last executing test programs: 8m46.579807774s ago: executing program 32 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000003c0)={0x66666666666668e}) 8m6.593647648s ago: executing program 3 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='|'}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x810) 8m6.534620123s ago: executing program 3 (id=632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)='p]', 0x2}], 0x1}, 0x40045) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="b822", 0x2}], 0x1}, 0x4015) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) 8m6.490504606s ago: executing program 3 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 8m6.062099673s ago: executing program 3 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x0) 8m6.027436033s ago: executing program 3 (id=639): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x12142, 0x0) 8m5.788850647s ago: executing program 3 (id=646): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 8m5.605042186s ago: executing program 33 (id=646): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 4m33.454328141s ago: executing program 2 (id=3500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 4m33.370101263s ago: executing program 2 (id=3501): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xa) syz_emit_ethernet(0x6e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@hopopts]}}}}}}}, 0x0) 4m33.369589773s ago: executing program 2 (id=3502): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4m33.354828754s ago: executing program 2 (id=3503): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 4m33.30540244s ago: executing program 2 (id=3504): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 4m32.98643152s ago: executing program 2 (id=3505): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='file read /etc/passwd task.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 4m32.927439786s ago: executing program 34 (id=3505): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='file read /etc/passwd task.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 3m59.094692052s ago: executing program 0 (id=3938): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc9e, &(0x7f0000000040)={0x0, 0x40dd, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m58.980536043s ago: executing program 0 (id=3942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r4, 0x3000003, 0x12, r3, 0x0) 3m58.709430834s ago: executing program 0 (id=3956): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd70b7b3458e637000fcdb", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x18004886) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m58.495735078s ago: executing program 0 (id=3950): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 3m58.494568218s ago: executing program 0 (id=3951): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048800}, 0x80) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 3m58.352398686s ago: executing program 0 (id=3953): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000c00)=[0x1, 0x9, 0x62f428c1, 0x5, 0x3, 0x2ab4, 0x2, 0x400, 0x400, 0x501, 0x6, 0x8, 0x1, 0x800, 0x6], 0x1, 0x4000005}) 3m58.136195368s ago: executing program 35 (id=3953): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000c00)=[0x1, 0x9, 0x62f428c1, 0x5, 0x3, 0x2ab4, 0x2, 0x400, 0x400, 0x501, 0x6, 0x8, 0x1, 0x800, 0x6], 0x1, 0x4000005}) 3m45.365583096s ago: executing program 7 (id=4100): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="64756d6d795f04000000", 0xa) 3m45.316420014s ago: executing program 7 (id=4101): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x55}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 3m45.18847271s ago: executing program 7 (id=4103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m44.969887111s ago: executing program 7 (id=4107): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000011c0)={0x1c, &(0x7f0000000c80)={0x20, 0x0, 0x2, "42e0"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x3) 3m43.206559421s ago: executing program 7 (id=4128): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m43.022303487s ago: executing program 7 (id=4130): r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x6}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4074, 0x28, 0xfea, 0x2}, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 3m27.930000112s ago: executing program 36 (id=4130): r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x6}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4074, 0x28, 0xfea, 0x2}, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 2m58.830470544s ago: executing program 5 (id=4512): syz_open_dev$sg(0x0, 0x5, 0x321503) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) 2m58.645835022s ago: executing program 5 (id=4515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2c, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) 2m58.266183296s ago: executing program 5 (id=4519): ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x10, {"0dbad96fff01000008ff00200800", "3dfab043e504adbeecec4b1c55794177", "a7c947420000000000000000ff4a70f3"}, 0x4, 0x6}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m58.178053398s ago: executing program 5 (id=4520): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0xa) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) 2m56.202419674s ago: executing program 5 (id=4536): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m55.980295747s ago: executing program 5 (id=4537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) 2m40.766369126s ago: executing program 37 (id=4537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) 26.425589432s ago: executing program 9 (id=5653): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.814166031s ago: executing program 9 (id=5656): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum]}}, &(0x7f0000000080)=""/236, 0x32, 0xec, 0x1}, 0x20) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000032") 25.702484983s ago: executing program 9 (id=5658): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 25.075551459s ago: executing program 9 (id=5661): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 24.936985972s ago: executing program 9 (id=5663): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 24.775922562s ago: executing program 9 (id=5665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 9.679433107s ago: executing program 38 (id=5665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 7.111891098s ago: executing program 6 (id=5804): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) 5.070748057s ago: executing program 6 (id=5810): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) lseek(0xffffffffffffffff, 0x2000, 0x0) 3.935818653s ago: executing program 6 (id=5818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.702414732s ago: executing program 6 (id=5820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="e7", 0x1}], 0x1}, 0x98) 3.434533088s ago: executing program 6 (id=5822): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) 3.250503097s ago: executing program 8 (id=5825): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 2.852320235s ago: executing program 4 (id=5827): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 2.774408333s ago: executing program 8 (id=5828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xffff, 0xfffffffffffffffe, 0x2f, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0x100000006, 0xfe, 0x0, 0x5, 0x100, 0x40000000001, 0xffffffffffffffff, 0x9], 0x1, 0x360200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4000006f, 0x0, 0x6}]}) 2.503173037s ago: executing program 8 (id=5829): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @loopback, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x4c, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0xfffffffffffffd36}, 0x7}], 0x1, 0x12041, 0x0) 2.337504529s ago: executing program 8 (id=5830): r0 = timerfd_create(0x8, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 2.087380007s ago: executing program 8 (id=5831): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2000a041}, 0x800) 2.025702521s ago: executing program 1 (id=5832): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000000c0), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.901857966s ago: executing program 8 (id=5833): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0xc) 1.830422503s ago: executing program 4 (id=5834): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.582252637s ago: executing program 4 (id=5835): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.415458231s ago: executing program 4 (id=5836): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000140)="0000427e8a6ec169d435337f68b41f", 0xf, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) 1.28544157s ago: executing program 4 (id=5837): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.153667984s ago: executing program 4 (id=5838): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 1.062188698s ago: executing program 1 (id=5839): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.039693159s ago: executing program 6 (id=5840): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 358.566774ms ago: executing program 1 (id=5841): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, &(0x7f0000000040)=""/117, 0x75) 134.374587ms ago: executing program 1 (id=5842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x84, 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d", 0x4, 0x805, 0x0, 0x0) 97.440322ms ago: executing program 1 (id=5843): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000663000/0xb000)=nil, &(0x7f0000004000/0x2000)=nil, 0xb000, 0x1, 0x2}) 0s ago: executing program 1 (id=5844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) kernel console output (not intermixed with test programs): not be printed [ 545.423714][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x9a5f instead [ 545.423723][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xcc7a instead [ 545.423733][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x4fb8 instead [ 545.423742][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x1aa3 instead [ 545.423750][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x192a instead [ 545.423760][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x88c8 instead [ 545.423769][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x34af instead [ 545.423778][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x8a03 instead [ 545.423787][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xd78c instead [ 545.423796][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xbfbd instead [ 545.423805][T20251] jffs2: Further such events for this erase block will not be printed [ 545.424032][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x9959 instead [ 545.424042][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xccd6 instead [ 545.424051][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x21df instead [ 545.424059][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x2a01 instead [ 545.424068][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x9f01 instead [ 545.424076][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x7580 instead [ 545.424085][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xb61b instead [ 545.424093][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x2982 instead [ 545.424101][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xaf21 instead [ 545.424110][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x5103 instead [ 545.424118][T20251] jffs2: Further such events for this erase block will not be printed [ 545.424350][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x5473 instead [ 545.424359][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x9539 instead [ 545.424368][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x1ace instead [ 545.424376][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xac71 instead [ 545.424385][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xca6d instead [ 545.424393][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x2618 instead [ 545.424402][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x2693 instead [ 545.424410][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xfa57 instead [ 545.424418][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x3534 instead [ 545.424427][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x7da2 instead [ 545.424435][T20251] jffs2: Further such events for this erase block will not be printed [ 545.960912][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xe916 instead [ 545.960926][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x76d9 instead [ 545.960935][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x1f30 instead [ 545.960944][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xa42b instead [ 545.960952][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x544d instead [ 545.960961][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x3760 instead [ 545.961093][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5586 instead [ 545.961103][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x2718 instead [ 545.961111][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x9650 instead [ 545.961120][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x5c08 instead [ 545.961128][T20251] jffs2: Further such events for this erase block will not be printed [ 545.961355][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x1ebb instead [ 545.961364][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xacbb instead [ 545.961373][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x6bf7 instead [ 545.961381][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x931e instead [ 545.961390][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x532e instead [ 545.961398][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x7945 instead [ 545.961407][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x6191 instead [ 545.961415][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xd3df instead [ 545.961424][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xb6dd instead [ 545.961432][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x9cb8 instead [ 545.961441][T20251] jffs2: Further such events for this erase block will not be printed [ 545.961665][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xcfc6 instead [ 545.961679][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x4761 instead [ 545.961687][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x35bd instead [ 545.961695][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x92d4 instead [ 545.961704][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x98f3 instead [ 545.961722][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xd21d instead [ 545.961730][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0281 instead [ 545.961739][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x3b75 instead [ 545.961747][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xade6 instead [ 545.961756][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x9b9c instead [ 545.961764][T20251] jffs2: Further such events for this erase block will not be printed [ 545.961986][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x63a1 instead [ 545.961995][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x6dd2 instead [ 545.962004][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xcdfe instead [ 545.962012][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xa139 instead [ 545.962020][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x4b42 instead [ 545.962029][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x38fc instead [ 545.962037][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xbbcf instead [ 545.962046][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x70ec instead [ 545.962054][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x9c24 instead [ 545.962062][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x6ca4 instead [ 545.962070][T20251] jffs2: Further such events for this erase block will not be printed [ 546.073366][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xd964 instead [ 546.495015][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x4ba0 instead [ 546.495027][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x0301 instead [ 546.495036][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x51ab instead [ 546.495045][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xbde9 instead [ 546.495053][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x6e10 instead [ 546.495062][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x0a37 instead [ 546.495070][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x0dfe instead [ 546.495079][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x1d5c instead [ 546.495087][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x60ea instead [ 546.495095][T20251] jffs2: Further such events for this erase block will not be printed [ 546.495322][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x0658 instead [ 546.495331][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x3362 instead [ 546.495340][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x00d3 instead [ 546.495349][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x14c7 instead [ 546.495357][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x88eb instead [ 546.495366][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x6e9a instead [ 546.495374][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x2b5a instead [ 546.495383][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xdcf0 instead [ 546.495391][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xa059 instead [ 546.495400][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x4079 instead [ 546.495408][T20251] jffs2: Further such events for this erase block will not be printed [ 546.495630][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xe984 instead [ 546.495639][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x7170 instead [ 546.495647][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x0e4b instead [ 546.495656][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x7587 instead [ 546.495668][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x6250 instead [ 546.495677][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x97f2 instead [ 546.495685][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf628 instead [ 546.495694][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x6b1c instead [ 546.495703][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x319c instead [ 546.495711][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x12a4 instead [ 546.495719][T20251] jffs2: Further such events for this erase block will not be printed [ 546.495940][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0xa1a2 instead [ 546.495949][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x221b instead [ 546.495957][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xdebb instead [ 546.495966][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xda10 instead [ 546.495974][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xdc38 instead [ 546.495983][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x9068 instead [ 546.495991][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8dd4 instead [ 546.496000][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xa4fe instead [ 546.496008][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xe357 instead [ 546.496017][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xfaeb instead [ 546.496025][T20251] jffs2: Further such events for this erase block will not be printed [ 546.496248][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x1bc8 instead [ 546.496257][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x6ef0 instead [ 546.496265][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x7a3d instead [ 546.496274][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xeea6 instead [ 546.496282][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x2cd9 instead [ 546.496291][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xb838 instead [ 546.496299][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x78f5 instead [ 546.496308][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x1074 instead [ 546.496316][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0xcd0d instead [ 546.496325][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xcf24 instead [ 546.496333][T20251] jffs2: Further such events for this erase block will not be printed [ 546.910923][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x6b96 instead [ 546.910938][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xda0a instead [ 546.910947][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x85d2 instead [ 546.910956][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xe5ba instead [ 546.910965][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x29ec instead [ 546.910973][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x4f10 instead [ 546.910981][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x9e1a instead [ 546.910990][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x811b instead [ 546.910998][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xfaee instead [ 546.911007][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x0f19 instead [ 546.911015][T20251] jffs2: Further such events for this erase block will not be printed [ 546.911236][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x29e7 instead [ 546.911245][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xc85a instead [ 546.911254][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x3a30 instead [ 546.911262][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x3817 instead [ 546.911271][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x137d instead [ 546.911279][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xabe5 instead [ 546.911287][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x6448 instead [ 546.911296][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x9f92 instead [ 546.911304][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xe4d3 instead [ 546.911312][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x07bc instead [ 546.911320][T20251] jffs2: Further such events for this erase block will not be printed [ 546.911544][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x33ec instead [ 546.911552][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0xc842 instead [ 546.911561][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xcdb3 instead [ 546.911569][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x287f instead [ 546.911577][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0xa557 instead [ 546.911586][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x4d61 instead [ 546.911594][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1f29 instead [ 546.911603][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x939d instead [ 546.911611][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x9c47 instead [ 546.911620][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x8055 instead [ 546.911627][T20251] jffs2: Further such events for this erase block will not be printed [ 547.190546][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x2bac instead [ 547.190560][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0385 instead [ 547.190569][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xbf09 instead [ 547.190578][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x99e5 instead [ 547.190586][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x8855 instead [ 547.190595][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xe4e2 instead [ 547.190603][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xad82 instead [ 547.190611][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x67f4 instead [ 547.190620][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xdf01 instead [ 547.190628][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xe06f instead [ 547.190637][T20251] jffs2: Further such events for this erase block will not be printed [ 547.190865][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x57d7 instead [ 547.190874][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x37d7 instead [ 547.190883][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x06b2 instead [ 547.190891][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x95dd instead [ 547.190900][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x0e76 instead [ 547.190909][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x37fb instead [ 547.190917][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xbe95 instead [ 547.190926][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x7c82 instead [ 547.190934][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x1a93 instead [ 547.190942][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x7be9 instead [ 547.190951][T20251] jffs2: Further such events for this erase block will not be printed [ 547.190996][T20251] jffs2: Old JFFS2 bitmask found at 0x0001a32c [ 547.191001][T20251] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 547.191184][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x239e instead [ 547.191193][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xdce1 instead [ 547.191201][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0xbf69 instead [ 547.191210][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xace4 instead [ 547.191218][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x9417 instead [ 547.191226][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x1e7a instead [ 547.191235][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xfd30 instead [ 547.191243][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xb34a instead [ 547.191252][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xf4c1 instead [ 547.191260][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xbfc3 instead [ 547.191268][T20251] jffs2: Further such events for this erase block will not be printed [ 547.191492][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x0d05 instead [ 547.191500][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x51e5 instead [ 547.191509][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x3e53 instead [ 547.191517][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x0778 instead [ 547.191526][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xcf71 instead [ 547.191535][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x2729 instead [ 547.191543][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x059b instead [ 547.191552][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x23bc instead [ 547.191574][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xd04f instead [ 547.191583][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xb4af instead [ 547.191592][T20251] jffs2: Further such events for this erase block will not be printed [ 547.191818][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x5ee0 instead [ 547.191827][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x5a38 instead [ 547.191835][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x73c4 instead [ 547.191844][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x6af3 instead [ 547.191853][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xfefb instead [ 547.191861][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x78c6 instead [ 547.191870][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x615f instead [ 547.191878][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x2d39 instead [ 547.191887][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xc745 instead [ 547.191895][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x2bc7 instead [ 547.191904][T20251] jffs2: Further such events for this erase block will not be printed [ 547.573444][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x1556 instead [ 547.573459][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xcadf instead [ 547.573468][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xf354 instead [ 547.573476][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xe00b instead [ 547.573485][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x1d99 instead [ 547.573493][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x2656 instead [ 547.573501][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x393b instead [ 547.573510][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xc422 instead [ 547.573518][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x5519 instead [ 547.573527][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x8b09 instead [ 547.573535][T20251] jffs2: Further such events for this erase block will not be printed [ 547.573763][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x141e instead [ 547.573772][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0xaa27 instead [ 547.573780][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xbeb5 instead [ 547.573789][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x4206 instead [ 547.573797][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x0b99 instead [ 547.573805][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xe954 instead [ 547.573814][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x59ba instead [ 547.573822][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xa512 instead [ 547.573830][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x9b27 instead [ 547.573838][T20251] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xbdde instead [ 547.573846][T20251] jffs2: Further such events for this erase block will not be printed [ 547.574082][T20251] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 547.574087][T20251] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 548.791011][T20265] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5460'. [ 548.791034][T20265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5460'. [ 548.929699][T20267] FAULT_INJECTION: forcing a failure. [ 548.929699][T20267] name failslab, interval 1, probability 0, space 0, times 0 [ 548.929728][T20267] CPU: 0 UID: 0 PID: 20267 Comm: syz.4.5462 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.929744][T20267] Tainted: [L]=SOFTLOCKUP [ 548.929749][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 548.929756][T20267] Call Trace: [ 548.929760][T20267] [ 548.929766][T20267] dump_stack_lvl+0x100/0x190 [ 548.929785][T20267] should_fail_ex.cold+0x5/0xa [ 548.929801][T20267] should_failslab+0xc2/0x120 [ 548.929815][T20267] __kmalloc_cache_noprof+0x91/0x6d0 [ 548.929834][T20267] ? proc_self_get_link+0x189/0x1f0 [ 548.929851][T20267] proc_self_get_link+0x189/0x1f0 [ 548.929866][T20267] pick_link+0xac2/0x13c0 [ 548.929882][T20267] ? selinux_inode_permission+0x14a/0x1130 [ 548.929895][T20267] ? __pfx_proc_self_get_link+0x10/0x10 [ 548.929911][T20267] step_into_slowpath+0x9ba/0xf90 [ 548.929931][T20267] ? __pfx_step_into_slowpath+0x10/0x10 [ 548.929950][T20267] ? lookup_fast+0x2da/0x600 [ 548.929966][T20267] ? inode_permission+0x374/0x620 [ 548.929984][T20267] link_path_walk+0xf28/0x1cc0 [ 548.929999][T20267] path_openat+0x1ac/0x2440 [ 548.930014][T20267] ? __pfx_path_openat+0x10/0x10 [ 548.930031][T20267] do_file_open+0x20e/0x430 [ 548.930045][T20267] ? __pfx_do_file_open+0x10/0x10 [ 548.930069][T20267] ? _raw_spin_unlock+0x28/0x50 [ 548.930086][T20267] ? alloc_fd+0x471/0x7a0 [ 548.930103][T20267] do_sys_openat2+0x10f/0x1e0 [ 548.930117][T20267] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.930131][T20267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.930148][T20267] __x64_sys_openat+0x12d/0x210 [ 548.930162][T20267] ? __pfx___x64_sys_openat+0x10/0x10 [ 548.930182][T20267] do_syscall_64+0x123/0x790 [ 548.930198][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.930210][T20267] RIP: 0033:0x7f858735e98e [ 548.930219][T20267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 548.930230][T20267] RSP: 002b:00007f85882daf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.930241][T20267] RAX: ffffffffffffffda RBX: 00007f85882db6c0 RCX: 00007f858735e98e [ 548.930248][T20267] RDX: 0000000000000000 RSI: 00007f858743475f RDI: ffffffffffffff9c [ 548.930255][T20267] RBP: 00007f8587435024 R08: 0000000000000000 R09: 0000000000000000 [ 548.930261][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.930268][T20267] R13: 00007f8587626038 R14: 00007f8587625fa0 R15: 00007fff4449f7f8 [ 548.930282][T20267] [ 549.419445][ T983] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 549.579320][ T983] usb 9-1: Using ep0 maxpacket: 32 [ 549.584787][ T983] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 549.594548][ T983] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 549.594568][ T983] usb 9-1: config 0 has no interface number 0 [ 549.613309][ T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.613330][ T983] usb 9-1: Product: syz [ 549.613345][ T983] usb 9-1: Manufacturer: syz [ 549.613355][ T983] usb 9-1: SerialNumber: syz [ 549.636288][ T983] usb 9-1: config 0 descriptor?? [ 549.645427][ T983] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 549.658882][ T2333] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 549.811793][ T2333] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 549.829963][ T2333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.829984][ T2333] usb 2-1: Product: syz [ 549.829999][ T2333] usb 2-1: Manufacturer: syz [ 549.830009][ T2333] usb 2-1: SerialNumber: syz [ 549.853664][ T2333] usb 2-1: config 0 descriptor?? [ 549.875095][ T983] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 549.888978][ T983] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 550.085740][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 550.307629][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 550.315890][ T983] usb 9-1: USB disconnect, device number 25 [ 550.333599][ T983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 550.361906][ T983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 550.362261][ T983] quatech2 9-1:0.51: device disconnected [ 550.435386][T20302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.565610][ T2333] usb 2-1: Firmware version (0.0) predates our first public release. [ 550.565631][ T2333] usb 2-1: Please update to version 0.2 or newer [ 550.666909][ T2333] usb 2-1: USB disconnect, device number 87 [ 550.732797][ T30] audit: type=1400 audit(1788417420.736:1049): avc: denied { mount } for pid=20307 comm="syz.4.5473" name="/" dev="autofs" ino=84230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 550.820067][ T30] audit: type=1400 audit(1788417420.836:1050): avc: denied { unmount } for pid=17721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 551.066361][T20319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.276003][T20322] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 551.276026][T20322] snd_hda_intel 0000:00:01.0: Too small PCI BAR0 [ 551.276042][T20322] snd_hda_intel 0000:00:01.0: probe with driver snd_hda_intel failed with error -22 [ 551.276178][T20322] snd_hda_intel 0000:00:01.3: Unknown PCI class/subclass/prog-if information (0x068000) found, selecting HDAudio legacy driver [ 551.276191][T20322] snd_hda_intel 0000:00:01.3: Too small PCI BAR0 [ 551.276201][T20322] snd_hda_intel 0000:00:01.3: probe with driver snd_hda_intel failed with error -22 [ 551.276336][T20322] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 551.276349][T20322] snd_hda_intel 0000:00:00.0: Too small PCI BAR0 [ 551.276359][T20322] snd_hda_intel 0000:00:00.0: probe with driver snd_hda_intel failed with error -22 [ 551.532466][ T30] audit: type=1326 audit(1788417421.546:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.559884][ T30] audit: type=1326 audit(1788417421.576:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.603098][ T30] audit: type=1326 audit(1788417421.616:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.630635][ T30] audit: type=1326 audit(1788417421.646:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.657442][ T2333] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 551.671345][ T30] audit: type=1326 audit(1788417421.686:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.671377][ T30] audit: type=1326 audit(1788417421.686:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.671403][ T30] audit: type=1326 audit(1788417421.686:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.760420][ T30] audit: type=1326 audit(1788417421.776:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739e159 code=0x7ffc0000 [ 551.808789][T20328] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 551.840694][ T2333] usb 2-1: Using ep0 maxpacket: 16 [ 551.853664][ T2333] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 551.869053][ T2333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.870271][ T2333] usb 2-1: Product: syz [ 551.870287][ T2333] usb 2-1: Manufacturer: syz [ 551.870298][ T2333] usb 2-1: SerialNumber: syz [ 551.906217][ T2333] usb 2-1: config 0 descriptor?? [ 551.918033][ T2333] usb 2-1: selecting invalid altsetting 1 [ 551.930879][ T2333] technisat-usb2: could not set alternate setting to 0 [ 552.141333][T20335] sit1: entered allmulticast mode [ 552.168472][ T2333] technisat-usb2: firmware version: 0.0 [ 552.168499][ T2333] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 552.604704][ T2333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 552.618165][ T2333] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 552.628740][ T2333] usb 2-1: media controller created [ 552.628773][ T2333] technisat-usb2: i2c-error: out failed 53 = -22 [ 552.628795][ T2333] dvb-usb: MAC address reading failed. [ 552.648915][T14003] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 552.680032][ T2333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.802627][T14003] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 552.814077][T14003] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.814106][T14003] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.814120][T14003] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 552.814135][T14003] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.867473][T14003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.867495][T14003] usb 9-1: Product: syz [ 552.867509][T14003] usb 9-1: Manufacturer: syz [ 552.867519][T14003] usb 9-1: SerialNumber: syz [ 552.900421][T14003] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 552.900440][T14003] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 552.900465][T14003] usbserial_generic 9-1:1.0: generic converter detected [ 552.952749][T14003] usb 9-1: generic converter now attached to ttyUSB0 [ 552.984188][ T2333] DVB: Unable to find symbol stv090x_attach() [ 552.991765][ T2333] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 553.130518][T14002] usb 9-1: USB disconnect, device number 26 [ 553.139006][ T2333] rc_core: IR keymap rc-technisat-usb2 not found [ 553.139021][ T2333] Registered IR keymap rc-empty [ 553.139523][ T2333] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 553.140329][ T2333] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input98 [ 553.181764][T14002] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 553.182012][T14002] usbserial_generic 9-1:1.0: device disconnected [ 553.211983][ T2333] dvb-usb: schedule remote query interval to 100 msecs. [ 553.223196][ T2333] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 553.241613][ T2333] usb 2-1: USB disconnect, device number 88 [ 553.373433][ T2333] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 553.732069][T20372] syzkaller1: entered promiscuous mode [ 553.737653][T20372] syzkaller1: entered allmulticast mode [ 554.285522][T20394] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 554.308939][ T2333] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 554.458864][ T2333] usb 10-1: Using ep0 maxpacket: 32 [ 554.464710][ T2333] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 554.476518][ T2333] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.485175][ T2333] usb 10-1: Product: syz [ 554.485186][ T2333] usb 10-1: Manufacturer: syz [ 554.485194][ T2333] usb 10-1: SerialNumber: syz [ 554.503099][ T2333] usb 10-1: config 0 descriptor?? [ 554.579138][ T5719] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 554.594669][T20400] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5510'. [ 554.732263][ T5719] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.742053][ T5719] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.742090][ T5719] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 554.773555][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.773588][ T5719] usb 7-1: Product: syz [ 554.773603][ T5719] usb 7-1: Manufacturer: syz [ 554.773614][ T5719] usb 7-1: SerialNumber: syz [ 554.973162][ T2333] airspy 10-1:0.0: Board ID: 00 [ 554.973182][ T2333] airspy 10-1:0.0: Firmware version: [ 554.987424][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5518'. [ 554.996704][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5518'. [ 555.019539][T20396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.019758][T20396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.040910][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5518'. [ 555.050540][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5518'. [ 555.064375][ T5719] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 555.073836][ T5719] mos7720 7-1:1.0: required endpoints missing [ 555.082142][ T150] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.082172][ T150] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.082195][ T150] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.082215][ T150] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.126104][ T5719] usb 7-1: USB disconnect, device number 66 [ 555.588935][ T5719] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 555.739306][ T5719] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 555.750597][ T5719] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 555.750624][ T5719] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 555.750650][ T5719] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 555.750665][ T5719] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 555.750681][ T5719] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.750714][ T5719] usb 7-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.750737][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.837650][ T2333] airspy 10-1:0.0: usb_control_msg() failed -71 request 0f [ 555.855857][ T2333] airspy 10-1:0.0: Registered as swradio24 [ 555.855876][ T2333] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 555.886222][ T2333] usb 10-1: USB disconnect, device number 21 [ 555.985609][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 555.985648][ T30] audit: type=1400 audit(1788417425.996:1104): avc: denied { create } for pid=20434 comm="syz.1.5526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 556.046451][ T5719] usb 7-1: usb_control_msg returned -32 [ 556.046481][ T5719] usbtmc 7-1:16.0: can't read capabilities [ 556.046680][ C0] usbtmc 7-1:16.0: actual length 0 not sufficient for interrupt headers [ 556.081472][ T30] audit: type=1400 audit(1788417426.096:1105): avc: denied { ioctl } for pid=20434 comm="syz.1.5526" path="socket:[84896]" dev="sockfs" ino=84896 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 556.140758][ T30] audit: type=1400 audit(1788417426.156:1106): avc: denied { write } for pid=20434 comm="syz.1.5526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 556.280945][ T2333] usb 7-1: USB disconnect, device number 67 [ 556.497402][T20449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 556.844577][ T5605] Bluetooth: hci4: link tx timeout [ 556.844682][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.854459][ T5605] Bluetooth: hci4: link tx timeout [ 556.854468][ T5605] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.884336][ T5719] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 556.893155][ T2333] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 556.921238][ T5605] Bluetooth: hci4: link tx timeout [ 556.928686][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.928699][ T5605] Bluetooth: hci4: link tx timeout [ 556.928705][ T5605] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.938748][ T5605] Bluetooth: hci4: link tx timeout [ 556.938757][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.938766][ T5605] Bluetooth: hci4: link tx timeout [ 556.938771][ T5605] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.945442][ T5605] Bluetooth: hci4: link tx timeout [ 556.945450][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.945458][ T5605] Bluetooth: hci4: link tx timeout [ 556.945463][ T5605] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.955848][ T5605] Bluetooth: hci4: link tx timeout [ 556.955857][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.955865][ T5605] Bluetooth: hci4: link tx timeout [ 556.955871][ T5605] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 557.059400][ T5719] usb 9-1: Using ep0 maxpacket: 8 [ 557.066711][ T5719] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 557.076752][ T5719] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.076773][ T5719] usb 9-1: config 0 has no interface number 0 [ 557.076797][ T5719] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 557.076819][ T5719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.095536][ T5719] usb 9-1: config 0 descriptor?? [ 557.116206][ T2333] usb 10-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 557.137749][ T2333] usb 10-1: config 127 has an invalid interface number: 57 but max is 0 [ 557.137770][ T2333] usb 10-1: config 127 has no interface number 0 [ 557.137795][ T2333] usb 10-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 557.173547][ T2333] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.173568][ T2333] usb 10-1: Product: syz [ 557.173582][ T2333] usb 10-1: Manufacturer: syz [ 557.173592][ T2333] usb 10-1: SerialNumber: syz [ 557.189858][T20458] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 557.222780][ T5719] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 557.337476][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.386044][ T5719] usb 9-1: USB disconnect, device number 27 [ 557.650696][T20458] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 557.702030][T20492] ublk_ctrl_add_dev: dev id not match 4294967295 219 [ 557.783926][ T30] audit: type=1400 audit(1788417427.796:1107): avc: denied { ioctl } for pid=20499 comm="syz.6.5552" path="net:[4026532856]" dev="nsfs" ino=4026532856 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 557.865231][ T2333] asix 10-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 557.865338][ T2333] asix 10-1:127.57: probe with driver asix failed with error -71 [ 557.894088][ T2333] usb 10-1: USB disconnect, device number 22 [ 558.155750][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5558'. [ 558.155771][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5558'. [ 558.155793][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5558'. [ 558.189612][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5558'. [ 558.198597][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5558'. [ 558.249128][ T5719] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 558.330411][ T2333] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 558.411840][ T5719] usb 9-1: Using ep0 maxpacket: 16 [ 558.419940][ T5719] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.432297][ T5719] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 558.432321][ T5719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 558.461317][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.461337][ T5719] usb 9-1: Product: syz [ 558.461352][ T5719] usb 9-1: Manufacturer: syz [ 558.461362][ T5719] usb 9-1: SerialNumber: syz [ 558.470804][ T5719] usb 9-1: config 0 descriptor?? [ 558.492089][ T2333] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 558.504887][ T5719] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 558.515124][ T2333] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 558.515152][ T2333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.515172][ T2333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.515186][ T2333] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 558.565366][ T5719] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 558.572810][ T2333] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 558.572824][ T2333] usb 7-1: Manufacturer: syz [ 558.589025][ T2333] usb 7-1: config 0 descriptor?? [ 558.885631][T20532] gre1: entered promiscuous mode [ 558.892421][T20532] gre1: entered allmulticast mode [ 558.899778][T20534] veth1_to_bond: entered promiscuous mode [ 558.907275][T20534] veth1_to_bond (unregistering): left promiscuous mode [ 558.924139][T20534] bond0: (slave bond_slave_1): Releasing backup interface [ 558.932383][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 559.007663][ T2333] appleir 0003:05AC:8243.0056: unknown main item tag 0x0 [ 559.034467][ T2333] appleir 0003:05AC:8243.0056: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 559.107592][ T5719] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 559.114054][ T5719] em28xx 9-1:0.0: Config register raw data: 0x37 [ 559.114071][ T5719] em28xx 9-1:0.0: I2S Audio (3 sample rate(s)) [ 559.114083][ T5719] em28xx 9-1:0.0: No AC97 audio processor [ 559.195583][ T30] audit: type=1326 audit(1788417429.206:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.9.5566" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad259e159 code=0x7ffc0000 [ 559.226420][ T30] audit: type=1326 audit(1788417429.236:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.9.5566" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad259e159 code=0x7ffc0000 [ 559.277319][ T30] audit: type=1326 audit(1788417429.286:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.9.5566" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdad259e159 code=0x7ffc0000 [ 559.277354][ T30] audit: type=1326 audit(1788417429.286:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.9.5566" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad259e159 code=0x7ffc0000 [ 559.277397][ T30] audit: type=1326 audit(1788417429.286:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.9.5566" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad259e159 code=0x7ffc0000 [ 559.375244][ T30] audit: type=1326 audit(1788417429.386:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.9.5566" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdad259e159 code=0x7ffc0000 [ 559.597728][ T5719] usb 9-1: USB disconnect, device number 28 [ 560.048638][T20557] dummy0: entered promiscuous mode [ 560.062330][T20557] gretap0: entered promiscuous mode [ 560.071322][T20557] hsr1: entered allmulticast mode [ 560.076420][T20557] dummy0: entered allmulticast mode [ 560.086136][T20557] gretap0: entered allmulticast mode [ 560.171093][T20561] tipc: Started in network mode [ 560.177140][T20561] tipc: Node identity 7f000001, cluster identity 4711 [ 560.177655][T20561] tipc: Enabled bearer , priority 10 [ 560.192542][T20561] tipc: Disabling bearer [ 560.619751][T14002] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 560.769929][T14002] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 560.781667][T14002] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.793571][T14002] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 560.793610][T14002] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 560.793625][T14002] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.793647][T14002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.865768][T20588] lo: entered allmulticast mode [ 560.871824][T20588] tunl0: entered allmulticast mode [ 560.872714][T20588] gre0: entered allmulticast mode [ 560.908613][T20588] gretap0: entered allmulticast mode [ 560.925432][T20588] erspan0: entered allmulticast mode [ 560.943397][T20588] ip_vti0: entered allmulticast mode [ 560.955644][T20588] ip6_vti0: entered allmulticast mode [ 560.966089][T20588] sit0: entered allmulticast mode [ 560.982754][T20588] ip6tnl0: entered allmulticast mode [ 560.994019][T20588] ip6gre0: entered allmulticast mode [ 561.009214][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 561.029296][T20588] syz_tun: entered allmulticast mode [ 561.046404][T20588] ip6gretap0: entered allmulticast mode [ 561.066555][T20588] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.066807][T20588] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.084071][T20588] bridge0: entered allmulticast mode [ 561.093047][T20588] vcan0: entered allmulticast mode [ 561.100443][T20588] bond0: entered allmulticast mode [ 561.100460][T20588] bond_slave_0: entered allmulticast mode [ 561.100474][T20588] bond_slave_1: entered allmulticast mode [ 561.101621][T20588] team0: entered allmulticast mode [ 561.101633][T20588] team_slave_0: entered allmulticast mode [ 561.101643][T20588] team_slave_1: entered allmulticast mode [ 561.145255][T20588] dummy0: entered allmulticast mode [ 561.159775][T20588] nlmon0: entered allmulticast mode [ 561.160347][T20588] batadv0: entered allmulticast mode [ 561.182268][ T2333] usb 7-1: USB disconnect, device number 68 [ 561.189824][T20588] vxcan0: entered allmulticast mode [ 561.195467][T20588] vxcan1: entered allmulticast mode [ 561.201928][T20588] veth0: entered allmulticast mode [ 561.215746][T20588] veth1: entered allmulticast mode [ 561.236304][T20588] wg0: entered allmulticast mode [ 561.245266][T20588] wg1: entered allmulticast mode [ 561.255935][T20588] wg2: entered allmulticast mode [ 561.263857][T20588] veth0_to_bridge: entered allmulticast mode [ 561.282962][T20588] veth1_to_bridge: entered allmulticast mode [ 561.297355][T20588] veth0_to_bond: entered allmulticast mode [ 561.308384][T20588] veth1_to_bond: entered allmulticast mode [ 561.317642][T20588] veth0_to_team: entered allmulticast mode [ 561.334303][T20588] veth1_to_team: entered allmulticast mode [ 561.350971][T20588] veth0_to_batadv: entered allmulticast mode [ 561.361038][T20588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.369761][T20588] batadv_slave_0: entered allmulticast mode [ 561.381264][T20588] veth1_to_batadv: entered allmulticast mode [ 561.394284][T20588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.402700][T20588] batadv_slave_1: entered allmulticast mode [ 561.415229][T20588] xfrm0: entered allmulticast mode [ 561.430737][ T5793] usb 10-1: USB disconnect, device number 23 [ 561.438387][T20588] veth0_to_hsr: entered allmulticast mode [ 561.448575][T20588] hsr_slave_0: entered allmulticast mode [ 561.461362][T20588] veth1_to_hsr: entered allmulticast mode [ 561.475830][T20588] hsr_slave_1: entered allmulticast mode [ 561.476573][T20588] hsr0: entered allmulticast mode [ 561.497537][T20588] veth1_virt_wifi: entered allmulticast mode [ 561.508149][T20588] veth0_virt_wifi: entered allmulticast mode [ 561.528231][T20588] virt_wifi0: entered allmulticast mode [ 561.536434][T20588] veth1_vlan: entered allmulticast mode [ 561.544678][T20588] veth0_vlan: entered allmulticast mode [ 561.545641][T20588] vlan0: entered allmulticast mode [ 561.562830][T20588] vlan1: entered allmulticast mode [ 561.571711][T20588] macvlan0: entered allmulticast mode [ 561.578756][T20588] macvlan1: entered allmulticast mode [ 561.593055][T20588] ipvlan0: entered allmulticast mode [ 561.607107][T20588] ipvlan1: entered allmulticast mode [ 561.623181][T20588] veth1_macvtap: entered allmulticast mode [ 561.633157][T20588] veth0_macvtap: entered allmulticast mode [ 561.650022][T20588] macvtap0: entered allmulticast mode [ 561.659396][T20588] macsec0: entered allmulticast mode [ 561.667246][T20588] geneve0: entered allmulticast mode [ 561.677914][T20588] geneve1: entered allmulticast mode [ 561.711058][T20588] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 561.728132][T20588] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 561.748365][T20588] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 561.764399][T20588] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 562.053118][T20588] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 562.187909][T20588] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 562.190638][T20588] ipvlan2: entered allmulticast mode [ 562.190765][T20588] ipvlan3: entered allmulticast mode [ 562.192160][T20588] ip6erspan0: entered allmulticast mode [ 562.192687][T20588] ipip0: entered allmulticast mode [ 562.192856][T20588] vxlan0: entered allmulticast mode [ 562.199861][ T60] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.199882][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.211307][ T60] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.211325][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.211452][ T60] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.211466][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.211484][ T60] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.211498][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.433102][T20608] __nla_validate_parse: 2 callbacks suppressed [ 562.433127][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5595'. [ 562.447426][T20608] team0 (unregistering): Port device team_slave_0 removed [ 562.522723][T20608] team0 (unregistering): Port device team_slave_1 removed [ 563.166732][T20631] FAULT_INJECTION: forcing a failure. [ 563.166732][T20631] name fail_futex, interval 1, probability 0, space 0, times 0 [ 563.183280][T20631] CPU: 0 UID: 0 PID: 20631 Comm: syz.9.5602 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.183299][T20631] Tainted: [L]=SOFTLOCKUP [ 563.183303][T20631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 563.183310][T20631] Call Trace: [ 563.183314][T20631] [ 563.183319][T20631] dump_stack_lvl+0x100/0x190 [ 563.183338][T20631] should_fail_ex.cold+0x5/0xa [ 563.183355][T20631] get_futex_key+0xf72/0x14f0 [ 563.183372][T20631] ? __pfx_get_futex_key+0x10/0x10 [ 563.183386][T20631] ? __pfx_futex_wake_mark+0x10/0x10 [ 563.183406][T20631] futex_wake_op+0x131/0xe70 [ 563.183422][T20631] ? blk_finish_plug+0x83/0xa0 [ 563.183443][T20631] ? __pfx_futex_wake_op+0x10/0x10 [ 563.183460][T20631] ? __pfx_futex_wait+0x10/0x10 [ 563.183481][T20631] ? madvise_unlock+0xa9/0x220 [ 563.183503][T20631] do_futex+0x3d8/0x440 [ 563.183519][T20631] ? __pfx_do_futex+0x10/0x10 [ 563.183534][T20631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 563.183552][T20631] __x64_sys_futex+0x34f/0x4d0 [ 563.183570][T20631] ? __pfx___x64_sys_futex+0x10/0x10 [ 563.183591][T20631] do_syscall_64+0x123/0x790 [ 563.183605][T20631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.183617][T20631] RIP: 0033:0x7fdad259e159 [ 563.183627][T20631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.183638][T20631] RSP: 002b:00007fdad34b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.183650][T20631] RAX: ffffffffffffffda RBX: 00007fdad2825fa0 RCX: 00007fdad259e159 [ 563.183657][T20631] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 563.183664][T20631] RBP: 00007fdad2635024 R08: 0000000000000000 R09: 0000000034fffffd [ 563.183670][T20631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.183677][T20631] R13: 00007fdad2826038 R14: 00007fdad2825fa0 R15: 00007ffd74efd988 [ 563.183691][T20631] [ 563.904216][T20654] netlink: 'syz.1.5607': attribute type 3 has an invalid length. [ 564.378867][T14003] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 564.531150][T14003] usb 2-1: Using ep0 maxpacket: 32 [ 564.539389][T14003] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 564.548862][ T983] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 564.556725][T14003] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 564.556738][T14003] usb 2-1: config 0 has no interface number 0 [ 564.556755][T14003] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 564.556767][T14003] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 564.556781][T14003] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 564.556793][T14003] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.583614][T14003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.583628][T14003] usb 2-1: Product: syz [ 564.583636][T14003] usb 2-1: Manufacturer: syz [ 564.583645][T14003] usb 2-1: SerialNumber: syz [ 564.646221][T14003] usb 2-1: config 0 descriptor?? [ 564.654939][T14003] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input99 [ 564.699528][ T983] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 564.709425][ T983] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 564.709447][ T983] usb 7-1: config 1 has no interface number 0 [ 564.728235][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.736387][ T983] usb 7-1: Product: syz [ 564.741975][ T983] usb 7-1: Manufacturer: syz [ 564.746836][ T983] usb 7-1: SerialNumber: syz [ 564.754862][ T983] usb 7-1: 3:1 : does not exist [ 564.766424][ T983] usb 7-1: 3:2 : does not exist [ 564.922025][T14003] usb 2-1: USB disconnect, device number 89 [ 564.936278][ T5622] udevd[5622]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 565.027689][ T5793] usb 7-1: USB disconnect, device number 69 [ 565.120750][T14004] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 565.129402][ T983] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 565.295044][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 565.301982][ T983] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 565.312183][ T983] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 565.312203][ T983] usb 5-1: config 0 has no interface number 0 [ 565.329610][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.329630][ T983] usb 5-1: Product: syz [ 565.329644][ T983] usb 5-1: Manufacturer: syz [ 565.329654][ T983] usb 5-1: SerialNumber: syz [ 565.355515][T14004] usb 10-1: unable to get BOS descriptor or descriptor too short [ 565.355544][T14004] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 565.374721][ T983] usb 5-1: config 0 descriptor?? [ 565.380884][T14004] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.380905][T14004] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.405155][T14004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.405175][T14004] usb 10-1: Product: syz [ 565.405185][T14004] usb 10-1: Manufacturer: syz [ 565.405195][T14004] usb 10-1: SerialNumber: syz [ 565.440542][T14004] usb 10-1: selecting invalid altsetting 1 [ 565.440896][T14004] usb 10-1: unit 6 not found! [ 565.466186][T20677] netlink: 'syz.8.5616': attribute type 11 has an invalid length. [ 565.466223][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5616'. [ 565.515490][T20677] netlink: 'syz.8.5616': attribute type 11 has an invalid length. [ 565.524751][T10724] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.524873][T10724] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.524911][T10724] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.524931][T10724] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.608602][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5616'. [ 566.018681][T20686] kvm [20685]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 566.200043][T20689] FAULT_INJECTION: forcing a failure. [ 566.200043][T20689] name failslab, interval 1, probability 0, space 0, times 0 [ 566.215614][T20689] CPU: 0 UID: 0 PID: 20689 Comm: syz.8.5633 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.215632][T20689] Tainted: [L]=SOFTLOCKUP [ 566.215636][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 566.215643][T20689] Call Trace: [ 566.215647][T20689] [ 566.215652][T20689] dump_stack_lvl+0x100/0x190 [ 566.215673][T20689] should_fail_ex.cold+0x5/0xa [ 566.215689][T20689] should_failslab+0xc2/0x120 [ 566.215703][T20689] kmem_cache_alloc_noprof+0x92/0x6a0 [ 566.215716][T20689] ? prepare_creds+0x2c/0x950 [ 566.215736][T20689] prepare_creds+0x2c/0x950 [ 566.215754][T20689] __sys_setreuid+0x109/0xb00 [ 566.215768][T20689] do_syscall_64+0x123/0x790 [ 566.215782][T20689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.215794][T20689] RIP: 0033:0x7fbd2699e159 [ 566.215803][T20689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.215813][T20689] RSP: 002b:00007fbd2791a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 566.215825][T20689] RAX: ffffffffffffffda RBX: 00007fbd26c25fa0 RCX: 00007fbd2699e159 [ 566.215832][T20689] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: ffffffffffffffff [ 566.215840][T20689] RBP: 00007fbd26a35024 R08: 0000000000000000 R09: 0000000000000000 [ 566.215848][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.215855][T20689] R13: 00007fbd26c26038 R14: 00007fbd26c25fa0 R15: 00007ffc2d1a3dd8 [ 566.215870][T20689] [ 566.521798][T20697] random: crng reseeded on system resumption [ 566.543327][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 566.543345][ T30] audit: type=1400 audit(1788417436.556:1117): avc: denied { ioctl } for pid=20696 comm="syz.8.5625" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 566.577142][T14004] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 566.592970][T14004] usb 10-1: USB disconnect, device number 24 [ 566.618641][ T6864] udevd[6864]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 566.686365][ T983] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 566.686389][ T983] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 566.709261][ T983] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 566.709368][ T983] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 566.721879][ T5793] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 566.749526][ T983] usb 5-1: USB disconnect, device number 16 [ 566.890015][ T5793] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.900501][ T5793] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 566.900530][ T5793] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 566.900550][ T5793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 566.900565][ T5793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 566.900580][ T5793] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.900601][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.962899][ T5793] usb 7-1: config 0 descriptor?? [ 566.973263][T20691] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 567.405107][ T5793] plantronics 0003:047F:FFFF.0057: reserved main item tag 0xd [ 567.431231][ T5793] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 567.751078][ T983] usb 7-1: USB disconnect, device number 70 [ 568.173745][T20738] lo: left allmulticast mode [ 568.230391][ T983] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 568.298644][ T30] audit: type=1400 audit(1788417438.306:1118): avc: denied { append } for pid=20743 comm="syz.4.5639" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 568.400413][ T983] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 568.414422][ T983] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 568.414468][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.434765][ T983] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 568.434779][ T983] usb 2-1: Manufacturer: syz [ 568.447951][ T983] usb 2-1: config 0 descriptor?? [ 568.519005][ T5793] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 568.551073][T16594] IPVS: starting estimator thread 0... [ 568.581050][ T983] rc_core: IR keymap rc-hauppauge not found [ 568.581066][ T983] Registered IR keymap rc-empty [ 568.581610][ T983] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 568.582382][ T983] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input101 [ 568.638878][T20754] IPVS: using max 77 ests per chain, 184800 per kthread [ 568.683012][ T5793] usb 9-1: unable to get BOS descriptor or descriptor too short [ 568.683041][ T5793] usb 9-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 568.702441][ T5793] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.702466][ T5793] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.729274][ T5793] usb 9-1: string descriptor 0 read error: -22 [ 568.729348][ T5793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.865346][ C0] igorplugusb 2-1:0.0: receive overflow, at least 3 lost [ 568.872750][T20757] rc rc0: two consecutive events of type space [ 569.066536][ T5793] usb 2-1: USB disconnect, device number 90 [ 569.166324][ T2333] usb 9-1: USB disconnect, device number 29 [ 569.824858][T20777] FAULT_INJECTION: forcing a failure. [ 569.824858][T20777] name failslab, interval 1, probability 0, space 0, times 0 [ 569.824887][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.4.5649 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.824902][T20777] Tainted: [L]=SOFTLOCKUP [ 569.824907][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 569.824914][T20777] Call Trace: [ 569.824918][T20777] [ 569.824922][T20777] dump_stack_lvl+0x100/0x190 [ 569.824943][T20777] should_fail_ex.cold+0x5/0xa [ 569.824959][T20777] should_failslab+0xc2/0x120 [ 569.824974][T20777] __kmalloc_node_noprof+0xff/0x880 [ 569.824987][T20777] ? get_callchain_buffers+0x1e5/0x380 [ 569.825008][T20777] get_callchain_buffers+0x1e5/0x380 [ 569.825024][T20777] ? security_capable+0x80/0x260 [ 569.825039][T20777] stack_map_alloc+0x316/0x610 [ 569.825057][T20777] map_create+0x874/0x30d0 [ 569.825072][T20777] ? find_held_lock+0x2b/0x80 [ 569.825087][T20777] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 569.825100][T20777] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 569.825118][T20777] ? __pfx_map_create+0x10/0x10 [ 569.825132][T20777] ? avc_has_perm+0x135/0x1e0 [ 569.825145][T20777] ? __pfx_avc_has_perm+0x10/0x10 [ 569.825157][T20777] ? __might_fault+0xc5/0x140 [ 569.825173][T20777] ? __might_fault+0xc5/0x140 [ 569.825191][T20777] ? selinux_bpf+0xfb/0x150 [ 569.825206][T20777] __sys_bpf+0x12a0/0x4a30 [ 569.825220][T20777] ? __pfx___sys_bpf+0x10/0x10 [ 569.825229][T20777] ? find_held_lock+0x2b/0x80 [ 569.825243][T20777] ? futex_wake+0x4ea/0x5e0 [ 569.825269][T20777] ? rcu_read_lock_any_held+0x6a/0x90 [ 569.825284][T20777] ? find_held_lock+0x2b/0x80 [ 569.825298][T20777] ? ksys_write+0x190/0x250 [ 569.825308][T20777] ? ksys_write+0x190/0x250 [ 569.825326][T20777] ? __x64_sys_futex+0x34f/0x4d0 [ 569.825339][T20777] ? __x64_sys_futex+0x358/0x4d0 [ 569.825355][T20777] ? xfd_validate_state+0x129/0x190 [ 569.825369][T20777] ? __x64_sys_bpf+0xce/0x140 [ 569.825379][T20777] __x64_sys_bpf+0xce/0x140 [ 569.825390][T20777] ? do_syscall_64+0xae/0x790 [ 569.825403][T20777] do_syscall_64+0x123/0x790 [ 569.825416][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.825427][T20777] RIP: 0033:0x7f858739e159 [ 569.825437][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.825454][T20777] RSP: 002b:00007f85882db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.825468][T20777] RAX: ffffffffffffffda RBX: 00007f8587625fa0 RCX: 00007f858739e159 [ 569.825475][T20777] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 569.825483][T20777] RBP: 00007f8587435024 R08: 0000000000000000 R09: 0000000000000000 [ 569.825491][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.825498][T20777] R13: 00007f8587626038 R14: 00007f8587625fa0 R15: 00007fff4449f7f8 [ 569.825513][T20777] [ 570.216373][T20781] netlink: 'syz.9.5653': attribute type 7 has an invalid length. [ 570.301888][T20781] netlink: 'syz.9.5653': attribute type 7 has an invalid length. [ 570.315948][T20785] misc userio: Can't change port id on an already running userio instance [ 570.498994][ T2333] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 570.649405][ T2333] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 570.660490][ T2333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.660513][ T2333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.660533][ T2333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.691936][ T2333] usb 5-1: config 0 descriptor?? [ 571.104772][ T2333] hid-steam 0003:28DE:1142.0058: unknown main item tag 0x0 [ 571.114521][ T2333] hid-steam 0003:28DE:1142.0058: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 571.179430][ T2333] hid-steam 0003:28DE:1142.0058: Steam wireless receiver connected [ 571.179460][ T2333] hid-steam 0003:28DE:1142.0058: No HID_FEATURE_REPORT present for ID 0 [ 571.179479][ T2333] hid-steam 0003:28DE:1142.0058: steam_probe:steam_get_conn_status failed with error -22 [ 571.213255][ T2333] hid-steam 0003:28DE:1142.0059: unknown main item tag 0x0 [ 571.252573][ T2333] hid-steam 0003:28DE:1142.0059: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 571.346416][ T2333] usb 5-1: USB disconnect, device number 17 [ 571.415388][T20808] fido_id[20808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 571.447450][ T2333] hid-steam 0003:28DE:1142.0058: Steam wireless receiver disconnected [ 571.809172][ T4923] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 572.569006][ T2333] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 572.729904][ T2333] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 572.740893][ T2333] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 572.740917][ T2333] usb 5-1: config 0 has no interface number 0 [ 572.757449][ T2333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.757471][ T2333] usb 5-1: Product: syz [ 572.757485][ T2333] usb 5-1: Manufacturer: syz [ 572.757495][ T2333] usb 5-1: SerialNumber: syz [ 572.782921][ T2333] usb 5-1: config 0 descriptor?? [ 573.585670][T20796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.586969][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5667'. [ 573.607350][ T2333] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 573.607368][ T2333] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 573.607475][ T2333] asix 5-1:0.251: probe with driver asix failed with error -71 [ 573.661020][ T2333] usb 5-1: USB disconnect, device number 18 [ 573.913002][ T30] audit: type=1400 audit(1788417443.926:1119): avc: denied { write } for pid=20832 comm="syz.1.5675" name="c_chmask" dev="configfs" ino=86395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 573.913038][ T30] audit: type=1400 audit(1788417443.926:1120): avc: denied { open } for pid=20832 comm="syz.1.5675" path="/863/config/usb_gadget/g1/functions/uac1.usb0/c_chmask" dev="configfs" ino=86395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 574.059509][ T5793] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 574.069448][ T30] audit: type=1326 audit(1788417444.086:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 574.069490][ T30] audit: type=1326 audit(1788417444.086:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 574.124895][ T30] audit: type=1326 audit(1788417444.136:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 574.124921][ T30] audit: type=1326 audit(1788417444.136:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 574.185039][ T30] audit: type=1326 audit(1788417444.196:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02db5e98e code=0x7ffc0000 [ 574.215642][ T30] audit: type=1326 audit(1788417444.226:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02db5e98e code=0x7ffc0000 [ 574.242369][ T5793] usb 9-1: Using ep0 maxpacket: 16 [ 574.243470][ T5793] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 574.259712][ T5793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 574.259819][ T30] audit: type=1326 audit(1788417444.266:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 574.260246][ T30] audit: type=1326 audit(1788417444.276:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.1.5677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02db5e98e code=0x7ffc0000 [ 574.300461][ T5793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.300480][ T5793] usb 9-1: Product: syz [ 574.300489][ T5793] usb 9-1: Manufacturer: syz [ 574.300497][ T5793] usb 9-1: SerialNumber: syz [ 574.357047][ T5793] usb 9-1: config 0 descriptor?? [ 574.363701][ T5793] hub 9-1:0.0: bad descriptor, ignoring hub [ 574.363715][ T5793] hub 9-1:0.0: probe with driver hub failed with error -5 [ 574.406470][ T5793] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.528206][T20842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.690438][ T5793] usb 9-1: USB disconnect, device number 30 [ 574.747965][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 574.772336][T20847] netlink: 'syz.6.5681': attribute type 8 has an invalid length. [ 574.772355][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5681'. [ 574.844947][T20849] FAULT_INJECTION: forcing a failure. [ 574.844947][T20849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 574.844974][T20849] CPU: 0 UID: 0 PID: 20849 Comm: syz.4.5682 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.844989][T20849] Tainted: [L]=SOFTLOCKUP [ 574.844993][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.845000][T20849] Call Trace: [ 574.845004][T20849] [ 574.845009][T20849] dump_stack_lvl+0x100/0x190 [ 574.845028][T20849] should_fail_ex.cold+0x5/0xa [ 574.845041][T20849] ? prepare_alloc_pages+0x16d/0x5b0 [ 574.845056][T20849] should_fail_alloc_page+0xeb/0x140 [ 574.845072][T20849] prepare_alloc_pages+0x1f0/0x5b0 [ 574.845088][T20849] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 574.845105][T20849] ? __pfx_get_page_from_freelist+0x10/0x10 [ 574.845122][T20849] ? prepare_alloc_pages+0x1f0/0x5b0 [ 574.845137][T20849] ? rcu_is_watching+0x13/0xc0 [ 574.845151][T20849] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 574.845171][T20849] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 574.845189][T20849] ? find_held_lock+0x2b/0x80 [ 574.845203][T20849] ? is_bpf_text_address+0x8a/0x1a0 [ 574.845216][T20849] ? is_bpf_text_address+0x8a/0x1a0 [ 574.845230][T20849] ? bpf_ksym_find+0x128/0x1c0 [ 574.845245][T20849] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 574.845262][T20849] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 574.845278][T20849] ? is_bpf_text_address+0x94/0x1a0 [ 574.845293][T20849] ? __kernel_text_address+0xd/0x30 [ 574.845319][T20849] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 574.845338][T20849] ? policy_nodemask+0xed/0x4f0 [ 574.845353][T20849] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 574.845377][T20849] __kasan_populate_vmalloc+0xf0/0x210 [ 574.845392][T20849] alloc_vmap_area+0x95d/0x2bb0 [ 574.845407][T20849] ? kasan_save_track+0x14/0x30 [ 574.845419][T20849] ? __kasan_kmalloc+0xaa/0xb0 [ 574.845430][T20849] ? __pfx_alloc_vmap_area+0x10/0x10 [ 574.845443][T20849] ? __get_vm_area_node+0x124/0x350 [ 574.845457][T20849] __get_vm_area_node+0x1ed/0x350 [ 574.845479][T20849] __vmalloc_node_range_noprof+0x268/0x1420 [ 574.845495][T20849] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 574.845509][T20849] ? __pfx_stack_trace_save+0x10/0x10 [ 574.845527][T20849] ? stack_depot_save_flags+0x27/0x9f0 [ 574.845543][T20849] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 574.845557][T20849] ? __kasan_kmalloc+0xaa/0xb0 [ 574.845569][T20849] ? do_syscall_64+0x123/0x790 [ 574.845583][T20849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 574.845602][T20849] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 574.845615][T20849] __vmalloc_node_noprof+0xad/0xf0 [ 574.845628][T20849] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 574.845644][T20849] __vmalloc_noprof+0xa3/0x120 [ 574.845658][T20849] ? __pfx___vmalloc_noprof+0x10/0x10 [ 574.845677][T20849] bpf_prog_alloc_no_stats+0x59/0x690 [ 574.845692][T20849] bpf_prog_alloc+0x3b/0x200 [ 574.845706][T20849] bpf_prog_create_from_user+0xb4/0x2e0 [ 574.845720][T20849] ? __pfx_seccomp_check_filter+0x10/0x10 [ 574.845736][T20849] do_seccomp+0x870/0x27c0 [ 574.845751][T20849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.845767][T20849] ? __pfx_do_seccomp+0x10/0x10 [ 574.845783][T20849] ? xfd_validate_state+0x129/0x190 [ 574.845801][T20849] do_syscall_64+0x123/0x790 [ 574.845814][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.845825][T20849] RIP: 0033:0x7f858739e159 [ 574.845835][T20849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.845846][T20849] RSP: 002b:00007f85882db028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 574.845857][T20849] RAX: ffffffffffffffda RBX: 00007f8587625fa0 RCX: 00007f858739e159 [ 574.845864][T20849] RDX: 00002000000006c0 RSI: 000000000000000a RDI: 0000000000000001 [ 574.845871][T20849] RBP: 00007f8587435024 R08: 0000000000000000 R09: 0000000000000000 [ 574.845877][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.845884][T20849] R13: 00007f8587626038 R14: 00007f8587625fa0 R15: 00007fff4449f7f8 [ 574.845898][T20849] [ 574.845931][T20849] syz.4.5682: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 574.845977][T20849] CPU: 0 UID: 0 PID: 20849 Comm: syz.4.5682 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.845992][T20849] Tainted: [L]=SOFTLOCKUP [ 574.845996][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.846003][T20849] Call Trace: [ 574.846007][T20849] [ 574.846012][T20849] dump_stack_lvl+0x100/0x190 [ 574.846029][T20849] warn_alloc.cold+0x9e/0xb2 [ 574.846042][T20849] ? __pfx_warn_alloc+0x10/0x10 [ 574.846058][T20849] ? lockdep_hardirqs_on+0x7d/0x110 [ 574.846071][T20849] ? __get_vm_area_node+0x2f0/0x350 [ 574.846087][T20849] ? __get_vm_area_node+0x22b/0x350 [ 574.846102][T20849] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 574.846116][T20849] ? __pfx_stack_trace_save+0x10/0x10 [ 574.846134][T20849] ? stack_depot_save_flags+0x27/0x9f0 [ 574.846149][T20849] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 574.846161][T20849] ? __kasan_kmalloc+0xaa/0xb0 [ 574.846172][T20849] ? do_syscall_64+0x123/0x790 [ 574.846185][T20849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 574.846204][T20849] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 574.846216][T20849] __vmalloc_node_noprof+0xad/0xf0 [ 574.846230][T20849] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 574.846244][T20849] __vmalloc_noprof+0xa3/0x120 [ 574.846257][T20849] ? __pfx___vmalloc_noprof+0x10/0x10 [ 574.846276][T20849] bpf_prog_alloc_no_stats+0x59/0x690 [ 574.846291][T20849] bpf_prog_alloc+0x3b/0x200 [ 574.846304][T20849] bpf_prog_create_from_user+0xb4/0x2e0 [ 574.846317][T20849] ? __pfx_seccomp_check_filter+0x10/0x10 [ 574.846333][T20849] do_seccomp+0x870/0x27c0 [ 574.846348][T20849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.846364][T20849] ? __pfx_do_seccomp+0x10/0x10 [ 574.846380][T20849] ? xfd_validate_state+0x129/0x190 [ 574.846399][T20849] do_syscall_64+0x123/0x790 [ 574.846413][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.846424][T20849] RIP: 0033:0x7f858739e159 [ 574.846433][T20849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.846443][T20849] RSP: 002b:00007f85882db028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 574.846453][T20849] RAX: ffffffffffffffda RBX: 00007f8587625fa0 RCX: 00007f858739e159 [ 574.846459][T20849] RDX: 00002000000006c0 RSI: 000000000000000a RDI: 0000000000000001 [ 574.846466][T20849] RBP: 00007f8587435024 R08: 0000000000000000 R09: 0000000000000000 [ 574.846479][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.846486][T20849] R13: 00007f8587626038 R14: 00007f8587625fa0 R15: 00007fff4449f7f8 [ 574.846500][T20849] [ 574.947897][T20849] Mem-Info: [ 574.947904][T20849] active_anon:13648 inactive_anon:7 isolated_anon:0 [ 574.947904][T20849] active_file:4477 inactive_file:56165 isolated_file:0 [ 574.947904][T20849] unevictable:0 dirty:401 writeback:0 [ 574.947904][T20849] slab_reclaimable:12762 slab_unreclaimable:129391 [ 574.947904][T20849] mapped:30937 shmem:2591 pagetables:1853 [ 574.947904][T20849] sec_pagetables:0 bounce:0 [ 574.947904][T20849] kernel_misc_reclaimable:0 [ 574.947904][T20849] free:1233314 free_pcp:12458 free_cma:0 [ 574.947932][T20849] Node 0 active_anon:54592kB inactive_anon:28kB active_file:17904kB inactive_file:224284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123580kB dirty:1604kB writeback:0kB shmem:10364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16512kB pagetables:7268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 574.947964][T20849] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 574.947992][T20849] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.948022][T20849] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 574.948040][T20849] Node 0 DMA32 free:970972kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:54592kB inactive_anon:28kB active_file:17904kB inactive_file:224284kB unevictable:0kB writepending:1604kB zspages:904kB present:3129332kB managed:2530264kB mlocked:0kB bounce:0kB free_pcp:49832kB local_pcp:49832kB free_cma:0kB [ 574.948070][T20849] lowmem_reserve[]: 0 0 0 0 0 [ 574.948087][T20849] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.948114][T20849] lowmem_reserve[]: 0 0 0 0 0 [ 574.948130][T20849] Node 1 Normal free:3946940kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:376kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.948159][T20849] lowmem_reserve[]: 0 0 0 0 0 [ 574.948175][T20849] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 574.948246][T20849] Node 0 DMA32: 2437*4kB (UM) 1019*8kB (UM) 365*16kB (UM) 266*32kB (UME) 208*64kB (UME) 112*128kB (UM) 71*256kB (M) 26*512kB (UM) 1*1024kB (U) 5*2048kB (UM) 212*4096kB (UM) = 971004kB [ 574.948326][T20849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 574.948375][T20849] Node 1 Normal: 1*4kB (U) 9*8kB (UM) 5*16kB (U) 5*32kB (U) 4*64kB (UM) 5*128kB (UM) 7*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (M) = 3946940kB [ 574.948451][T20849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.948459][T20849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 574.948473][T20849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.948481][T20849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 574.948489][T20849] 63256 total pagecache pages [ 574.948493][T20849] 27 pages in swap cache [ 574.948497][T20849] Free swap = 123924kB [ 574.948501][T20849] Total swap = 124996kB [ 574.948505][T20849] 2097051 pages RAM [ 574.948509][T20849] 0 pages HighMem/MovableOnly [ 574.948513][T20849] 432850 pages reserved [ 574.948516][T20849] 0 pages cma reserved [ 576.382122][T20861] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 576.382146][T20861] CPU: 0 UID: 0 PID: 20861 Comm: syz.4.5686 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.382164][T20861] Tainted: [L]=SOFTLOCKUP [ 576.382168][T20861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 576.382175][T20861] Call Trace: [ 576.382180][T20861] [ 576.382185][T20861] dump_stack_lvl+0x100/0x190 [ 576.382205][T20861] sysfs_warn_dup.cold+0x1c/0x28 [ 576.382223][T20861] sysfs_create_dir_ns+0x24b/0x2b0 [ 576.382238][T20861] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 576.382252][T20861] ? find_held_lock+0x2b/0x80 [ 576.382267][T20861] ? kobject_add_internal+0x25f/0x930 [ 576.382282][T20861] ? kobject_add_internal+0x25f/0x930 [ 576.382299][T20861] ? class_dir_child_ns_type+0xd/0x60 [ 576.382313][T20861] kobject_add_internal+0x2c8/0x930 [ 576.382330][T20861] kobject_add+0x16a/0x1e0 [ 576.382346][T20861] ? __pfx_kobject_add+0x10/0x10 [ 576.382361][T20861] ? get_device_parent+0x1b3/0x4c0 [ 576.382373][T20861] ? kobject_put+0xb9/0x640 [ 576.382392][T20861] device_add+0x294/0x1970 [ 576.382406][T20861] ? lockdep_init_map_type+0x5c/0x250 [ 576.382419][T20861] ? __pfx_device_add+0x10/0x10 [ 576.382431][T20861] ? lockdep_init_map_type+0x5c/0x250 [ 576.382443][T20861] ? __init_waitqueue_head+0xca/0x150 [ 576.382466][T20861] tty_register_device_attr+0x388/0x7f0 [ 576.382486][T20861] ? lockdep_init_map_type+0x5c/0x250 [ 576.382499][T20861] ? __pfx_tty_register_device_attr+0x10/0x10 [ 576.382521][T20861] ? tty_port_init+0x156/0x1c0 [ 576.382535][T20861] gsm_activate_mux+0x155/0x2a0 [ 576.382548][T20861] gsmld_ioctl+0xbbc/0x15c0 [ 576.382566][T20861] ? __pfx_gsmld_ioctl+0x10/0x10 [ 576.382590][T20861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.382604][T20861] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 576.382620][T20861] ? __pfx_gsmld_ioctl+0x10/0x10 [ 576.382632][T20861] tty_ioctl+0x11b4/0x1640 [ 576.382643][T20861] ? __pfx_tty_ioctl+0x10/0x10 [ 576.382653][T20861] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 576.382672][T20861] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 576.382691][T20861] ? __fget_files+0x34/0x3d0 [ 576.382710][T20861] ? selinux_file_ioctl+0x13b/0x290 [ 576.382726][T20861] ? selinux_file_ioctl+0xb6/0x290 [ 576.382743][T20861] ? __pfx_tty_ioctl+0x10/0x10 [ 576.382754][T20861] __x64_sys_ioctl+0x18e/0x210 [ 576.382772][T20861] do_syscall_64+0x123/0x790 [ 576.382786][T20861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.382798][T20861] RIP: 0033:0x7f858739e159 [ 576.382807][T20861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.382818][T20861] RSP: 002b:00007f85882ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.382829][T20861] RAX: ffffffffffffffda RBX: 00007f8587626090 RCX: 00007f858739e159 [ 576.382836][T20861] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 576.382843][T20861] RBP: 00007f8587435024 R08: 0000000000000000 R09: 0000000000000000 [ 576.382850][T20861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.382856][T20861] R13: 00007f8587626128 R14: 00007f8587626090 R15: 00007fff4449f7f8 [ 576.382871][T20861] [ 576.382907][T20861] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 576.987330][T20872] bridge1: entered promiscuous mode [ 576.993326][T20872] bridge1: entered allmulticast mode [ 577.416155][T20882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.251256][T20906] loop5: detected capacity change from 0 to 7 [ 578.259243][T20906] Dev loop5: unable to read RDB block 7 [ 578.264865][T20906] loop5: unable to read partition table [ 578.270629][T20906] loop5: partition table beyond EOD, truncated [ 578.270639][T20906] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 578.308851][ T2333] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 578.326302][T20907] syzkaller1: entered promiscuous mode [ 578.326322][T20907] syzkaller1: entered allmulticast mode [ 578.432704][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5706'. [ 578.460013][ T2333] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 578.472755][ T2333] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 578.472778][ T2333] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 578.472803][ T2333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.641598][T20912] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5707'. [ 579.157528][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 579.157550][ T30] audit: type=1400 audit(1788417449.166:1179): avc: denied { ioctl } for pid=20931 comm="syz.8.5715" path="socket:[86873]" dev="sockfs" ino=86873 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 579.719380][T14003] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 579.740221][ T2333] pegasus 5-1:1.0: can't reset MAC [ 579.740346][ T2333] pegasus 5-1:1.0: probe with driver pegasus failed with error -5 [ 579.761379][ T2333] usb 5-1: USB disconnect, device number 19 [ 579.869887][T14003] usb 9-1: Using ep0 maxpacket: 16 [ 579.875306][T14003] usb 9-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 579.885244][T14003] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 579.885274][T14003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.908320][T14003] usb 9-1: config 0 descriptor?? [ 580.332909][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.344846][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352664][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352679][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352691][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352703][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352716][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352727][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352739][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.352751][T14003] nzxt-kraken2 0003:1E71:170E.005A: unknown main item tag 0x0 [ 580.353175][T14003] nzxt-kraken2 0003:1E71:170E.005A: collection stack underflow [ 580.353186][T14003] nzxt-kraken2 0003:1E71:170E.005A: item 0 0 0 12 parsing failed [ 580.435769][T14003] nzxt-kraken2 0003:1E71:170E.005A: hid parse failed with -22 [ 580.435821][T14003] nzxt-kraken2 0003:1E71:170E.005A: probe with driver nzxt-kraken2 failed with error -22 [ 580.525842][T14003] usb 9-1: USB disconnect, device number 31 [ 580.671226][ T2333] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 580.830405][ T2333] usb 2-1: unable to get BOS descriptor or descriptor too short [ 580.830441][ T2333] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.850834][ T2333] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.865297][ T2333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 580.865318][ T2333] usb 2-1: SerialNumber: syz [ 581.143782][ T30] audit: type=1326 audit(1788417451.156:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.8.5725" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd2699e159 code=0x0 [ 581.507566][ T2333] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 581.507905][ T2333] mos7720 2-1:1.0: required endpoints missing [ 581.595335][ T30] audit: type=1400 audit(1788417451.606:1181): avc: denied { mount } for pid=20961 comm="syz.4.5727" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 581.713639][ T2333] usb 2-1: USB disconnect, device number 91 [ 581.895482][T20921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.329521][ T2333] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 582.489917][ T2333] usb 9-1: Using ep0 maxpacket: 8 [ 582.498936][ T2333] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 582.514287][ T2333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.514307][ T2333] usb 9-1: Product: syz [ 582.514322][ T2333] usb 9-1: Manufacturer: syz [ 582.514332][ T2333] usb 9-1: SerialNumber: syz [ 582.542516][ T2333] usb 9-1: config 0 descriptor?? [ 582.554168][ T2333] gspca_main: se401-2.14.0 probing 047d:5003 [ 582.787849][T20998] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 582.879346][ T983] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 582.968412][ T2333] gspca_se401: ExtraFeatures: 32 [ 582.968433][ T2333] gspca_se401: Too many frame sizes [ 583.040764][ T983] usb 7-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.40 [ 583.051243][ T983] usb 7-1: config 1 interface 0 has no altsetting 0 [ 583.060766][ T983] usb 7-1: string descriptor 0 read error: -22 [ 583.060824][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.103662][T20998] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 583.125094][T20998] overlayfs: failed to look up (tracing) for ino (-66) [ 583.175282][T14003] usb 9-1: USB disconnect, device number 32 [ 583.248110][ T30] audit: type=1400 audit(1788417453.256:1182): avc: denied { sys_nice } for pid=21006 comm="syz.1.5747" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 583.345838][ T30] audit: type=1326 audit(1788417453.356:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21006 comm="syz.1.5747" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 583.345881][ T30] audit: type=1326 audit(1788417453.356:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21006 comm="syz.1.5747" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 583.401131][ T30] audit: type=1326 audit(1788417453.416:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21006 comm="syz.1.5747" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 583.401159][ T30] audit: type=1326 audit(1788417453.416:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21006 comm="syz.1.5747" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02db9e159 code=0x7ffc0000 [ 583.460536][ T30] audit: type=1326 audit(1788417453.476:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21006 comm="syz.1.5747" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02db5e98e code=0x7ffc0000 [ 583.487957][ T30] audit: type=1326 audit(1788417453.496:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21006 comm="syz.1.5747" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02db5e98e code=0x7ffc0000 [ 583.674612][ T983] aquacomputer_d5next 0003:0C70:F014.005B: hidraw0: USB HID v0.05 Device [HID 0c70:f014] on usb-dummy_hcd.6-1/input0 [ 583.743310][ T983] usb 7-1: USB disconnect, device number 71 [ 583.838668][T21013] fido_id[21013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 584.190191][T14003] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 584.339853][T14003] usb 9-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 584.350745][T14003] usb 9-1: config 4 has an invalid interface number: 44 but max is 0 [ 584.350766][T14003] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 584.350781][T14003] usb 9-1: config 4 has no interface number 0 [ 584.350801][T14003] usb 9-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 584.393319][T14003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.393339][T14003] usb 9-1: Product: syz [ 584.393353][T14003] usb 9-1: Manufacturer: syz [ 584.393364][T14003] usb 9-1: SerialNumber: syz [ 584.845460][T14003] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 584.855464][T14003] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 584.867359][T14003] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 584.875776][T14003] usb 9-1: media controller created [ 584.884839][T14003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.929868][ T983] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 584.973056][T14003] DVB: Unable to find symbol dib7000p_attach() [ 584.973070][T14003] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 585.061030][T14003] rc_core: IR keymap rc-dib0700-rc5 not found [ 585.061089][T14003] Registered IR keymap rc-empty [ 585.061660][T14003] dvb-usb: could not initialize remote control. [ 585.061668][T14003] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 585.101250][ T983] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 585.113823][ T983] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 585.113851][ T983] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 585.113872][ T983] usb 5-1: config 1 interface 0 has no altsetting 0 [ 585.156499][ T983] usb 5-1: string descriptor 0 read error: -22 [ 585.156565][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.307662][T14003] usb 9-1: USB disconnect, device number 33 [ 585.343223][T14003] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 585.614494][ T983] hid_parser_main: 4126 callbacks suppressed [ 585.625994][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.636961][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.636989][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.637004][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.637019][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.637033][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.637046][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.637060][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.637074][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.637087][ T983] logitech 0003:046D:C626.005C: unknown main item tag 0x0 [ 585.761900][ T983] logitech 0003:046D:C626.005C: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 585.822952][ T983] usb 5-1: USB disconnect, device number 20 [ 585.919579][T21070] webusb: landingPage URL too long [ 585.947633][T21068] fido_id[21068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 586.319667][ T983] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 586.469393][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 586.475081][ T983] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 586.484707][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.484734][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 586.484757][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.519963][ T983] usb 2-1: config 0 descriptor?? [ 586.541908][ T983] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 586.665311][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 586.665336][ T30] audit: type=1400 audit(1788417456.676:1222): avc: denied { ioctl } for pid=21091 comm="syz.6.5781" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 586.880241][ T4923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.894337][ T4923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.902045][ T4923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.912486][ T4923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.920483][ T4923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.958936][ T983] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 587.112003][T17457] bond0: (slave syz_tun): Releasing backup interface [ 587.119713][ T983] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 587.143426][ T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.143449][ T983] usb 9-1: Product: syz [ 587.143464][ T983] usb 9-1: Manufacturer: syz [ 587.143474][ T983] usb 9-1: SerialNumber: syz [ 587.170752][ T983] usb 9-1: config 0 descriptor?? [ 587.179378][T10727] smc: removing ib device syz1 [ 587.358372][T10727] smbdirect: ib_dev[syz1] removed [ 587.623499][ T983] usb 9-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 587.830909][ T983] usb 9-1: no permanent extended address found, random address set [ 587.830931][ T983] usb 9-1: atusb_probe: initialization failed, error = -524 [ 587.831024][ T983] atusb 9-1:0.0: probe with driver atusb failed with error -524 [ 587.979585][T21133] input: syz0 as /devices/virtual/input/input104 [ 588.043059][ T983] usb 9-1: USB disconnect, device number 34 [ 588.359889][T21141] ip6gre1: entered promiscuous mode [ 588.366282][T21141] ip6gre1: entered allmulticast mode [ 588.373940][T16594] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.381651][T16594] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.401861][T14003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.412144][T21141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.606448][ T60] smc: removing ib device syz0 [ 588.718524][ T60] smbdirect: ib_dev[syz0] removed [ 588.726692][T14003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.009207][ T5605] Bluetooth: hci0: command tx timeout [ 589.099074][T14003] usb 2-1: USB disconnect, device number 92 [ 589.250714][ T5793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.453453][ T983] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 589.521117][T14003] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 589.610624][ T983] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 589.623489][ T983] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 589.623512][ T983] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 589.623531][ T983] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.623553][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.678721][T21159] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 589.678780][T21159] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 589.694267][T14003] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 589.704307][T14003] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.704330][T14003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.742393][ T983] pl2303 7-1:1.0: pl2303 converter detected [ 589.756315][ T983] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 589.985230][T14003] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 589.996916][T21097] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.998623][T21097] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.998685][T21097] bridge_slave_0: entered allmulticast mode [ 590.036388][T21097] bridge_slave_0: entered promiscuous mode [ 590.048375][T21097] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.062354][T21097] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.062435][T21097] bridge_slave_1: entered allmulticast mode [ 590.087386][T21097] bridge_slave_1: entered promiscuous mode [ 590.100500][T21159] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 590.109774][T21159] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 590.116811][T21159] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 590.127147][T21159] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 590.135816][T21159] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 590.161023][T14003] wwan wwan0: port wwan0qmi0 attached [ 590.266585][T14003] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, ba:36:b5:40:bd:b5 [ 590.413822][T21158] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 590.426935][T21158] pl2303 ttyUSB0: error sending break = -32 [ 590.435648][T14003] usb 7-1: USB disconnect, device number 72 [ 590.474698][T14003] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 590.483923][T14003] pl2303 7-1:1.0: device disconnected [ 590.504777][ T5793] usb 2-1: USB disconnect, device number 93 [ 590.506155][ T5793] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 590.554975][T21097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.575894][T21097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.697838][ T5793] wwan wwan0: port wwan0qmi0 disconnected [ 590.780460][T14004] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 590.874101][T21097] team0: Port device team_slave_0 added [ 590.886513][T21097] team0: Port device team_slave_1 added [ 590.938968][T14004] usb 5-1: Using ep0 maxpacket: 32 [ 590.945577][T14004] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 590.955670][T14004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 590.955694][T14004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 590.955712][T14004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 590.998342][T14004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.998364][T14004] usb 5-1: Product: syz [ 590.998378][T14004] usb 5-1: Manufacturer: syz [ 590.998388][T14004] usb 5-1: SerialNumber: syz [ 591.073097][T14004] usb 5-1: config 0 descriptor?? [ 591.089974][ T5605] Bluetooth: hci0: command tx timeout [ 591.148005][T21097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.148020][T21097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.148038][T21097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.148951][T21097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.148961][T21097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.148975][T21097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.196539][T14004] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input105 [ 591.232314][ T4957] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 591.276808][ T4957] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 591.374060][ T4957] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 591.391423][ T4957] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 591.406040][T14004] usb 5-1: USB disconnect, device number 21 [ 591.618405][T21097] hsr_slave_0: entered promiscuous mode [ 591.637004][T21097] hsr_slave_1: entered promiscuous mode [ 591.646850][T21097] debugfs: 'hsr0' already exists in 'hsr' [ 591.646868][T21097] Cannot create hsr debugfs directory [ 591.757317][T21194] batadv_slave_0: entered promiscuous mode [ 591.854955][T21197] batadv_slave_0: left promiscuous mode [ 592.022959][ T30] audit: type=1400 audit(1788417462.036:1223): avc: denied { write } for pid=21179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.208997][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 592.361578][ T30] audit: type=1400 audit(1788417462.376:1224): avc: denied { write } for pid=21210 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.618183][T21222] ip_tables: iptables: counters copy to user failed while replacing table [ 592.994406][ T30] audit: type=1400 audit(1788417463.006:1225): avc: denied { read } for pid=21231 comm="syz.1.5823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 593.090572][ T983] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 593.170999][ T4923] Bluetooth: hci0: command tx timeout [ 593.190124][T21242] netlink: 'syz.1.5826': attribute type 1 has an invalid length. [ 593.249174][ T983] usb 7-1: Using ep0 maxpacket: 8 [ 593.256237][ T983] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 593.269546][ T983] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 593.283563][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.283583][ T983] usb 7-1: Product: syz [ 593.283597][ T983] usb 7-1: Manufacturer: syz [ 593.283607][ T983] usb 7-1: SerialNumber: syz [ 593.334826][ T983] usb 7-1: config 0 descriptor?? [ 593.364629][ T983] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 593.556377][ T30] audit: type=1400 audit(1788417463.566:1226): avc: denied { write } for pid=21223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.586226][T21251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 593.606988][T21251] kvm: kvm [21250]: vcpu0, guest rIP: 0x1 Unhandled WRMSR(0x4000006f) = 0x6 [ 593.827046][ T30] audit: type=1400 audit(1788417463.836:1227): avc: denied { write } for pid=21256 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.027687][T21242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 594.104357][T21244] bond7: (slave geneve4): making interface the new active one [ 594.104869][T21244] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 594.407324][ T983] gspca_zc3xx: reg_w_i err -71 [ 594.493303][T21280] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5834'. [ 594.559959][T21284] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5834'. [ 594.739333][ T30] audit: type=1400 audit(1788417464.756:1228): avc: denied { write } for pid=21264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.901896][T16578] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.902578][T16578] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.943408][ T30] audit: type=1400 audit(1788417464.956:1229): avc: denied { write } for pid=21293 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.989740][ T983] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 594.989799][ T983] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 595.023786][ T983] usb 7-1: USB disconnect, device number 73 [ 595.250253][ T5605] Bluetooth: hci0: command tx timeout [ 595.270884][T16578] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.270911][T16578] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.398740][T16578] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.398767][T16578] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.529976][T16578] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.549800][T16578] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.781408][ T30] audit: type=1400 audit(1788417465.796:1230): avc: denied { write } for pid=21299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.932805][T21318] input: syz0 as /devices/virtual/input/input106 [ 595.966065][ T30] audit: type=1400 audit(1788417465.976:1231): avc: denied { write } for pid=21316 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.223901][T16578] bond2: left allmulticast mode [ 596.234429][T16578] bond2: left promiscuous mode [ 596.240225][T16578] bridge0: port 3(bond2) entered disabled state [ 596.254011][T16578] bridge_slave_1: left allmulticast mode [ 596.254030][T16578] bridge_slave_1: left promiscuous mode [ 596.254122][T16578] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.275641][T16578] bridge_slave_0: left allmulticast mode [ 596.283180][T16578] bridge_slave_0: left promiscuous mode [ 596.292322][T16578] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.509751][ T30] audit: type=1400 audit(1788417466.516:1232): avc: denied { write } for pid=21322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.541777][T16578] gretap0 (unregistering): left promiscuous mode [ 596.657954][T16578] [ 596.660285][T16578] ====================================================== [ 596.667283][T16578] WARNING: possible circular locking dependency detected [ 596.674274][T16578] syzkaller #0 Tainted: G L [ 596.680220][T16578] ------------------------------------------------------ [ 596.687205][T16578] kworker/u8:40/16578 is trying to acquire lock: [ 596.693495][T16578] ffff888058f50e70 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: ipvlan_uninit+0x16d/0x2f0 [ 596.703294][T16578] [ 596.703294][T16578] but task is already holding lock: [ 596.710628][T16578] ffff88802b7568c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x20f/0x11e0 [ 596.720506][T16578] [ 596.720506][T16578] which lock already depends on the new lock. [ 596.720506][T16578] [ 596.730873][T16578] [ 596.730873][T16578] the existing dependency chain (in reverse order) is: [ 596.739854][T16578] [ 596.739854][T16578] -> #1 (&port->pnodes_lock){+.+.}-{4:4}: [ 596.747721][T16578] lock_acquire+0x1d1/0x380 [ 596.752716][T16578] __mutex_lock+0x1a4/0x1bd0 [ 596.757800][T16578] ipvlan_device_event+0x20f/0x11e0 [ 596.763492][T16578] notifier_call_chain+0x99/0x3f0 [ 596.769008][T16578] call_netdevice_notifiers_info+0xbe/0x110 [ 596.775393][T16578] call_netdevice_notifiers+0x7c/0xb0 [ 596.781256][T16578] xdp_set_features_flag_locked+0x16e/0x220 [ 596.787642][T16578] xdp_set_features_flag+0x2d/0x40 [ 596.793245][T16578] bond_xdp_set_features+0x20d/0x350 [ 596.799025][T16578] bond_enslave+0x57ed/0x5cb0 [ 596.804199][T16578] do_set_master+0x40f/0x730 [ 596.809278][T16578] do_setlink.isra.0+0xb2b/0x3e60 [ 596.814797][T16578] rtnl_newlink+0x13c1/0x2620 [ 596.819966][T16578] rtnetlink_rcv_msg+0x95e/0xe90 [ 596.825394][T16578] netlink_rcv_skb+0x159/0x420 [ 596.830662][T16578] netlink_unicast+0x585/0x850 [ 596.835931][T16578] netlink_sendmsg+0x8b0/0xda0 [ 596.841191][T16578] ____sys_sendmsg+0xa4d/0xbe0 [ 596.846448][T16578] ___sys_sendmsg+0x190/0x1e0 [ 596.851628][T16578] __sys_sendmsg+0x160/0x210 [ 596.856707][T16578] do_syscall_64+0x123/0x790 [ 596.861787][T16578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.868171][T16578] [ 596.868171][T16578] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 596.876562][T16578] check_prev_add+0xeb/0xe60 [ 596.881641][T16578] __lock_acquire+0x1492/0x1ec0 [ 596.886981][T16578] lock_acquire+0x1d1/0x380 [ 596.891975][T16578] __mutex_lock+0x1a4/0x1bd0 [ 596.897057][T16578] ipvlan_uninit+0x16d/0x2f0 [ 596.902141][T16578] unregister_netdevice_many_notify+0x1407/0x2150 [ 596.909055][T16578] ipvlan_device_event+0xf01/0x11e0 [ 596.914747][T16578] notifier_call_chain+0x99/0x3f0 [ 596.920266][T16578] call_netdevice_notifiers_info+0xbe/0x110 [ 596.926654][T16578] unregister_netdevice_many_notify+0x1149/0x2150 [ 596.933558][T16578] ops_undo_list+0x8ff/0xab0 [ 596.938639][T16578] cleanup_net+0x499/0x920 [ 596.943545][T16578] process_one_work+0xac7/0x1b10 [ 596.948979][T16578] worker_thread+0x5ef/0xe50 [ 596.954063][T16578] kthread+0x373/0x450 [ 596.958625][T16578] ret_from_fork+0x730/0xd60 [ 596.963705][T16578] ret_from_fork_asm+0x1a/0x30 [ 596.968969][T16578] [ 596.968969][T16578] other info that might help us debug this: [ 596.968969][T16578] [ 596.979163][T16578] Possible unsafe locking scenario: [ 596.979163][T16578] [ 596.986579][T16578] CPU0 CPU1 [ 596.991912][T16578] ---- ---- [ 596.997245][T16578] lock(&port->pnodes_lock); [ 597.001902][T16578] lock(&dev_instance_lock_key#2); [ 597.009590][T16578] lock(&port->pnodes_lock); [ 597.016753][T16578] lock(&dev_instance_lock_key#2); [ 597.021934][T16578] [ 597.021934][T16578] *** DEADLOCK *** [ 597.021934][T16578] [ 597.030044][T16578] locks held by kworker/u8:40/16578: 5, last CPU#0: [ 597.036599][T16578] #0: ffff88801d2d8940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 597.046913][T16578] #1: ffffc90004987d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 597.056793][T16578] #2: ffffffff90cb6a48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 597.066061][T16578] #3: ffffffff90ccf540 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 597.075068][T16578] #4: ffff88802b7568c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x20f/0x11e0 [ 597.085383][T16578] [ 597.085383][T16578] stack backtrace: [ 597.091242][T16578] CPU: 0 UID: 0 PID: 16578 Comm: kworker/u8:40 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.102405][T16578] Tainted: [L]=SOFTLOCKUP [ 597.106698][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 597.116724][T16578] Workqueue: netns cleanup_net [ 597.121461][T16578] Call Trace: [ 597.124713][T16578] [ 597.127617][T16578] dump_stack_lvl+0x100/0x190 [ 597.132272][T16578] print_circular_bug.cold+0x178/0x1be [ 597.137707][T16578] check_noncircular+0x146/0x160 [ 597.142624][T16578] check_prev_add+0xeb/0xe60 [ 597.147185][T16578] __lock_acquire+0x1492/0x1ec0 [ 597.152010][T16578] lock_acquire+0x1d1/0x380 [ 597.156483][T16578] ? ipvlan_uninit+0x16d/0x2f0 [ 597.161221][T16578] ? __pfx___might_resched+0x10/0x10 [ 597.166475][T16578] ? do_raw_spin_lock+0x128/0x260 [ 597.171471][T16578] __mutex_lock+0x1a4/0x1bd0 [ 597.176033][T16578] ? ipvlan_uninit+0x16d/0x2f0 [ 597.180780][T16578] ? ipvlan_uninit+0x16d/0x2f0 [ 597.185534][T16578] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 597.191310][T16578] ? lockdep_hardirqs_on+0x7d/0x110 [ 597.196480][T16578] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 597.202256][T16578] ? __pfx___mutex_lock+0x10/0x10 [ 597.207250][T16578] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 597.212680][T16578] ? ipvlan_uninit+0x163/0x2f0 [ 597.217417][T16578] ? unregister_netdevice_many_notify+0x1407/0x2150 [ 597.223974][T16578] ? ipvlan_device_event+0xf01/0x11e0 [ 597.229322][T16578] ? unregister_netdevice_many_notify+0x1149/0x2150 [ 597.235878][T16578] ? ops_undo_list+0x8ff/0xab0 [ 597.240612][T16578] ? ret_from_fork_asm+0x1a/0x30 [ 597.245520][T16578] ? free_percpu+0x720/0x1510 [ 597.250182][T16578] ? ipvlan_uninit+0x16d/0x2f0 [ 597.254918][T16578] ipvlan_uninit+0x16d/0x2f0 [ 597.259484][T16578] ? __pfx_ipvlan_uninit+0x10/0x10 [ 597.264569][T16578] ? __pfx_ipvlan_uninit+0x10/0x10 [ 597.269654][T16578] unregister_netdevice_many_notify+0x1407/0x2150 [ 597.276040][T16578] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 597.282773][T16578] ? netdev_upper_dev_unlink+0x83/0xb0 [ 597.288207][T16578] ? __ipvlan_link_delete+0x35a/0x4c0 [ 597.293554][T16578] ipvlan_device_event+0xf01/0x11e0 [ 597.298726][T16578] ? __pfx_ipvlan_device_event+0x10/0x10 [ 597.304333][T16578] ? bond_netdev_event+0xeb/0xcc0 [ 597.309343][T16578] notifier_call_chain+0x99/0x3f0 [ 597.314343][T16578] call_netdevice_notifiers_info+0xbe/0x110 [ 597.320207][T16578] unregister_netdevice_many_notify+0x1149/0x2150 [ 597.326593][T16578] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 597.333327][T16578] ? lockdep_hardirqs_on+0x7d/0x110 [ 597.338498][T16578] ? mutex_is_locked+0x17/0x60 [ 597.343232][T16578] ? rtnl_is_locked+0x15/0x20 [ 597.347884][T16578] ops_undo_list+0x8ff/0xab0 [ 597.352457][T16578] ? __pfx_ops_undo_list+0x10/0x10 [ 597.357548][T16578] ? idr_destroy+0x62/0x2e0 [ 597.362027][T16578] cleanup_net+0x499/0x920 [ 597.366416][T16578] ? __pfx_cleanup_net+0x10/0x10 [ 597.371333][T16578] ? process_one_work+0xa2c/0x1b10 [ 597.376419][T16578] ? process_one_work+0x906/0x1b10 [ 597.381506][T16578] process_one_work+0xac7/0x1b10 [ 597.386421][T16578] ? __pfx_process_one_work+0x10/0x10 [ 597.391769][T16578] ? lock_acquire+0x1d1/0x380 [ 597.396417][T16578] ? __pfx_cleanup_net+0x10/0x10 [ 597.401338][T16578] worker_thread+0x5ef/0xe50 [ 597.405906][T16578] ? kthread+0x13a/0x450 [ 597.410120][T16578] ? __pfx_worker_thread+0x10/0x10 [ 597.415207][T16578] kthread+0x373/0x450 [ 597.419249][T16578] ? __pfx_kthread+0x10/0x10 [ 597.423814][T16578] ret_from_fork+0x730/0xd60 [ 597.428375][T16578] ? __pfx_ret_from_fork+0x10/0x10 [ 597.433455][T16578] ? rcu_is_watching+0x13/0xc0 [ 597.438192][T16578] ? __switch_to+0x800/0x10f0 [ 597.442852][T16578] ? __pfx_kthread+0x10/0x10 [ 597.447416][T16578] ret_from_fork_asm+0x1a/0x30 [ 597.452153][T16578] [ 597.470743][T21276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.665397][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 597.665416][ T30] audit: type=1400 audit(1788417467.666:1234): avc: denied { write } for pid=21344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.717649][ T30] audit: type=1400 audit(1788417467.726:1235): avc: denied { write } for pid=21356 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.742748][T16578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.752596][T16578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.762098][T16578] bond0 (unregistering): Released all slaves [ 597.771626][T16578] bond1 (unregistering): Released all slaves [ 597.780020][T16578] bond2 (unregistering): Released all slaves [ 597.790374][T21097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 597.791261][T21097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.791557][T21097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 597.792307][T21097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.792562][T21097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 597.793355][T21097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.793604][T21097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 597.794368][T21097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.866248][T16578] tipc: Left network mode [ 597.904051][T16578] dummy0: left promiscuous mode [ 597.913691][T16578] hsr_slave_0: left promiscuous mode [ 597.920012][T16578] hsr_slave_1: left promiscuous mode [ 597.920214][T16578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.920228][T16578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.920424][T16578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.920434][T16578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.956791][T16578] veth1_macvtap: left promiscuous mode [ 597.956809][T16578] veth0_macvtap: left promiscuous mode [ 597.956855][T16578] veth0_vlan: left promiscuous mode [ 598.102640][T21097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.143328][T21097] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.152285][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.152318][T10723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.169374][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.169404][T10723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.400364][ T30] audit: type=1400 audit(1788417468.416:1236): avc: denied { write } for pid=21364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.478497][ T30] audit: type=1400 audit(1788417468.486:1237): avc: denied { write } for pid=21382 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.553992][T21097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.586686][T21097] veth0_vlan: entered promiscuous mode [ 598.596449][T21097] veth1_vlan: entered promiscuous mode [ 598.618285][T21097] veth0_macvtap: entered promiscuous mode [ 598.627970][T21097] veth1_macvtap: entered promiscuous mode [ 598.645233][T21097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.657155][T21097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.691636][T21097] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 598.715523][T10717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.715538][T10717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.732294][T10717] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.732403][T10717] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.732421][T10717] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.732437][T10717] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.771435][T21097] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 598.800911][T16578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.800926][T16578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.846540][ T30] audit: type=1400 audit(1788417468.856:1238): avc: denied { write } for pid=21387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.896388][ T30] audit: type=1400 audit(1788417468.906:1239): avc: denied { write } for pid=21398 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.016750][ T30] audit: type=1400 audit(1788417469.026:1240): avc: denied { write } for pid=21400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.069978][ T30] audit: type=1400 audit(1788417469.086:1241): avc: denied { write } for pid=21411 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.191814][ T30] audit: type=1400 audit(1788417469.206:1242): avc: denied { write } for pid=21413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.240775][ T30] audit: type=1400 audit(1788417469.256:1243): avc: denied { write } for pid=21424 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.059485][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 600.204883][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 600.211488][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.365928][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 600.512645][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5