16.196063113s ago: executing program 6 (id=4251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff02, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0xa691a4c7c8bfed69, 0x2, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@empty, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16.062088474s ago: executing program 6 (id=4255): connect$qrtr(0xffffffffffffffff, &(0x7f0000000440)={0x2d, 0x0, 0x4001}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15.568688937s ago: executing program 6 (id=4268): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 15.346545889s ago: executing program 6 (id=4271): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 15.136782101s ago: executing program 6 (id=4275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) close(r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 14.985120979s ago: executing program 37 (id=4275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) close(r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.458117305s ago: executing program 9 (id=4313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x82000000, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x82000000, 0x1, r2}) 7.457981893s ago: executing program 7 (id=4314): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 7.456998889s ago: executing program 8 (id=4315): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) acct(&(0x7f00000000c0)='./bus\x00') acct(0x0) 7.456806263s ago: executing program 5 (id=4316): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000000d}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 6.120935939s ago: executing program 9 (id=4317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xc}) close_range(r0, 0xffffffffffffffff, 0x0) 6.120769844s ago: executing program 7 (id=4318): sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r1, r1, 0x0, 0x8) 6.118439623s ago: executing program 8 (id=4319): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000040)={r2, r1}) 6.117683347s ago: executing program 5 (id=4320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x20000000, 0x1000000}], 0x0) 4.759851328s ago: executing program 9 (id=4321): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 4.75674603s ago: executing program 7 (id=4322): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x40a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 4.747196315s ago: executing program 8 (id=4323): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x6, 0x10100, 0xfffffff9, 0xd3}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) 4.746698607s ago: executing program 5 (id=4324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.28729485s ago: executing program 9 (id=4325): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000380)=""/100, 0x64, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000080)=""/28, 0x1c, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 3.286009909s ago: executing program 7 (id=4326): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 3.285868409s ago: executing program 8 (id=4327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0x180001, 0x0, {[0x0, 0x1, 0x7, 0x2, 0x9, 0x2, 0x3, 0x3]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000180)) 3.242359354s ago: executing program 5 (id=4328): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x58, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 1.685389773s ago: executing program 9 (id=4329): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x9, 0x651, 0xc, 0x8000009657, 0xffeffffffffffffd, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) 1.684648856s ago: executing program 7 (id=4330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e90009118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000d40)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000c80)="a43b2eaab40000000000f294601e8cde77cff5", 0x13}], 0x3) 1.684350156s ago: executing program 8 (id=4331): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="00100c0000000a3207f1f6c23dceb5d21e9d29"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000400)={0x40, 0x15, 0x28, "6db18531e052ac0b10cf08423f29f415b6ea83f34deb31aabd35f47aac14ec29edf3118aa0d8197f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x8, 0x28, "590f16f4daff67a35b83151ede018d0740958efcb77883d3ddbc41d8c62ae6de335f23e0a8d46252"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.683055754s ago: executing program 5 (id=4332): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 2.205392ms ago: executing program 9 (id=4333): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x8, 0x4, {0x0, 0x2710}, {0x0, 0xc, 0xf8, 0x7, 0x6, 0x0, "03c91c46"}, 0x10000, 0x2, {0x0}, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 1.146582ms ago: executing program 7 (id=4334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 766.934µs ago: executing program 8 (id=4335): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="0000000018"], 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xc, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 5 (id=4336): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): 8304][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.916102][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.988926][T12287] lo speed is unknown, defaulting to 1000 [ 221.149709][T12287] chnl_net:caif_netlink_parms(): no params data found [ 221.253910][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 221.259850][T12287] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.268278][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.273247][ T10] ath9k_htc: Failed to initialize the device [ 221.276488][T12287] bridge_slave_0: entered allmulticast mode [ 221.288968][T12287] bridge_slave_0: entered promiscuous mode [ 221.296927][T12287] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.304303][ T5964] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 221.313198][ T793] usb 2-1: ath9k_htc: USB layer deinitialized [ 221.319675][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.326868][T12287] bridge_slave_1: entered allmulticast mode [ 221.337682][T12287] bridge_slave_1: entered promiscuous mode [ 221.353310][T12310] netlink: 'syz.7.2702': attribute type 1 has an invalid length. [ 221.361318][T12310] netlink: 'syz.7.2702': attribute type 2 has an invalid length. [ 221.393914][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.406520][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.440843][T12287] team0: Port device team_slave_0 added [ 221.449512][T12287] team0: Port device team_slave_1 added [ 221.467720][ T5964] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.487906][ T5964] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.501537][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.513281][ T5964] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.526245][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.552774][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.557637][ T5862] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 221.564759][ T5964] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.594202][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.609467][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.618508][ T5964] usb 7-1: Product: syz [ 221.622680][ T5964] usb 7-1: Manufacturer: syz [ 221.627428][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.653795][ T5964] usb 7-1: SerialNumber: syz [ 221.662618][ T5964] hub 7-1:1.0: bad descriptor, ignoring hub [ 221.669545][ T5964] hub 7-1:1.0: probe with driver hub failed with error -5 [ 221.676937][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.688802][T12315] lo speed is unknown, defaulting to 1000 [ 221.737078][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 221.755447][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 221.779527][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 221.802818][T12287] hsr_slave_0: entered promiscuous mode [ 221.803813][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.819184][T12287] hsr_slave_1: entered promiscuous mode [ 221.829518][T12287] debugfs: 'hsr0' already exists in 'hsr' [ 221.835737][T12287] Cannot create hsr debugfs directory [ 221.851242][ T5862] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 221.875199][ T5964] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 221.878772][ T5862] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 221.920750][ T5862] usb 6-1: Product: syz [ 221.966065][ T5862] usb 6-1: Manufacturer: syz [ 221.970690][ T5862] usb 6-1: SerialNumber: syz [ 221.989799][ T29] audit: type=1400 audit(1771111105.146:575): avc: denied { mount } for pid=12327 comm="syz.7.2710" name="/" dev="autofs" ino=40255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 222.015884][ T5862] usb 6-1: config 0 descriptor?? [ 222.035773][ T5862] smsusb:smsusb_probe: board id=2, interface number 0 [ 222.056935][ T5862] smsusb:smsusb_probe: Device initialized with return code -19 [ 222.205583][ T10] usb 7-1: USB disconnect, device number 7 [ 222.235732][ T10] usblp0: removed [ 222.260702][ T29] audit: type=1400 audit(1771111105.429:576): avc: denied { bind } for pid=12333 comm="syz.7.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.306770][ T5911] usb 6-1: USB disconnect, device number 24 [ 222.364273][T12287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 222.393449][T12287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 222.416023][T12287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 222.431145][T12287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 222.567748][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.605154][T12287] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.629431][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.636621][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.668982][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.676199][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.852001][ T5131] Bluetooth: hci1: command tx timeout [ 222.867691][T12362] lo speed is unknown, defaulting to 1000 [ 223.181080][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.532128][T12287] veth0_vlan: entered promiscuous mode [ 223.569129][T12287] veth1_vlan: entered promiscuous mode [ 223.616584][T12287] veth0_macvtap: entered promiscuous mode [ 223.644548][T12287] veth1_macvtap: entered promiscuous mode [ 223.682594][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.865235][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.889583][ T1176] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.906417][ T1176] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.938170][ T1176] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.957585][ T1176] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.058043][T12405] binder: 12404:12405 ioctl c0306201 200000000040 returned -14 [ 224.183179][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.216382][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.296195][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.312428][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.358002][T12414] netlink: 'syz.7.2738': attribute type 4 has an invalid length. [ 224.409026][ T5877] lo speed is unknown, defaulting to 1000 [ 224.434524][ T5877] syz2: Port: 1 Link DOWN [ 224.658149][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2743'. [ 224.843337][ T5131] Bluetooth: hci1: command tx timeout [ 225.626068][ T793] IPVS: starting estimator thread 0... [ 225.630920][T12480] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.719227][T12486] IPVS: using max 47 ests per chain, 112800 per kthread [ 226.620695][T12539] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 226.750106][ T9935] block nbd0: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 150 seconds [ 226.761473][ T9935] block nbd0: Possible stuck request ffff888027e60200: control (read@1024,1024B). Runtime 150 seconds [ 226.772626][ T9935] block nbd0: Possible stuck request ffff888027e60400: control (read@2048,1024B). Runtime 150 seconds [ 226.783667][ T9935] block nbd0: Possible stuck request ffff888027e60600: control (read@3072,1024B). Runtime 150 seconds [ 226.820459][ T5131] Bluetooth: hci1: command tx timeout [ 226.927733][ T29] audit: type=1400 audit(1771111110.332:577): avc: denied { execute } for pid=12550 comm="syz.6.2795" path="/dev/dsp" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 227.329697][ T29] audit: type=1326 audit(1771111110.752:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.374292][ T29] audit: type=1326 audit(1771111110.762:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.417996][ T29] audit: type=1326 audit(1771111110.804:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.510908][ T29] audit: type=1326 audit(1771111110.804:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.568080][T12569] input: syz0 as /devices/virtual/input/input38 [ 227.600452][ T29] audit: type=1326 audit(1771111110.804:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.680743][ T29] audit: type=1326 audit(1771111110.815:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.777379][ T29] audit: type=1326 audit(1771111110.815:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.871398][ T29] audit: type=1326 audit(1771111110.815:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7ffc0000 [ 227.941773][ T29] audit: type=1400 audit(1771111110.899:586): avc: denied { map } for pid=12566 comm="syz.5.2802" path="/dev/video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 228.228613][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'. [ 228.264546][T12601] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2814'. [ 228.717730][T12624] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2822'. [ 228.757557][T12624] bond0: ARP target 8.4.0.0 is already present [ 228.767174][T12624] bond0: option arp_ip_target: invalid value (1032) [ 228.797216][ T5131] Bluetooth: hci1: command tx timeout [ 229.872271][ T5131] Bluetooth: hci0: command 0x0406 tx timeout [ 229.879617][ T5862] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 229.896775][ T5862] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 230.142046][T12702] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 230.146726][T12706] delete_channel: no stack [ 230.539107][ T979] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 230.701467][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 230.708663][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.730952][ T979] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.742882][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.754660][ T979] usb 2-1: config 0 descriptor?? [ 230.961246][ T979] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 231.048362][T12755] block nbd8: NBD_DISCONNECT [ 231.142510][T12761] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2862'. [ 231.204693][T12764] netlink: 207952 bytes leftover after parsing attributes in process `syz.8.2864'. [ 231.291123][T12767] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2865'. [ 231.303221][T12768] netlink: 400 bytes leftover after parsing attributes in process `syz.6.2866'. [ 231.352126][ T793] usb 2-1: USB disconnect, device number 27 [ 231.593503][T12788] pim6reg: entered allmulticast mode [ 231.642234][T12788] team0: entered allmulticast mode [ 231.659948][T12788] team_slave_0: entered allmulticast mode [ 231.669768][T12788] team_slave_1: entered allmulticast mode [ 231.690120][T12788] team0: left allmulticast mode [ 231.706312][T12788] team_slave_0: left allmulticast mode [ 231.718229][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 231.718245][ T29] audit: type=1400 audit(1771111115.360:595): avc: denied { read } for pid=12793 comm="syz.7.2876" path="socket:[43723]" dev="sockfs" ino=43723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 231.732279][T12788] team_slave_1: left allmulticast mode [ 231.771644][T12788] pim6reg: left allmulticast mode [ 231.855670][ T5131] Bluetooth: hci2: command 0x0406 tx timeout [ 231.861775][ T5862] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 231.874935][ T5862] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 232.029903][T12808] IPVS: Scheduler module ip_vs_sip not found [ 232.043992][T12815] IPVS: length: 141 != 8 [ 232.161494][ T29] audit: type=1400 audit(1771111115.833:596): avc: denied { nosuid_transition } for pid=12809 comm="syz.6.2879" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 232.226583][ T29] audit: type=1400 audit(1771111115.875:597): avc: denied { transition } for pid=12809 comm="syz.6.2879" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 232.291464][ T29] audit: type=1400 audit(1771111115.875:598): avc: denied { entrypoint } for pid=12809 comm="syz.6.2879" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=79 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.324193][ T29] audit: type=1400 audit(1771111115.875:599): avc: denied { share } for pid=12809 comm="syz.6.2879" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 232.344684][ T29] audit: type=1400 audit(1771111115.875:600): avc: denied { noatsecure } for pid=12809 comm="syz.6.2879" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 232.536609][ T29] audit: type=1400 audit(1771111116.221:601): avc: denied { create } for pid=12836 comm="syz.1.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.580349][ T29] audit: type=1400 audit(1771111116.221:602): avc: denied { read } for pid=12836 comm="syz.1.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.641697][ T29] audit: type=1400 audit(1771111116.221:603): avc: denied { write } for pid=12836 comm="syz.1.2889" path="socket:[43886]" dev="sockfs" ino=43886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.402117][T12878] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 233.412740][ T793] IPVS: starting estimator thread 0... [ 233.438913][T12885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.502369][T12883] IPVS: using max 42 ests per chain, 100800 per kthread [ 233.569850][ T5869] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 233.746230][ T5869] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 233.771352][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.790235][ T5869] usb 6-1: config 0 descriptor?? [ 233.860386][T12911] netlink: 'syz.6.2922': attribute type 29 has an invalid length. [ 233.906170][T12911] netlink: 'syz.6.2922': attribute type 29 has an invalid length. [ 233.927796][T12911] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2922'. [ 233.928817][T12913] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2923'. [ 233.997081][T12913] tipc: Invalid UDP bearer configuration [ 233.997127][T12913] tipc: Enabling of bearer rejected, failed to enable media [ 234.292043][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 234.308408][ T5862] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 234.318016][ T5862] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 234.379979][T12928] loop2: detected capacity change from 0 to 7 [ 234.410065][T12928] Dev loop2: unable to read RDB block 7 [ 234.426509][T12928] loop2: AHDI p1 p4 [ 234.430580][T12928] loop2: partition table partially beyond EOD, truncated [ 234.438550][T12928] loop2: p1 start 1835335680 is beyond EOD, truncated [ 234.616563][ T793] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 234.763802][ T5869] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 234.778434][ T793] usb 7-1: Using ep0 maxpacket: 32 [ 234.786627][ T793] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 234.789737][ T5869] usb 6-1: USB disconnect, device number 25 [ 234.806731][ T793] usb 7-1: config 0 has no interface number 0 [ 234.832784][ T793] usb 7-1: config 0 interface 184 has no altsetting 0 [ 234.892649][ T793] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 234.912614][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.930736][ T793] usb 7-1: Product: syz [ 234.944380][ T793] usb 7-1: Manufacturer: syz [ 234.958746][ T793] usb 7-1: SerialNumber: syz [ 234.979171][ T793] usb 7-1: config 0 descriptor?? [ 235.180725][T12949] lo speed is unknown, defaulting to 1000 [ 235.683669][T12977] loop2: detected capacity change from 0 to 7 [ 235.694124][ T5822] Dev loop2: unable to read RDB block 7 [ 235.708815][ T5822] loop2: unable to read partition table [ 235.715958][ T5822] loop2: partition table beyond EOD, truncated [ 235.776397][T12977] Dev loop2: unable to read RDB block 7 [ 235.797534][T12977] loop2: unable to read partition table [ 235.825493][T12977] loop2: partition table beyond EOD, truncated [ 235.831717][T12977] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.867444][T12983] 9p: Bad value for 'rfdno' [ 236.052143][T12990] netlink: 'syz.5.2957': attribute type 83 has an invalid length. [ 236.349938][ T5131] Bluetooth: hci5: command 0x0c1a tx timeout [ 236.356077][ T5862] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 236.367772][ T5862] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 236.612411][T12995] input: syz0 as /devices/virtual/input/input39 [ 236.782054][T13013] xt_hashlimit: size too large, truncated to 1048576 [ 236.874123][T13017] –: renamed from vxcan1 [ 236.888598][T13015] loop5: detected capacity change from 0 to 7 [ 236.938780][T13018] blk_print_req_error: 138 callbacks suppressed [ 236.938800][T13018] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.003171][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2968'. [ 237.986400][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 238.003536][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 238.014921][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 238.028291][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 238.039465][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 238.050159][ T793] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 238.074416][T13038] ceph: No mds server is up or the cluster is laggy [ 238.121795][ T793] usb 7-1: USB disconnect, device number 8 [ 238.300571][T13045] lo speed is unknown, defaulting to 1000 [ 238.559571][ T5131] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.565837][ T5862] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 238.574238][ T5862] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 238.588664][ T793] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 238.792412][ T793] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 238.833269][ T793] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 238.870189][ T793] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 238.901454][ T793] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.923945][ T793] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.940059][ T793] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 238.949516][ T793] usb 9-1: Product: syz [ 238.955600][ T793] usb 9-1: Manufacturer: syz [ 238.971162][ T793] usb 9-1: SerialNumber: syz [ 238.999584][ T793] usb 9-1: config 0 descriptor?? [ 239.006466][T13051] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 239.022992][ T793] usb 9-1: selecting invalid altsetting 0 [ 239.282170][T13051] usb 9-1: BOGUS urb xfer, pipe 0 != type 1 [ 239.312799][ T5911] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 239.460698][ T793] usb 9-1: USB disconnect, device number 2 [ 239.504517][ T5911] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.528020][ T5911] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 239.563139][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.598059][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 239.634226][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 239.672554][ T5911] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.689020][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.707139][ T5911] usb 2-1: Product: syz [ 239.718939][ T5911] usb 2-1: Manufacturer: syz [ 239.764374][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 239.779214][ T5911] cdc_wdm 2-1:1.0: skipping garbage [ 239.794095][T13086] bridge0: port 4(syz_tun) entered blocking state [ 239.801832][ T5911] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 239.806236][T13086] bridge0: port 4(syz_tun) entered disabled state [ 239.817344][T13086] syz_tun: entered allmulticast mode [ 239.825220][T13086] syz_tun: entered promiscuous mode [ 239.826622][ T5911] cdc_wdm 2-1:1.0: Unknown control protocol [ 239.831669][T13086] bridge0: port 4(syz_tun) entered blocking state [ 239.842857][T13086] bridge0: port 4(syz_tun) entered forwarding state [ 240.118915][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 240.119637][ T793] usb 2-1: USB disconnect, device number 28 [ 240.125722][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 240.137594][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 240.180037][ T9935] block nbd2: Possible stuck request ffff888027ef8000: control (read@0,1024B). Runtime 60 seconds [ 240.190800][ T9935] block nbd2: Possible stuck request ffff888027ef8200: control (read@1024,1024B). Runtime 60 seconds [ 240.201740][ T9935] block nbd2: Possible stuck request ffff888027ef8400: control (read@2048,1024B). Runtime 60 seconds [ 240.212641][ T9935] block nbd2: Possible stuck request ffff888027ef8600: control (read@3072,1024B). Runtime 60 seconds [ 240.301487][T13099] lo speed is unknown, defaulting to 1000 [ 240.471400][T13122] loop2: detected capacity change from 0 to 7 [ 240.480901][ T5795] Dev loop2: unable to read RDB block 7 [ 240.487014][ T5795] loop2: AHDI p1 p2 p3 [ 240.494524][ T5795] loop2: partition table partially beyond EOD, truncated [ 240.502312][ T5795] loop2: p1 start 1601398130 is beyond EOD, truncated [ 240.513031][ T5795] loop2: p2 start 1702059890 is beyond EOD, truncated [ 240.532188][T13122] Dev loop2: unable to read RDB block 7 [ 240.544020][T13122] loop2: AHDI p1 p2 p3 [ 240.554505][T13122] loop2: partition table partially beyond EOD, truncated [ 240.568283][T13122] loop2: p1 start 1601398130 is beyond EOD, truncated [ 240.576516][T13122] loop2: p2 start 1702059890 is beyond EOD, truncated [ 240.684411][ T5131] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.700232][ T5862] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 240.708929][ T5862] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 240.895854][ T29] audit: type=1400 audit(1771111124.998:604): avc: denied { bind } for pid=13138 comm="syz.6.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.112379][ T5862] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 241.288691][ T5862] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.309555][ T5862] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.320587][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.331019][ T5862] usb 9-1: SerialNumber: syz [ 241.983387][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.992317][ T5862] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 242.278889][T13201] bond1: invalid ARP target 0.0.0.0 specified for addition [ 242.312651][T13201] bond1: option arp_ip_target: invalid value (0) [ 242.384923][T13201] bond1 (unregistering): Released all slaves [ 242.413823][ T793] usb 9-1: USB disconnect, device number 3 [ 242.432804][ T793] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 242.846286][ T29] audit: type=1400 audit(1771111127.045:605): avc: denied { read } for pid=13240 comm="syz.7.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.095183][ T29] audit: type=1400 audit(1771111127.307:606): avc: denied { bind } for pid=13250 comm="syz.5.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 243.132244][ T5911] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 243.346795][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 243.391745][ T5911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.417303][ T5911] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 243.433283][ T29] audit: type=1326 audit(1771111127.664:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.7.3035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba9ff9bf79 code=0x0 [ 243.459331][ T5911] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 243.522232][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.796362][T13242] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 243.823225][ T979] usb 7-1: USB disconnect, device number 9 [ 243.895342][ T29] audit: type=1800 audit(1771111128.147:608): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3044" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45161 res=0 errno=0 [ 244.283343][ T29] audit: type=1400 audit(1771111128.546:609): avc: denied { bind } for pid=13310 comm="syz.5.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 244.704157][ T5862] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 244.880816][ T5862] usb 9-1: Using ep0 maxpacket: 32 [ 244.893210][ T5862] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 244.912093][ T5862] usb 9-1: config 0 has no interface number 0 [ 244.924405][ T5862] usb 9-1: config 0 interface 184 has no altsetting 0 [ 244.937458][ T5862] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 244.948654][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.961850][ T5862] usb 9-1: Product: syz [ 244.966245][ T5862] usb 9-1: Manufacturer: syz [ 244.974151][ T5862] usb 9-1: SerialNumber: syz [ 244.994335][ T5862] usb 9-1: config 0 descriptor?? [ 245.027301][ T5911] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 245.051229][ T29] audit: type=1400 audit(1771111129.365:610): avc: denied { write } for pid=13350 comm="syz.6.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.181963][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 245.194966][ T5911] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 245.206061][ T5911] usb 2-1: config 179 has no interface number 0 [ 245.219865][ T5911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 245.231667][ T5911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 245.253967][ T5911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.274844][ T5911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 245.287524][ T5911] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 245.313422][ T5911] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 245.351061][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.371380][T13337] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.565074][ T29] audit: type=1400 audit(1771111129.900:611): avc: denied { write } for pid=13369 comm="syz.5.3075" path="socket:[45007]" dev="sockfs" ino=45007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 245.617336][ T5862] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 245.632982][ T5862] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 245.699626][ T5911] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input40 [ 245.764840][ T29] audit: type=1400 audit(1771111130.110:612): avc: denied { relabelfrom } for pid=13374 comm="syz.6.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 245.834831][ T29] audit: type=1400 audit(1771111130.110:613): avc: denied { relabelto } for pid=13374 comm="syz.6.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 245.867309][ T5862] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 245.895297][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.900626][ T5862] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 245.918477][ T5862] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 245.929224][ T5862] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 245.988760][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.013120][ T5862] usb 9-1: USB disconnect, device number 4 [ 246.329877][ T979] usb 2-1: USB disconnect, device number 29 [ 246.329966][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 246.344919][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 246.490645][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3085'. [ 246.691900][ T29] audit: type=1400 audit(1771111131.065:614): avc: denied { connect } for pid=13403 comm="syz.8.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.732143][ T29] audit: type=1400 audit(1771111131.086:615): avc: denied { write } for pid=13403 comm="syz.8.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.972659][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3094'. [ 246.988328][T13415] bridge_slave_1: left allmulticast mode [ 247.004321][T13415] bridge_slave_1: left promiscuous mode [ 247.020337][T13415] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.031150][T13415] bridge_slave_0: left allmulticast mode [ 247.048386][T13415] bridge_slave_0: left promiscuous mode [ 247.061936][T13415] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.445070][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3105'. [ 247.999696][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 248.172394][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 248.181233][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 248.193124][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.222093][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 248.525314][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3135'. [ 248.552883][ T5877] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 248.704225][ T5877] usb 9-1: Using ep0 maxpacket: 32 [ 248.711085][ T5877] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 248.719568][ T5877] usb 9-1: config 0 has no interface number 0 [ 248.731178][ T5877] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 248.741079][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.770621][ T5877] usb 9-1: Product: syz [ 248.775961][ T5877] usb 9-1: Manufacturer: syz [ 248.780866][ T5877] usb 9-1: SerialNumber: syz [ 248.792473][ T5877] usb 9-1: config 0 descriptor?? [ 249.153853][T13539] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3149'. [ 249.165968][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3149'. [ 249.176396][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3149'. [ 249.185672][ T10] gspca_nw80x: reg_w err -71 [ 249.191709][ T10] nw80x 7-1:3.0: probe with driver nw80x failed with error -71 [ 249.222058][ T10] usb 7-1: USB disconnect, device number 10 [ 249.331306][T13543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.766079][ T5877] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 249.780590][ T29] audit: type=1326 audit(1771111134.330:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.6.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 249.800146][ T5877] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 249.828944][ T5877] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 249.842028][ T29] audit: type=1326 audit(1771111134.330:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.6.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 249.847358][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3162'. [ 249.868758][ T29] audit: type=1326 audit(1771111134.330:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.6.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 249.876900][ T5877] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 249.903154][ T29] audit: type=1326 audit(1771111134.330:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.6.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 249.938417][ T5877] usb 9-1: USB disconnect, device number 5 [ 249.992301][ T29] audit: type=1326 audit(1771111134.330:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.6.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 250.023622][T13570] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3164'. [ 250.055894][ T29] audit: type=1326 audit(1771111134.330:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.6.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 250.187759][T13577] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 250.541215][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3176'. [ 250.715358][T13610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.952195][ T5911] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 251.123791][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 251.138806][ T5911] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 251.155192][ T5911] usb 7-1: config 179 has no interface number 0 [ 251.173792][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 251.189833][T13634] overlayfs: failed to clone upperpath [ 251.198758][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 251.210908][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.222436][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 251.260520][ T5911] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 251.294759][ T5911] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 251.306852][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.324553][T13608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 251.555172][T13608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.595900][T13608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.661937][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input41 [ 252.031239][ T10] usb 7-1: USB disconnect, device number 11 [ 252.031876][T13664] lo speed is unknown, defaulting to 1000 [ 252.037226][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.051456][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.153100][T13669] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 252.495713][ T5877] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 252.663720][ T5877] usb 9-1: Using ep0 maxpacket: 8 [ 252.681256][ T5877] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 252.698100][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 252.698117][ T29] audit: type=1400 audit(1771111137.375:624): avc: denied { open } for pid=13689 comm="syz.1.3218" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.714430][ T5877] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.771046][ T5877] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.785908][ T29] audit: type=1400 audit(1771111137.448:625): avc: denied { ioctl } for pid=13689 comm="syz.1.3218" path="/dev/ttyq6" dev="devtmpfs" ino=381 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.827430][ T5877] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.859941][ T29] audit: type=1400 audit(1771111137.564:626): avc: denied { ioctl } for pid=13697 comm="syz.1.3221" path="socket:[46642]" dev="sockfs" ino=46642 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 252.886059][ T5877] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.927741][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.998140][T13702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.180376][ T5877] usb 9-1: GET_CAPABILITIES returned 0 [ 253.198828][ T5877] usbtmc 9-1:16.0: can't read capabilities [ 253.201221][T13716] netlink: 'syz.7.3232': attribute type 1 has an invalid length. [ 253.231969][T13716] netlink: 'syz.7.3232': attribute type 2 has an invalid length. [ 253.241391][T13716] netlink: 'syz.7.3232': attribute type 1 has an invalid length. [ 253.250159][T13716] __nla_validate_parse: 3 callbacks suppressed [ 253.250174][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3232'. [ 253.412503][ T5911] usb 9-1: USB disconnect, device number 6 [ 253.946663][T13753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3246'. [ 254.363207][ T29] audit: type=1400 audit(1771111139.138:627): avc: denied { read } for pid=13776 comm="syz.6.3256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 254.468524][ T29] audit: type=1400 audit(1771111139.254:628): avc: denied { write } for pid=13776 comm="syz.6.3256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 254.489307][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 254.614777][ T29] audit: type=1400 audit(1771111139.401:629): avc: denied { mount } for pid=13788 comm="syz.1.3261" name="/" dev="hugetlbfs" ino=46756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 254.650715][ T29] audit: type=1400 audit(1771111139.443:630): avc: denied { create } for pid=13788 comm="syz.1.3261" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 254.676655][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 254.690424][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.707650][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 254.718447][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.737405][ T10] usb 6-1: config 0 descriptor?? [ 254.959608][ T5877] usb 6-1: USB disconnect, device number 26 [ 255.200589][ T29] audit: type=1400 audit(1771111140.010:631): avc: denied { name_bind } for pid=13811 comm="syz.8.3271" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 255.379172][ T29] audit: type=1326 audit(1771111140.188:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13817 comm="syz.1.3274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c6d99bf79 code=0x0 [ 255.420049][ T9935] block nbd0: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 180 seconds [ 255.432257][ T9935] block nbd0: Possible stuck request ffff888027e60200: control (read@1024,1024B). Runtime 180 seconds [ 255.443329][ T9935] block nbd0: Possible stuck request ffff888027e60400: control (read@2048,1024B). Runtime 180 seconds [ 255.454427][ T9935] block nbd0: Possible stuck request ffff888027e60600: control (read@3072,1024B). Runtime 180 seconds [ 256.039488][ T5911] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 256.094032][ T29] audit: type=1400 audit(1771111140.955:633): avc: denied { read } for pid=13858 comm="syz.5.3293" laddr=172.20.20.170 lport=42310 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 256.212453][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 256.225452][ T5911] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.258140][ T5911] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.277423][ T5911] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 256.325034][ T5911] usb 9-1: config 0 interface 0 has no altsetting 0 [ 256.347598][ T5911] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 256.362972][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.387209][ T5911] usb 9-1: config 0 descriptor?? [ 256.766426][T13884] input: syz1 as /devices/virtual/input/input42 [ 256.819118][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.837700][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.865395][ T5911] hid (null): unknown global tag 0xc [ 257.109510][ T10] usb 9-1: USB disconnect, device number 7 [ 257.411499][ T5877] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 257.464409][ T793] kernel write not supported for file /sg0 (pid: 793 comm: kworker/1:2) [ 257.563648][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 257.592054][ T5877] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 257.606341][ T5877] usb 6-1: config 0 has no interface number 0 [ 257.643593][ T5877] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.692623][ T5877] usb 6-1: config 0 interface 85 has no altsetting 0 [ 257.711781][ T5877] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 257.724922][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.749296][ T5877] usb 6-1: Product: syz [ 257.753485][ T5877] usb 6-1: Manufacturer: syz [ 257.768221][ T5877] usb 6-1: SerialNumber: syz [ 257.795922][ T5877] usb 6-1: config 0 descriptor?? [ 258.103613][T13941] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3328'. [ 258.132906][T13943] input: syz1 as /devices/virtual/input/input44 [ 258.401793][ T5877] appletouch 6-1:0.85: Geyser mode initialized. [ 258.415100][ T5877] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input43 [ 258.610859][ T5877] usb 6-1: USB disconnect, device number 27 [ 258.616852][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 258.692233][ T5877] appletouch 6-1:0.85: input: appletouch disconnected [ 259.036135][T13991] input: syz0 as /devices/virtual/input/input45 [ 259.038713][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 259.038729][ T29] audit: type=1326 audit(1771111144.041:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.7.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7fc00000 [ 259.059363][T13989] lo speed is unknown, defaulting to 1000 [ 259.411045][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 259.537252][ T29] audit: type=1400 audit(1771111144.566:636): avc: denied { create } for pid=14008 comm="syz.1.3356" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 259.613432][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.635999][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.654563][ T10] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.675739][ T29] audit: type=1326 audit(1771111144.713:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.7.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba9ff9bf79 code=0x7fc00000 [ 259.709845][ T10] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 259.718339][ T10] usb 9-1: Manufacturer: syz [ 259.725499][ T10] usb 9-1: config 0 descriptor?? [ 259.958828][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3364'. [ 259.987236][T14027] loop5: detected capacity change from 0 to 2640 [ 259.995250][ T6143] buffer_io_error: 138 callbacks suppressed [ 260.008048][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.024651][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.033548][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.041728][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.052536][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.063525][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.077153][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.085311][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.093837][ T6143] ldm_validate_partition_table(): Disk read failed. [ 260.098530][T14031] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.3368'. [ 260.100719][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.120327][ T6143] Buffer I/O error on dev loop5, logical block 0, async page read [ 260.133429][ T6143] Dev loop5: unable to read RDB block 0 [ 260.141431][ T6143] loop5: unable to read partition table [ 260.155357][T14027] ldm_validate_partition_table(): Disk read failed. [ 260.162159][T14027] Dev loop5: unable to read RDB block 0 [ 260.173596][T14027] loop5: unable to read partition table [ 260.183530][T14027] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 260.220803][ T5179] ldm_validate_partition_table(): Disk read failed. [ 260.230386][ T5179] Dev loop5: unable to read RDB block 0 [ 260.236827][ T5179] loop5: unable to read partition table [ 260.396961][ T29] audit: type=1400 audit(1771111145.469:638): avc: denied { ioctl } for pid=14045 comm="syz.6.3373" path="socket:[48010]" dev="sockfs" ino=48010 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.518898][ T10] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #100: -71 [ 260.529698][ T10] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 260.540337][ T10] uclogic 0003:256C:006D.0021: failed probing pen v1 parameters: -71 [ 260.548885][ T10] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 260.573967][ T10] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 260.599853][ T10] usb 9-1: USB disconnect, device number 8 [ 260.898870][ T5877] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 261.059728][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 261.072387][ T5877] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 261.084440][ T5877] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.104129][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.116461][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.139672][ T5877] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.158734][ T5877] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.169874][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.187282][T14085] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.3391'. [ 261.308360][T14089] syzkaller1: entered promiscuous mode [ 261.314272][T14089] syzkaller1: entered allmulticast mode [ 261.377874][ T5877] usb 2-1: usb_control_msg returned -32 [ 261.384577][ T5877] usbtmc 2-1:16.0: can't read capabilities [ 261.734224][T14108] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 261.929471][ T5877] usb 2-1: USB disconnect, device number 30 [ 262.157684][T14123] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3409'. [ 262.200088][T14121] SELinux: ebitmap start bit (589828) is not a multiple of the map unit size (64) [ 262.234064][T14121] SELinux: failed to load policy [ 262.799172][T14157] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3426'. [ 262.820720][T14157] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3426'. [ 263.697930][ T5877] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 263.869094][ T5877] usb 9-1: Using ep0 maxpacket: 8 [ 263.875654][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.887101][ T5877] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.896487][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.914217][ T5877] usb 9-1: config 0 descriptor?? [ 264.121697][ T5877] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 264.392845][ T5862] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 264.547939][ T5862] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 264.555891][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.576968][ T5862] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.579367][ T5877] usb 9-1: USB disconnect, device number 9 [ 264.590425][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.633987][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 264.655997][ T5862] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 264.664411][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.676251][ T5862] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.695759][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.717210][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 264.739063][ T5862] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 264.747044][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.758621][ T5862] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.772938][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.786317][ T5862] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 264.803008][ T5862] usb 6-1: string descriptor 0 read error: -22 [ 264.810544][ T5862] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 264.823879][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.845546][ T5862] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 265.124026][T14227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.141006][T14227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.211822][ T5964] usb 6-1: USB disconnect, device number 28 [ 265.518895][ T5964] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 265.576112][ T29] audit: type=1326 audit(1771111150.907:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14289 comm="syz.7.3483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x0 [ 265.669276][ T5964] usb 9-1: Using ep0 maxpacket: 32 [ 265.680811][ T5964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 265.690111][T14296] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 265.705758][ T5964] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 265.713738][T14296] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 265.733238][ T5964] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.756166][ T5964] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.785704][ T5964] usb 9-1: Product: syz [ 265.791991][ T5964] usb 9-1: Manufacturer: syz [ 265.797368][ T5964] usb 9-1: SerialNumber: syz [ 265.807353][ T5964] usb 9-1: config 0 descriptor?? [ 265.822514][T14275] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 265.830973][ T5964] hub 9-1:0.0: bad descriptor, ignoring hub [ 265.838522][ T5964] hub 9-1:0.0: probe with driver hub failed with error -5 [ 266.003102][ T92] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 266.146113][ T793] usb 9-1: USB disconnect, device number 10 [ 266.154433][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 266.166563][ T92] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 266.188970][ T92] usb 2-1: config 0 has no interface number 0 [ 266.198257][ T92] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.221648][ T92] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 266.244895][ T92] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.257112][ T92] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.272945][ T92] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 266.282989][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.293297][ T92] usb 2-1: config 0 descriptor?? [ 266.315329][ T92] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 266.578123][ T92] usb 2-1: USB disconnect, device number 31 [ 266.578185][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 266.592812][T14298] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19 [ 266.622648][ T92] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 266.926410][ T29] audit: type=1400 audit(1771111152.324:640): avc: denied { read } for pid=14341 comm="syz.7.3506" path="socket:[49594]" dev="sockfs" ino=49594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.033017][T14346] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3507'. [ 267.088925][ T92] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 267.104332][T14348] batadv_slave_1: entered promiscuous mode [ 267.113795][T14347] batadv_slave_1: left promiscuous mode [ 267.171907][ T29] audit: type=1400 audit(1771111152.576:641): avc: denied { setopt } for pid=14351 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.192793][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'. [ 267.244179][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.267754][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.290250][ T92] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 267.302796][ T92] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 267.314097][ T92] usb 6-1: Manufacturer: syz [ 267.322950][ T92] usb 6-1: config 0 descriptor?? [ 267.548630][ T29] audit: type=1400 audit(1771111152.985:642): avc: denied { write } for pid=14365 comm="syz.7.3516" lport=52717 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 267.675089][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3518'. [ 267.697749][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3518'. [ 267.825501][T14376] loop6: detected capacity change from 0 to 7 [ 267.840542][ T5822] Dev loop6: unable to read RDB block 7 [ 267.850549][ T5822] loop6: unable to read partition table [ 267.859221][ T5822] loop6: partition table beyond EOD, truncated [ 267.872281][T14376] Dev loop6: unable to read RDB block 7 [ 267.878019][T14376] loop6: unable to read partition table [ 267.900395][T14376] loop6: partition table beyond EOD, truncated [ 267.912408][T14376] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 268.023611][ T793] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 268.176014][ T793] usb 9-1: Using ep0 maxpacket: 8 [ 268.182832][ T793] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.191278][ T793] usb 9-1: config 179 has no interface number 0 [ 268.197849][ T793] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 268.209002][ T793] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 268.220401][ T793] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.232158][ T793] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 268.243662][ T793] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.257138][ T793] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 268.266243][ T793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.278655][T14374] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 268.288866][ T5877] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 268.302320][ T92] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #100: -71 [ 268.318283][ T92] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 268.327305][ T92] uclogic 0003:256C:006D.0022: failed probing pen v1 parameters: -71 [ 268.335476][ T92] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 268.344715][ T92] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 268.358684][ T92] usb 6-1: USB disconnect, device number 29 [ 268.441260][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 268.448661][ T5877] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 268.458652][ T5877] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 268.469990][ T5877] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 268.479999][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 268.487012][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.494886][ T5877] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 268.507829][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.513363][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.526338][ T5877] usb 7-1: Product: syz [ 268.530650][ T5877] usb 7-1: Manufacturer: syz [ 268.535311][ T5877] usb 7-1: SerialNumber: syz [ 268.543005][ T5877] usb 7-1: config 0 descriptor?? [ 268.719548][ T793] usb 9-1: USB disconnect, device number 11 [ 268.725517][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 268.725549][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 268.750344][ T5877] usb 7-1: Can not set alternate setting to 1, error: -71 [ 268.758013][ T5877] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71 [ 268.786806][ T5877] usb 7-1: USB disconnect, device number 12 [ 268.805778][ T9935] block nbd2: Possible stuck request ffff888027ef8000: control (read@0,1024B). Runtime 90 seconds [ 268.817278][ T9935] block nbd2: Possible stuck request ffff888027ef8200: control (read@1024,1024B). Runtime 90 seconds [ 268.828339][ T9935] block nbd2: Possible stuck request ffff888027ef8400: control (read@2048,1024B). Runtime 90 seconds [ 268.839582][ T9935] block nbd2: Possible stuck request ffff888027ef8600: control (read@3072,1024B). Runtime 90 seconds [ 269.233368][ T793] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 269.403999][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 269.427460][ T793] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 269.454857][ T793] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 269.489445][ T793] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 269.516875][ T793] usb 7-1: config 0 interface 0 has no altsetting 0 [ 269.545144][ T793] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 269.589483][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.775223][ T793] usb 7-1: Product: syz [ 269.779447][ T793] usb 7-1: Manufacturer: syz [ 269.794581][ T793] usb 7-1: SerialNumber: syz [ 269.810876][ T793] usb 7-1: config 0 descriptor?? [ 269.879772][ T92] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 270.055863][ T793] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input46 [ 270.067259][ T92] usb 6-1: Using ep0 maxpacket: 8 [ 270.084015][ T92] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 270.110108][ T5164] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 270.134642][ T92] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.178073][ T5164] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 270.197992][ T92] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.227683][ T92] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.278933][ T92] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.330816][ T5822] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 270.336643][ T92] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.385909][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.418570][T14384] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 270.466390][ T5164] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 270.485232][ T5877] usb 7-1: USB disconnect, device number 13 [ 270.499571][ T5164] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 270.632397][ T793] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 270.799466][ T793] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.819619][ T793] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 270.859705][ T793] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.880992][ T92] usb 6-1: USB disconnect, device number 30 [ 270.901763][ T793] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 270.912662][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.924397][ T793] usb 2-1: Product: syz [ 270.930892][ T793] usb 2-1: Manufacturer: syz [ 270.935676][ T793] usb 2-1: SerialNumber: syz [ 270.949305][ T793] usblp0: Disabling reads from problematic bidirectional printer [ 271.178284][ T793] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 271.437110][ T5862] usb 2-1: USB disconnect, device number 32 [ 271.550630][T14438] syzkaller1: entered promiscuous mode [ 271.556130][T14438] syzkaller1: entered allmulticast mode [ 271.624501][T14421] usblp0: removed [ 271.689440][ T92] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 271.834234][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3548'. [ 271.871105][ T92] usb 9-1: Using ep0 maxpacket: 16 [ 271.886509][ T92] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.933718][ T92] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.965461][ T92] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 271.994294][ T92] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 272.008554][ T92] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.024310][ T92] usb 9-1: config 0 descriptor?? [ 272.204891][ T793] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 272.367267][ T793] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 272.376135][ T793] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.388462][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.400947][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 272.412326][ T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.425982][ T793] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.430040][ T92] hid_parser_main: 134 callbacks suppressed [ 272.430057][ T92] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 272.439216][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.451079][ T92] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 272.466713][ T92] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 272.471570][ T793] usb 6-1: config 0 descriptor?? [ 272.476179][ T92] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 272.479622][T14452] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 272.485942][ T92] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 272.503342][ T92] input: HID 0955:7214 Haptics as /devices/virtual/input/input47 [ 272.544300][ T92] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 272.559417][ T92] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 272.633688][ T5862] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 272.647073][ T92] usb 9-1: USB disconnect, device number 12 [ 272.661165][ T5862] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.691744][ T5862] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.718986][ T5862] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.846104][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.856404][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.866060][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.875169][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.884127][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.902000][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.919690][ T5131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.924721][ T793] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 272.933678][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3562'. [ 272.943364][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.952962][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.965408][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.025981][ T793] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 273.033712][T14467] lo speed is unknown, defaulting to 1000 [ 273.198111][T14476] serio: Serial port ptm0 [ 273.224348][T14467] chnl_net:caif_netlink_parms(): no params data found [ 273.305537][ T793] usb 6-1: USB disconnect, device number 31 [ 273.484786][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.502284][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.509801][T14467] bridge_slave_0: entered allmulticast mode [ 273.517483][T14467] bridge_slave_0: entered promiscuous mode [ 273.537221][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.547273][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.555496][T14467] bridge_slave_1: entered allmulticast mode [ 273.563223][T14467] bridge_slave_1: entered promiscuous mode [ 273.625762][T14467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.669502][T14467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.731474][T14467] team0: Port device team_slave_0 added [ 273.742964][T14467] team0: Port device team_slave_1 added [ 273.776505][T14467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.783463][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.810072][T14467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.821873][T14499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.869375][T14499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.899865][T14467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.908595][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.939358][T14467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.065843][T14467] hsr_slave_0: entered promiscuous mode [ 274.082047][T14467] hsr_slave_1: entered promiscuous mode [ 274.088403][T14467] debugfs: 'hsr0' already exists in 'hsr' [ 274.096970][T14508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.108143][T14467] Cannot create hsr debugfs directory [ 274.554352][T14467] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 274.821406][T14467] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 274.853297][T14467] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 274.895964][T14467] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 274.902892][ T5131] Bluetooth: hci2: command tx timeout [ 275.016733][T14467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.034372][T14467] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.057179][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.064333][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.116669][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.123837][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.250842][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3591'. [ 275.446265][T14558] lo speed is unknown, defaulting to 1000 [ 275.536007][T14467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.002810][T14467] veth0_vlan: entered promiscuous mode [ 276.023176][T14467] veth1_vlan: entered promiscuous mode [ 276.105397][T14467] veth0_macvtap: entered promiscuous mode [ 276.142367][T14467] veth1_macvtap: entered promiscuous mode [ 276.151526][T14558] netlink: 'syz.5.3593': attribute type 2 has an invalid length. [ 276.202143][T14467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.245579][T14467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.285057][ T85] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.325925][ T85] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.388484][ T85] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.439829][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.873369][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.882764][ T5806] Bluetooth: hci2: command tx timeout [ 276.893938][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.941120][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.984052][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.863369][T14639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.195940][ T5862] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 278.369848][ T5862] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.419509][ T5862] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.465919][ T5862] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.488709][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.615344][ T42] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 278.717865][ T5862] usb 7-1: usb_control_msg returned -32 [ 278.735982][ T5862] usbtmc 7-1:16.0: can't read capabilities [ 278.776533][ T42] usb 9-1: Using ep0 maxpacket: 16 [ 278.783287][ T42] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 278.800136][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.814044][ T42] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 278.833522][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.841863][ T42] usb 9-1: Product: syz [ 278.856058][ T42] usb 9-1: Manufacturer: syz [ 278.860686][ T42] usb 9-1: SerialNumber: syz [ 278.879841][ T5806] Bluetooth: hci2: command tx timeout [ 278.884247][ T42] usb 9-1: config 0 descriptor?? [ 278.903708][ T42] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 278.922958][ T42] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 278.948383][ T793] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 279.066500][T14689] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 279.083960][ T5911] usb 7-1: USB disconnect, device number 14 [ 279.100428][ T793] usb 10-1: Using ep0 maxpacket: 8 [ 279.110467][ T793] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 279.124057][ T793] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 279.139378][ T793] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.150908][ T793] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.178674][ T793] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.193602][ T793] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.415629][ T793] usb 10-1: usb_control_msg returned -32 [ 279.424831][ T793] usbtmc 10-1:16.0: can't read capabilities [ 279.492958][ T42] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 279.499827][ T42] em28xx 9-1:0.0: Config register raw data: 0x73 [ 279.510022][ T42] em28xx 9-1:0.0: I2S Audio (3 sample rate(s)) [ 279.519004][ T42] em28xx 9-1:0.0: No AC97 audio processor [ 279.529299][ T5877] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 279.654375][ T29] audit: type=1400 audit(1771111167.692:643): avc: denied { connect } for pid=14710 comm="syz.7.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.679259][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 279.713974][ T5877] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 279.725230][ T42] usb 9-1: USB disconnect, device number 13 [ 279.742479][ T5877] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.775294][ T5877] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.814251][ T5877] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.834469][ T5877] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.847611][ T5877] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.882067][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.121016][ T5877] usb 6-1: usb_control_msg returned -32 [ 280.127798][ T5877] usbtmc 6-1:16.0: can't read capabilities [ 280.359978][ T29] audit: type=1326 audit(1771111168.427:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.7.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9ff9bf79 code=0x7fc00000 [ 280.468757][T14741] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 280.476052][ T10] usb 10-1: USB disconnect, device number 2 [ 280.803818][T14743] loop8: detected capacity change from 0 to 7 [ 280.813970][T14743] Dev loop8: unable to read RDB block 7 [ 280.821204][T14743] loop8: unable to read partition table [ 280.827015][T14743] loop8: partition table beyond EOD, truncated [ 280.833178][T14743] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 280.843754][ T5131] Bluetooth: hci2: command tx timeout [ 280.987639][ T29] audit: type=1326 audit(1771111169.077:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.7.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba9ff3d399 code=0x7fc00000 [ 281.205378][T14756] Set syz1 is full, maxelem 1029 reached [ 281.939960][ T29] audit: type=1400 audit(1771111170.085:646): avc: denied { remount } for pid=14774 comm="syz.6.3679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 282.113456][ T10] kernel write not supported for file /uinput (pid: 10 comm: kworker/0:1) [ 282.202158][ T10] usb 6-1: USB disconnect, device number 32 [ 282.558386][ T29] audit: type=1326 audit(1771111170.726:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14795 comm="syz.5.3689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0cc99bf79 code=0x0 [ 282.610735][T14804] macvlan2: entered promiscuous mode [ 282.638374][T14804] macvlan3: entered promiscuous mode [ 282.825340][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 282.994706][ T5131] block nbd9: Receive control failed (result -32) [ 283.007445][T14787] block nbd9: shutting down sockets [ 283.496040][T14848] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3712'. [ 283.835628][ T42] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 283.857533][ T5877] IPVS: starting estimator thread 0... [ 283.863328][T14860] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 283.950193][T14862] IPVS: using max 42 ests per chain, 100800 per kthread [ 283.978648][ T793] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 284.016903][ T42] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 284.024920][ T42] usb 6-1: config 0 has no interface number 0 [ 284.053845][ T42] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 284.059063][ T9935] block nbd0: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 210 seconds [ 284.076290][ T9935] block nbd0: Possible stuck request ffff888027e60200: control (read@1024,1024B). Runtime 210 seconds [ 284.087384][ T9935] block nbd0: Possible stuck request ffff888027e60400: control (read@2048,1024B). Runtime 210 seconds [ 284.100374][ T9935] block nbd0: Possible stuck request ffff888027e60600: control (read@3072,1024B). Runtime 210 seconds [ 284.130724][ T42] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 284.158610][ T793] usb 9-1: Using ep0 maxpacket: 32 [ 284.175507][ T793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 284.198518][ T42] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.244320][ T793] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 284.273309][ T42] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 284.284715][ T42] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 284.311872][ T42] usb 6-1: Product: syz [ 284.316420][ T42] usb 6-1: SerialNumber: syz [ 284.326368][ T793] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 284.341180][ T793] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 284.356959][ T42] usb 6-1: config 0 descriptor?? [ 284.366964][ T793] usb 9-1: Product: syz [ 284.374758][ T42] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 284.381828][ T793] usb 9-1: Manufacturer: syz [ 284.389714][ T42] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input49 [ 284.399772][ T793] usb 9-1: SerialNumber: syz [ 284.407492][ T793] usb 9-1: config 0 descriptor?? [ 284.422130][T14858] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 284.452248][ T793] hub 9-1:0.0: bad descriptor, ignoring hub [ 284.461532][ T793] hub 9-1:0.0: probe with driver hub failed with error -5 [ 284.503197][ T29] audit: type=1400 audit(1771111172.783:648): avc: denied { setopt } for pid=14881 comm="syz.7.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.622365][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 284.700079][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3731'. [ 284.704912][T14886] bridge0: port 4(syz_tun) entered disabled state [ 284.722563][T14886] syz_tun: left allmulticast mode [ 284.727690][T14886] syz_tun: left promiscuous mode [ 284.735293][T14886] bridge0: port 4(syz_tun) entered disabled state [ 284.754391][T14886] bridge0: port 3(team0) entered disabled state [ 284.761003][T14886] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.770035][T14886] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.788592][ T979] usb 9-1: USB disconnect, device number 14 [ 284.790865][T14886] team0: left allmulticast mode [ 284.800025][T14886] team_slave_0: left allmulticast mode [ 284.805498][T14886] team_slave_1: left allmulticast mode [ 284.820567][T14886] team0: left promiscuous mode [ 284.828948][T14886] team_slave_0: left promiscuous mode [ 284.829096][T14886] team_slave_1: left promiscuous mode [ 284.829404][T14886] bridge0: port 3(team0) entered disabled state [ 284.906713][T14886] bridge_slave_0: left allmulticast mode [ 284.912767][T14886] bridge_slave_0: left promiscuous mode [ 284.913034][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 284.913173][ T10] usb 6-1: USB disconnect, device number 33 [ 284.918592][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 284.918847][T14886] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.961348][ T10] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 284.965322][T14886] bridge_slave_1: left allmulticast mode [ 284.987530][T14886] bridge_slave_1: left promiscuous mode [ 284.999116][T14886] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.032621][T14886] bond0: (slave bond_slave_0): Releasing backup interface [ 285.047883][T14886] bond0: (slave bond_slave_1): Releasing backup interface [ 285.063142][T14886] team0: Port device team_slave_0 removed [ 285.092635][T14886] team0: Port device team_slave_1 removed [ 285.095117][T14898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.104557][T14886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.120033][T14886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.135150][T14886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.163258][T14886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.183413][T14886] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.524358][T14917] xt_hashlimit: size too large, truncated to 1048576 [ 286.309672][ T29] audit: type=1326 audit(1771111174.662:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.7.3751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba9ff9bf79 code=0x0 [ 286.498006][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3754'. [ 287.323352][T14994] dummy0: entered allmulticast mode [ 287.346194][T14993] dummy0: left allmulticast mode [ 287.518709][ T29] audit: type=1400 audit(1771111175.943:650): avc: denied { map } for pid=15001 comm="syz.5.3782" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 287.570368][ T793] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 287.588352][ T29] audit: type=1326 audit(1771111176.017:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.6.3783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbc179bf79 code=0x0 [ 287.646174][ T29] audit: type=1326 audit(1771111176.080:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.6.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 287.719395][ T29] audit: type=1326 audit(1771111176.080:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.6.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 287.723771][ T793] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 287.757954][ T29] audit: type=1326 audit(1771111176.080:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.6.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcbc175c84e code=0x7ffc0000 [ 287.762055][ T793] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.785499][ T29] audit: type=1326 audit(1771111176.080:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.6.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcbc175c84e code=0x7ffc0000 [ 287.815227][ T793] usb 10-1: config 0 descriptor?? [ 287.834422][ T793] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 287.842427][ T29] audit: type=1326 audit(1771111176.080:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.6.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcbc175c84e code=0x7ffc0000 [ 287.888764][ T29] audit: type=1326 audit(1771111176.080:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15004 comm="syz.6.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcbc175c84e code=0x7ffc0000 [ 288.630886][ T793] gspca_stv06xx: I2C: Read error writing address: -71 [ 288.656069][ T793] usb 10-1: USB disconnect, device number 3 [ 288.711336][T15044] input: syz0 as /devices/virtual/input/input50 [ 288.797656][ T42] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 288.969562][ T42] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 288.983249][ T42] usb 7-1: config 0 has no interface number 0 [ 288.992589][ T42] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 289.002893][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.011022][ T42] usb 7-1: Product: syz [ 289.015371][ T42] usb 7-1: Manufacturer: syz [ 289.020868][ T42] usb 7-1: SerialNumber: syz [ 289.036227][ T42] usb 7-1: config 0 descriptor?? [ 289.348789][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 289.348809][ T29] audit: type=1400 audit(1771111177.864:1032): avc: denied { read write } for pid=15073 comm="syz.8.3814" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 289.427063][ T29] audit: type=1400 audit(1771111177.864:1033): avc: denied { open } for pid=15073 comm="syz.8.3814" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 289.641785][ T42] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 289.688522][ T42] asix 7-1:0.251: probe with driver asix failed with error -524 [ 289.858282][ T10] usb 7-1: USB disconnect, device number 15 [ 289.898221][T15085] loop7: detected capacity change from 0 to 7 [ 289.926928][ T5795] Dev loop7: unable to read RDB block 7 [ 289.941135][ T5795] loop7: unable to read partition table [ 289.948115][ T5795] loop7: partition table beyond EOD, truncated [ 289.960173][T15085] Dev loop7: unable to read RDB block 7 [ 289.973670][T15085] loop7: unable to read partition table [ 289.985522][T15085] loop7: partition table beyond EOD, truncated [ 290.005449][T15085] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 290.192075][T15097] lo speed is unknown, defaulting to 1000 [ 290.650063][T15115] kvm: apic: phys broadcast and lowest prio [ 290.949922][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3837'. [ 290.962988][T15130] netlink: 'syz.5.3837': attribute type 20 has an invalid length. [ 290.981596][T15130] netlink: 'syz.5.3837': attribute type 21 has an invalid length. [ 291.331987][T15145] netlink: 'syz.6.3843': attribute type 1 has an invalid length. [ 291.339742][T15145] netlink: 'syz.6.3843': attribute type 6 has an invalid length. [ 291.399780][T15145] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3843'. [ 291.854863][ T29] audit: type=1326 audit(1771111180.489:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15167 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 291.903934][ T29] audit: type=1400 audit(1771111180.499:1035): avc: denied { mounton } for pid=15164 comm="syz.9.3852" path="/40/file0" dev="gadgetfs" ino=7121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 291.956678][ T29] audit: type=1326 audit(1771111180.520:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15167 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 291.993858][ T29] audit: type=1326 audit(1771111180.531:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15167 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 292.030984][ T29] audit: type=1326 audit(1771111180.531:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15167 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbc179bce2 code=0x7ffc0000 [ 292.057116][ T29] audit: type=1326 audit(1771111180.531:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15167 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbc179bce2 code=0x7ffc0000 [ 292.127088][ T29] audit: type=1326 audit(1771111180.531:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15167 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 292.244212][ T29] audit: type=1326 audit(1771111180.531:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15167 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc179bf79 code=0x7ffc0000 [ 292.482503][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3862'. [ 292.592274][T15185] bond0: (slave bond_slave_1): Releasing backup interface [ 292.626928][T15185] bond_slave_1 (unregistering): left allmulticast mode [ 294.005957][T15254] Invalid argument reading file caps for ./file0 [ 294.101188][ T42] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 294.142550][ T42] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.306427][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 294.306442][ T29] audit: type=1326 audit(1771111183.071:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.6.3900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbc179bf79 code=0x0 [ 294.345720][ T42] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 294.495179][ T42] usb 6-1: config 0 has no interfaces? [ 294.502487][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.519790][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 294.531081][ T29] audit: type=1400 audit(1771111183.292:1050): avc: denied { accept } for pid=15278 comm="syz.7.3905" path="socket:[54232]" dev="sockfs" ino=54232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 294.565081][ T42] usb 6-1: SerialNumber: syz [ 294.582263][ T42] usb 6-1: config 0 descriptor?? [ 294.812389][ T10] usb 6-1: USB disconnect, device number 34 [ 295.517982][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3920'. [ 295.528258][ T5862] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 295.536959][T15314] netlink: 'syz.6.3920': attribute type 7 has an invalid length. [ 295.546874][T15314] netlink: 'syz.6.3920': attribute type 8 has an invalid length. [ 295.560816][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3920'. [ 295.713098][ T5862] usb 9-1: Using ep0 maxpacket: 32 [ 295.720996][ T5862] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 295.725559][T15324] lo speed is unknown, defaulting to 1000 [ 295.746096][ T5862] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 295.758774][ T5862] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.772813][ T5862] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 295.791273][ T5862] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 295.800703][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.812812][ T5862] usb 9-1: Product: syz [ 295.817022][ T5862] usb 9-1: Manufacturer: syz [ 295.825746][ T5862] usb 9-1: SerialNumber: syz [ 295.841116][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 295.855075][ T5862] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input51 [ 296.056633][ T5862] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 296.072429][ T5862] (id 0x00) [ 296.113393][ T29] audit: type=1400 audit(1771111184.961:1051): avc: denied { mounton } for pid=15334 comm="syz.5.3929" path="/797/file0" dev="tmpfs" ino=4093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 296.133119][T15324] dvmrp1: entered allmulticast mode [ 296.180197][ T5862] rc_core: IR keymap rc-imon-pad not found [ 296.186041][ T5862] Registered IR keymap rc-empty [ 296.208640][ T5862] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 296.213819][ T85] dvmrp1 (unregistering): left allmulticast mode [ 296.237038][ T5862] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 296.285772][ T5862] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 296.351531][ T5862] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input52 [ 296.403973][ T5862] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:15> initialized [ 296.545227][T15304] imon:vfd_write: invalid payload size [ 296.572027][ T5862] usb 9-1: USB disconnect, device number 15 [ 296.867807][T15347] tmpfs: Invalid gid '0x00000000ffffffff' [ 297.470524][ T9935] block nbd2: Possible stuck request ffff888027ef8000: control (read@0,1024B). Runtime 120 seconds [ 297.484911][ T9935] block nbd2: Possible stuck request ffff888027ef8200: control (read@1024,1024B). Runtime 120 seconds [ 297.496128][ T9935] block nbd2: Possible stuck request ffff888027ef8400: control (read@2048,1024B). Runtime 120 seconds [ 297.507192][ T9935] block nbd2: Possible stuck request ffff888027ef8600: control (read@3072,1024B). Runtime 120 seconds [ 297.681293][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3948'. [ 297.766943][T15376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3948'. [ 297.820533][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3948'. [ 297.830381][T15376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3948'. [ 298.510921][ T29] audit: type=1400 audit(1771111187.480:1052): avc: denied { mount } for pid=15415 comm="syz.8.3964" name="/" dev="autofs" ino=55293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 298.580062][ T29] audit: type=1400 audit(1771111187.554:1053): avc: denied { unmount } for pid=12287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 298.618359][ T5911] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 298.731342][T15422] netlink: 'syz.8.3967': attribute type 4 has an invalid length. [ 298.789898][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 298.802761][ T5911] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.821227][ T5911] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.845386][ T5911] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 298.864535][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.283002][ T5911] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 299.304469][ T42] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 299.389748][ T29] audit: type=1400 audit(1771111188.404:1054): avc: denied { sys_module } for pid=15443 comm="syz.7.3977" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 299.442620][T15448] netlink: 'syz.5.3978': attribute type 29 has an invalid length. [ 299.459592][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.471275][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.482383][ T5911] usb 7-1: USB disconnect, device number 16 [ 299.484857][ T42] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 299.498148][T15448] netlink: 'syz.5.3978': attribute type 29 has an invalid length. [ 299.500356][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.521016][ T42] usb 10-1: config 0 descriptor?? [ 299.543958][T15448] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3978'. [ 299.556043][T15448] unsupported nla_type 58 [ 299.748782][ T29] audit: type=1400 audit(1771111188.782:1055): avc: denied { search } for pid=15460 comm="syz.5.3983" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.791695][ T29] audit: type=1400 audit(1771111188.782:1056): avc: denied { setattr } for pid=15460 comm="syz.5.3983" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.852871][T15465] netem: incorrect gi model size [ 299.858510][T15465] netem: change failed [ 299.929534][ T42] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 299.944679][ T42] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 300.049351][T15474] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3989'. [ 300.119943][ T42] cp2112 0003:10C4:EA90.0027: Part Number: 0x09 Device Version: 0x69 [ 300.511184][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.522440][ T42] cp2112 0003:10C4:EA90.0027: error setting SMBus config [ 300.558530][ T42] cp2112 0003:10C4:EA90.0027: probe with driver cp2112 failed with error -71 [ 300.593327][ T42] usb 10-1: USB disconnect, device number 4 [ 300.981438][ T29] audit: type=1404 audit(1771111190.073:1057): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 301.071153][ T29] audit: type=1400 audit(1771111190.168:1058): avc: denied { getattr } for pid=15512 comm="syz.5.4007" path="socket:[56485]" dev="sockfs" ino=56485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 301.127067][ T29] audit: type=1400 audit(1771111190.231:1059): avc: denied { read write } for pid=12287 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.171531][ T29] audit: type=1400 audit(1771111190.273:1060): avc: denied { read write } for pid=6143 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.217389][ T29] audit: type=1400 audit(1771111190.283:1061): avc: denied { create } for pid=15506 comm="syz.7.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 301.239221][ T29] audit: type=1400 audit(1771111190.315:1062): avc: denied { create } for pid=15515 comm="syz.8.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 301.265081][ T29] audit: type=1326 audit(1771111190.336:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.7.4004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba9ff9bf79 code=0x0 [ 301.524679][T15535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=15535 comm=syz.8.4018 [ 301.589270][T15542] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4017'. [ 301.600354][T15538] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4017'. [ 302.166976][T15573] tap0: tun_chr_ioctl cmd 1074025675 [ 302.179796][T15573] tap0: persist enabled [ 303.811960][ T5179] udevd[5179]: worker [5987] /devices/virtual/block/nbd0 timeout; kill it [ 303.845386][ T5179] udevd[5179]: seq 11955 '/devices/virtual/block/nbd0' killed [ 303.883360][ T5179] udevd[5179]: worker [5798] /devices/virtual/block/nbd2 is taking a long time [ 303.927334][T15677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.934610][T15677] IPv6: NLM_F_CREATE should be set when creating new route [ 304.156936][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 304.156953][ T29] audit: type=1400 audit(1771111193.412:1222): avc: denied { map_create } for pid=15695 comm="syz.5.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 304.210410][ T29] audit: type=1400 audit(1771111193.412:1223): avc: denied { create } for pid=15696 comm="syz.6.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 304.268671][ T29] audit: type=1400 audit(1771111193.443:1224): avc: denied { read write } for pid=10985 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 304.294627][ T29] audit: type=1400 audit(1771111193.454:1225): avc: denied { create } for pid=15695 comm="syz.5.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 304.319662][ T29] audit: type=1400 audit(1771111193.454:1226): avc: denied { prog_load } for pid=15695 comm="syz.5.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 304.420065][ T29] audit: type=1400 audit(1771111193.454:1227): avc: denied { create } for pid=15695 comm="syz.5.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 304.459913][ T29] audit: type=1400 audit(1771111193.506:1228): avc: denied { read write } for pid=6143 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 304.505908][ T29] audit: type=1400 audit(1771111193.517:1229): avc: denied { read write } for pid=14467 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 304.531326][ T29] audit: type=1400 audit(1771111193.611:1230): avc: denied { read write } for pid=10985 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 304.561469][ T29] audit: type=1400 audit(1771111193.622:1231): avc: denied { read write } for pid=15703 comm="syz.9.4096" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 305.151971][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4125'. [ 305.183319][T15768] netlink: 'syz.5.4125': attribute type 5 has an invalid length. [ 306.444475][T15849] lo speed is unknown, defaulting to 1000 [ 306.709270][T15865] lo speed is unknown, defaulting to 1000 [ 306.982790][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.095033][T15884] all (unregistering): Released all slaves [ 307.746311][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4197'. [ 307.760076][T15926] netlink: 'syz.8.4197': attribute type 30 has an invalid length. [ 307.782179][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.796395][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.811966][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4197'. [ 307.831161][T15926] netlink: 'syz.8.4197': attribute type 30 has an invalid length. [ 307.839309][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.848171][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.973126][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.328124][T15963] netlink: 566 bytes leftover after parsing attributes in process `syz.5.4214'. [ 308.394892][T15970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4217'. [ 308.432317][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.440878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.947552][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 308.947570][ T29] audit: type=1400 audit(1771111198.440:1472): avc: denied { read write } for pid=10985 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 308.980177][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.016468][ T29] audit: type=1400 audit(1771111198.514:1473): avc: denied { create } for pid=15989 comm="syz.6.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 309.072225][ T29] audit: type=1400 audit(1771111198.556:1474): avc: denied { read write } for pid=14467 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.102393][ T29] audit: type=1400 audit(1771111198.566:1475): avc: denied { read write } for pid=12287 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.128757][ T29] audit: type=1400 audit(1771111198.598:1476): avc: denied { name_bind } for pid=15992 comm="syz.9.4226" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 309.172874][ T29] audit: type=1400 audit(1771111198.629:1477): avc: denied { read write } for pid=12287 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.203946][ T29] audit: type=1400 audit(1771111198.661:1478): avc: denied { read write } for pid=10985 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.231293][ T29] audit: type=1400 audit(1771111198.682:1479): avc: denied { read write } for pid=14467 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.297580][ T29] audit: type=1400 audit(1771111198.745:1480): avc: denied { read write } for pid=12287 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.327445][ T29] audit: type=1400 audit(1771111198.766:1481): avc: denied { create } for pid=15999 comm="syz.8.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 309.389139][T16006] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4232'. [ 309.812174][T16033] lo speed is unknown, defaulting to 1000 [ 309.931367][T16035] lo speed is unknown, defaulting to 1000 [ 309.954427][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.946609][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.047515][ T1092] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.141925][ T1092] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.248370][ T1092] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.312120][ T1092] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.325830][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.334061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.449434][ T1092] bridge_slave_1: left allmulticast mode [ 311.457075][ T1092] bridge_slave_1: left promiscuous mode [ 311.464069][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.474437][ T1092] bridge_slave_0: left allmulticast mode [ 311.481863][ T1092] bridge_slave_0: left promiscuous mode [ 311.489738][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.795932][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.836984][ T1092] bond_slave_0: left allmulticast mode [ 311.852265][ T1092] bond0 (unregistering): Released all slaves [ 311.938864][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.015954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.332447][ T1092] hsr_slave_0: left promiscuous mode [ 312.352117][ T1092] hsr_slave_1: left promiscuous mode [ 312.374118][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.398403][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.431229][ T1092] veth1_macvtap: left promiscuous mode [ 312.437494][ T1092] veth0_macvtap: left promiscuous mode [ 312.444888][ T1092] veth1_vlan: left promiscuous mode [ 312.451876][ T1092] veth0_vlan: left promiscuous mode [ 312.706933][ T9935] block nbd0: Possible stuck request ffff888027e60000: control (read@0,1024B). Runtime 240 seconds [ 312.717843][ T9935] block nbd0: Possible stuck request ffff888027e60200: control (read@1024,1024B). Runtime 240 seconds [ 312.729052][ T9935] block nbd0: Possible stuck request ffff888027e60400: control (read@2048,1024B). Runtime 240 seconds [ 312.744790][ T9935] block nbd0: Possible stuck request ffff888027e60600: control (read@3072,1024B). Runtime 240 seconds [ 312.809098][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 312.828880][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 312.933694][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.317605][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.326436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.348961][ T1092] IPVS: stop unused estimator thread 0... [ 313.726876][ T29] kauditd_printk_skb: 9610 callbacks suppressed [ 313.726894][ T29] audit: type=1400 audit(1771111203.448:9493): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.772275][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.779455][ T5474] audit: audit_lost=534 audit_rate_limit=0 audit_backlog_limit=64 [ 313.787595][ T5474] audit: backlog limit exceeded [ 313.793218][ T29] audit: type=1400 audit(1771111203.448:9494): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.818519][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.823683][ T6143] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.835008][ T5474] audit: audit_lost=535 audit_rate_limit=0 audit_backlog_limit=64 [ 313.848858][ T6143] audit: audit_lost=536 audit_rate_limit=0 audit_backlog_limit=64 [ 313.856932][ T5474] audit: backlog limit exceeded [ 313.917261][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.224302][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.232707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.586511][T16162] netlink: 348 bytes leftover after parsing attributes in process `syz.8.4300'. [ 314.908618][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.505191][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4302'. [ 315.898205][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.889621][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.127535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.135754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.880478][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.498937][ T29] kauditd_printk_skb: 25759 callbacks suppressed [ 318.498953][ T29] audit: type=1400 audit(1771111208.466:35217): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.517280][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.528049][ T29] audit: type=1400 audit(1771111208.466:35218): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.533394][ T5474] audit: audit_lost=549 audit_rate_limit=0 audit_backlog_limit=64 [ 318.556617][ T29] audit: type=1400 audit(1771111208.466:35219): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.562166][ T5474] audit: backlog limit exceeded [ 318.584952][ T29] audit: type=1400 audit(1771111208.466:35220): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.589305][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.616380][ T5474] audit: audit_lost=550 audit_rate_limit=0 audit_backlog_limit=64 [ 318.621244][ T29] audit: type=1400 audit(1771111208.466:35221): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 318.871069][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.972301][ T10] Process accounting resumed [ 319.009348][T16189] Process accounting resumed [ 319.861540][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.019079][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.027451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.852160][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.851978][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.462143][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.470554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.833273][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.919697][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.928357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.271642][ T29] kauditd_printk_skb: 23430 callbacks suppressed [ 323.271662][ T29] audit: type=1400 audit(1771111213.484:57766): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 323.303249][ T29] audit: type=1400 audit(1771111213.484:57767): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 323.309660][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.331475][ T5474] audit: audit_lost=846 audit_rate_limit=0 audit_backlog_limit=64 [ 323.339633][ T5474] audit: backlog limit exceeded [ 323.340098][ T29] audit: type=1400 audit(1771111213.484:57768): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 323.344804][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.366250][ T29] audit: type=1400 audit(1771111213.484:57769): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 323.393725][ T5474] audit: audit_lost=847 audit_rate_limit=0 audit_backlog_limit=64 [ 323.394038][ T29] audit: type=1400 audit(1771111213.484:57770): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 323.835873][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.814494][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.424046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.805315][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.109940][ T9935] block nbd2: Possible stuck request ffff888027ef8000: control (read@0,1024B). Runtime 150 seconds [ 326.119585][ T30] INFO: task syz.0.1882:10367 blocked for more than 143 seconds. [ 326.120690][ T9935] block nbd2: Possible stuck request ffff888027ef8200: control (read@1024,1024B). Runtime 150 seconds [ 326.128321][ T30] Tainted: G L syzkaller #0 [ 326.139310][ T9935] block nbd2: Possible stuck request ffff888027ef8400: control (read@2048,1024B). Runtime 150 seconds [ 326.139335][ T9935] block nbd2: Possible stuck request ffff888027ef8600: control (read@3072,1024B). Runtime 150 seconds [ 326.199702][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.210437][ T30] task:syz.0.1882 state:D stack:28792 pid:10367 tgid:10366 ppid:5804 task_flags:0x400040 flags:0x00080002 [ 326.242724][ T30] Call Trace: [ 326.246142][ T30] [ 326.249082][ T30] __schedule+0xfee/0x60e0 [ 326.256921][ T30] ? __lock_acquire+0x4a5/0x2630 [ 326.263392][ T30] ? __pfx___schedule+0x10/0x10 [ 326.269914][ T30] ? find_held_lock+0x2b/0x80 [ 326.282214][ T30] ? schedule+0x2bf/0x390 [ 326.286592][ T30] schedule+0xdd/0x390 [ 326.295689][ T30] schedule_preempt_disabled+0x13/0x30 [ 326.309673][ T30] __mutex_lock+0xc9a/0x1b90 [ 326.320307][ T30] ? bdev_open+0x41a/0xe40 [ 326.336854][ T30] ? find_held_lock+0x2b/0x80 [ 326.397240][ T30] ? find_inode_fast+0x5e3/0x910 [ 326.402264][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 326.424260][ T30] ? find_inode_fast+0x1fa/0x910 [ 326.429256][ T30] ? bdev_open+0x41a/0xe40 [ 326.471682][ T30] bdev_open+0x41a/0xe40 [ 326.475982][ T30] ? iput+0x3a/0x40 [ 326.479870][ T30] blkdev_open+0x34e/0x4f0 [ 326.521543][ T30] do_dentry_open+0x6d8/0x1660 [ 326.526403][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 326.543687][ T30] vfs_open+0x82/0x3f0 [ 326.552526][ T30] path_openat+0x208c/0x31a0 [ 326.557175][ T30] ? __pfx_path_openat+0x10/0x10 [ 326.574617][ T30] do_file_open+0x20e/0x430 [ 326.586178][ T30] ? __pfx_do_file_open+0x10/0x10 [ 326.591316][ T30] ? alloc_fd+0x476/0x790 [ 326.607524][ T30] ? do_getname+0x191/0x390 [ 326.612088][ T30] do_sys_openat2+0x10d/0x1e0 [ 326.629151][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.636140][ T30] __x64_sys_openat+0x12d/0x210 [ 326.641602][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 326.649305][ T30] ? do_user_addr_fault+0x8d6/0x12f0 [ 326.655670][ T30] do_syscall_64+0x106/0xf80 [ 326.660818][ T30] ? clear_bhb_loop+0x40/0x90 [ 326.666143][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.674010][ T30] RIP: 0033:0x7f4d3df5c84e [ 326.678953][ T30] RSP: 002b:00007f4d3ef2cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 326.688520][ T30] RAX: ffffffffffffffda RBX: 00007f4d3ef2d6c0 RCX: 00007f4d3df5c84e [ 326.698328][ T30] RDX: 0000000000000002 RSI: 00007f4d3ef2cc00 RDI: ffffffffffffff9c [ 326.708519][ T30] RBP: 00007f4d3ef2cc00 R08: 0000000000000000 R09: 0000000000000000 [ 326.716729][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 326.726320][ T30] R13: 00007f4d3e216038 R14: 00007f4d3e215fa0 R15: 00007ffdf0836f08 [ 326.740366][ T30] [ 326.801450][ T42] net_ratelimit: 2 callbacks suppressed [ 326.801467][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.818668][ T30] [ 326.818668][ T30] Showing all locks held in the system: [ 326.834828][ T30] 1 lock held by khungtaskd/30: [ 326.839808][ T30] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 326.873286][ T30] 1 lock held by dhcpcd/5474: [ 326.878020][ T30] 2 locks held by getty/5563: [ 326.891014][ T30] #0: ffff88803847b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 326.928796][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 326.951650][ T30] 1 lock held by udevd/5798: [ 326.956583][ T30] #0: ffff888027e31358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 326.987915][ T30] 1 lock held by udevd/5987: [ 326.992953][ T30] #0: ffff888027d6f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 327.033150][ T30] 1 lock held by syz.0.1882/10367: [ 327.043102][ T30] #0: ffff888027d6f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 327.081406][ T30] 1 lock held by syz.7.2443/11688: [ 327.091081][ T30] 1 lock held by syz-executor/14467: [ 327.104305][ T30] [ 327.110166][ T30] ============================================= [ 327.110166][ T30] [ 327.118615][ T30] NMI backtrace for cpu 1 [ 327.118634][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 327.118659][ T30] Tainted: [L]=SOFTLOCKUP [ 327.118664][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.118674][ T30] Call Trace: [ 327.118680][ T30] [ 327.118687][ T30] dump_stack_lvl+0x100/0x190 [ 327.118719][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 327.118738][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.118767][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 327.118797][ T30] sys_info+0x141/0x190 [ 327.118820][ T30] watchdog+0xd25/0x1050 [ 327.118850][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.118872][ T30] ? __kthread_parkme+0x18c/0x230 [ 327.118898][ T30] ? kthread+0x13a/0x450 [ 327.118912][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.118932][ T30] kthread+0x370/0x450 [ 327.118947][ T30] ? __pfx_kthread+0x10/0x10 [ 327.118975][ T30] ret_from_fork+0x754/0xd80 [ 327.118992][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 327.119007][ T30] ? __switch_to+0x7b4/0x1120 [ 327.119028][ T30] ? __pfx_kthread+0x10/0x10 [ 327.119055][ T30] ret_from_fork_asm+0x1a/0x30 [ 327.119088][ T30] [ 327.119095][ T30] Sending NMI from CPU 1 to CPUs 0: [ 327.246299][ C0] NMI backtrace for cpu 0 [ 327.246314][ C0] CPU: 0 UID: 0 PID: 5474 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 327.246335][ C0] Tainted: [L]=SOFTLOCKUP [ 327.246339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.246348][ C0] RIP: 0010:__orc_find+0x49/0xf0 [ 327.246369][ C0] Code: 00 49 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e <4c> 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 [ 327.246382][ C0] RSP: 0018:ffffc900032074b0 EFLAGS: 00000202 [ 327.246394][ C0] RAX: ffffffff9207b98a RBX: 0000000000000001 RCX: dffffc0000000000 [ 327.246402][ C0] RDX: 0000000000000003 RSI: ffffffff9207b98a RDI: ffffffff915131e0 [ 327.246410][ C0] RBP: ffffffff915131e0 R08: ffffffff9207b99c R09: 0000000000000007 [ 327.246418][ C0] R10: 0000000000000200 R11: 00000000000853f9 R12: ffffffff915131e8 [ 327.246427][ C0] R13: ffffffff8953f979 R14: ffffffff915131e0 R15: ffffffff915131e0 [ 327.246436][ C0] FS: 00007fad94c87740(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 327.246450][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.246458][ C0] CR2: 00005628ddb03a78 CR3: 000000002a8fa000 CR4: 00000000003526f0 [ 327.246467][ C0] Call Trace: [ 327.246471][ C0] [ 327.246478][ C0] ? __sys_sendto+0x4a9/0x520 [ 327.246492][ C0] unwind_next_frame+0x2ec/0x1ea0 [ 327.246506][ C0] ? __sys_sendto+0x4aa/0x520 [ 327.246520][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 327.246537][ C0] arch_stack_walk+0x94/0xf0 [ 327.246553][ C0] ? __sys_sendto+0x4aa/0x520 [ 327.246567][ C0] stack_trace_save+0x8e/0xc0 [ 327.246581][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 327.246597][ C0] ? kasan_quarantine_put+0x104/0x240 [ 327.246614][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 327.246631][ C0] kasan_save_stack+0x30/0x50 [ 327.246646][ C0] ? kasan_save_stack+0x30/0x50 [ 327.246661][ C0] ? kasan_save_track+0x14/0x30 [ 327.246676][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 327.246691][ C0] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 327.246707][ C0] ? __alloc_skb+0x140/0x710 [ 327.246719][ C0] ? alloc_skb_with_frags+0xe0/0x810 [ 327.246734][ C0] ? sock_alloc_send_pskb+0x801/0x980 [ 327.246746][ C0] ? unix_dgram_sendmsg+0x3c7/0x1820 [ 327.246765][ C0] ? __sys_sendto+0x4aa/0x520 [ 327.246790][ C0] kasan_save_track+0x14/0x30 [ 327.246805][ C0] __kasan_slab_alloc+0x89/0x90 [ 327.246822][ C0] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 327.246838][ C0] ? __alloc_skb+0x140/0x710 [ 327.246853][ C0] __alloc_skb+0x140/0x710 [ 327.246864][ C0] ? __alloc_skb+0x5b7/0x710 [ 327.246877][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 327.246890][ C0] ? sock_has_perm+0x258/0x2f0 [ 327.246906][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 327.246922][ C0] alloc_skb_with_frags+0xe0/0x810 [ 327.246939][ C0] ? find_held_lock+0x2b/0x80 [ 327.246956][ C0] sock_alloc_send_pskb+0x801/0x980 [ 327.246971][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 327.246984][ C0] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 327.247006][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 327.247027][ C0] unix_dgram_sendmsg+0x3c7/0x1820 [ 327.247048][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 327.247068][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 327.247089][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 327.247109][ C0] __sys_sendto+0x4aa/0x520 [ 327.247123][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 327.247144][ C0] ? find_held_lock+0x2b/0x80 [ 327.247158][ C0] ? __task_pid_nr_ns+0x1f5/0x500 [ 327.247177][ C0] ? __task_pid_nr_ns+0x1f5/0x500 [ 327.247196][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 327.247208][ C0] ? do_syscall_64+0x95/0xf80 [ 327.247223][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 327.247237][ C0] do_syscall_64+0x106/0xf80 [ 327.247252][ C0] ? clear_bhb_loop+0x40/0x90 [ 327.247267][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.247281][ C0] RIP: 0033:0x7fad94d11407 [ 327.247291][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 327.247303][ C0] RSP: 002b:00007ffecb81a6a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 327.247314][ C0] RAX: ffffffffffffffda RBX: 00007fad94c87740 RCX: 00007fad94d11407 [ 327.247323][ C0] RDX: 000000000000003f RSI: 00007ffecb81a7e0 RDI: 0000000000000003 [ 327.247331][ C0] RBP: 00007ffecb81ac10 R08: 0000000000000000 R09: 0000000000000000 [ 327.247339][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffecb81b060 [ 327.247347][ C0] R13: 00007ffecb81a7e0 R14: 000000000000001d R15: 00007ffecb81a7e0 [ 327.247361][ C0] [ 327.720545][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 327.727492][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 327.738180][ T30] Tainted: [L]=SOFTLOCKUP [ 327.742502][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.752663][ T30] Call Trace: [ 327.755946][ T30] [ 327.758886][ T30] dump_stack_lvl+0x100/0x190 [ 327.763588][ T30] vpanic+0x552/0x970 [ 327.767602][ T30] ? __pfx_vpanic+0x10/0x10 [ 327.772146][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 327.778318][ T30] panic+0xd1/0xe0 [ 327.782034][ T30] ? __pfx_panic+0x10/0x10 [ 327.786449][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 327.792591][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 327.799623][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 327.806496][ T30] ? watchdog.cold+0x198/0x1ca [ 327.811271][ T30] ? watchdog+0xd35/0x1050 [ 327.815692][ T30] watchdog.cold+0x1a9/0x1ca [ 327.820275][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.824949][ T30] ? __kthread_parkme+0x18c/0x230 [ 327.829991][ T30] ? kthread+0x13a/0x450 [ 327.834213][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.838875][ T30] kthread+0x370/0x450 [ 327.842928][ T30] ? __pfx_kthread+0x10/0x10 [ 327.847535][ T30] ret_from_fork+0x754/0xd80 [ 327.852134][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 327.857239][ T30] ? __switch_to+0x7b4/0x1120 [ 327.862000][ T30] ? __pfx_kthread+0x10/0x10 [ 327.866596][ T30] ret_from_fork_asm+0x1a/0x30 [ 327.871375][ T30] [ 327.874674][ T30] Kernel Offset: disabled [ 327.878983][ T30] Rebooting in 86400 seconds..