last executing test programs: 2m42.144320455s ago: executing program 32 (id=292): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 2m10.614681493s ago: executing program 33 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 1m57.441234417s ago: executing program 6 (id=856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x4, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x7, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x9, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m57.120228838s ago: executing program 6 (id=860): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m56.324914337s ago: executing program 6 (id=870): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m55.924716276s ago: executing program 6 (id=874): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) 1m55.113175356s ago: executing program 6 (id=889): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m54.840902518s ago: executing program 34 (id=889): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m44.402555474s ago: executing program 5 (id=971): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m44.321958814s ago: executing program 5 (id=972): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x406, r0) syz_fuse_handle_req(r1, &(0x7f0000000300)="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", 0x2000, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m43.150977203s ago: executing program 5 (id=984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314, 0x2}], 0x0, 0x0, 0x0}) 1m42.849061911s ago: executing program 5 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./debug\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 1m42.64123779s ago: executing program 5 (id=990): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000300)="01") ioctl(r2, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") 1m42.256767995s ago: executing program 5 (id=996): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 1m42.092744266s ago: executing program 35 (id=996): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 1m15.380207512s ago: executing program 8 (id=1249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000300)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x2}, 0x90) 1m15.242376652s ago: executing program 8 (id=1253): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.928717578s ago: executing program 8 (id=1259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x153, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) listen(r0, 0x0) 1m14.70712045s ago: executing program 8 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x200) 1m14.585219629s ago: executing program 8 (id=1266): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb00040, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.324693103s ago: executing program 8 (id=1272): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m14.104546223s ago: executing program 36 (id=1272): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 54.566072086s ago: executing program 2 (id=1482): socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd99, 0x8, 0x2000, 0x18000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf859, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="fefffffe00"/17], 0x50) 53.788360652s ago: executing program 9 (id=1489): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) 53.650554724s ago: executing program 2 (id=1490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0xd, 0x1, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.42882561s ago: executing program 9 (id=1491): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 53.302268088s ago: executing program 9 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0xa000, 0xdddd1000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0xf000, 0x3, 0x0, 0x3d, 0x5, 0x0, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xffffffff, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0xdddd0000, 0x100000, 0xc, 0x7, 0xf1, 0x9, 0x21, 0xff, 0x80, 0xff, 0x7f, 0x8}, {0x3000, 0x8000000, 0x4, 0x1, 0x22, 0xea, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x70000, 0xc000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1001}, {0x2000, 0x5}, 0x80000031, 0x0, 0x58000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) 53.220870804s ago: executing program 2 (id=1494): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000180)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) pread64(r2, 0x0, 0x0, 0x4) 52.807487372s ago: executing program 9 (id=1498): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 52.610311262s ago: executing program 9 (id=1499): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) 52.393226471s ago: executing program 2 (id=1500): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 52.282433416s ago: executing program 2 (id=1501): r0 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) 51.929651508s ago: executing program 9 (id=1505): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000897000/0x1000)=nil, 0x1000, 0x200000e, 0x4000010, r0, 0x7d341000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 51.772625384s ago: executing program 37 (id=1505): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000897000/0x1000)=nil, 0x1000, 0x200000e, 0x4000010, r0, 0x7d341000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 51.721167318s ago: executing program 2 (id=1508): socket$unix(0x1, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabb8, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 51.45525413s ago: executing program 38 (id=1508): socket$unix(0x1, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabb8, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10.920706888s ago: executing program 4 (id=1914): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) 10.617746802s ago: executing program 4 (id=1919): ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) 10.424303061s ago: executing program 4 (id=1921): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 10.19557218s ago: executing program 4 (id=1924): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 10.080868704s ago: executing program 4 (id=1926): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 9.911933605s ago: executing program 4 (id=1928): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0x3}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x200d}) 6.129125755s ago: executing program 0 (id=1958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 5.764818705s ago: executing program 0 (id=1960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c17c10d8c744240004000000c7442402ab5e9cd2c7442406000000000f011424c4e219a68a10800000c4c17e5b2f0f01112e650f32c4e3b15e650000c4e1bfd00a660fc7b12a9800000fc77e04"}], 0x1, 0x6d, 0x0, 0x49) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.685701411s ago: executing program 0 (id=1961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x9e9, 0x3, 0x2}, 0x1, 0x1, 0x3, 0x3, 0x7, 0x16, 0xd, 0x18, 0x1, 0x3, {0x3f, 0x10000000, 0x6a168337, 0x4, 0x7ff, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) 5.432579407s ago: executing program 0 (id=1964): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) listen(r2, 0x7) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) close(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 5.276747407s ago: executing program 0 (id=1966): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0xb0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b30c8462fc0cdaf3f8a1dc936ba190ba897dc5da2c94c43b50e8e0c9c833"}}, {{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:event_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 4.991102319s ago: executing program 7 (id=1968): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 4.611271949s ago: executing program 1 (id=1971): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xd2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/4089, 0xff9, 0x1, 0x0}, &(0x7f0000000580)=0x40) 4.469820425s ago: executing program 1 (id=1972): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 4.318130418s ago: executing program 1 (id=1973): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d010203010902"], 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000240)={0x3, {{0xa, 0x802, 0x0, @mcast1, 0xfffffffc}}, {{0xa, 0x4e25, 0x7fff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10008}}}, 0x108) 4.142715742s ago: executing program 0 (id=1974): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 3.883093294s ago: executing program 7 (id=1975): socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000a}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3.060026393s ago: executing program 7 (id=1976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) 2.789211765s ago: executing program 7 (id=1977): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) read(r0, &(0x7f0000002080)=""/86, 0x56) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2.550060764s ago: executing program 3 (id=1978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2.049929942s ago: executing program 3 (id=1979): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x29c00000000000, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.90862247s ago: executing program 3 (id=1980): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.726067388s ago: executing program 7 (id=1981): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='smaps_rollup\x00') exit(0x7) pread64(r2, &(0x7f0000000440)=""/59, 0x3b, 0x40000000009) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 1.662964651s ago: executing program 3 (id=1982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.287485842s ago: executing program 1 (id=1983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 744.824555ms ago: executing program 1 (id=1984): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@local, 0x9}, 0x1, 0x0, 0x10000}) 673.025524ms ago: executing program 7 (id=1985): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lstat(0x0, 0x0) 566.346729ms ago: executing program 1 (id=1986): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000400)={0x0, 0x20fb87, 0x800, 0x1, 0x90, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x872f, 0x200, 0x1006, 0x297}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0xffffffff, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 238.623179ms ago: executing program 3 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001f4ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=1988): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): 172.455608][ T30] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 172.472791][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 172.472828][ T9044] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1099'. [ 172.472874][ T9044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1099'. [ 172.650960][ T9052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.800605][ T9055] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 172.878962][ T9055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.901960][ T9025] ceph: No mds server is up or the cluster is laggy [ 172.914121][ T6437] net_ratelimit: 4 callbacks suppressed [ 172.914164][ T6437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.930607][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 172.943720][ T9016] ceph: No mds server is up or the cluster is laggy [ 172.966394][ T5782] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 172.990622][ T9059] bond1: (slave bridge1): making interface the new active one [ 173.001645][ T9059] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 173.011184][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.314255][ T31] audit: type=1400 audit(1788167093.115:785): avc: denied { bind } for pid=9065 comm="syz.0.1105" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.314314][ T31] audit: type=1400 audit(1788167093.115:786): avc: denied { name_bind } for pid=9065 comm="syz.0.1105" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 173.338423][ T5713] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 173.458569][ T31] audit: type=1400 audit(1788167093.265:787): avc: denied { read } for pid=9069 comm="syz.8.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.485249][ T5597] Bluetooth: hci5: command 0x0406 tx timeout [ 173.571775][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.571829][ T5713] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 173.593940][ T5713] usb 4-1: config index 0 descriptor too short (expected 40744, got 96) [ 173.593980][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.594013][ T5713] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.594045][ T5713] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 173.594072][ T5713] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 173.594095][ T5713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.594113][ T5713] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 173.687170][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.687212][ T5713] usb 4-1: Product: syz [ 173.701994][ T5713] usb 4-1: Manufacturer: syz [ 173.728227][ T5713] usb 4-1: SerialNumber: syz [ 174.047877][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.058579][ T9063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.085489][ T9061] Cannot find set identified by id 0 to match [ 174.087181][ T6437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.102892][ T9061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.102990][ T9061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.103056][ T9061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.137843][ T9061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.137939][ T9061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.138014][ T9061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.260635][ T5713] usb 4-1: 1:1 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 174.271084][ T5713] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 174.368425][ T5713] usb 4-1: USB disconnect, device number 19 [ 174.494409][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.726026][ T9085] input: syz0 as /devices/virtual/input/input25 [ 174.909112][ T9063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.110562][ T9063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.195010][ T5713] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 175.273508][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 175.345135][ T5713] usb 9-1: Using ep0 maxpacket: 32 [ 175.350941][ T5713] usb 9-1: New USB device found, idVendor=046d, idProduct=c13a, bcdDevice= 0.00 [ 175.361861][ T5713] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.361897][ T5713] usb 9-1: config 0 has no interfaces? [ 175.361936][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.386253][ T9063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.408427][ T5713] usb 9-1: config 0 descriptor?? [ 175.649671][ T9090] vhci_hcd vhci_hcd.0: failed to lookup sock [ 175.670000][ T10] usb 9-1: USB disconnect, device number 3 [ 175.755509][ T6445] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.792351][ T6437] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.854835][ T6438] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.863472][ T5713] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 175.864881][ T6438] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.045420][ T5713] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 176.055833][ T5713] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 176.066887][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.066916][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.066936][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 176.102815][ T5713] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 176.102851][ T5713] usb 4-1: Manufacturer: syz [ 176.122588][ T5713] usb 4-1: config 0 descriptor?? [ 176.281642][ T9120] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 176.525669][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 176.547974][ T5713] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 176.563866][ T5713] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 176.687005][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 176.689455][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 176.690784][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.690818][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.720109][ T10] usb 9-1: config 0 descriptor?? [ 176.733313][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 177.154202][ T5713] usb 4-1: USB disconnect, device number 20 [ 177.540944][ T9150] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 177.659305][ T31] audit: type=1400 audit(1788167097.465:788): avc: denied { append } for pid=9155 comm="syz.2.1141" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.798522][ T9163] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.100063][ T31] audit: type=1326 audit(1788167097.905:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.127594][ T31] audit: type=1326 audit(1788167097.905:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.128935][ T31] audit: type=1326 audit(1788167097.935:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.129012][ T31] audit: type=1326 audit(1788167097.935:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.141720][ T31] audit: type=1326 audit(1788167097.945:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.142062][ T31] audit: type=1326 audit(1788167097.945:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.142097][ T31] audit: type=1326 audit(1788167097.945:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.142536][ T31] audit: type=1326 audit(1788167097.945:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.142686][ T31] audit: type=1326 audit(1788167097.945:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.7.1149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 178.194208][ T30] usb 9-1: USB disconnect, device number 4 [ 178.564851][ T984] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 178.729855][ T984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.730647][ T984] usb 3-1: not running at top speed; connect to a high speed hub [ 178.730671][ T984] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 178.731512][ T984] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 178.731531][ T984] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 178.731548][ T984] usb 3-1: config 14 has no interface number 0 [ 178.731561][ T984] usb 3-1: config 14 has no interface number 1 [ 178.731603][ T984] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 178.731620][ T984] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 178.731640][ T984] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 178.731660][ T984] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 178.731681][ T984] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 178.731702][ T984] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 178.731721][ T984] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.731741][ T984] usb 3-1: config 14 interface 57 has no altsetting 0 [ 178.731756][ T984] usb 3-1: config 14 interface 228 has no altsetting 0 [ 178.735919][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.735940][ T984] usb 3-1: Product: syz [ 178.735952][ T984] usb 3-1: Manufacturer: syz [ 178.735964][ T984] usb 3-1: SerialNumber: syz [ 179.198019][ T984] legousbtower 3-1:14.57: interrupt endpoints not found [ 179.605518][ T984] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 179.607194][ T984] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 180.073991][ T5601] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 180.209009][ T9250] usb 3-1: LEGO USB Tower reset control request failed [ 180.411243][ T5713] usb 3-1: USB disconnect, device number 14 [ 180.447124][ T5713] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 181.828279][ T9288] net_ratelimit: 50 callbacks suppressed [ 181.828322][ T9288] ip_tables: iptables: counters copy to user failed while replacing table [ 182.259019][ T9301] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 183.095044][ T5713] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 183.266489][ T5713] usb 8-1: Using ep0 maxpacket: 32 [ 183.272078][ T5713] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 183.284037][ T5713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.284078][ T5713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.284124][ T5713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.299236][ T9341] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 183.324004][ T5713] usb 8-1: config 0 descriptor?? [ 183.448197][ T9341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.578413][ T9348] sctp: [Deprecated]: syz.8.1215 (pid 9348) Use of int in max_burst socket option deprecated. [ 183.578413][ T9348] Use struct sctp_assoc_value instead [ 183.637766][ T9345] bond4: (slave geneve3): making interface the new active one [ 183.664941][ T9345] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 183.775200][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1216'. [ 183.775249][ T9351] netlink: 'syz.2.1216': attribute type 7 has an invalid length. [ 183.775274][ T9351] netlink: 'syz.2.1216': attribute type 8 has an invalid length. [ 183.775289][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 183.794011][ T5713] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 183.794036][ T5713] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 183.907199][ T9351] gretap0: entered promiscuous mode [ 183.913712][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 183.914150][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1216'. [ 183.914175][ T9353] netlink: 'syz.2.1216': attribute type 7 has an invalid length. [ 183.914185][ T9353] netlink: 'syz.2.1216': attribute type 8 has an invalid length. [ 183.914195][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 183.920368][ T9351] gretap0: left promiscuous mode [ 183.941483][ T31] audit: type=1400 audit(1788167103.705:833): avc: denied { create } for pid=9354 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.941530][ T31] audit: type=1400 audit(1788167103.705:834): avc: denied { read } for pid=9354 comm="syz.0.1219" path="socket:[26258]" dev="sockfs" ino=26258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.941560][ T31] audit: type=1400 audit(1788167103.735:835): avc: denied { getopt } for pid=9352 comm="syz.8.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.941586][ T31] audit: type=1400 audit(1788167103.735:836): avc: denied { create } for pid=9352 comm="syz.8.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.969391][ T31] audit: type=1400 audit(1788167103.765:837): avc: denied { setopt } for pid=9352 comm="syz.8.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.969441][ T31] audit: type=1400 audit(1788167103.765:838): avc: denied { write } for pid=9352 comm="syz.8.1217" path="socket:[26734]" dev="sockfs" ino=26734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.983274][ T5713] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 184.043483][ T9353] gretap0: entered promiscuous mode [ 184.117728][ T9353] gretap0: left promiscuous mode [ 184.184764][ T5713] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 184.417680][ T5713] ft260 0003:0403:6030.000F: failed to retrieve status: -32, no wakeup [ 184.667739][ T5705] usb 8-1: USB disconnect, device number 4 [ 185.367276][ T5705] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.525483][ T5705] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.536041][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.536111][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.555514][ T30] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 185.576239][ T5705] usb 3-1: config 0 descriptor?? [ 185.628646][ T5705] pwc: Askey VC010 type 2 USB webcam detected. [ 185.694812][ T30] usb 8-1: device descriptor read/64, error -71 [ 185.731384][ T5600] Bluetooth: hci0: command 0x0406 tx timeout [ 185.732722][ T9349] Bluetooth: hci2: command 0x0406 tx timeout [ 185.732757][ T9349] Bluetooth: hci1: command 0x0406 tx timeout [ 185.732776][ T9349] Bluetooth: hci3: command 0x0406 tx timeout [ 185.934820][ T30] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 185.938898][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 186.002939][ T5705] pwc: recv_control_msg error -32 req 02 val 2b00 [ 186.012295][ T5705] pwc: recv_control_msg error -32 req 02 val 2700 [ 186.026699][ T5705] pwc: recv_control_msg error -32 req 02 val 2c00 [ 186.033734][ T5705] pwc: recv_control_msg error -32 req 04 val 1000 [ 186.077777][ T31] audit: type=1326 audit(1788167105.885:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.3.1230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee19e159 code=0x7ffc0000 [ 186.104874][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 186.105016][ T30] usb 8-1: device descriptor read/64, error -71 [ 186.105404][ T9] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 186.106862][ T9] usb 9-1: config 2 has an invalid interface number: 88 but max is 0 [ 186.106881][ T9] usb 9-1: config 2 has no interface number 0 [ 186.106910][ T9] usb 9-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 186.106930][ T9] usb 9-1: config 2 interface 88 has no altsetting 0 [ 186.108512][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 186.108529][ T9] usb 9-1: Product: syz [ 186.108540][ T9] usb 9-1: Manufacturer: syz [ 186.108552][ T9] usb 9-1: SerialNumber: syz [ 186.132255][ T9385] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 186.185069][ T31] audit: type=1326 audit(1788167105.885:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.3.1230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee19e159 code=0x7ffc0000 [ 186.185109][ T31] audit: type=1326 audit(1788167105.885:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.3.1230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee19e159 code=0x7ffc0000 [ 186.185158][ T31] audit: type=1326 audit(1788167105.885:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.3.1230" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee19e159 code=0x7ffc0000 [ 186.221572][ T30] usb usb8-port1: attempt power cycle [ 186.250933][ T5705] pwc: recv_control_msg error -71 req 04 val 1400 [ 186.278294][ T5705] pwc: recv_control_msg error -71 req 02 val 2000 [ 186.284009][ T5705] pwc: recv_control_msg error -71 req 02 val 2100 [ 186.290895][ T5705] pwc: recv_control_msg error -71 req 04 val 1500 [ 186.291469][ T5705] pwc: recv_control_msg error -71 req 02 val 2500 [ 186.292100][ T5705] pwc: recv_control_msg error -71 req 02 val 2400 [ 186.298856][ T5705] pwc: recv_control_msg error -71 req 02 val 2600 [ 186.305745][ T5705] pwc: recv_control_msg error -71 req 02 val 2900 [ 186.320044][ T5705] pwc: recv_control_msg error -71 req 02 val 2800 [ 186.346543][ T5705] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.354770][ T5705] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.366978][ T5705] pwc: Registered as video103. [ 186.374735][ T5705] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 186.393771][ T5705] usb 3-1: USB disconnect, device number 15 [ 186.418261][ T9385] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 186.564785][ T30] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 186.586295][ T30] usb 8-1: device descriptor read/8, error -71 [ 186.771872][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'. [ 186.776497][ T9398] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.792950][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'. [ 186.802028][ T9397] netlink: 'syz.0.1233': attribute type 4 has an invalid length. [ 186.824775][ T30] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 186.848156][ T30] usb 8-1: device descriptor read/8, error -71 [ 186.955048][ T30] usb usb8-port1: unable to enumerate USB device [ 187.191294][ T9420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.230078][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1244'. [ 187.240362][ T9422] netlink: 'syz.3.1244': attribute type 7 has an invalid length. [ 187.249441][ T9422] netlink: 'syz.3.1244': attribute type 8 has an invalid length. [ 187.258913][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 187.273002][ T9422] gretap0: entered promiscuous mode [ 187.280426][ T9422] gretap0: left promiscuous mode [ 187.288155][ T9425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1244'. [ 187.288216][ T9425] netlink: 'syz.3.1244': attribute type 7 has an invalid length. [ 187.288228][ T9425] netlink: 'syz.3.1244': attribute type 8 has an invalid length. [ 187.288237][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 187.330208][ T9425] gretap0: entered promiscuous mode [ 187.336281][ T9425] gretap0: left promiscuous mode [ 187.634872][ T9] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 187.634906][ T9] asix 9-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 187.635062][ T9] asix 9-1:2.88: probe with driver asix failed with error -71 [ 187.645875][ T9] usb 9-1: USB disconnect, device number 5 [ 188.300440][ T9438] 9p: Bad value for 'wfdno' [ 188.457758][ T9445] netlink: 'syz.8.1253': attribute type 14 has an invalid length. [ 188.529920][ T9445] netlink: 'syz.8.1253': attribute type 14 has an invalid length. [ 188.545671][ T79] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.554596][ T79] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.557050][ T6437] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.557156][ T6437] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.687273][ T9455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.780140][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.184001][ T9477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.428980][ T6445] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.429036][ T6445] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.541039][ T6445] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.562836][ T6445] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.657320][ T4917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.669307][ T4917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.681002][ T4917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.691748][ T4917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.718425][ T4917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.729791][ T6445] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.740433][ T6445] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.770128][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 189.770430][ T31] audit: type=1400 audit(1788167109.575:848): avc: denied { read } for pid=9505 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.903463][ T6445] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.903507][ T6445] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.182863][ T6445] bridge_slave_1: left allmulticast mode [ 190.182902][ T6445] bridge_slave_1: left promiscuous mode [ 190.183117][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.195959][ T6445] bridge_slave_0: left allmulticast mode [ 190.195980][ T6445] bridge_slave_0: left promiscuous mode [ 190.196139][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.658554][ T6445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.679366][ T6445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.691857][ T6445] bond0 (unregistering): Released all slaves [ 190.899103][ T9544] netlink: 'syz.0.1296': attribute type 1 has an invalid length. [ 190.907184][ T31] audit: type=1400 audit(1788167110.705:849): avc: denied { write } for pid=9516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.021598][ T9550] fuse: fd is not a fuse device [ 191.140436][ T31] audit: type=1400 audit(1788167110.945:850): avc: denied { write } for pid=9554 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.140623][ T9556] __nla_validate_parse: 2 callbacks suppressed [ 191.140635][ T9556] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1290'. [ 191.316310][ T9559] vcan0: tx address claim with dlc 0 [ 191.379873][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 191.809701][ T4917] Bluetooth: hci4: command tx timeout [ 192.054108][ T31] audit: type=1400 audit(1788167111.855:851): avc: denied { write } for pid=9569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.182303][ T9600] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 192.270093][ T31] audit: type=1400 audit(1788167112.075:852): avc: denied { write } for pid=9599 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.384214][ T9600] bond2: entered promiscuous mode [ 192.390239][ T9600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.471182][ T31] audit: type=1400 audit(1788167112.275:853): avc: denied { link } for pid=9610 comm="syz.7.1305" name="#1c" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.494863][ T31] audit: type=1400 audit(1788167112.275:854): avc: denied { rename } for pid=9610 comm="syz.7.1305" name="#1d" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.588790][ T9607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.589300][ T9607] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 192.589333][ T9607] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 192.667015][ T9607] bond2: (slave ip6gre1): making interface the new active one [ 192.667063][ T9607] ip6gre1: entered promiscuous mode [ 192.676143][ T9607] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 192.678316][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 192.790156][ T5705] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 192.826928][ T5705] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.879982][ T6445] hsr_slave_0: left promiscuous mode [ 192.897125][ T6445] hsr_slave_1: left promiscuous mode [ 192.912849][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.912883][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.928216][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.928237][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.952023][ T6445] veth1_macvtap: left promiscuous mode [ 192.957743][ T6445] veth0_macvtap: left promiscuous mode [ 192.963372][ T6445] veth1_vlan: left promiscuous mode [ 192.969066][ T6445] veth0_vlan: left promiscuous mode [ 193.073712][ T9629] jffs2: notice: (9629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.330022][ T6445] team0 (unregistering): Port device team_slave_1 removed [ 193.338614][ T6445] team0 (unregistering): Port device team_slave_0 removed [ 193.503444][ T9639] gretap1: entered promiscuous mode [ 193.658511][ T9646] tls_set_device_offload_rx: netdev not found [ 193.888663][ T4917] Bluetooth: hci4: command tx timeout [ 194.186330][ T31] audit: type=1400 audit(1788167113.985:855): avc: denied { write } for pid=9647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.194306][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.197645][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.197774][ T9500] bridge_slave_0: entered allmulticast mode [ 194.202980][ T9500] bridge_slave_0: entered promiscuous mode [ 194.215668][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.221212][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.221341][ T9500] bridge_slave_1: entered allmulticast mode [ 194.233703][ T9500] bridge_slave_1: entered promiscuous mode [ 194.329561][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.386154][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.528384][ T9500] team0: Port device team_slave_0 added [ 194.534964][ T9500] team0: Port device team_slave_1 added [ 194.552659][ T31] audit: type=1400 audit(1788167114.355:856): avc: denied { write } for pid=9678 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.627693][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.627726][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.627747][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.634140][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.634155][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.634176][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.644448][ T9688] FAULT_INJECTION: forcing a failure. [ 194.644448][ T9688] name failslab, interval 1, probability 0, space 0, times 0 [ 194.644480][ T9688] CPU: 1 UID: 0 PID: 9688 Comm: syz.7.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.644505][ T9688] Tainted: [L]=SOFTLOCKUP [ 194.644512][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 194.644523][ T9688] Call Trace: [ 194.644529][ T9688] [ 194.644535][ T9688] dump_stack_lvl+0x100/0x190 [ 194.644566][ T9688] should_fail_ex.cold+0x5/0xa [ 194.644591][ T9688] should_failslab+0xc2/0x120 [ 194.644613][ T9688] __kmalloc_noprof+0xfc/0x840 [ 194.644632][ T9688] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 194.644662][ T9688] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 194.644687][ T9688] genl_family_rcv_msg_doit+0xc7/0x300 [ 194.644707][ T9688] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 194.644725][ T9688] ? genl_get_cmd+0x3e7/0x760 [ 194.644755][ T9688] ? netlink_sendmsg+0x680/0xda0 [ 194.644777][ T9688] ? __sys_sendto+0x48b/0x4e0 [ 194.644798][ T9688] ? __radix_tree_lookup+0x217/0x2b0 [ 194.644820][ T9688] genl_rcv_msg+0x560/0x800 [ 194.644838][ T9688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.644861][ T9688] ? __lock_acquire+0x4c5/0x1ec0 [ 194.644878][ T9688] ? __pfx_ctrl_getfamily+0x10/0x10 [ 194.644897][ T9688] ? __lock_acquire+0x4c5/0x1ec0 [ 194.644919][ T9688] netlink_rcv_skb+0x159/0x420 [ 194.644942][ T9688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.644960][ T9688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.644992][ T9688] ? netlink_deliver_tap+0x1ae/0xcc0 [ 194.645018][ T9688] genl_rcv+0x28/0x40 [ 194.645040][ T9688] netlink_unicast+0x585/0x850 [ 194.645066][ T9688] ? __pfx_netlink_unicast+0x10/0x10 [ 194.645096][ T9688] netlink_sendmsg+0x8b0/0xda0 [ 194.645123][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.645148][ T9688] ? selinux_socket_sendmsg+0x198/0x2f0 [ 194.645176][ T9688] __sys_sendto+0x48b/0x4e0 [ 194.645198][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.645221][ T9688] ? __pfx___sys_sendto+0x10/0x10 [ 194.645249][ T9688] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 194.645292][ T9688] __x64_sys_sendto+0xe0/0x1c0 [ 194.645314][ T9688] ? do_syscall_64+0xae/0x790 [ 194.645331][ T9688] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.645348][ T9688] do_syscall_64+0x123/0x790 [ 194.645366][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.645382][ T9688] RIP: 0033:0x7f8ba095e98e [ 194.645394][ T9688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.645409][ T9688] RSP: 002b:00007f8ba1810e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 194.645426][ T9688] RAX: ffffffffffffffda RBX: 00007f8ba18126c0 RCX: 00007f8ba095e98e [ 194.645437][ T9688] RDX: 0000000000000028 RSI: 00007f8ba1811000 RDI: 0000000000000004 [ 194.645446][ T9688] RBP: 0000000000000000 R08: 00007f8ba1810f04 R09: 000000000000000c [ 194.645456][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 194.645466][ T9688] R13: 00007f8ba1810f58 R14: 00007f8ba1811000 R15: 0000000000000000 [ 194.645489][ T9688] [ 194.682034][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 194.894128][ T9500] hsr_slave_0: entered promiscuous mode [ 194.900650][ T9500] hsr_slave_1: entered promiscuous mode [ 194.901133][ T9500] debugfs: 'hsr0' already exists in 'hsr' [ 194.901147][ T9500] Cannot create hsr debugfs directory [ 195.491821][ T9706] SELinux: failed to load policy [ 195.694882][ T5705] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 195.716711][ T31] audit: type=1400 audit(1788167115.515:857): avc: denied { write } for pid=9698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.845187][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 195.845814][ T5705] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 195.846833][ T5705] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 195.846858][ T5705] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 195.846886][ T5705] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 195.846908][ T5705] usb 4-1: config 1 has no interface number 0 [ 195.846941][ T5705] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.846965][ T5705] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 195.847000][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.920380][ T31] audit: type=1400 audit(1788167115.725:858): avc: denied { write } for pid=9723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.959474][ T5705] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 195.965945][ T5601] Bluetooth: hci4: command tx timeout [ 196.048752][ T9500] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 196.076471][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.079250][ T9500] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 196.107924][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.108806][ T9500] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 196.123842][ T5705] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 196.126754][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.149608][ T9500] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 196.172074][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.173523][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 196.382210][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.412990][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.430636][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.430730][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.462769][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.462867][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.666850][ T31] audit: type=1400 audit(1788167116.475:859): avc: denied { read } for pid=9737 comm="syz.7.1337" path="socket:[27461]" dev="sockfs" ino=27461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.692645][ T9741] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 196.697726][ T9741] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 196.705565][ T9741] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 196.713141][ T9741] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 196.766749][ T1669] usb 4-1: USB disconnect, device number 21 [ 196.782897][ T1669] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 197.229728][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.667989][ T9500] veth0_vlan: entered promiscuous mode [ 197.691059][ T9500] veth1_vlan: entered promiscuous mode [ 197.701367][ T31] audit: type=1326 audit(1788167117.505:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.0.1346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bdd79e159 code=0x7fc00000 [ 197.748604][ T9500] veth0_macvtap: entered promiscuous mode [ 197.752291][ T9500] veth1_macvtap: entered promiscuous mode [ 197.763795][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.772421][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.796523][ T79] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.796579][ T79] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.796605][ T79] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.796630][ T79] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.924655][ T6445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.935841][ T6445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.981352][ T6555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.981384][ T6555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.047781][ T5601] Bluetooth: hci4: command tx timeout [ 198.421256][ T31] audit: type=1326 audit(1788167118.215:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.0.1346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4bdd79e159 code=0x7fc00000 [ 198.809358][ T31] audit: type=1400 audit(1788167118.615:862): avc: denied { write } for pid=9819 comm="syz.7.1355" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.531751][ T9843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.656174][ T9846] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1368'. [ 200.545698][ T30] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 200.705319][ T30] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.718952][ T30] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.718990][ T30] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.719018][ T30] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.719057][ T30] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.761134][ T30] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.761171][ T30] usb 10-1: Product: syz [ 200.761198][ T30] usb 10-1: Manufacturer: syz [ 200.788389][ T30] cdc_wdm 10-1:1.0: skipping garbage [ 200.793849][ T30] cdc_wdm 10-1:1.0: skipping garbage [ 200.806187][ T30] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 200.812304][ T30] cdc_wdm 10-1:1.0: Unknown control protocol [ 201.060520][ T9896] MTDSB: Device #1 doesn't appear to exist [ 201.060520][ T9896] [ 201.113808][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 201.113940][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 201.113979][ T10] usb 10-1: USB disconnect, device number 2 [ 201.114135][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 201.114152][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 201.114166][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 201.668499][ T9919] Cannot find add_set index 4 as target [ 201.686399][ T30] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 201.769372][ T9924] netlink: 'syz.9.1399': attribute type 10 has an invalid length. [ 201.786666][ T9924] syz_tun: entered promiscuous mode [ 201.812177][ T9927] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled. [ 201.814180][ T9924] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 201.845538][ T30] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 201.856882][ T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 201.867403][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.880950][ T9910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.889654][ T30] opticon 3-1:1.0: opticon converter detected [ 201.923394][ T30] usb 3-1: opticon converter now attached to ttyUSB0 [ 202.181805][ T9944] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1408'. [ 202.733365][ T31] audit: type=1400 audit(1788167122.535:863): avc: denied { getopt } for pid=9966 comm="syz.0.1419" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.828967][ T9968] loop5: detected capacity change from 0 to 4095 [ 203.203564][ T9968] Buffer I/O error on dev loop5, logical block 511, async page read [ 203.237050][ T8337] Buffer I/O error on dev loop5, logical block 511, async page read [ 203.712682][ T9986] syzkaller1: entered promiscuous mode [ 203.719682][ T9986] syzkaller1: entered allmulticast mode [ 203.892362][ T31] audit: type=1400 audit(1788167123.685:864): avc: denied { listen } for pid=9993 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.913228][ T31] audit: type=1400 audit(1788167123.705:865): avc: denied { accept } for pid=9993 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.218365][ T31] audit: type=1326 audit(1788167124.025:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.9.1432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e3999e159 code=0x0 [ 204.448215][ T10] usb 3-1: USB disconnect, device number 16 [ 204.461649][ T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 204.490751][ T10] opticon 3-1:1.0: device disconnected [ 204.890960][T10015] overlayfs: failed to clone upperpath [ 204.909068][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 205.056274][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 205.056991][ T10] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 205.057945][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 205.057971][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.057993][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.058017][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.063423][ T10] usb 3-1: config 0 descriptor?? [ 205.138675][ T31] audit: type=1400 audit(1788167124.945:867): avc: denied { bind } for pid=10024 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.383732][T10041] coredump: 709(syz.3.1449): Core dump to core aborted: cannot preserve file permissions [ 205.632895][T10047] misc userio: Can't change port proto on an already running userio instance [ 205.648884][T10049] binder: 10048:10049 ioctl c0306201 200000000080 returned -14 [ 205.939855][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1456'. [ 206.326906][ T10] hid-alps 0003:044E:120B.0011: failed to read command (-71) [ 206.327000][ T10] hid-alps 0003:044E:120B.0011: failed U1_NUM_SENS_X (-71) [ 206.329316][ T10] hid-alps 0003:044E:120B.0011: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.2-1/input0 [ 206.357304][ T10] usb 3-1: USB disconnect, device number 17 [ 206.507300][ T31] audit: type=1400 audit(1788167126.315:868): avc: denied { read } for pid=10065 comm="syz.3.1459" path="socket:[29367]" dev="sockfs" ino=29367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.542413][ T31] audit: type=1400 audit(1788167126.345:869): avc: denied { connect } for pid=10064 comm="syz.9.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.556746][ T31] audit: type=1400 audit(1788167126.365:870): avc: denied { setopt } for pid=10064 comm="syz.9.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.579742][ T31] audit: type=1400 audit(1788167126.385:871): avc: denied { bind } for pid=10064 comm="syz.9.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.580577][ T31] audit: type=1400 audit(1788167126.385:872): avc: denied { write } for pid=10064 comm="syz.9.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.855990][T10068] fido_id[10068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 207.022833][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1460'. [ 207.405371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.405541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.405690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.405831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.405980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.406116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.406248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.442725][ T5601] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 208.031653][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 208.031696][ T31] audit: type=1400 audit(1788167127.835:877): avc: denied { write } for pid=10088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.267655][ T31] audit: type=1400 audit(1788167128.075:878): avc: denied { write } for pid=10117 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.860955][T10037] Set syz1 is full, maxelem 65536 reached [ 209.995184][ T31] audit: type=1400 audit(1788167129.795:879): avc: denied { write } for pid=10151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.255058][ T31] audit: type=1400 audit(1788167130.065:880): avc: denied { write } for pid=10185 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.462649][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 210.606989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.607144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.850299][ T31] audit: type=1400 audit(1788167130.655:881): avc: denied { write } for pid=10213 comm="syz.9.1498" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 210.874110][ T5782] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 211.016185][ T31] audit: type=1400 audit(1788167130.815:882): avc: denied { unlink } for pid=9500 comm="syz-executor" name="ublkc0" dev="devtmpfs" ino=2932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.055326][ T5782] usb 4-1: Using ep0 maxpacket: 32 [ 211.060853][ T5782] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 211.071707][ T5782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.071760][ T5782] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.071810][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.112218][ T5782] usb 4-1: config 0 descriptor?? [ 211.136220][ T5782] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 211.206079][ T31] audit: type=1400 audit(1788167131.015:883): avc: denied { write } for pid=10201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.370621][T10205] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 211.475890][T10205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.499007][ T31] audit: type=1400 audit(1788167131.305:884): avc: denied { write } for pid=10228 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.533764][ T5782] usb 4-1: USB disconnect, device number 22 [ 211.560863][ T9951] bond0: (slave syz_tun): Releasing backup interface [ 211.782387][ T9806] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.941285][ T9806] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.961152][ T4917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.973790][ T4917] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.981146][ T4917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.989140][ T4917] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.999980][ T4917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.079201][ T9806] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.196952][ T9806] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.311429][ T4917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.329306][ T4917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.341036][ T4917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.349028][ T4917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.356542][ T4917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.453379][T10258] ref_ctr_offset mismatch. inode: 0x653 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 212.636603][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1516'. [ 212.659955][ T9806] bridge_slave_1: left allmulticast mode [ 212.665772][ T9806] bridge_slave_1: left promiscuous mode [ 212.671635][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.682395][ T9806] bridge_slave_0: left allmulticast mode [ 212.690659][ T9806] bridge_slave_0: left promiscuous mode [ 212.690843][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.918583][ T9806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.936863][ T9806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.947066][ T9806] bond0 (unregistering): Released all slaves [ 213.427822][ T49] IPVS: starting estimator thread 0... [ 213.516247][T10285] IPVS: using max 38 ests per chain, 91200 per kthread [ 213.575160][T10288] netlink: 'syz.7.1523': attribute type 1 has an invalid length. [ 213.583075][T10288] netlink: 'syz.7.1523': attribute type 4 has an invalid length. [ 213.591389][T10288] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1523'. [ 213.735808][ C1] net_ratelimit: 7 callbacks suppressed [ 213.735862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.736061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.736241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.736404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.736567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.736725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.736885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.737048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.903240][T10298] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1526'. [ 214.044852][ T4917] Bluetooth: hci3: command tx timeout [ 214.332240][ T31] audit: type=1400 audit(1788167134.135:885): avc: denied { write } for pid=10297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.445448][ T4917] Bluetooth: hci4: command tx timeout [ 214.483075][ T31] audit: type=1400 audit(1788167134.285:886): avc: denied { write } for pid=10317 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.589306][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 215.067962][ T30] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 215.223848][ T30] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 215.224793][ T30] usb 4-1: config 1 interface 0 has no altsetting 0 [ 215.231559][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.231583][ T30] usb 4-1: Product: syz [ 215.231596][ T30] usb 4-1: Manufacturer: syz [ 215.231608][ T30] usb 4-1: SerialNumber: syz [ 215.314807][ T31] audit: type=1400 audit(1788167135.115:887): avc: denied { write } for pid=10324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.484037][ T31] audit: type=1400 audit(1788167135.285:888): avc: denied { write } for pid=10350 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.700847][ T30] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 215.705994][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 215.770326][ T9806] hsr_slave_0: left promiscuous mode [ 215.779775][ T9806] hsr_slave_1: left promiscuous mode [ 215.780496][ T9806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.780533][ T9806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.794403][ T9806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.809473][ T9806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.822645][ T9806] veth1_macvtap: left promiscuous mode [ 215.822702][ T9806] veth0_macvtap: left promiscuous mode [ 215.822772][ T9806] veth1_vlan: left promiscuous mode [ 215.822820][ T9806] veth0_vlan: left promiscuous mode [ 216.089167][ T9806] team0 (unregistering): Port device team_slave_1 removed [ 216.118788][ T9806] team0 (unregistering): Port device team_slave_0 removed [ 216.126071][ T4917] Bluetooth: hci3: command tx timeout [ 216.253231][ T31] audit: type=1400 audit(1788167136.055:889): avc: denied { ioctl } for pid=10360 comm="syz.0.1536" path="socket:[32051]" dev="sockfs" ino=32051 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.526895][ T4917] Bluetooth: hci4: command tx timeout [ 216.631259][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.638030][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.638892][T10240] bridge_slave_0: entered allmulticast mode [ 216.647937][T10240] bridge_slave_0: entered promiscuous mode [ 216.658164][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.660070][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.660202][T10240] bridge_slave_1: entered allmulticast mode [ 216.672565][T10240] bridge_slave_1: entered promiscuous mode [ 216.750389][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.769632][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.879295][T10240] team0: Port device team_slave_0 added [ 216.893803][T10240] team0: Port device team_slave_1 added [ 216.926073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.926227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.996874][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.996911][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.996943][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.015581][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.015595][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.015614][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.110208][ T31] audit: type=1400 audit(1788167136.915:890): avc: denied { write } for pid=10370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.136759][T10240] hsr_slave_0: entered promiscuous mode [ 217.143325][T10240] hsr_slave_1: entered promiscuous mode [ 217.152433][T10240] debugfs: 'hsr0' already exists in 'hsr' [ 217.158308][T10240] Cannot create hsr debugfs directory [ 217.212713][ T31] audit: type=1400 audit(1788167137.015:891): avc: denied { write } for pid=10398 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.324937][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12 [ 217.514118][T10254] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.514250][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.514338][T10254] bridge_slave_0: entered allmulticast mode [ 217.517748][T10254] bridge_slave_0: entered promiscuous mode [ 217.521485][T10254] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.521590][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.521852][T10254] bridge_slave_1: entered allmulticast mode [ 217.523099][T10254] bridge_slave_1: entered promiscuous mode [ 217.585911][ C1] usblp0: nonzero write bulk status received: -71 [ 217.590070][ T30] usb 4-1: USB disconnect, device number 23 [ 217.616657][T10325] usblp0: removed [ 217.631780][T10254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.716575][T10254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.801933][T10254] team0: Port device team_slave_0 added [ 217.813837][T10254] team0: Port device team_slave_1 added [ 217.914749][ T31] audit: type=1400 audit(1788167137.715:892): avc: denied { write } for pid=10408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.029592][ T31] audit: type=1400 audit(1788167137.835:893): avc: denied { write } for pid=10423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.039682][T10254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.039697][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.039716][T10254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.044896][T10254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.044911][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.044930][T10254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.150936][T10425] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1546'. [ 218.205012][ T4917] Bluetooth: hci3: command tx timeout [ 218.240526][T10254] hsr_slave_0: entered promiscuous mode [ 218.242882][T10254] hsr_slave_1: entered promiscuous mode [ 218.244961][T10254] debugfs: 'hsr0' already exists in 'hsr' [ 218.244977][T10254] Cannot create hsr debugfs directory [ 218.338583][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 218.604767][ T4917] Bluetooth: hci4: command tx timeout [ 218.731532][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1555'. [ 218.742811][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1555'. [ 218.752110][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1555'. [ 218.761153][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1555'. [ 218.834623][T10240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.877738][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.880297][T10240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.912698][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.913508][T10240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.934347][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.943851][T10240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.959042][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.081664][T10464] gretap0: entered promiscuous mode [ 219.291761][T10254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.310058][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.310768][T10254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.329708][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.330958][T10254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.348196][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.356802][T10254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.368477][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.419829][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.485134][ C0] net_ratelimit: 6 callbacks suppressed [ 219.485193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.486164][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.552528][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.552610][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.572925][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.573021][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.803855][T10254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.878884][T10254] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.888457][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.888552][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.918368][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.918459][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.055906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.056065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.056193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.056375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.056506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.056636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.056862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.056990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.057119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.284904][ T4917] Bluetooth: hci3: command tx timeout [ 220.687013][ T4917] Bluetooth: hci4: command tx timeout [ 220.901072][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.942558][ T31] audit: type=1400 audit(1788167140.735:894): avc: denied { read write } for pid=10497 comm="syz.3.1569" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 220.947103][ T31] audit: type=1400 audit(1788167140.745:895): avc: denied { open } for pid=10497 comm="syz.3.1569" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 220.994568][T10254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.108793][ T31] audit: type=1326 audit(1788167140.915:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.3.1569" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dee19e159 code=0x0 [ 221.212121][T10254] veth0_vlan: entered promiscuous mode [ 221.238365][T10254] veth1_vlan: entered promiscuous mode [ 221.320798][T10254] veth0_macvtap: entered promiscuous mode [ 221.337816][T10254] veth1_macvtap: entered promiscuous mode [ 221.373218][T10254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.393277][T10254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.444861][ T6257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.466132][ T6257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.466191][ T6257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.466217][ T6257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.656892][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.656930][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.677778][T10240] veth0_vlan: entered promiscuous mode [ 221.769934][T10240] veth1_vlan: entered promiscuous mode [ 221.799808][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.799856][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.960542][T10240] veth0_macvtap: entered promiscuous mode [ 222.139046][T10240] veth1_macvtap: entered promiscuous mode [ 222.338854][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.342859][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.372455][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.372902][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.416436][ T6243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.416745][ T6243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.758280][ T6563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.767600][ T6563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.799432][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1577'. [ 222.906505][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1577'. [ 223.051444][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.051481][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.146419][ T6563] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.148051][ T49] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.148083][ T49] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.148108][ T49] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.264197][ T31] audit: type=1400 audit(1788167143.065:897): avc: denied { connect } for pid=10552 comm="syz.7.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.419383][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1582'. [ 223.465735][T10561] input: syz0 as /devices/virtual/input/input29 [ 223.607203][T10558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.669355][T10567] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 223.786098][T10567] bond4: (slave geneve3): making interface the new active one [ 223.786591][T10567] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 223.806020][ T9806] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.823214][ T9806] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.845338][ T1076] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.845394][ T1076] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.147200][ T5690] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 224.252278][T10591] tipc: Started in network mode [ 224.257336][T10591] tipc: Node identity 815e0004, cluster identity 4711 [ 224.264381][T10591] tipc: Node number set to 2170421252 [ 224.295043][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 224.296931][ T5690] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 224.297749][ T5690] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 224.306663][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.306685][ T5690] usb 4-1: Product: syz [ 224.306698][ T5690] usb 4-1: Manufacturer: syz [ 224.306710][ T5690] usb 4-1: SerialNumber: syz [ 224.314367][ T5690] usb 4-1: config 0 descriptor?? [ 224.322830][ T5690] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 224.355638][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 224.433030][ T5690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.436110][ T5690] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 224.436154][ T5690] usb 4-1: media controller created [ 224.483691][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.527237][ T5690] usb 4-1: selecting invalid altsetting 7 [ 224.527274][ T5690] cxusb: set interface failed [ 224.527298][ T5690] dvb-usb: bulk message failed: -22 (1/0) [ 224.551031][ T31] audit: type=1400 audit(1788167144.355:898): avc: denied { append } for pid=10573 comm="syz.3.1587" name="i2c-1" dev="devtmpfs" ino=3258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.566421][T10574] dvb-usb: bulk message failed: -22 (4/0) [ 224.566440][T10574] cxusb: i2c read failed [ 224.566491][T10574] dvb-usb: bulk message failed: -22 (4/0) [ 224.566501][T10574] cxusb: i2c read failed [ 224.566534][T10574] dvb-usb: bulk message failed: -22 (4/0) [ 224.566544][T10574] cxusb: i2c read failed [ 224.566576][T10574] dvb-usb: bulk message failed: -22 (4/0) [ 224.566586][T10574] cxusb: i2c read failed [ 224.649025][ T5690] DVB: Unable to find symbol lgdt330x_attach() [ 224.649059][ T5690] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 224.762272][ T5690] rc_core: IR keymap rc-dvico-portable not found [ 224.762310][ T5690] Registered IR keymap rc-empty [ 224.763182][ T5690] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 224.773573][ T5690] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input30 [ 224.787518][ T5690] dvb-usb: schedule remote query interval to 100 msecs. [ 224.787537][ T5690] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 224.797990][ T5690] usb 4-1: USB disconnect, device number 24 [ 224.914022][T10613] trusted_key: syz.0.1603 sent an empty control message without MSG_MORE. [ 225.607142][ T5690] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 226.076766][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1617'. [ 226.076801][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.077053][T10645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.099188][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.099209][T10645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.364917][ C1] net_ratelimit: 10 callbacks suppressed [ 226.364956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.365124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.365286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.365437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.365594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.365746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.365905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.366072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.571480][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1627'. [ 226.582657][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1627'. [ 226.735180][ T5782] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 226.897633][ T5782] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.906435][ T5782] usb 2-1: not running at top speed; connect to a high speed hub [ 226.906471][ T5782] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 226.926360][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.934484][ T5782] usb 2-1: Product: syz [ 226.934505][ T5782] usb 2-1: Manufacturer: syz [ 226.934518][ T5782] usb 2-1: SerialNumber: syz [ 227.048116][T10687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (1080055392 ns). Using initial count to start timer. [ 227.238804][ T31] audit: type=1326 audit(1788167147.045:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.267042][ T31] audit: type=1326 audit(1788167147.075:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.293118][ T31] audit: type=1326 audit(1788167147.095:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.293164][ T31] audit: type=1326 audit(1788167147.095:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.295787][ T31] audit: type=1326 audit(1788167147.105:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.295832][ T31] audit: type=1326 audit(1788167147.105:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.295870][ T31] audit: type=1326 audit(1788167147.105:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.303167][ T31] audit: type=1326 audit(1788167147.105:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.303229][ T31] audit: type=1326 audit(1788167147.105:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.309373][ T31] audit: type=1326 audit(1788167147.115:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.7.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8ba099e159 code=0x7ffc0000 [ 227.547925][ T5782] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 227.610554][ T5782] usb 2-1: USB disconnect, device number 12 [ 227.672150][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.910021][T10709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1645'. [ 228.710797][T10728] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.711253][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.899187][T10728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.920220][T10728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.244998][ T6257] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.245537][ T6257] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.245580][ T6257] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.245611][ T6257] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.460250][T10738] overlayfs: failed to clone upperpath [ 229.565077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.565251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.766963][ T5705] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 230.935553][ T5705] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 230.947564][ T5705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.958725][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.994231][ T5705] as10x_usb: device has been detected [ 231.000748][ T5705] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 231.037601][ T5705] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 231.073054][ T5705] as10x_usb: error during firmware upload part1 [ 231.080025][ T5705] Registered device Abilis Systems DVB-Titan [ 232.403365][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 232.403405][ T31] audit: type=1400 audit(1788167152.205:953): avc: denied { write } for pid=10866 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.619593][T10878] net_ratelimit: 7 callbacks suppressed [ 232.628491][T10878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.684927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.685125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.685286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.685443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.685595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.685745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.685900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.686059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.686210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.911783][ T31] audit: type=1400 audit(1788167152.715:954): avc: denied { setattr } for pid=10891 comm="syz.3.1696" name="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.954593][ T2274] usb 2-1: USB disconnect, device number 13 [ 233.045185][ T5690] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 233.100686][ T2274] Unregistered device Abilis Systems DVB-Titan [ 233.114111][ T2274] as10x_usb: device has been disconnected [ 233.137984][ T31] audit: type=1400 audit(1788167152.945:955): avc: denied { write } for pid=10873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.201647][ T5690] usb 5-1: Using ep0 maxpacket: 16 [ 233.207210][ T5690] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 233.208503][ T5690] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 233.208529][ T5690] usb 5-1: config 0 has no interface number 0 [ 233.208558][ T5690] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 233.208578][ T5690] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 233.216549][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.216575][ T5690] usb 5-1: Product: syz [ 233.216589][ T5690] usb 5-1: Manufacturer: syz [ 233.216602][ T5690] usb 5-1: SerialNumber: syz [ 233.221566][ T5690] usb 5-1: config 0 descriptor?? [ 233.222438][T10887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.222532][T10887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.265945][ T31] audit: type=1400 audit(1788167153.075:956): avc: denied { read write } for pid=10895 comm="syz.3.1697" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 233.269645][ T31] audit: type=1400 audit(1788167153.075:957): avc: denied { open } for pid=10895 comm="syz.3.1697" path="/325/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 233.401596][ T31] audit: type=1400 audit(1788167153.205:958): avc: denied { write } for pid=10904 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.476041][T10887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.476173][T10887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.648965][ T4917] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 233.649931][ T4917] CPU: 1 UID: 0 PID: 4917 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.649962][ T4917] Tainted: [L]=SOFTLOCKUP [ 233.649970][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 233.649984][ T4917] Workqueue: hci1 hci_rx_work [ 233.650017][ T4917] Call Trace: [ 233.650024][ T4917] [ 233.650031][ T4917] dump_stack_lvl+0x100/0x190 [ 233.650062][ T4917] sysfs_warn_dup.cold+0x1c/0x28 [ 233.650096][ T4917] sysfs_create_dir_ns+0x24b/0x2b0 [ 233.650121][ T4917] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 233.650144][ T4917] ? find_held_lock+0x2b/0x80 [ 233.650169][ T4917] ? kobject_add_internal+0x25f/0x930 [ 233.650195][ T4917] ? kobject_add_internal+0x25f/0x930 [ 233.650223][ T4917] ? do_raw_spin_unlock+0x145/0x1e0 [ 233.650250][ T4917] kobject_add_internal+0x2c8/0x930 [ 233.650275][ T4917] kobject_add+0x16a/0x1e0 [ 233.650298][ T4917] ? __pfx_kobject_add+0x10/0x10 [ 233.650321][ T4917] ? class_to_subsys+0x10f/0x150 [ 233.650347][ T4917] ? kobject_put+0xb9/0x640 [ 233.650368][ T4917] ? _raw_spin_unlock+0x28/0x50 [ 233.650403][ T4917] device_add+0x294/0x1970 [ 233.650424][ T4917] ? __pfx_dev_set_name+0x10/0x10 [ 233.650450][ T4917] ? __pfx_device_add+0x10/0x10 [ 233.650472][ T4917] ? mgmt_send_event_skb+0x2fb/0x460 [ 233.650496][ T4917] hci_conn_add_sysfs+0x1a3/0x260 [ 233.650518][ T4917] le_conn_complete_evt+0x122f/0x2130 [ 233.650552][ T4917] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 233.650577][ T4917] ? hci_event_packet+0x186/0xcd0 [ 233.650610][ T4917] hci_le_conn_complete_evt+0x23c/0x3a0 [ 233.650637][ T4917] ? skb_pull_data+0x15f/0x1e0 [ 233.650662][ T4917] hci_le_meta_evt+0x34a/0x5f0 [ 233.650680][ T4917] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 233.650711][ T4917] hci_event_packet+0x51c/0xcd0 [ 233.650737][ T4917] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 233.650756][ T4917] ? __pfx_hci_event_packet+0x10/0x10 [ 233.650786][ T4917] ? lockdep_hardirqs_on+0x7d/0x110 [ 233.650811][ T4917] hci_rx_work+0x451/0xfc0 [ 233.650841][ T4917] process_one_work+0xac7/0x1b10 [ 233.650880][ T4917] ? __pfx_process_one_work+0x10/0x10 [ 233.650910][ T4917] ? lock_acquire+0x1d1/0x380 [ 233.650935][ T4917] ? __pfx_hci_rx_work+0x10/0x10 [ 233.650965][ T4917] worker_thread+0x5ef/0xe50 [ 233.650999][ T4917] ? __pfx_worker_thread+0x10/0x10 [ 233.651027][ T4917] ? kthread+0x13a/0x450 [ 233.651051][ T4917] ? __pfx_worker_thread+0x10/0x10 [ 233.651084][ T4917] kthread+0x373/0x450 [ 233.651111][ T4917] ? __pfx_kthread+0x10/0x10 [ 233.651138][ T4917] ret_from_fork+0x730/0xd60 [ 233.651159][ T4917] ? __pfx_ret_from_fork+0x10/0x10 [ 233.651181][ T4917] ? __switch_to+0x800/0x10f0 [ 233.651205][ T4917] ? __pfx_kthread+0x10/0x10 [ 233.651231][ T4917] ret_from_fork_asm+0x1a/0x30 [ 233.651265][ T4917] [ 233.665588][ T4917] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 233.665627][ T4917] Bluetooth: hci1: failed to register connection device [ 233.685649][ T5690] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 233.776743][ T31] audit: type=1400 audit(1788167153.585:959): avc: denied { connect } for pid=10910 comm="syz.3.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.095673][ T31] audit: type=1400 audit(1788167153.905:960): avc: denied { ioctl } for pid=10917 comm="syz.3.1703" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 234.361245][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1705'. [ 234.446921][ T4917] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 234.447001][ T4917] Bluetooth: hci3: Injecting HCI hardware error event [ 234.449034][ T5601] Bluetooth: hci3: hardware error 0x00 [ 234.507561][ T5690] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 234.507749][ T5690] asix 5-1:0.34: probe with driver asix failed with error -71 [ 234.518172][ T5690] usb 5-1: USB disconnect, device number 7 [ 235.516107][T10952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1715'. [ 235.868052][ T5690] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 236.016644][ T5690] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.017519][ T5690] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.017545][ T5690] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 236.017562][ T5690] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 236.017589][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.029512][ T5690] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.233819][ T31] audit: type=1400 audit(1788167156.035:961): avc: denied { getopt } for pid=10970 comm="syz.3.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 236.526164][ T5601] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 236.863686][ T31] audit: type=1400 audit(1788167156.665:962): avc: denied { setopt } for pid=10981 comm="syz.4.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.876079][ T5690] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 236.891257][ T5690] usb 2-1: USB disconnect, device number 14 [ 237.606619][ T984] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 237.655302][T11008] batadv_slave_0: Caught tx_queue_len zero misconfig [ 237.657407][ T31] audit: type=1400 audit(1788167157.455:963): avc: denied { write } for pid=11007 comm="syz.3.1738" name="usb_gadget" dev="configfs" ino=3728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 237.657445][ T31] audit: type=1400 audit(1788167157.455:964): avc: denied { add_name } for pid=11007 comm="syz.3.1738" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 237.657474][ T31] audit: type=1400 audit(1788167157.455:965): avc: denied { create } for pid=11007 comm="syz.3.1738" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 237.759864][ T5690] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 237.761316][T11006] dvmrp0: entered allmulticast mode [ 237.769092][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 237.775548][ T984] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 237.791139][ T984] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 237.791172][ T984] usb 5-1: config 1 has no interface number 0 [ 237.791213][ T984] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 237.791237][ T984] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.791260][ T984] usb 5-1: config 1 interface 105 has no altsetting 0 [ 237.837881][ T984] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 237.837915][ T984] usb 5-1: Product: syz [ 237.837942][ T984] usb 5-1: Manufacturer: syz [ 237.837957][ T984] usb 5-1: SerialNumber: syz [ 237.854767][ T31] audit: type=1400 audit(1788167157.655:966): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 237.894990][T11000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.895106][T11000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.906785][ T5690] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.907700][ T5690] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.907718][ T5690] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 237.907733][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.907765][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 237.907786][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 237.908999][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.909018][ T5690] usb 2-1: Product: syz [ 237.909030][ T5690] usb 2-1: Manufacturer: syz [ 237.997165][ T5690] cdc_wdm 2-1:1.0: skipping garbage [ 237.997197][ T5690] cdc_wdm 2-1:1.0: skipping garbage [ 238.016412][ T5690] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 238.016440][ T5690] cdc_wdm 2-1:1.0: Unknown control protocol [ 238.068563][T11013] FAULT_INJECTION: forcing a failure. [ 238.068563][T11013] name failslab, interval 1, probability 0, space 0, times 0 [ 238.068610][T11013] CPU: 0 UID: 0 PID: 11013 Comm: syz.3.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.068635][T11013] Tainted: [L]=SOFTLOCKUP [ 238.068641][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 238.068648][T11013] Call Trace: [ 238.068654][T11013] [ 238.068660][T11013] dump_stack_lvl+0x100/0x190 [ 238.068692][T11013] should_fail_ex.cold+0x5/0xa [ 238.068717][T11013] should_failslab+0xc2/0x120 [ 238.068739][T11013] __kmalloc_cache_noprof+0x91/0x6d0 [ 238.068764][T11013] ? sctp_association_new+0xbb/0x2990 [ 238.068793][T11013] sctp_association_new+0xbb/0x2990 [ 238.068818][T11013] ? sctp_v4_scope+0x183/0x1a0 [ 238.068838][T11013] sctp_connect_new_asoc+0x1a8/0x770 [ 238.068863][T11013] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 238.068890][T11013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.068914][T11013] __sctp_connect+0x3e7/0xc70 [ 238.068951][T11013] ? __pfx___sctp_connect+0x10/0x10 [ 238.068976][T11013] ? selinux_sctp_bind_connect+0xe0/0x230 [ 238.069007][T11013] __sctp_setsockopt_connectx+0x100/0x190 [ 238.069036][T11013] sctp_setsockopt+0x46a9/0xb370 [ 238.069070][T11013] ? __pfx_sctp_setsockopt+0x10/0x10 [ 238.069096][T11013] ? __fget_files+0x215/0x3d0 [ 238.069120][T11013] ? selinux_socket_setsockopt+0x6a/0x80 [ 238.069141][T11013] ? sock_common_setsockopt+0x2e/0xf0 [ 238.069162][T11013] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.069183][T11013] do_sock_setsockopt+0xf3/0x1d0 [ 238.069204][T11013] __sys_setsockopt+0x195/0x220 [ 238.069233][T11013] __x64_sys_setsockopt+0xbd/0x160 [ 238.069256][T11013] ? do_syscall_64+0xae/0x790 [ 238.069274][T11013] ? lockdep_hardirqs_on+0x7d/0x110 [ 238.069291][T11013] do_syscall_64+0x123/0x790 [ 238.069310][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.069327][T11013] RIP: 0033:0x7f3dee19e159 [ 238.069342][T11013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.069357][T11013] RSP: 002b:00007f3deefb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.069374][T11013] RAX: ffffffffffffffda RBX: 00007f3dee425fa0 RCX: 00007f3dee19e159 [ 238.069384][T11013] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 238.069394][T11013] RBP: 00007f3dee235024 R08: 000000000000001c R09: 0000000000000000 [ 238.069403][T11013] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 238.069413][T11013] R13: 00007f3dee426038 R14: 00007f3dee425fa0 R15: 00007fff8182f058 [ 238.069435][T11013] [ 238.254291][ T5690] usb 2-1: USB disconnect, device number 15 [ 238.353849][T11000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 238.353978][T11000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 238.485412][T11024] lo: Caught tx_queue_len zero misconfig [ 238.767404][ T984] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 238.780204][ T984] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 238.811943][ T984] aqc111 5-1:1.105 eth14: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ba:16:43:b1:42:4b [ 238.866142][ T31] audit: type=1400 audit(1788167158.675:967): avc: denied { ioctl } for pid=11038 comm="syz.3.1751" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 238.915061][ T1669] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 238.989295][T11043] netlink: 'syz.7.1752': attribute type 1 has an invalid length. [ 239.029932][ T9782] usb 5-1: USB disconnect, device number 8 [ 239.048040][ T9782] aqc111 5-1:1.105 eth14: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 239.071466][ T1669] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.082799][ T1669] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.082827][ T1669] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 239.082846][ T1669] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.082883][ T1669] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 239.082912][ T1669] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 239.091077][ T1669] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.091102][ T1669] usb 2-1: Product: syz [ 239.091114][ T1669] usb 2-1: Manufacturer: syz [ 239.131976][ T1669] cdc_wdm 2-1:1.0: skipping garbage [ 239.131995][ T1669] cdc_wdm 2-1:1.0: skipping garbage [ 239.141508][ T1669] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 239.141527][ T1669] cdc_wdm 2-1:1.0: Unknown control protocol [ 239.231498][ T31] audit: type=1400 audit(1788167159.035:968): avc: denied { read write } for pid=11053 comm="syz.3.1755" name="mouse0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 239.257609][ T31] audit: type=1400 audit(1788167159.065:969): avc: denied { open } for pid=11053 comm="syz.3.1755" path="/dev/input/mouse0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 239.305838][ T9782] aqc111 5-1:1.105 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 239.305955][ T9782] aqc111 5-1:1.105 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 239.306050][ T9782] aqc111 5-1:1.105 eth14 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 239.380603][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.380654][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 239.380840][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.381219][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.381248][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 239.381710][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.381885][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.381922][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 239.382097][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.382272][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.382449][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.382626][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.382812][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.382990][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.383162][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.383194][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 239.383365][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.383532][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.383697][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.383862][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.384026][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.384190][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 239.387784][ T1669] usb 2-1: USB disconnect, device number 16 [ 239.522343][ T31] audit: type=1400 audit(1788167159.325:970): avc: denied { write } for pid=11062 comm="syz.3.1758" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 239.549702][ T31] audit: type=1400 audit(1788167159.355:971): avc: denied { write } for pid=11041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.552839][ T31] audit: type=1400 audit(1788167159.355:972): avc: denied { ioctl } for pid=11062 comm="syz.3.1758" path="/346/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 239.884824][ T4917] Bluetooth: hci1: command 0x0406 tx timeout [ 240.205298][T11097] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 240.238666][T11097] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 240.543966][T11116] fuse: fd is not a fuse device [ 240.557807][T11114] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 240.557852][T11114] overlayfs: failed to set xattr on upper [ 240.557859][T11114] overlayfs: ...falling back to redirect_dir=nofollow. [ 240.557866][T11114] overlayfs: ...falling back to uuid=null. [ 240.557903][T11114] overlayfs: conflicting lowerdir path [ 240.709875][T11123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1775'. [ 240.736528][T11123] batman_adv: batadv0: Adding interface: macsec1 [ 240.743109][T11123] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.770696][T11123] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 241.070442][ T5704] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 241.151333][T11145] jffs2: notice: (11145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.226390][ T5704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 241.240788][ T5704] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.269506][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 241.269542][ T5704] usb 4-1: Product: syz [ 241.269568][ T5704] usb 4-1: Manufacturer: syz [ 241.269583][ T5704] usb 4-1: SerialNumber: syz [ 241.502885][T11165] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1786'. [ 241.521922][ T5704] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.757528][T11179] overlayfs: failed to clone upperpath [ 241.854156][ T5690] usb 4-1: USB disconnect, device number 25 [ 241.869425][ T5690] usblp0: removed [ 242.289666][T11209] fuse: fd is not a fuse device [ 242.435740][ T5690] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 242.589886][ T5690] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.591178][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.591239][ T5690] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.593271][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.593292][ T5690] usb 5-1: Product: syz [ 242.593304][ T5690] usb 5-1: Manufacturer: syz [ 242.593317][ T5690] usb 5-1: SerialNumber: syz [ 242.604395][ T5690] cdc_mbim 5-1:1.0: skipping garbage [ 243.063609][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 243.063646][ T31] audit: type=1400 audit(1788167162.865:985): avc: denied { write } for pid=11214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.214480][ T31] audit: type=1400 audit(1788167163.015:986): avc: denied { write } for pid=11246 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.594409][ T31] audit: type=1400 audit(1788167163.395:987): avc: denied { name_bind } for pid=11268 comm="syz.3.1814" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 243.681730][ T5690] cdc_mbim 5-1:1.0: bind() failure [ 243.703329][ T5690] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 243.703402][ T5690] cdc_ncm 5-1:1.1: bind() failure [ 243.939306][ T2274] usb 5-1: USB disconnect, device number 9 [ 244.002110][ T31] audit: type=1400 audit(1788167163.805:988): avc: denied { write } for pid=11251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.201377][ T31] audit: type=1400 audit(1788167164.005:989): avc: denied { write } for pid=11286 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.721101][ T31] audit: type=1400 audit(1788167164.525:990): avc: denied { mounton } for pid=11305 comm="syz.1.1825" path="/38/proc" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.758189][T11306] FAULT_INJECTION: forcing a failure. [ 244.758189][T11306] name failslab, interval 1, probability 0, space 0, times 0 [ 244.758239][T11306] CPU: 1 UID: 0 PID: 11306 Comm: syz.1.1825 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.758265][T11306] Tainted: [L]=SOFTLOCKUP [ 244.758272][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 244.758293][T11306] Call Trace: [ 244.758299][T11306] [ 244.758307][T11306] dump_stack_lvl+0x100/0x190 [ 244.758340][T11306] should_fail_ex.cold+0x5/0xa [ 244.758365][T11306] should_failslab+0xc2/0x120 [ 244.758387][T11306] __kvmalloc_node_noprof+0x113/0x9b0 [ 244.758406][T11306] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 244.758432][T11306] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 244.758453][T11306] alloc_netdev_mqs+0xf5f/0x15c0 [ 244.758475][T11306] rtnl_create_link+0xc13/0xf80 [ 244.758498][T11306] rtnl_newlink+0x15bc/0x2620 [ 244.758526][T11306] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.758542][T11306] ? avc_has_perm_noaudit+0x56/0x3b0 [ 244.758563][T11306] ? find_held_lock+0x2b/0x80 [ 244.758588][T11306] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 244.758609][T11306] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 244.758653][T11306] ? lock_acquire+0x1d1/0x380 [ 244.758669][T11306] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 244.758688][T11306] ? find_held_lock+0x2b/0x80 [ 244.758711][T11306] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 244.758727][T11306] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 244.758747][T11306] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.758766][T11306] rtnetlink_rcv_msg+0x95e/0xe90 [ 244.758786][T11306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.758811][T11306] ? ref_tracker_free+0x37e/0x6c0 [ 244.758833][T11306] netlink_rcv_skb+0x159/0x420 [ 244.758859][T11306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.758883][T11306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.758918][T11306] ? netlink_deliver_tap+0x1ae/0xcc0 [ 244.758949][T11306] netlink_unicast+0x585/0x850 [ 244.758980][T11306] ? __pfx_netlink_unicast+0x10/0x10 [ 244.759012][T11306] netlink_sendmsg+0x8b0/0xda0 [ 244.759040][T11306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.759066][T11306] ? selinux_socket_sendmsg+0x198/0x2f0 [ 244.759098][T11306] ____sys_sendmsg+0xa4d/0xbe0 [ 244.759118][T11306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.759146][T11306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.759179][T11306] ___sys_sendmsg+0x190/0x1e0 [ 244.759203][T11306] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.759226][T11306] ? futex_wait+0x11e/0x370 [ 244.759263][T11306] ? find_held_lock+0x2b/0x80 [ 244.759312][T11306] __sys_sendmsg+0x160/0x210 [ 244.759332][T11306] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.759364][T11306] do_syscall_64+0x123/0x790 [ 244.759387][T11306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.759408][T11306] RIP: 0033:0x7fd6ba79e159 [ 244.759424][T11306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.759441][T11306] RSP: 002b:00007fd6bb66b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.759460][T11306] RAX: ffffffffffffffda RBX: 00007fd6baa25fa0 RCX: 00007fd6ba79e159 [ 244.759473][T11306] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 244.759486][T11306] RBP: 00007fd6ba835024 R08: 0000000000000000 R09: 0000000000000000 [ 244.759496][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.759507][T11306] R13: 00007fd6baa26038 R14: 00007fd6baa25fa0 R15: 00007fff45449cd8 [ 244.759531][T11306] [ 245.141483][T11317] overlayfs: upper fs does not support file handles, falling back to index=off. [ 245.665904][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 245.665960][T11335] netlink: 'syz.1.1837': attribute type 12 has an invalid length. [ 245.697390][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 245.697478][ T6563] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.697636][ T6563] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.697679][ T6563] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.697705][ T6563] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.703462][T11335] netlink: 'syz.1.1837': attribute type 12 has an invalid length. [ 246.325751][ T31] audit: type=1400 audit(28524.420:991): avc: denied { getopt } for pid=11358 comm="syz.3.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.482714][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1849'. [ 246.773923][T11370] key id 000004d2 not found [ 247.373897][T11393] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1860'. [ 247.499082][T11398] fuse: fd is not a fuse device [ 247.984587][ T31] audit: type=1400 audit(28526.070:992): avc: denied { write } for pid=11416 comm="syz.1.1868" name="qw_sign" dev="configfs" ino=37853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 247.995582][ T31] audit: type=1400 audit(28526.080:993): avc: denied { open } for pid=11416 comm="syz.1.1868" path="/49/config/usb_gadget/g1/os_desc/qw_sign" dev="configfs" ino=37853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 248.354171][ T31] audit: type=1400 audit(28526.440:994): avc: denied { write } for pid=11399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.617203][T11441] KVM: debugfs: duplicate directory 11441-5 [ 248.751250][ T31] audit: type=1400 audit(28526.840:995): avc: denied { write } for pid=11446 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.094793][ T30] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 249.153057][T11464] loop6: detected capacity change from 0 to 2640 [ 249.163267][ T8337] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.169071][ T8337] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.169398][ T8337] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.171977][ T8337] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.177049][ T8337] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.287648][ T30] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.297755][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.297796][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.297847][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.336508][ T30] usb 2-1: config 0 descriptor?? [ 249.803128][ T30] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 249.832031][ T30] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input31 [ 249.928296][ T31] audit: type=1400 audit(28528.020:996): avc: denied { write } for pid=11459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.075253][ T30] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 250.195269][ T31] audit: type=1400 audit(28528.280:997): avc: denied { write } for pid=11496 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.220576][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.271008][ T30] usb 2-1: USB disconnect, device number 17 [ 250.340914][T11497] fido_id[11497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 251.111817][ T31] audit: type=1400 audit(28529.200:998): avc: denied { write } for pid=11501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.439715][ T2274] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 251.563001][ T31] audit: type=1400 audit(28529.650:999): avc: denied { write } for pid=11539 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.601659][ T2274] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.602577][ T2274] usb 2-1: not running at top speed; connect to a high speed hub [ 251.602619][ T2274] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 251.606355][ T2274] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 251.606397][ T2274] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 251.606420][ T2274] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 251.606436][ T2274] usb 2-1: config 14 has no interface number 0 [ 251.606461][ T2274] usb 2-1: config 14 has no interface number 1 [ 251.606506][ T2274] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 251.606523][ T2274] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 251.606541][ T2274] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.606558][ T2274] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.606574][ T2274] usb 2-1: config 14 interface 57 has no altsetting 0 [ 251.606587][ T2274] usb 2-1: config 14 interface 228 has no altsetting 0 [ 251.616617][ T2274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.616641][ T2274] usb 2-1: Product: syz [ 251.616653][ T2274] usb 2-1: Manufacturer: syz [ 251.616665][ T2274] usb 2-1: SerialNumber: syz [ 252.369262][ T2274] legousbtower 2-1:14.57: interrupt endpoints not found [ 252.579374][ T31] audit: type=1400 audit(28530.670:1000): avc: denied { bind } for pid=11557 comm="syz.0.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.731365][T11562] netlink: 121460 bytes leftover after parsing attributes in process `syz.7.1913'. [ 252.771011][ T2274] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 252.777199][ T2274] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 252.872631][ T31] audit: type=1400 audit(28530.960:1001): avc: denied { append } for pid=11568 comm="syz.3.1916" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.933346][ T31] audit: type=1400 audit(28531.020:1002): avc: denied { bind } for pid=11570 comm="syz.7.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.935946][ T31] audit: type=1400 audit(28531.030:1003): avc: denied { read } for pid=11570 comm="syz.7.1917" path="socket:[38106]" dev="sockfs" ino=38106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.364827][T11589] usb 2-1: Couldn't submit interrupt_in_urb -90 [ 253.560387][ T30] usb 2-1: USB disconnect, device number 18 [ 253.579712][ T30] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 253.783968][T11602] tipc: Started in network mode [ 253.784008][T11602] tipc: Node identity f646bbafd359, cluster identity 4711 [ 253.784196][T11602] tipc: Enabled bearer , priority 10 [ 253.813900][T11601] tipc: Resetting bearer [ 253.860376][T11601] tipc: Disabling bearer [ 254.244780][ T2274] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 254.394780][ T2274] usb 4-1: Using ep0 maxpacket: 8 [ 254.395335][ T2274] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 254.395829][ T2274] usb 4-1: config 0 has no interfaces? [ 254.397492][ T2274] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 254.397511][ T2274] usb 4-1: Product: syz [ 254.397524][ T2274] usb 4-1: Manufacturer: syz [ 254.397536][ T2274] usb 4-1: SerialNumber: syz [ 254.403327][ T2274] usb 4-1: config 0 descriptor?? [ 254.597670][T11619] overlayfs: failed to clone upperpath [ 254.620269][ T2274] usb 4-1: USB disconnect, device number 26 [ 255.894032][ T31] audit: type=1400 audit(28533.980:1004): avc: denied { write } for pid=11639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.104623][ T31] audit: type=1400 audit(28534.190:1005): avc: denied { write } for pid=11672 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.921654][ T31] audit: type=1400 audit(28535.010:1006): avc: denied { write } for pid=11675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.024245][ T31] audit: type=1400 audit(28535.110:1007): avc: denied { write } for pid=11694 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.073287][T11698] fuse: fd is not a fuse device [ 259.572767][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 259.584763][ T5690] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 259.750231][ T5690] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.752054][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.752091][ T5690] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.752111][ T5690] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.762156][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.762181][ T5690] usb 2-1: Product: syz [ 259.762193][ T5690] usb 2-1: Manufacturer: syz [ 259.762206][ T5690] usb 2-1: SerialNumber: syz [ 259.794950][ T6443] smc: removing ib device syz1 [ 259.811282][ T5690] hub 2-1:1.0: bad descriptor, ignoring hub [ 259.811304][ T5690] hub 2-1:1.0: probe with driver hub failed with error -5 [ 259.846802][ T2274] syz1: Port: 1 Link DOWN [ 260.091739][ T5690] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 260.118338][ T6443] smbdirect: ib_dev[syz1] removed [ 260.895890][T11756] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 260.909301][T11756] usb 2-1: device reset changed ep0 maxpacket size! [ 260.949542][ T5705] usb 2-1: USB disconnect, device number 19 [ 260.974915][ T5705] usblp0: removed [ 261.056059][ T6563] smc: removing ib device syz0 [ 261.144788][ T5705] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 261.266770][ T6563] smbdirect: ib_dev[syz0] removed [ 261.304990][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 261.310685][ T5705] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 261.321139][ T5705] usb 2-1: config 0 has no interfaces? [ 261.329955][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.340040][ T5705] usb 2-1: Product: syz [ 261.344831][ T5705] usb 2-1: Manufacturer: syz [ 261.349963][ T5705] usb 2-1: SerialNumber: syz [ 261.418587][ T5705] usb 2-1: config 0 descriptor?? [ 261.707295][ T5705] usb 2-1: USB disconnect, device number 20 [ 261.781836][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'. [ 263.645971][ T32] INFO: task syz.1.507:7228 blocked for more than 143 seconds. [ 263.646010][ T32] Tainted: G L syzkaller #0 [ 263.646030][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disabl ** replaying previous printk message ** [ 263.646030][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.646040][ T32] task:syz.1.507 state:D stack:27944 pid:7228 tgid:7224 ppid:5595 task_flags:0x400040 flags:0x00080002 [ 263.646099][ T32] Call Trace: [ 263.646105][ T32] [ 263.646114][ T32] __schedule+0x1259/0x6920 [ 263.646132][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 263.646154][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 263.646181][ T32] ? __pfx___schedule+0x10/0x10 [ 263.646196][ T32] ? find_held_lock+0x2b/0x80 [ 263.646217][ T32] ? schedule+0x225/0x2c0 [ 263.646236][ T32] schedule+0xdd/0x2c0 [ 263.646251][ T32] schedule_preempt_disabled+0x13/0x30 [ 263.646324][ T32] __mutex_lock+0xccb/0x1bd0 [ 263.646352][ T32] ? nfsd_nrthreads+0x57/0xd0 [ 263.646372][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 263.646394][ T32] ? lock_acquire+0x1d1/0x380 [ 263.646413][ T32] ? net_generic+0xea/0x2a0 [ 263.646435][ T32] ? net_generic+0xea/0x2a0 [ 263.646463][ T32] ? nfsd_nrthreads+0x57/0xd0 [ 263.646477][ T32] nfsd_nrthreads+0x57/0xd0 [ 263.646493][ T32] write_threads+0x34a/0x600 [ 263.646513][ T32] ? __pfx_write_threads+0x10/0x10 [ 263.646532][ T32] ? __might_fault+0xc5/0x140 [ 263.646555][ T32] ? __might_fault+0xc5/0x140 [ 263.646576][ T32] ? __might_fault+0xc5/0x140 [ 263.646600][ T32] ? __pfx_write_threads+0x10/0x10 [ 263.646620][ T32] ? __pfx_write_threads+0x10/0x10 [ 263.646637][ T32] ? _copy_from_user+0x59/0xd0 [ 263.646663][ T32] ? __pfx_write_threads+0x10/0x10 [ 263.646681][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 263.646709][ T32] vfs_write+0x2aa/0x1050 [ 263.646736][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 263.646753][ T32] ? lock_acquire+0x1d1/0x380 [ 263.646768][ T32] ? __fget_files+0x34/0x3d0 [ 263.646787][ T32] ? __pfx_vfs_write+0x10/0x10 [ 263.646817][ T32] ? find_held_lock+0x2b/0x80 [ 263.646839][ T32] ? __fget_files+0x215/0x3d0 [ 263.646861][ T32] ? __fget_files+0x21f/0x3d0 [ 263.646885][ T32] ksys_write+0x12a/0x250 [ 263.646901][ T32] ? __pfx_ksys_write+0x10/0x10 [ 263.646923][ T32] do_syscall_64+0x123/0x790 [ 263.646943][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.646962][ T32] RIP: 0033:0x7fcc60b9e159 [ 263.646976][ T32] RSP: 002b:00007fcc61a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.646992][ T32] RAX: ffffffffffffffda RBX: 00007fcc60e26090 RCX: 00007fcc60b9e159 [ 263.647003][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 263.647013][ T32] RBP: 00007fcc60c35024 R08: 0000000000000000 R09: 0000000000000000 [ 263.647024][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.647034][ T32] R13: 00007fcc60e26128 R14: 00007fcc60e26090 R15: 00007ffe92dbbd18 [ 263.647056][ T32] [ 263.647100][ T32] [ 263.647100][ T32] Showing all locks held in the system: [ 263.647110][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 263.647122][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 263.647167][ T32] #1: ffffffff9bc60c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 263.647210][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 263.647222][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 263.647270][ T32] locks held by kworker/u8:5/79: 2, last CPU#1: [ 263.647281][ T32] #0: ffff888035f15140 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.647331][ T32] #1: ffffc9000202fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.647398][ T32] locks held by getty/5355: 2, on CPU#1: [ 263.647410][ T32] #0: ffff8880382ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 263.651679][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 263.651753][ T32] locks held by kworker/u8:38/6443: 6, last CPU#0: [ 263.651765][ T32] #0: ffff88801c1c5940 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.651810][ T32] #1: ffffc9001e477d08 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.651855][ T32] #2: ffff888034694730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 263.651902][ T32] #3: ffff88801d2bf2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 263.651960][ T32] #4: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 263.652004][ T32] #5: ffff88801d2bf210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x3fe/0xb80 [ 263.652046][ T32] locks held by kworker/u8:50/6563: 5, on CPU#0: [ 263.652057][ T32] #0: ffff88801c1c5940 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 263.652099][ T32] #1: ffffc90006857d08 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 263.652143][ T32] #2: ffff88801fb88730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 263.652189][ T32] #3: ffff88801d2bf2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 263.652234][ T32] #4: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 263.652280][ T32] locks held by syz.1.507/7225: 3, on CPU#0: [ 263.652290][ T32] #0: ffff88807c837eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 263.652329][ T32] #1: ffff88804e26c460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 263.652369][ T32] #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 263.652407][ T32] locks held by syz.1.507/7228: 3, on CPU#1: [ 263.652418][ T32] #0: ffff8880364ea470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 263.652456][ T32] #1: ffff88804e26c460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 263.652493][ T32] #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x57/0xd0 [ 263.652536][ T32] locks held by syz.7.1981/11779: 3, last CPU#0: [ 263.652547][ T32] #0: ffff88802d7a0460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 263.652587][ T32] #1: ffff888053a98e98 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 263.652637][ T32] #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: filemap_get_entry+0xd0/0x450 [ 263.652678][ T32] locks held by syz.7.1985/11798: 2, last CPU#0: [ 263.652694][ T32] #0: ffff88802471f678 (&mm->mmap_lock){++++}-{4:4}, at: madvise_lock+0xec/0x240 [ 263.652734][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 263.652775][ T32] locks held by syz.1.1986/11791: 1, last CPU#1: [ 263.652786][ T32] #0: ffff88803699c0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xa7e/0x1b10 [ 263.652831][ T32] locks held by syz-executor/11799: 4, last CPU#1: [ 263.652843][ T32] #0: ffff88807e168808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 263.652882][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830 [ 263.652919][ T32] #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x2100 [ 263.652957][ T32] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 263.652994][ T32] [ 263.652998][ T32] ============================================= [ 263.652998][ T32] [ 263.653005][ T32] NMI backtrace for cpu 0 [ 263.653016][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 263.653037][ T32] Tainted: [L]=SOFTLOCKUP [ 263.653043][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 263.653051][ T32] Call Trace: [ 263.653057][ T32] [ 263.653063][ T32] dump_stack_lvl+0x100/0x190 [ 263.653087][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 263.653111][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.653128][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 263.653155][ T32] sys_info+0x141/0x190 [ 263.653175][ T32] watchdog+0xcb1/0x1030 [ 263.653196][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.653221][ T32] ? __pfx_watchdog+0x10/0x10 [ 263.653239][ T32] ? __kthread_parkme+0x18f/0x230 [ 263.653259][ T32] ? kthread+0x13a/0x450 [ 263.653280][ T32] ? __pfx_watchdog+0x10/0x10 [ 263.653295][ T32] kthread+0x373/0x450 [ 263.653315][ T32] ? __pfx_kthread+0x10/0x10 [ 263.653337][ T32] ret_from_fork+0x730/0xd60 [ 263.653355][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 263.653372][ T32] ? __switch_to+0x800/0x10f0 [ 263.653394][ T32] ? __pfx_kthread+0x10/0x10 [ 263.653415][ T32] ret_from_fork_asm+0x1a/0x30 [ 263.653441][ T32] [ 263.653460][ T32] Sending NMI from CPU 0 to CPUs 1: [ 263.653481][ C1] NMI backtrace for cpu 1 [ 263.653493][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.653511][ C1] Tainted: [L]=SOFTLOCKUP [ 263.653516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 263.653524][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 263.653545][ C1] Code: 24 5c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 c8 37 cf fc eb a2 e8 51 38 [ 263.653558][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 263.653568][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 263.653577][ C1] RDX: 00000000000003fd RSI: ffffffff85afc750 RDI: ffffffff9bc60ca0 [ 263.653586][ C1] RBP: ffffffff9bc60c60 R08: 0000000000000001 R09: 000000000000001f [ 263.653595][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 263.653603][ C1] R13: 0000000000000020 R14: fffffbfff378c1e9 R15: dffffc0000000000 [ 263.653612][ C1] FS: 0000000000000000(0000) GS:ffff888123c64000(0000) knlGS:0000000000000000 [ 263.653626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.653635][ C1] CR2: 00007f3dee04c180 CR3: 00000000246d4000 CR4: 00000000003526f0 [ 263.653643][ C1] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 263.653651][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 263.653660][ C1] Call Trace: [ 263.653664][ C1] [ 263.653670][ C1] wait_for_lsr+0x13a/0x210 [ 263.653686][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 263.653701][ C1] __serial8250_console_fifo_write+0x23c/0x290 [ 263.653715][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 263.653735][ C1] serial8250_console_write+0xf46/0x1330 [ 263.653753][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 263.653769][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 263.653791][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 263.653815][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 263.653837][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 263.653856][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 263.653875][ C1] ? do_raw_spin_lock+0x110/0x260 [ 263.653894][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 263.653912][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 263.653932][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 263.653951][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 263.653973][ C1] nbcon_kthread_func+0x613/0x7d0 [ 263.653995][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 263.654017][ C1] ? __kthread_parkme+0x18f/0x230 [ 263.654032][ C1] ? kthread+0x13a/0x450 [ 263.654048][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 263.654067][ C1] kthread+0x373/0x450 [ 263.654083][ C1] ? __pfx_kthread+0x10/0x10 [ 263.654100][ C1] ret_from_fork+0x730/0xd60 [ 263.654114][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 263.654129][ C1] ? __switch_to+0x800/0x10f0 [ 263.654146][ C1] ? __pfx_kthread+0x10/0x10 [ 263.654163][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.654182][ C1] [ 263.667509][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 264.808103][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 264.818803][ T32] Tainted: [L]=SOFTLOCKUP [ 264.823129][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 264.833192][ T32] Call Trace: [ 264.836497][ T32] [ 264.839430][ T32] dump_stack_lvl+0x100/0x190 [ 264.844126][ T32] vpanic+0x553/0x970 [ 264.848120][ T32] ? __pfx_vpanic+0x10/0x10 [ 264.852646][ T32] panic+0xd1/0xe0 [ 264.856379][ T32] ? __pfx_panic+0x10/0x10 [ 264.860801][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 264.866953][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 264.873131][ T32] ? watchdog.cold+0x1ec/0x234 [ 264.877908][ T32] watchdog.cold+0x1fd/0x234 [ 264.882508][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.888320][ T32] ? __pfx_watchdog+0x10/0x10 [ 264.892998][ T32] ? __kthread_parkme+0x18f/0x230 [ 264.898103][ T32] ? kthread+0x13a/0x450 [ 264.902344][ T32] ? __pfx_watchdog+0x10/0x10 [ 264.907017][ T32] kthread+0x373/0x450 [ 264.911098][ T32] ? __pfx_kthread+0x10/0x10 [ 264.915681][ T32] ret_from_fork+0x730/0xd60 [ 264.920279][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 264.925465][ T32] ? __switch_to+0x800/0x10f0 [ 264.930178][ T32] ? __pfx_kthread+0x10/0x10 [ 264.934770][ T32] ret_from_fork_asm+0x1a/0x30 [ 264.939545][ T32] [ 264.942807][ T32] Kernel Offset: disabled [ 264.947116][ T32] Rebooting in 86400 seconds..