last executing test programs: 3m39.911934085s ago: executing program 32 (id=1149): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 3m2.516690646s ago: executing program 33 (id=1396): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m54.04524087s ago: executing program 34 (id=1657): r0 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x2, 0x3, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000000580)=[{0x0, 0x1}, {}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000006480)=[{0x0, 0x1}], 0x1) 2m16.354205793s ago: executing program 35 (id=2102): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000540)="857ec1", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="30f3", 0x2}], 0x1}}], 0x4, 0x40480c0) 2m13.285239224s ago: executing program 36 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 2m3.855748388s ago: executing program 2 (id=2241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x48}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2m3.713708062s ago: executing program 2 (id=2244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100020000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m3.666365784s ago: executing program 2 (id=2246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 2m3.546701365s ago: executing program 2 (id=2248): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 2m3.384798445s ago: executing program 2 (id=2253): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m3.113404898s ago: executing program 2 (id=2258): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x2ddfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xfff2}, {0xfff1, 0x2}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x80) 1m49.268296986s ago: executing program 6 (id=2388): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x0, 0xe, {0x8, 0xb, 0x1, 0x2, 0x1, 0xf, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3b7, 0x8, 0x6, 0x0, {0x8, 0x25, 0x1, 0x1, 0x28, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x6, 0x8, {0x8, 0x25, 0x1, 0x3, 0xc, 0x2, 0x1}}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 1m47.99442114s ago: executing program 37 (id=2258): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x2ddfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xfff2}, {0xfff1, 0x2}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x80) 1m47.761412328s ago: executing program 6 (id=2405): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac14141608000740000000050800048004000380080008400000a90224000f8008000140000005d5080003400000000e080002"], 0x98}}, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m47.538780849s ago: executing program 6 (id=2409): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3, 0x0, 0x2, 0x0, 0x6}) 1m47.408956034s ago: executing program 6 (id=2411): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x10dc83, 0x0) 1m47.332167897s ago: executing program 6 (id=2413): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000011000000850000000700000095"], 0x0, 0x2a7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m46.918354305s ago: executing program 6 (id=2419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="d80000001701"], 0xd8, 0x80}], 0x1, 0x0) 1m46.488204489s ago: executing program 38 (id=2419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="d80000001701"], 0xd8, 0x80}], 0x1, 0x0) 1m17.774677912s ago: executing program 8 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}]}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 1m16.33591318s ago: executing program 8 (id=2709): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 1m16.114672741s ago: executing program 8 (id=2712): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m15.862045403s ago: executing program 8 (id=2715): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m15.687653754s ago: executing program 8 (id=2718): socket(0x10, 0x803, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m15.355629714s ago: executing program 8 (id=2724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m15.12015334s ago: executing program 39 (id=2724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.337819612s ago: executing program 0 (id=3223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 28.107086518s ago: executing program 0 (id=3226): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 27.992722587s ago: executing program 0 (id=3227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000000100)="a92e81d0991828e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x20004801}], 0x1, 0x40000) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000380)=""/139, 0x8b}], 0x1}, 0x6}], 0x1, 0x40002120, 0x0) 27.851771251s ago: executing program 0 (id=3230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@broadcast, @empty, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "0e68d940ef41bd31c9d0f60cb9146752a18ae3ecffa5c69a", "416bdcb2f4c06fe12fa97b3a2f47b08f71242d80164c6a557c8b609fba4d1850"}}}}}}}, 0x72) 27.56055634s ago: executing program 0 (id=3234): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xb55) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 27.371268257s ago: executing program 0 (id=3240): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 25.152017955s ago: executing program 9 (id=3274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 24.93207754s ago: executing program 9 (id=3278): syz_clone(0x4b40100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 24.581858972s ago: executing program 9 (id=3286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 24.418928529s ago: executing program 9 (id=3289): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 24.325425647s ago: executing program 9 (id=3291): preadv(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x8080) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 24.074236154s ago: executing program 9 (id=3294): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) 23.956400141s ago: executing program 40 (id=3294): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) 12.168100073s ago: executing program 41 (id=3240): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 7.407880405s ago: executing program 4 (id=3423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x7, 0x6, "0d98c5", 0x1000, 0x2f, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x39}, [@hopopts={0x4}]}}}}}}}}, 0x72) 6.991385314s ago: executing program 4 (id=3428): unshare(0x22020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='pids.events\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) 6.923653149s ago: executing program 4 (id=3430): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.514809725s ago: executing program 1 (id=3453): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 4.378258013s ago: executing program 1 (id=3454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048fa8d33", 0x50}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/61, 0x40}], 0x2}, 0x0) 4.346111681s ago: executing program 1 (id=3455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/132, 0x84) 4.295637207s ago: executing program 1 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) creat(&(0x7f0000002740)='./gadget/ep1in-bulk\x00', 0x0) 4.23910249s ago: executing program 1 (id=3457): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x0, 0x15, 0x8, "91e1de54cb32d47d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.840224495s ago: executing program 4 (id=3463): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 3.659965005s ago: executing program 4 (id=3465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2.344266434s ago: executing program 1 (id=3471): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 2.086558949s ago: executing program 5 (id=3476): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009b80)={&(0x7f00000099c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005240)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x8001}, {0x7, 0x4}, {0x2, 0xff}, {0x800, 0x378e}, {0x8, 0x5}, {0x6, 0x5}, {0x1, 0xfff}, {0x9, 0x4a}, {0x2, 0xfffffffffffffff7}, {0x6}, {0x2, 0x40}, {0x9, 0xfffffffffffffff7}, {0x5, 0x4}, {0x2, 0x4}, {0x401, 0x2}, {0xfffffffffffffff2, 0x3}, {0x2}, {0xe, 0x1}, {0x7, 0x8000000000000000}, {0x1, 0x8}, {0x4, 0x7}, {0xffffffffffffffff, 0x71f}, {0x0, 0xe}, {0xfffffffffffffffe}, {0x5, 0x100000000}, {0x80000000, 0x5}, {0x9, 0x10000000000ed06}, {0x37, 0xfffffffffffffffc}, {0x2, 0x1ff}, {0x8001, 0x3}, {0x7, 0x200}, {0x7, 0xa}, {0x10, 0x7ff}, {0x10000, 0xa8}, {0xb1, 0x4}, {0x89, 0x2}, {0x3, 0x1}, {0x8, 0x6a5}, {0x357, 0x1}, {0x4, 0x3}, {0xe, 0x3}, {0xfffffffffffffffe, 0x7ff}, {0x4000000038, 0x8}, {0x3ff, 0x8001}, {0x732, 0x100000000}, {0x5, 0xfffffffffffffff2}, {0x4, 0x5}, {0x4, 0x40}, {0x3, 0x7f}, {0x9, 0xf4}, {0x0, 0x4}, {0x7, 0x2094}, {0xffffffff0000, 0x7ff}, {0x8, 0x8}, {0x1, 0x9}, {0xff3e, 0x6}, {0x1000, 0x9}, {0xffffffffffffab52, 0x30}, {0x7, 0xc}, {0xa1f, 0x8}, {0x773, 0x9}, {0x9, 0x3}, {0x80000000, 0x7f}, {0xffffffffffffffff, 0x10001}, {0xfff, 0x5c}, {0x1, 0x7fffffffffffffff}, {0x9162, 0x2}, {0xfffffffffffffffe, 0x7}, {0xcaa, 0x1ff}, {0x0, 0x8}, {0xffffffffffffffff, 0x6}, {0xfffffffffffffffd, 0x7}, {0x9, 0x7fffffffffffffff}, {0x9, 0x9}, {0xb5, 0x8000}, {0x5, 0x9}, {0x7, 0xfffffffffffffff6}, {0x6, 0x7f6000000}, {0x7, 0x2}, {0xfff, 0x10}, {0x8, 0x7ab}, {0x5, 0x101}, {0x1, 0x9}, {0x2, 0x5}, {0x9, 0x555}, {0x4, 0x9}, {0xcdb, 0x5}, {0xe6c, 0x81}, {0x0, 0xae33}, {0x11b2, 0x808}, {0x2, 0x8}, {0x4, 0x4}, {0x0, 0x2}, {0x6, 0xfffffffffffffffa}, {0x3, 0x80000001}, {0x5, 0x39}, {0xffffffffffffffff, 0x7}, {0x2a7, 0xfffffffffffffffd}, {0x9, 0x1}, {0x5, 0x1}, {0x101, 0x7}, {0xdb, 0x6}, {0x80000001, 0xb}, {0x100, 0x1}, {0x5, 0x89}, {0x7fffffff, 0xe}, {0x8, 0x39d2}, {0x3, 0x2}, {0xd65, 0x9}, {0x1, 0x6}, {0x81, 0x7fff}, {0x2, 0x3}, {0x1, 0x6}, {0x8, 0x1}, {}, {0x0, 0x9}, {0xfffffffffffffff9, 0x2}, {0x8, 0x6}, {0x1000, 0x400}, {0x6, 0xffffffff}, {0x2, 0xf4fd}, {0x7, 0x6}, {0xc, 0xdf4}, {0x1, 0x7}, {0x1, 0x3}, {0x9666, 0x4}, {0xfff, 0x6}, {0x3, 0x53ed}, {0x0, 0x74}, {0x5, 0x100000001}, {0x3, 0x2a7}, {0x401, 0x3}, {0x5}, {0x8, 0x4}, {0xffff}, {0x6, 0x8}, {0x9, 0xff}, {0x0, 0xffff}, {0x1, 0xffffffffffffff93}, {0x141, 0x860}, {0x3, 0x5}, {0x42, 0x3}, {0xfffffffffffffffa, 0xad}, {0x2, 0x8}, {0xffffffff, 0x1c}, {0x9, 0x80}, {0x606}, {0xeab1, 0x7}, {0xb, 0x8}, {0x4684, 0xff}, {0x4, 0x8}, {0x6, 0x7}, {0x14, 0x8}, {0x40, 0x9}, {0x7a}, {0x6, 0x1}, {0x6, 0x6}, {0x3, 0x3}, {0x4, 0x1}, {0x100000001, 0x8000}, {0xff, 0x1000}, {0xfffffffffffffe00, 0x9}, {0x7fffffffffffffff, 0x1}, {0x1, 0x10040000000000}, {0x2800000000000000, 0x2}, {0x4, 0x9f3b}, {0x8, 0x10001}, {0x9e2a, 0x7}, {0x800, 0x9}, {0x1, 0x7}, {0x4, 0x2}, {0x132, 0x3}, {0x0, 0x1ff}, {0x101, 0x198}, {0x8, 0xc}, {0x1, 0x6}, {0x17, 0x80000001}, {0xc2f9, 0xa626}, {0x7, 0x9}, {0xc504, 0x5}, {0x0, 0x4}, {0x36743f64, 0x800}, {0x2, 0x3}, {0xfffffffffffffc93, 0xfffffffffffffc01}, {0x0, 0x5}, {0xe, 0x95e}, {0x3, 0x3ff}, {0x1, 0x8000000000000001}, {0x9, 0x3}, {0x6, 0x8}, {0x3ff, 0x22}, {0x1, 0x10001}, {0xc, 0xc}, {0x9, 0x5}, {0xabe, 0xd3}, {0x0, 0x4}, {0xfff, 0xffff}, {}, {0x6, 0x7ff}, {0x1, 0x5}, {0xb, 0x3ff}, {0x2, 0x6}, {0x8}, {0x2}, {0x8}, {0x1, 0x6}, {0x8, 0x9}, {0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0xfffffffffffffffe}, {0xfffffffffffffff7, 0x5}, {0x800, 0x8}, {0x4, 0x50}, {0x10000, 0x5}, {0x2e2e, 0x10001}, {0x15f1, 0x3}, {0x6}, {0x2, 0x1}, {0x6, 0x4}, {0x29, 0x3ff}, {0x8000000000000000, 0x9}, {0x4, 0x800}, {0x8000000000000001, 0x7fffffffffffffff}, {0xe6, 0x9}, {0xfffffffffffffc00, 0x6}, {0x5, 0x7}, {0x80, 0x8}, {0x80000000, 0xffffffff80000001}, {0x40, 0x7}, {0x40, 0x4}, {0xffff, 0xbf1b}, {0x2, 0x4}, {0x100, 0x1}, {0x4, 0x5}, {0x5, 0x2f183a98}, {0x9, 0x80000001}, {0x5, 0x80000000}, {0x2, 0x5}, {0x8, 0x1}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0xb5}, {0x3, 0x5}, {0x10000000009}, {0x2, 0x2}, {0x1, 0x1}, {0x4, 0x9}, {0x8, 0xdc1}, {0x1, 0xd3b}, {0x1, 0x1}, {0xb638, 0x7}, {0xf5dd, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.913759251s ago: executing program 5 (id=3477): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='source', 0x0, r0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 1.589762851s ago: executing program 5 (id=3481): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a572639", 0x70}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4000844) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000140)=""/226, 0xe2}], 0x2}, 0x0) 1.460719542s ago: executing program 5 (id=3482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x20004000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 1.275005696s ago: executing program 5 (id=3485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x40, 0x83, 0xff, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x80) 1.125646036s ago: executing program 7 (id=3487): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.082908584s ago: executing program 5 (id=3488): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0xea080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x189482, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) 1.032884791s ago: executing program 3 (id=3489): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @remote}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) 934.996439ms ago: executing program 7 (id=3490): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) pwrite64(r0, &(0x7f0000000300)="4a3b0b5f99a927b9db9e8864e5dcb8af53a4066d09b3ae8452862525b8676a72ee01e751d11514bf25bde2f2ae2fed2dfb7c34496f8a60ac07631da1b51a1dea27bdddcd3482af497a0d38e582351011dd6cd0f60e70db2f9cf73e2ca21d519a0958ec1e019cf3796c7f", 0x6a, 0x7f) 829.67656ms ago: executing program 3 (id=3491): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200010e0000103afffe803a00da33"], 0x0) 799.537253ms ago: executing program 7 (id=3492): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000280)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 715.969928ms ago: executing program 3 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 621.261078ms ago: executing program 7 (id=3494): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x80, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) 461.602685ms ago: executing program 3 (id=3495): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) 220.611706ms ago: executing program 7 (id=3496): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b2a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2b, &(0x7f0000000040)) 209.352541ms ago: executing program 3 (id=3497): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 104.077972ms ago: executing program 7 (id=3498): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg$unix(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 62.223562ms ago: executing program 4 (id=3499): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = dup2(r0, r0) fsopen(0x0, 0x0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 0s ago: executing program 3 (id=3500): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0xfffffd76}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0) kernel console output (not intermixed with test programs): ze instead. [ 289.051874][ T5709] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 289.202665][ T5709] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 289.203567][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.203603][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 289.203624][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 289.203644][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 289.203664][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 289.203682][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 289.203700][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 289.203717][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 289.203735][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 289.203754][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 289.203772][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 289.203789][ T5709] usb 5-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 289.208320][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.208342][ T5709] usb 5-1: Product: syz [ 289.208354][ T5709] usb 5-1: Manufacturer: syz [ 289.208367][ T5709] usb 5-1: SerialNumber: syz [ 289.214565][ T5709] usb 5-1: Device is not authorized for usage [ 289.226740][T12593] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2509'. [ 289.464158][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 289.464214][ T30] audit: type=1400 audit(1787780548.669:926): avc: denied { write } for pid=12551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.665317][ T30] audit: type=1400 audit(1787780548.869:927): avc: denied { write } for pid=12607 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.835698][T12614] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2469579899 (4939159798 ns) > initial count (1140510742 ns). Using initial count to start timer. [ 289.991880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.022391][ T5783] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 290.099489][ T30] audit: type=1400 audit(1787780549.299:928): avc: denied { write } for pid=12615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.177335][ T30] audit: type=1400 audit(1787780549.379:929): avc: denied { write } for pid=12635 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.199917][ T5783] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 290.209814][ T5783] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 290.219581][ T5783] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 290.229729][ T5783] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.246909][ T5783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 290.246956][ T5783] usb 9-1: Product: syz [ 290.246990][ T5783] usb 9-1: Manufacturer: syz [ 290.247015][ T5783] usb 9-1: SerialNumber: syz [ 290.509827][ T5783] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 290.684935][ T30] audit: type=1400 audit(1787780549.889:930): avc: denied { write } for pid=12642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.726304][ T5783] usb 9-1: USB disconnect, device number 10 [ 290.742074][ T5783] usblp0: removed [ 290.763848][T12663] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 290.911640][ T30] audit: type=1400 audit(1787780550.109:931): avc: denied { write } for pid=12668 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.052511][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.300873][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2536'. [ 291.300931][T12692] netlink: 'syz.0.2536': attribute type 2 has an invalid length. [ 291.300943][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2536'. [ 291.544367][ T30] audit: type=1400 audit(1787780550.749:932): avc: denied { write } for pid=12681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.565794][T12709] nbd: must specify a device to reconfigure [ 291.572050][ T5709] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 291.636845][ T30] audit: type=1326 audit(1787780550.839:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.0.2542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cd39e0d9 code=0x7ffc0000 [ 291.637054][ T30] audit: type=1326 audit(1787780550.839:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.0.2542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cd39e0d9 code=0x7ffc0000 [ 291.637992][ T30] audit: type=1326 audit(1787780550.839:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.0.2542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc4cd39e0d9 code=0x7ffc0000 [ 291.721842][ T5709] usb 8-1: Using ep0 maxpacket: 32 [ 291.728411][ T5709] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 291.733741][ T5709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.733766][ T5709] usb 8-1: Product: syz [ 291.733779][ T5709] usb 8-1: Manufacturer: syz [ 291.733792][ T5709] usb 8-1: SerialNumber: syz [ 291.949535][ T1786] usb 5-1: USB disconnect, device number 25 [ 291.986316][ T5709] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 292.032711][ T5709] usb 8-1: USB disconnect, device number 14 [ 292.071806][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.322062][ T5782] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 292.474307][ T5782] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 292.485758][ T5782] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 292.495617][ T5782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.506875][ T5782] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 292.506920][ T5782] usb 1-1: Manufacturer: syz [ 292.525109][ T5782] usb 1-1: config 0 descriptor?? [ 292.592913][ T5782] rc_core: IR keymap rc-hauppauge not found [ 292.598921][ T5782] Registered IR keymap rc-empty [ 292.606047][ T5782] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 292.618194][ T5782] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input51 [ 293.010439][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 64 [ 293.121801][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.222713][ T1786] usb 1-1: USB disconnect, device number 18 [ 293.907113][T12806] smbdirect: ib_dev[Syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 293.923940][T12806] smbdirect: ib_dev[Syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 293.924013][T12806] smbdirect: ib_dev[Syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 293.968873][T12806] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 293.981711][T12813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2566'. [ 294.010080][T12806] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 294.161792][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.206499][T12809] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 294.206589][T12809] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 294.206635][T12809] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 294.252071][ T1786] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 294.288357][T12809] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 294.402824][ T1786] usb 9-1: Using ep0 maxpacket: 16 [ 294.405576][ T1786] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.406434][ T1786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.406458][ T1786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.406476][ T1786] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.406508][ T1786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.456038][ T1786] usb 9-1: config 0 descriptor?? [ 294.492609][ T5709] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 294.519210][ T153] smbdirect: ib_dev[Syz1] removed [ 294.544051][ T59] smbdirect: ib_dev[syz2] removed [ 294.570464][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 294.570586][ T30] audit: type=1400 audit(1787780553.769:948): avc: denied { write } for pid=12834 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.643362][ T5709] usb 10-1: Using ep0 maxpacket: 32 [ 294.645742][ T5709] usb 10-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 294.654559][ T5709] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.654583][ T5709] usb 10-1: config 0 has no interface number 0 [ 294.654614][ T5709] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.654636][ T5709] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.654655][ T5709] usb 10-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.654677][ T5709] usb 10-1: config 0 interface 1 has no altsetting 0 [ 294.659331][ T5709] usb 10-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 294.659356][ T5709] usb 10-1: Manufacturer: syz [ 294.684190][ T5709] usb 10-1: config 0 descriptor?? [ 294.744314][ T30] audit: type=1400 audit(1787780553.949:949): avc: denied { mounton } for pid=12838 comm="syz.7.2576" path="/258/proc" dev="tmpfs" ino=1367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 294.948263][ T1786] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.002A/input/input52 [ 295.040803][ T30] audit: type=1400 audit(1787780554.239:950): avc: denied { write } for pid=12840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.076567][ T1786] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 295.190229][ T1786] usb 9-1: USB disconnect, device number 11 [ 295.196443][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.420667][T12863] fido_id[12863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 295.487076][ T30] audit: type=1400 audit(1787780554.689:951): avc: denied { write } for pid=12870 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.534446][ T5709] input: syz Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:145F:0212.002B/input/input53 [ 295.605893][ T5709] input: syz Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:145F:0212.002B/input/input54 [ 295.656001][T12879] gadgetfs: bound to dummy_udc driver [ 295.662986][ T5709] uclogic 0003:145F:0212.002B: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.9-1/input1 [ 295.782789][ T5771] usb 10-1: USB disconnect, device number 6 [ 295.839046][T12884] fido_id[12884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 295.922011][ T5782] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 295.930339][ C0] gadgetfs: connected [ 295.930811][ T5782] gadgetfs: disconnected [ 296.092816][ C0] gadgetfs: connected [ 296.097084][ T5782] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 296.108219][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.136587][T12878] gadgetfs: suspended from state 3 [ 296.142413][T12878] gadgetfs: disconnected [ 296.146884][ T5782] usb 1-1: can't set config #1, error -71 [ 296.162205][ T1786] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 296.180716][ T5782] usb 1-1: USB disconnect, device number 19 [ 296.191485][ T5607] udevd[5607]: setting owner of /dev/bus/usb/001/019 to uid=0, gid=0 failed: No such file or directory [ 296.231812][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.311980][ T1786] usb 8-1: Using ep0 maxpacket: 8 [ 296.312501][ T1786] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 296.316751][ T1786] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.316772][ T1786] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 296.316805][ T1786] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 296.316827][ T1786] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 296.316860][ T1786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.323449][ T1786] hub 8-1:1.0: bad descriptor, ignoring hub [ 296.323470][ T1786] hub 8-1:1.0: probe with driver hub failed with error -5 [ 296.327201][ T1786] cdc_wdm 8-1:1.0: skipping garbage [ 296.327217][ T1786] cdc_wdm 8-1:1.0: skipping garbage [ 296.330458][ T1786] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 296.330473][ T1786] cdc_wdm 8-1:1.0: Unknown control protocol [ 296.375697][T12905] device-mapper: ioctl: Unable to rename non-existent device, to j [ 296.447361][ T30] audit: type=1400 audit(1787780555.649:952): avc: denied { write } for pid=12877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.551643][ T30] audit: type=1400 audit(1787780555.749:953): avc: denied { write } for pid=12908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.904803][T12923] input: syz0 as /devices/virtual/input/input55 [ 297.027723][T12889] usb 8-1: reset high-speed USB device number 15 using dummy_hcd [ 297.069013][ T12] IPVS: starting estimator thread 0... [ 297.153974][T12930] IPVS: using max 45 ests per chain, 108000 per kthread [ 297.271802][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.419882][T12941] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 297.448462][T12941] bond1: (slave lo): Enslaving as an active interface with an up link [ 297.461140][T12941] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 297.523251][ T8797] usb 8-1: USB disconnect, device number 15 [ 297.612075][ T5771] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 297.786523][ T5771] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 297.787429][ T5771] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 297.787453][ T5771] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 297.787473][ T5771] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 297.787492][ T5771] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 297.787521][ T5771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.799264][T12943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.799300][T12943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.799352][T12943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.800533][T12943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.819671][ T5771] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 297.902120][T12952] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 297.902171][T12952] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm cxacru: checksumming directory block 0 [ 297.906197][T12952] cxacru 1-1:1.0: loading /lib/firmware/updates/syzkaller/cxacru-fw.bin failed with error -74 [ 297.906703][T12952] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 297.906724][T12952] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm cxacru: checksumming directory block 0 [ 297.906855][T12952] cxacru 1-1:1.0: loading /lib/firmware/updates/cxacru-fw.bin failed with error -74 [ 297.906918][T12952] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 297.906935][T12952] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm cxacru: checksumming directory block 0 [ 297.907031][T12952] cxacru 1-1:1.0: loading /lib/firmware/syzkaller/cxacru-fw.bin failed with error -74 [ 297.907093][T12952] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 297.907110][T12952] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm cxacru: checksumming directory block 0 [ 297.907206][T12952] cxacru 1-1:1.0: loading /lib/firmware/cxacru-fw.bin failed with error -74 [ 297.907226][T12952] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -74 [ 297.907482][ T30] audit: type=1400 audit(1787780557.109:954): avc: denied { firmware_load } for pid=12952 comm="cxacru" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 297.907532][T12952] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 298.103679][ T30] audit: type=1400 audit(1787780557.309:955): avc: denied { bind } for pid=12942 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 298.167669][ T12] Bluetooth: (null): Invalid header checksum [ 298.185619][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2612'. [ 298.275200][ T12] Bluetooth: (null): Invalid header checksum [ 298.311830][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.383575][ T12] Bluetooth: (null): Invalid header checksum [ 298.920653][T12996] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2627'. [ 299.042970][ T5783] usb 1-1: USB disconnect, device number 20 [ 299.352076][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.728279][T13015] udc dummy_udc.0: soft-connect without a gadget driver [ 300.391953][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.630288][ T30] audit: type=1400 audit(1787780559.829:956): avc: denied { write } for pid=13031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.967437][ T30] audit: type=1400 audit(1787780560.169:957): avc: denied { write } for pid=13068 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.253399][T13073] smbdirect: ib_dev[Syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 301.267945][T13073] smbdirect: ib_dev[Syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 301.267996][T13073] smbdirect: ib_dev[Syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 301.373323][T13073] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 301.392092][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'. [ 301.431863][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.449049][ T30] audit: type=1326 audit(1787780560.649:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.7.2650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d7cd9e0d9 code=0x0 [ 302.054767][ T59] smbdirect: ib_dev[Syz1] removed [ 302.164204][T13094] gadgetfs: bound to dummy_udc driver [ 302.429401][T13105] Set syz1 is full, maxelem 1021 reached [ 302.462694][ T5782] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 302.471929][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.609368][ T30] audit: type=1400 audit(1787780561.809:959): avc: denied { write } for pid=13101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.643661][ T5782] usb 9-1: Using ep0 maxpacket: 16 [ 302.644208][ T5782] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 302.645121][ T5782] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.645144][ T5782] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 302.645165][ T5782] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 302.645196][ T5782] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.653268][ T5782] usb 9-1: config 0 descriptor?? [ 302.807900][ T30] audit: type=1400 audit(1787780562.009:960): avc: denied { write } for pid=13127 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.094209][ T5782] nintendo 0003:057E:2019.002C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.8-1/input0 [ 303.257845][ T30] audit: type=1400 audit(1787780562.459:961): avc: denied { listen } for pid=13151 comm="syz.0.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.340071][ T30] audit: type=1400 audit(1787780562.539:962): avc: denied { accept } for pid=13151 comm="syz.0.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.513812][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.678589][ T5782] nintendo 0003:057E:2019.002C: Failed to set baudrate (ret=-71), continuing anyway [ 303.678749][ T30] audit: type=1400 audit(1787780562.879:963): avc: denied { write } for pid=13143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.693865][ T5782] nintendo 0003:057E:2019.002C: Failed handshake; ret=-71 [ 303.693889][ T5782] nintendo 0003:057E:2019.002C: Failed to initialize controller; ret=-71 [ 303.780551][ T5782] nintendo 0003:057E:2019.002C: probe - fail = -71 [ 303.780787][ T5782] nintendo 0003:057E:2019.002C: probe with driver nintendo failed with error -71 [ 303.815782][ T30] audit: type=1400 audit(1787780563.019:964): avc: denied { write } for pid=13169 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.821532][ T5782] usb 9-1: USB disconnect, device number 12 [ 304.033319][ T30] audit: type=1400 audit(1787780563.229:965): avc: denied { mount } for pid=13171 comm="syz.7.2675" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 304.200559][T13178] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2678'. [ 304.276764][T13181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.551870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.567490][T13191] netlink: 'syz.4.2684': attribute type 39 has an invalid length. [ 305.596791][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.732201][ T5710] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 305.787305][ T30] audit: type=1400 audit(1787780564.989:966): avc: denied { setopt } for pid=13236 comm="syz.4.2700" lport=54573 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 305.882288][ T5710] usb 9-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 305.892341][ T5710] usb 9-1: config 255 has an invalid interface number: 97 but max is 0 [ 305.892386][ T5710] usb 9-1: config 255 has no interface number 0 [ 305.892419][ T5710] usb 9-1: config 255 interface 97 has no altsetting 0 [ 305.920937][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.920987][ T5710] usb 9-1: Product: syz [ 305.921027][ T5710] usb 9-1: Manufacturer: syz [ 305.921054][ T5710] usb 9-1: SerialNumber: syz [ 306.159521][ T5710] rndis_host 9-1:255.97: ACM capabilities 01, not really RNDIS? [ 306.194031][ T5710] usb 9-1: USB disconnect, device number 13 [ 306.394557][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 306.534934][T13275] jffs2: notice: (13275) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 306.560981][ T30] audit: type=1400 audit(1787780565.759:967): avc: denied { write } for pid=13274 comm="syz.9.2705" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.583127][ T30] audit: type=1400 audit(1787780565.789:968): avc: denied { create } for pid=13274 comm="syz.9.2705" name="del3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 306.604602][ T30] audit: type=1400 audit(1787780565.809:969): avc: denied { read write open } for pid=13274 comm="syz.9.2705" path="/108/mnt/del3" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 306.610198][T13278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.642065][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 306.653199][ T30] audit: type=1400 audit(1787780565.839:970): avc: denied { write } for pid=13274 comm="syz.9.2705" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.653256][ T30] audit: type=1400 audit(1787780565.839:971): avc: denied { remove_name } for pid=13274 comm="syz.9.2705" name="del3" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.653289][ T30] audit: type=1400 audit(1787780565.839:972): avc: denied { unlink } for pid=13274 comm="syz.9.2705" name="del3" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 306.789124][ T30] audit: type=1400 audit(1787780565.989:973): avc: denied { write } for pid=13241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.023442][ T30] audit: type=1400 audit(1787780566.229:974): avc: denied { write } for pid=13286 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.108672][T13298] jffs2: notice: (13298) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 1 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 307.169433][ T30] audit: type=1400 audit(1787780566.359:975): avc: denied { write } for pid=13294 comm="syz.7.2710" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.231244][ T59] IPVS: starting estimator thread 0... [ 307.324546][T13305] IPVS: using max 37 ests per chain, 88800 per kthread [ 307.672617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.693904][T13322] ima: policy update failed [ 307.876102][T13331] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 308.028106][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.172158][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.180480][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.188852][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.204789][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.206103][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.364063][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.530573][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.654484][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.683007][ T5710] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 308.711853][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.775709][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2733'. [ 308.785425][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2733'. [ 308.833565][ T5710] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 308.834751][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.838506][ T5710] usb 5-1: Device is not authorized for usage [ 308.945375][T13340] lo speed is unknown, defaulting to 1000 [ 309.022100][ T59] bridge_slave_1: left allmulticast mode [ 309.022153][ T59] bridge_slave_1: left promiscuous mode [ 309.022314][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.047047][ T59] bridge_slave_0: left allmulticast mode [ 309.047102][ T59] bridge_slave_0: left promiscuous mode [ 309.047272][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.300300][ T59] gretap0 (unregistering): left allmulticast mode [ 309.323414][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.339302][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.348796][ T59] bond0 (unregistering): Released all slaves [ 309.696631][T13340] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.703966][T13340] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.711327][T13340] bridge_slave_0: entered allmulticast mode [ 309.737148][T13340] bridge_slave_0: entered promiscuous mode [ 309.745438][T13340] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.752592][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.761530][T13340] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.761698][T13340] bridge_slave_1: entered allmulticast mode [ 309.788227][T13340] bridge_slave_1: entered promiscuous mode [ 309.841924][ T59] hsr_slave_0: left promiscuous mode [ 309.849227][ T59] hsr_slave_1: left promiscuous mode [ 309.856025][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.856045][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.872499][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.872541][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.889082][ T59] veth1_macvtap: left promiscuous mode [ 309.889140][ T59] veth0_macvtap: left promiscuous mode [ 309.889267][ T59] veth1_vlan: left promiscuous mode [ 309.889376][ T59] veth0_vlan: left promiscuous mode [ 310.104159][ T59] team0 (unregistering): Port device team_slave_1 removed [ 310.121228][ T59] team0 (unregistering): Port device team_slave_0 removed [ 310.182041][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.198245][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.227227][T13340] team0: Port device team_slave_0 added [ 310.238190][T13340] team0: Port device team_slave_1 added [ 310.267176][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.274326][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.300577][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.312795][ T5609] Bluetooth: hci4: command tx timeout [ 310.318671][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.322734][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.322756][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.393567][T13340] hsr_slave_0: entered promiscuous mode [ 310.400002][T13340] hsr_slave_1: entered promiscuous mode [ 310.406500][T13340] debugfs: 'hsr0' already exists in 'hsr' [ 310.406539][T13340] Cannot create hsr debugfs directory [ 310.515420][ T59] IPVS: stop unused estimator thread 0... [ 310.791911][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.394554][ T5710] usb 5-1: USB disconnect, device number 26 [ 311.481207][T13362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.491311][T13340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.509017][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.528966][T13340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.549694][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.549775][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.625030][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.634672][T13340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.693205][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.702701][T13340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.725784][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.779426][T13407] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 311.831838][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.961696][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.996472][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.017546][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.017640][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.038971][ T5782] libceph: connect (1)[c::]:6789 error -101 [ 312.039161][ T5782] libceph: mon0 (1)[c::]:6789 connect error [ 312.068125][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.068242][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.113388][ T192] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 312.185644][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 312.185708][ T30] audit: type=1400 audit(1787780571.389:983): avc: denied { write } for pid=13415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.292794][ T192] libceph: connect (1)[c::]:6789 error -101 [ 312.292978][ T192] libceph: mon0 (1)[c::]:6789 connect error [ 312.315267][ T5782] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 312.344286][ T30] audit: type=1400 audit(1787780571.549:984): avc: denied { write } for pid=13447 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.377112][ T192] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 312.391799][ T5609] Bluetooth: hci4: command tx timeout [ 312.400058][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 312.473062][ T5782] usb 5-1: Using ep0 maxpacket: 8 [ 312.477189][ T5782] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.479524][ T5782] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 312.479561][ T5782] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.479579][ T5782] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.479599][ T5782] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.479618][ T5782] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.479650][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.482557][ T5782] usb 5-1: Device is not authorized for usage [ 312.689750][ T30] audit: type=1400 audit(1787780571.889:985): avc: denied { write } for pid=13452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.796313][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.815423][ T30] audit: type=1400 audit(1787780572.019:986): avc: denied { write } for pid=13472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.823357][ T5782] libceph: connect (1)[c::]:6789 error -101 [ 312.823511][ T5782] libceph: mon0 (1)[c::]:6789 connect error [ 312.855051][T13434] ceph: No mds server is up or the cluster is laggy [ 312.861782][T13428] ceph: No mds server is up or the cluster is laggy [ 312.872017][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.896014][ T8797] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 312.916452][T13340] veth0_vlan: entered promiscuous mode [ 312.956840][T13340] veth1_vlan: entered promiscuous mode [ 313.093636][T13340] veth0_macvtap: entered promiscuous mode [ 313.098300][T13340] veth1_macvtap: entered promiscuous mode [ 313.143767][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.146347][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.157572][T13480] netlink: 'syz.7.2756': attribute type 4 has an invalid length. [ 313.176405][ T95] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.187150][ T95] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.223417][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.230240][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.247277][T13482] loop2: detected capacity change from 0 to 7 [ 313.260536][T13482] Dev loop2: unable to read RDB block 7 [ 313.261014][T13482] loop2: AHDI p1 p2 p3 [ 313.261046][T13482] loop2: partition table partially beyond EOD, truncated [ 313.261225][T13482] loop2: p1 start 1601398130 is beyond EOD, truncated [ 313.261268][T13482] loop2: p2 start 1702059890 is beyond EOD, truncated [ 313.410746][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.410784][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.473425][ T192] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 313.538039][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.538089][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.643112][ T192] usb 8-1: Using ep0 maxpacket: 32 [ 313.645100][ T192] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 313.651162][ T192] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.651182][ T192] usb 8-1: config 0 has no interfaces? [ 313.651204][ T192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.653180][ T192] usb 8-1: config 0 descriptor?? [ 313.807799][ T30] audit: type=1400 audit(1787780573.009:987): avc: denied { write } for pid=13492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.867212][ T5782] usb 8-1: USB disconnect, device number 16 [ 313.894021][ T30] audit: type=1400 audit(1787780573.099:988): avc: denied { write } for pid=13510 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.922009][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.942356][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 314.477967][ T5609] Bluetooth: hci4: command tx timeout [ 314.801564][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'. [ 314.951801][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.065792][ T5771] usb 5-1: USB disconnect, device number 27 [ 315.187344][T13543] netlink: 'syz.4.2773': attribute type 30 has an invalid length. [ 315.256067][T13543] netlink: 'syz.4.2773': attribute type 30 has an invalid length. [ 315.449890][T13553] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2778'. [ 315.694123][ T30] audit: type=1326 audit(1787780574.899:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13562 comm="syz.4.2781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0622b9e0d9 code=0x0 [ 315.993112][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.460026][T13488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.551864][ T5609] Bluetooth: hci4: command tx timeout [ 316.554292][T13525] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 316.775630][T13587] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3795657396 (242922073344 ns) > initial count (53003242880 ns). Using initial count to start timer. [ 316.785345][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2788'. [ 316.835903][ T30] audit: type=1400 audit(1787780576.039:990): avc: denied { write } for pid=13575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.934691][ T30] audit: type=1400 audit(1787780576.139:991): avc: denied { write } for pid=13596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.031827][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.150372][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 317.479962][T13614] netlink: 'syz.7.2793': attribute type 2 has an invalid length. [ 317.796897][T13614] : entered promiscuous mode [ 318.081836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.103230][T13629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.291321][ T30] audit: type=1400 audit(1787780577.489:992): avc: denied { write } for pid=13610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.458687][ T30] audit: type=1400 audit(1787780577.629:993): avc: denied { write } for pid=13646 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.498028][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 318.718939][ T30] audit: type=1400 audit(1787780577.919:994): avc: denied { write } for pid=13651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.891062][ T30] audit: type=1400 audit(1787780578.089:995): avc: denied { write } for pid=13663 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.110312][ T986] libceph: connect (1)[c::]:6789 error -101 [ 319.110494][ T986] libceph: mon0 (1)[c::]:6789 connect error [ 319.117645][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.185107][T13675] ceph: No mds server is up or the cluster is laggy [ 319.210198][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2807'. [ 319.219293][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2807'. [ 319.332349][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2807'. [ 319.348897][ T153] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.348965][ T153] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.349013][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2807'. [ 319.352680][ T153] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.354322][ T59] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.365333][T13692] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 319.423543][ T30] audit: type=1400 audit(1787780578.629:996): avc: denied { write } for pid=13669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.515563][ T30] audit: type=1400 audit(1787780578.719:997): avc: denied { write } for pid=13697 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.683729][ T30] audit: type=1400 audit(1787780838.948:998): avc: denied { getopt } for pid=13701 comm="syz.4.2811" lport=38143 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 319.946526][ T30] audit: type=1400 audit(1787780839.208:999): avc: denied { write } for pid=13705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.971823][ T5710] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 320.106447][ T30] audit: type=1400 audit(1787780839.368:1000): avc: denied { write } for pid=13743 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.133960][ T5710] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 320.135818][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.135853][ T5710] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.135871][ T5710] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.135895][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.135927][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.156554][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.813521][ T30] audit: type=1400 audit(1787780840.068:1001): avc: denied { write } for pid=13751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.166786][ T5710] gud 2-1:1.0: USB-1: Failed to add properties (ret=-5) [ 321.166869][ T5710] gud 2-1:1.0: Failed to get connectors (error=-5) [ 321.166891][ T5710] gud 2-1:1.0: probe with driver gud failed with error -5 [ 321.201816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.373029][ T5771] usb 2-1: USB disconnect, device number 28 [ 321.642455][ T12] IPVS: starting estimator thread 0... [ 321.648294][T13797] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 321.732460][T13803] IPVS: using max 47 ests per chain, 112800 per kthread [ 321.945247][ T5710] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 321.986504][ T5710] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 322.151845][ T5771] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 322.241791][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.301779][ T5771] usb 8-1: Using ep0 maxpacket: 32 [ 322.307358][ T5771] usb 8-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 322.320464][ T5771] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 322.320514][ T5771] usb 8-1: config 1 interface 0 has no altsetting 0 [ 322.344791][ T5771] usb 8-1: string descriptor 0 read error: -22 [ 322.344909][ T5771] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.882727][ T5771] vrc2 0003:07C0:1125.002E: fixing up VRC-2 report descriptor [ 322.899213][ T5771] input: HID 07c0:1125 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:07C0:1125.002E/input/input56 [ 322.929231][ T5771] vrc2 0003:07C0:1125.002E: input,hidraw0: USB HID vff.7f Joystick [HID 07c0:1125] on usb-dummy_hcd.7-1/input0 [ 323.129296][ T986] usb 8-1: USB disconnect, device number 17 [ 323.246808][T13861] batadv_slave_0: entered promiscuous mode [ 323.259548][T13861] batadv_slave_0: left promiscuous mode [ 323.281787][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.300323][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 323.300358][ T30] audit: type=1400 audit(1787780842.558:1009): avc: denied { write } for pid=13857 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.901009][ T30] audit: type=1400 audit(1787780843.158:1010): avc: denied { write } for pid=13872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.109516][ T30] audit: type=1400 audit(1787780843.368:1011): avc: denied { write } for pid=13908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.312686][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.630195][T13935] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.697039][T13935] bridge_slave_1 (unregistering): left allmulticast mode [ 324.701593][ T30] audit: type=1400 audit(1787780843.958:1012): avc: denied { write } for pid=13914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.730690][T13935] bridge_slave_1 (unregistering): left promiscuous mode [ 324.730778][T13935] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.807350][ T30] audit: type=1800 audit(1787780844.068:1013): pid=13943 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2865" name="file" dev="configfs" ino=51681 res=0 errno=0 [ 324.921216][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 325.034712][T13951] hsr_slave_1 (unregistering): left promiscuous mode [ 325.059733][ T30] audit: type=1400 audit(1787780844.318:1014): avc: denied { write } for pid=13952 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.351859][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.897213][ T30] audit: type=1400 audit(1787780845.158:1015): avc: denied { write } for pid=13964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.204072][ T30] audit: type=1400 audit(1787780845.468:1016): avc: denied { write } for pid=14002 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.391791][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.510498][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2889'. [ 326.570351][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2889'. [ 327.205829][T14043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2895'. [ 327.211301][T14043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2895'. [ 327.246369][ T30] audit: type=1400 audit(1787780846.508:1017): avc: denied { write } for pid=14019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.431786][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.452185][ T30] audit: type=1400 audit(1787780846.718:1018): avc: denied { write } for pid=14049 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.461010][T14050] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 327.682995][ T986] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 327.702091][ T5696] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 327.832065][ T986] usb 2-1: Using ep0 maxpacket: 16 [ 327.834101][ T986] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 327.836705][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.836728][ T986] usb 2-1: Product: syz [ 327.836741][ T986] usb 2-1: Manufacturer: syz [ 327.836754][ T986] usb 2-1: SerialNumber: syz [ 327.851906][ T5696] usb 8-1: Using ep0 maxpacket: 16 [ 327.852459][ T5696] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.853385][ T5696] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 327.853402][ T5696] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.853418][ T5696] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.855274][ T5696] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.855304][ T5696] usb 8-1: Product: syz [ 327.855318][ T5696] usb 8-1: Manufacturer: syz [ 327.855371][ T5696] usb 8-1: SerialNumber: syz [ 327.894995][ T5696] usb 8-1: 0:2 : does not exist [ 327.912236][ T1786] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 328.062599][ T986] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 328.065446][ T1786] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 328.066334][ T1786] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 328.066369][ T1786] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 328.066390][ T1786] usb 10-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.066412][ T1786] usb 10-1: config 1 interface 0 has no altsetting 0 [ 328.069192][ T1786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.069213][ T1786] usb 10-1: Product: syz [ 328.069259][ T1786] usb 10-1: Manufacturer: syz [ 328.069271][ T1786] usb 10-1: SerialNumber: syz [ 328.078284][T14067] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 328.078351][T14067] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 328.090443][ T986] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 328.090827][ T986] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 328.090857][ T986] usb 2-1: media controller created [ 328.121655][ T986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.269780][ T986] zl10353_read_register: readreg error (reg=127, ret==-71) [ 328.363719][ T986] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 328.372587][ T986] usb 2-1: USB disconnect, device number 29 [ 328.409459][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 328.416030][ T30] audit: type=1400 audit(1787780847.668:1021): avc: denied { module_load } for pid=14091 comm="syz.0.2908" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 328.441598][T14092] kernel read not supported for file /policy (pid: 14092 comm: syz.0.2908) [ 328.482413][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.489559][ T30] audit: type=1400 audit(1787780847.748:1022): avc: denied { search } for pid=14098 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.539656][ T30] audit: type=1400 audit(1787780847.798:1023): avc: denied { getattr } for pid=14085 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.551971][ T30] audit: type=1400 audit(1787780847.798:1024): avc: denied { write } for pid=14085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.552011][ T30] audit: type=1400 audit(1787780847.808:1025): avc: denied { shutdown } for pid=14099 comm="syz.0.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 328.554021][ T30] audit: type=1400 audit(1787780847.818:1026): avc: denied { add_name } for pid=14085 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.679502][ T30] audit: type=1400 audit(1787780847.938:1027): avc: denied { write } for pid=14103 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.702651][ T30] audit: type=1400 audit(1787780847.968:1028): avc: denied { remove_name } for pid=14103 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=14981 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.904825][ T30] audit: type=1400 audit(1787780848.168:1029): avc: denied { append } for pid=14111 comm="syz.4.2912" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.912268][ T5696] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 328.913808][T14112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.111151][ T5696] usb 8-1: USB disconnect, device number 18 [ 329.202321][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.511791][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.270540][T14137] syz_tun: entered allmulticast mode [ 330.281081][T14136] syz_tun: left allmulticast mode [ 330.367412][ T30] audit: type=1400 audit(1787780849.628:1030): avc: denied { mount } for pid=14140 comm="syz.7.2923" name="/" dev="hugetlbfs" ino=53218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 330.551930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.621857][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 330.640579][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 330.660377][T14150] ceph: No mds server is up or the cluster is laggy [ 330.846852][ T1786] rtl8150 10-1:1.0: couldn't find required endpoints [ 330.847061][ T1786] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 330.892566][ T1786] usb 10-1: USB disconnect, device number 7 [ 331.601867][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.563606][T14105] Set syz1 is full, maxelem 65536 reached [ 332.631820][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.775918][ T5696] kernel read not supported for file bpf-prog (pid: 5696 comm: kworker/1:6) [ 333.546104][ T5609] Bluetooth: hci3: unknown advertising packet type: 0x6b [ 333.551492][ T5609] Bluetooth: hci3: Dropping invalid advertising data [ 333.559053][ T5609] Bluetooth: hci3: Malformed LE Event: 0x02 [ 333.671837][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.865200][T14248] netlink: 'syz.4.2965': attribute type 1 has an invalid length. [ 333.911295][T14248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.935378][T14248] bond2: (slave gretap1): making interface the new active one [ 333.944124][T14248] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 334.033183][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 334.040270][ T30] audit: type=1400 audit(1787780853.298:1036): avc: denied { bind } for pid=14253 comm="syz.7.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 334.064064][ T30] audit: type=1400 audit(1787780853.328:1037): avc: denied { listen } for pid=14253 comm="syz.7.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 334.085143][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 334.184409][ T30] audit: type=1400 audit(1787780853.448:1038): avc: denied { accept } for pid=14253 comm="syz.7.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 334.652468][T14292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.711860][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.831147][T14303] FAULT_INJECTION: forcing a failure. [ 334.831147][T14303] name failslab, interval 1, probability 0, space 0, times 0 [ 334.831216][T14303] CPU: 0 UID: 0 PID: 14303 Comm: syz.1.2984 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.831241][T14303] Tainted: [L]=SOFTLOCKUP [ 334.831247][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 334.831256][T14303] Call Trace: [ 334.831262][T14303] [ 334.831269][T14303] dump_stack_lvl+0x100/0x190 [ 334.831297][T14303] should_fail_ex.cold+0x5/0xa [ 334.831321][T14303] should_failslab+0xc2/0x120 [ 334.831341][T14303] __kmalloc_cache_noprof+0x91/0x6d0 [ 334.831366][T14303] ? refill_pi_state_cache+0x91/0x260 [ 334.831396][T14303] refill_pi_state_cache+0x91/0x260 [ 334.831421][T14303] futex_requeue+0x8a4/0x22e0 [ 334.831448][T14303] ? __pfx_futex_wake_mark+0x10/0x10 [ 334.831476][T14303] ? find_held_lock+0x2b/0x80 [ 334.831499][T14303] ? __pfx_futex_requeue+0x10/0x10 [ 334.831537][T14303] ? rcu_read_lock_any_held+0x6a/0x90 [ 334.831560][T14303] ? find_held_lock+0x2b/0x80 [ 334.831585][T14303] do_futex+0x3ae/0x440 [ 334.831609][T14303] ? __pfx_do_futex+0x10/0x10 [ 334.831631][T14303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.831661][T14303] __x64_sys_futex+0x34f/0x4d0 [ 334.831686][T14303] ? __pfx___x64_sys_futex+0x10/0x10 [ 334.831718][T14303] do_syscall_64+0x123/0x790 [ 334.831751][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.831768][T14303] RIP: 0033:0x7fb804f9e0d9 [ 334.831782][T14303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.831800][T14303] RSP: 002b:00007fb805db5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.831819][T14303] RAX: ffffffffffffffda RBX: 00007fb805225fa0 RCX: 00007fb804f9e0d9 [ 334.831830][T14303] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 334.831841][T14303] RBP: 00007fb805035024 R08: 0000200000048000 R09: 0000000000000000 [ 334.831852][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.831863][T14303] R13: 00007fb805226038 R14: 00007fb805225fa0 R15: 00007ffee7eee2b8 [ 334.831887][T14303] [ 335.012562][ T5782] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 335.162906][ T5782] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 335.163851][ T5782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.163873][ T5782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 335.165582][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.165606][ T5782] usb 5-1: Product: syz [ 335.165619][ T5782] usb 5-1: Manufacturer: syz [ 335.165631][ T5782] usb 5-1: SerialNumber: syz [ 335.174226][ T5782] usb 5-1: Device is not authorized for usage [ 335.479148][ T30] audit: type=1400 audit(1787780854.738:1039): avc: denied { bind } for pid=14326 comm="syz.0.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 335.499815][ T30] audit: type=1400 audit(1787780854.758:1040): avc: denied { listen } for pid=14326 comm="syz.0.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 335.551446][ T30] audit: type=1400 audit(1787780854.808:1041): avc: denied { read } for pid=14326 comm="syz.0.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 335.643876][T14335] syz_tun: entered allmulticast mode [ 335.653902][T14334] syz_tun: left allmulticast mode [ 335.752560][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.027147][ T30] audit: type=1400 audit(1787780855.288:1042): avc: denied { watch watch_reads } for pid=14350 comm="syz.1.3002" path="/54/file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 336.215488][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'. [ 336.225461][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3008'. [ 336.235768][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'. [ 336.244946][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3008'. [ 336.578182][T14377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.801851][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.941447][ T30] audit: type=1400 audit(1787780856.198:1043): avc: denied { override_creds } for pid=14395 comm="syz.7.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 337.342046][ T5771] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 337.512110][ T5771] usb 8-1: Using ep0 maxpacket: 8 [ 337.513757][ T5771] usb 8-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 337.514617][ T5771] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.537784][ T5771] usb 8-1: config 0 descriptor?? [ 337.545303][ T5771] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 337.747798][ T10] usb 5-1: USB disconnect, device number 28 [ 337.831779][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.862924][T14411] syzkaller1: entered promiscuous mode [ 337.868526][T14411] syzkaller1: entered allmulticast mode [ 337.949603][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 337.961593][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803492fc00: rx timeout, send abort [ 337.963890][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803492fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 337.974027][ T30] audit: type=1400 audit(1787780857.228:1044): avc: denied { read } for pid=4950 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 337.974066][ T30] audit: type=1400 audit(1787780857.228:1045): avc: denied { search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.034793][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.045179][ T5771] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 338.053864][ T5771] usb 8-1: media controller created [ 338.068316][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.114960][ T5771] DVB: Unable to find symbol lgdt330x_attach() [ 338.117512][T14413] (syz.4.3030,14413,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 338.130697][ T5771] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 338.140119][ T5771] dvb-usb: bulk message failed: -22 (1/0) [ 338.153651][ T5771] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 338.165139][ T5771] usb 8-1: USB disconnect, device number 19 [ 338.196997][ T5771] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 338.739646][T14446] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 338.871824][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.290135][T14472] netlink: 26 bytes leftover after parsing attributes in process `syz.7.3051'. [ 339.620088][T14487] netdevsim netdevsim7 netdevsim2: IPsec offload requires 128 bit authentication [ 339.636318][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 339.664539][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.664585][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.664608][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.664627][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.729087][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 339.729136][ T30] audit: type=1400 audit(1787780858.988:1055): avc: denied { read } for pid=14491 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.732846][T14489] net_ratelimit: 316 callbacks suppressed [ 339.732861][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.732886][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.732905][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.732924][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.732943][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.732962][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.732981][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.733000][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.733019][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.733037][T14489] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 339.813959][ T30] audit: type=1400 audit(1787780859.068:1056): avc: denied { read open } for pid=14491 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.886249][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 339.897143][ T10] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 339.897190][ T10] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 339.897655][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.906071][ T174] Bluetooth: hci5: Frame reassembly failed (-84) [ 340.202313][ T10] ims_pcu 2-1:1.0: Failed to set line coding, error: -71 [ 340.212986][ T10] ims_pcu 2-1:1.0: probe with driver ims_pcu failed with error -71 [ 340.218474][T14504] jffs2: notice: (14504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 1 orphan) and 7 of xref (0 dead, 1 orphan) found. [ 340.251104][ T10] usb 2-1: USB disconnect, device number 30 [ 340.267407][ T30] audit: type=1400 audit(1787780859.528:1057): avc: denied { write } for pid=14503 comm="syz.7.3063" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.326292][ T30] audit: type=1400 audit(1787780859.588:1058): avc: denied { write } for pid=14490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.356403][ T30] audit: type=1400 audit(1787780859.618:1059): avc: denied { write } for pid=14503 comm="syz.7.3063" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.440350][ T30] audit: type=1326 audit(1787780859.698:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14511 comm="syz.9.3065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a419e0d9 code=0x7ffc0000 [ 340.467197][ T30] audit: type=1326 audit(1787780859.698:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14511 comm="syz.9.3065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a419e0d9 code=0x7ffc0000 [ 340.503667][ T30] audit: type=1326 audit(1787780859.698:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14511 comm="syz.9.3065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a419e0d9 code=0x7ffc0000 [ 340.503738][ T30] audit: type=1326 audit(1787780859.698:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14511 comm="syz.9.3065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a419e0d9 code=0x7ffc0000 [ 340.503778][ T30] audit: type=1326 audit(1787780859.698:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14511 comm="syz.9.3065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75a419e0d9 code=0x7ffc0000 [ 340.994255][ T8823] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 341.155155][ T8823] usb 8-1: unable to get BOS descriptor or descriptor too short [ 341.155217][ T8823] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 341.174223][ T8823] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.174268][ T8823] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.195617][ T8823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.195658][ T8823] usb 8-1: Product: syz [ 341.195687][ T8823] usb 8-1: Manufacturer: syz [ 341.195705][ T8823] usb 8-1: SerialNumber: syz [ 341.235776][ T8823] usb 8-1: selecting invalid altsetting 1 [ 341.243963][ T8823] usb 8-1: unit 6 not found! [ 341.299695][ T174] IPVS: starting estimator thread 0... [ 341.393197][T14558] IPVS: using max 50 ests per chain, 120000 per kthread [ 341.913064][ T5609] Bluetooth: hci5: command 0x1003 tx timeout [ 341.913170][ T5603] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.075457][ T8823] usb 8-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 342.075506][ T8823] usb 8-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 342.266841][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.415666][ T5696] usb 8-1: USB disconnect, device number 20 [ 342.497281][T14596] SELinux: security_context_str_to_sid (p) failed with errno=-22 [ 342.976027][ T8823] libceph: connect (1)[c::]:6789 error -101 [ 342.993033][ T8823] libceph: mon0 (1)[c::]:6789 connect error [ 342.999522][ T8823] libceph: connect (1)[c::]:6789 error -101 [ 343.009961][ T8823] libceph: mon0 (1)[c::]:6789 connect error [ 343.054626][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 343.054796][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 343.075277][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 343.075446][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 343.120358][T14629] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3094'. [ 343.273390][ T8823] libceph: connect (1)[c::]:6789 error -101 [ 343.279680][ T8823] libceph: mon0 (1)[c::]:6789 connect error [ 343.336790][T14637] netlink: 'syz.1.3098': attribute type 1 has an invalid length. [ 343.358889][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 343.359065][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 343.398420][T14637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.439272][T14641] bond1: (slave gretap1): making interface the new active one [ 343.448133][T14641] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 343.698217][T14651] netlink: 'syz.0.3103': attribute type 7 has an invalid length. [ 343.724610][T14651] netlink: 'syz.0.3103': attribute type 7 has an invalid length. [ 343.732028][ T153] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.733120][T14259] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.733154][T14259] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.733181][T14259] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.786446][T14623] ceph: No mds server is up or the cluster is laggy [ 343.786625][T14618] ceph: No mds server is up or the cluster is laggy [ 343.792137][ T10] libceph: connect (1)[c::]:6789 error -101 [ 343.792271][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 343.873791][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 343.873963][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 343.941999][ T8823] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 343.954690][T14663] 9p: Bad value for 'rfdno' [ 344.093534][ T8823] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.094457][ T8823] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.096138][ T8823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.096158][ T8823] usb 8-1: Product: syz [ 344.096171][ T8823] usb 8-1: Manufacturer: syz [ 344.096184][ T8823] usb 8-1: SerialNumber: syz [ 344.315378][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'. [ 344.324506][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 344.333651][T14679] netlink: 'syz.0.3114': attribute type 11 has an invalid length. [ 344.571228][ T5696] kernel write not supported for file /293/attr/prev (pid: 5696 comm: kworker/1:6) [ 345.112134][ C0] net_ratelimit: 3004 callbacks suppressed [ 345.112194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.138101][ T8823] cdc_ncm 8-1:1.0: bind() failure [ 345.143820][ T5782] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 345.159156][ T8823] mos7720 8-1:1.0: required endpoints missing [ 345.193016][ T8823] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 345.196226][ T8823] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 345.198875][ T8823] mos7720 8-1:1.1: probe with driver mos7720 failed with error -71 [ 345.222306][ T8823] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 345.246279][ T8823] usb 8-1: USB disconnect, device number 21 [ 345.301528][ T5782] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.315548][ T5782] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.315605][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.315623][ T5782] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.315657][ T5782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.319464][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.319486][ T5782] usb 2-1: Product: syz [ 345.319499][ T5782] usb 2-1: Manufacturer: syz [ 345.335877][ T5782] cdc_wdm 2-1:1.0: skipping garbage [ 345.335892][ T5782] cdc_wdm 2-1:1.0: skipping garbage [ 345.351644][ T5782] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 345.351662][ T5782] cdc_wdm 2-1:1.0: Unknown control protocol [ 345.581540][ T8823] usb 2-1: USB disconnect, device number 31 [ 345.870713][T14704] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.010008][T14710] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3127'. [ 346.151818][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.974430][T14762] device-mapper: ioctl: Invalid ioctl structure: uuid @, name , dev 100040f00 [ 347.126043][T14669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.167863][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 347.167912][ T30] audit: type=1400 audit(1787780866.428:1125): avc: denied { read } for pid=14761 comm="syz.0.3140" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.168170][ T30] audit: type=1400 audit(1787780866.428:1126): avc: denied { open } for pid=14761 comm="syz.0.3140" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.191910][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.430398][T14779] input: syz1 as /devices/virtual/input/input57 [ 347.631802][ T5696] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 347.793731][ T5696] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 347.803780][ T5696] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.803846][ T5696] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 347.803898][ T5696] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 347.803933][ T5696] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.803978][ T5696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.921857][ T986] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 348.059848][T14794] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.061196][ T49] IPVS: starting estimator thread 0... [ 348.092361][ T986] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.107145][ T986] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.107186][ T986] usb 10-1: Product: syz [ 348.107256][ T986] usb 10-1: Manufacturer: syz [ 348.107276][ T986] usb 10-1: SerialNumber: syz [ 348.184216][T14796] IPVS: using max 45 ests per chain, 108000 per kthread [ 348.231845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.023377][ T5696] [drm] Initialized gud 1.0.0 for 8-1:1.0 on minor 1 [ 349.134903][ T5696] gud 8-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 349.161930][ T5696] usb 8-1: USB disconnect, device number 22 [ 349.169512][ T986] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 349.169566][ T986] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 349.169592][ T986] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 349.271887][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.417845][ T986] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 349.448350][ T986] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 349.466733][ T986] usb 10-1: USB disconnect, device number 8 [ 349.473995][ T986] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 349.792642][ T5782] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 349.941815][ T5782] usb 5-1: Using ep0 maxpacket: 32 [ 349.942395][ T5782] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 349.943516][ T5782] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.943551][ T5782] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.943573][ T5782] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.943591][ T5782] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.943614][ T5782] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.943638][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.956108][ T5782] usb 5-1: Device is not authorized for usage [ 350.311839][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.425349][ T30] audit: type=1400 audit(1787780869.688:1127): avc: denied { write } for pid=14844 comm="syz.1.3167" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 350.480338][T14850] ip_tables: iptables: counters copy to user failed while replacing table [ 350.931289][T14855] nvme nvme0: failed to connect socket: -111 [ 351.266011][T14874] SELinux: failed to load policy [ 351.351875][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.222458][ T5603] Bluetooth: hci4: unexpected subevent 0x10 length: 5 > 2 [ 352.391833][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.578151][ T5696] usb 5-1: USB disconnect, device number 29 [ 352.696390][T14914] netlink: 'syz.9.3194': attribute type 13 has an invalid length. [ 352.829579][T14920] netlink: 'syz.7.3197': attribute type 22 has an invalid length. [ 352.841805][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3197'. [ 352.904315][T14920] netlink: 'syz.7.3197': attribute type 22 has an invalid length. [ 352.904351][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3197'. [ 353.132979][T14936] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 353.140728][T14936] overlayfs: overlapping lowerdir path [ 353.431824][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.701923][T14949] xt_hashlimit: size too large, truncated to 1048576 [ 353.870248][ T8823] bridge0: entered promiscuous mode [ 354.118811][T14957] loop8: detected capacity change from 0 to 7 [ 354.185624][T14957] Dev loop8: unable to read RDB block 7 [ 354.195796][T14957] loop8: unable to read partition table [ 354.196003][T14957] loop8: partition table beyond EOD, truncated [ 354.198449][T14957] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 354.448400][ T30] audit: type=1400 audit(1787780873.708:1128): avc: denied { read } for pid=14965 comm="syz.9.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 354.471780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.714269][T14974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.511783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.462045][ T986] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 356.552143][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.622410][ T986] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 356.633761][ T986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.169509][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 357.258004][ T986] cxacru 8-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 357.258051][ T986] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 357.258082][ T986] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 357.361171][ T986] cxacru 8-1:1.0: probe with driver cxacru failed with error -5 [ 357.390715][ T986] usb 8-1: USB disconnect, device number 23 [ 357.604993][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.081248][T15101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.177165][T15110] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 358.180968][T15105] raw_sendmsg: syz.1.3273 forgot to set AF_INET. Fix it! [ 358.197078][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3275'. [ 358.212523][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3275'. [ 358.324790][ T30] audit: type=1400 audit(1787780877.588:1129): avc: denied { watch_reads } for pid=15112 comm="syz.1.3277" path="/115" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 358.556033][T15130] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15131] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15130] [ 358.631784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.779575][ T30] audit: type=1400 audit(1787780878.038:1130): avc: denied { mounton } for pid=15147 comm="syz.9.3289" path="/217/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 358.955452][ T30] audit: type=1400 audit(1787780878.218:1131): avc: denied { audit_read } for pid=15152 comm="syz.4.3292" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.367231][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.386660][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.399987][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.408311][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.416071][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.671781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.730406][T15160] lo speed is unknown, defaulting to 1000 [ 360.157231][T13269] rpcbind: server 127.0.0.1 not responding, timed out [ 360.488897][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.489035][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.489128][T15160] bridge_slave_0: entered allmulticast mode [ 360.490522][T15160] bridge_slave_0: entered promiscuous mode [ 360.493142][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.493239][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.493487][T15160] bridge_slave_1: entered allmulticast mode [ 360.494611][T15160] bridge_slave_1: entered promiscuous mode [ 360.518188][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.524729][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.554089][T15160] team0: Port device team_slave_0 added [ 360.556262][T15160] team0: Port device team_slave_1 added [ 360.576803][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.576848][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.579034][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.580674][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.580894][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.581060][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.672604][T15160] hsr_slave_0: entered promiscuous mode [ 360.673346][T15160] hsr_slave_1: entered promiscuous mode [ 360.673863][T15160] debugfs: 'hsr0' already exists in 'hsr' [ 360.673879][T15160] Cannot create hsr debugfs directory [ 360.711836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.140449][T15210] veth1_to_bond: entered promiscuous mode [ 361.150415][T15211] veth1_to_bond: entered allmulticast mode [ 361.165349][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3306'. [ 361.189784][T15210] veth1_to_bond (unregistering): left promiscuous mode [ 361.189866][T15210] veth1_to_bond (unregistering): left allmulticast mode [ 361.225597][T15210] bond0: (slave bond_slave_1): Releasing backup interface [ 361.409001][ T30] audit: type=1400 audit(1787780880.668:1132): avc: denied { write } for pid=15205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.518939][ T30] audit: type=1400 audit(1787780880.778:1133): avc: denied { write } for pid=15222 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.519627][ T5603] Bluetooth: hci5: command tx timeout [ 361.625971][T15133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.752685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.074125][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 362.086853][ T30] audit: type=1400 audit(1787780881.348:1134): avc: denied { write } for pid=15228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.197319][ T30] audit: type=1400 audit(1787780881.458:1135): avc: denied { write } for pid=15248 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.582208][T15160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.598752][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.602510][T15160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.627945][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.632548][T15160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.646587][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.654287][T15160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.690528][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.740674][T12952] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 362.791788][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.877871][ T30] audit: type=1400 audit(1787780882.138:1136): avc: denied { read write } for pid=15264 comm="syz.7.3315" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 362.908321][ T30] audit: type=1400 audit(1787780882.168:1137): avc: denied { open } for pid=15264 comm="syz.7.3315" path="/421/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 363.040884][ T30] audit: type=1400 audit(1787780882.298:1138): avc: denied { write } for pid=15250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.129349][T15160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.158578][ T30] audit: type=1400 audit(1787780882.418:1139): avc: denied { write } for pid=15275 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.191553][T15160] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.206870][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.206981][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.242370][T14258] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.242461][T14258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.403134][ T986] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 363.555311][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 363.562922][ T986] usb 5-1: Using ep0 maxpacket: 16 [ 363.563427][ T986] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 363.564274][ T986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.564293][ T986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.565119][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.565137][ T986] usb 5-1: SerialNumber: syz [ 363.573839][ T986] usb 5-1: Device is not authorized for usage [ 363.602021][ T5603] Bluetooth: hci5: command tx timeout [ 363.730090][ T30] audit: type=1400 audit(1787780882.988:1140): avc: denied { write } for pid=15286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.755023][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 363.760639][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 363.770870][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 363.770914][ T10] usb 8-1: config 0 has no interface number 0 [ 363.770975][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 363.794076][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.794122][ T10] usb 8-1: Product: syz [ 363.794167][ T10] usb 8-1: Manufacturer: syz [ 363.794193][ T10] usb 8-1: SerialNumber: syz [ 363.819313][ T10] usb 8-1: config 0 descriptor?? [ 363.831826][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.914983][T15160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.960975][ T30] audit: type=1400 audit(1787780883.218:1141): avc: denied { write } for pid=15313 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.965014][T15160] veth0_vlan: entered promiscuous mode [ 363.973471][T15160] veth1_vlan: entered promiscuous mode [ 364.035335][T15160] veth0_macvtap: entered promiscuous mode [ 364.042843][T15160] veth1_macvtap: entered promiscuous mode [ 364.070026][T15160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.081609][T15160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.136386][T14261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.160236][T13268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.160504][T13268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.224520][T14261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.365343][T14261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.365402][T14261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.439153][T13269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.439200][T13269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.871783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.883725][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 365.085866][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 365.085921][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 365.085960][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 365.085983][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 365.086163][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 365.143117][ T10] usb 8-1: USB disconnect, device number 24 [ 365.672451][ T5603] Bluetooth: hci5: command tx timeout [ 365.779587][T15373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.800627][T15369] lo speed is unknown, defaulting to 1000 [ 365.846489][T15333] syz.3.3295 (15333): drop_caches: 2 [ 365.911834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.191381][ T1786] usb 5-1: USB disconnect, device number 30 [ 366.304181][T15384] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15385] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15384] [ 366.471108][T15399] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3340'. [ 366.918921][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 366.918969][ T30] audit: type=1400 audit(1787780886.178:1151): avc: denied { write } for pid=15392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.951789][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.240932][ T30] audit: type=1400 audit(1787780886.498:1152): avc: denied { write } for pid=15418 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.754527][ T5603] Bluetooth: hci5: command tx timeout [ 367.991778][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.170779][T15454] jffs2: notice: (15454) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 1 orphan) and 8 of xref (0 dead, 2 orphan) found. [ 368.376162][ T30] audit: type=1400 audit(1787780887.638:1153): avc: denied { write } for pid=15432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.649380][ T30] audit: type=1400 audit(1787780887.908:1154): avc: denied { write } for pid=15465 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.792887][T15468] gadgetfs: bound to dummy_udc driver [ 369.031799][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.906194][ T30] audit: type=1400 audit(1787780889.168:1155): avc: denied { write } for pid=15473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.007882][T15500] netlink: 'syz.7.3367': attribute type 2 has an invalid length. [ 370.007941][T15500] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3367'. [ 370.049461][ T30] audit: type=1400 audit(1787780889.308:1156): avc: denied { write } for pid=15502 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.071971][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.535731][ T30] audit: type=1400 audit(1787780889.798:1157): avc: denied { write } for pid=15505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.675334][ T30] audit: type=1400 audit(1787780889.938:1158): avc: denied { write } for pid=15522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.989335][T15536] loop5: detected capacity change from 0 to 7 [ 371.006510][T15536] Dev loop5: unable to read RDB block 7 [ 371.006575][T15536] loop5: AHDI p1 p2 p3 [ 371.006591][T15536] loop5: partition table partially beyond EOD, truncated [ 371.006752][T15536] loop5: p1 start 1818582900 is beyond EOD, truncated [ 371.006767][T15536] loop5: p3 start 335544320 is beyond EOD, truncated [ 371.111783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.176877][ T30] audit: type=1400 audit(1787780890.438:1159): avc: denied { write } for pid=15529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.518103][ T30] audit: type=1400 audit(1787780890.778:1160): avc: denied { write } for pid=15549 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.550456][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.560387][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.569062][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.581474][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.582312][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.695164][T15560] /dev/loop0: Can't lookup blockdev [ 371.874424][T15569] netdevsim netdevsim7: Firmware load for '../file0/file0' refused, path contains '..' component [ 372.092033][ T1786] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 372.151786][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.242909][ T1786] usb 4-1: Using ep0 maxpacket: 32 [ 372.243490][ T1786] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 372.244329][ T1786] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.244352][ T1786] usb 4-1: config 0 has no interface number 0 [ 372.244382][ T1786] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 372.244404][ T1786] usb 4-1: config 0 interface 184 has no altsetting 0 [ 372.247767][ T1786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.247791][ T1786] usb 4-1: Product: syz [ 372.247805][ T1786] usb 4-1: Manufacturer: syz [ 372.247819][ T1786] usb 4-1: SerialNumber: syz [ 372.260599][ T1786] usb 4-1: config 0 descriptor?? [ 372.261589][T15568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 372.432052][ T5782] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 372.495559][T15568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 372.592050][ T5782] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 372.603269][ T5782] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.603312][ T5782] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 372.603342][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30065, setting to 64 [ 372.603381][ T5782] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.621916][ T30] audit: type=1400 audit(1787780891.878:1161): avc: denied { write } for pid=15564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.677007][ T5782] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 372.677055][ T5782] usb 2-1: Manufacturer: syz [ 372.677090][ T5782] usb 2-1: SerialNumber: syz [ 372.699302][ T5782] usb 2-1: config 0 descriptor?? [ 372.711561][T15589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 372.738952][ T5782] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input58 [ 372.837107][T15553] lo speed is unknown, defaulting to 1000 [ 372.935504][ T1786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 372.935558][ T1786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 372.964115][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.964159][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.005865][ T30] audit: type=1400 audit(1787780892.268:1162): avc: denied { write } for pid=15602 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.161376][ T1786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 373.161510][ T1786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 373.161530][ T1786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 373.161945][ T1786] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 373.191847][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.224103][ T1786] usb 4-1: USB disconnect, device number 36 [ 373.358488][ T5696] usb 2-1: USB disconnect, device number 32 [ 373.672361][ T5603] Bluetooth: hci6: command tx timeout [ 374.107477][T15553] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.107625][T15553] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.107981][T15553] bridge_slave_0: entered allmulticast mode [ 374.109156][T15553] bridge_slave_0: entered promiscuous mode [ 374.111104][T15553] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.111204][T15553] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.111282][T15553] bridge_slave_1: entered allmulticast mode [ 374.112865][T15553] bridge_slave_1: entered promiscuous mode [ 374.134395][T15553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.136600][T15553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.156548][T15553] team0: Port device team_slave_0 added [ 374.158525][T15553] team0: Port device team_slave_1 added [ 374.225637][T15553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.225699][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.225723][T15553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.232783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.241574][T15553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.241590][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.241610][T15553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.424269][T15553] hsr_slave_0: entered promiscuous mode [ 374.425185][T15553] hsr_slave_1: entered promiscuous mode [ 374.427229][T15553] debugfs: 'hsr0' already exists in 'hsr' [ 374.427246][T15553] Cannot create hsr debugfs directory [ 374.836214][T15657] jffs2: notice: (15657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 1 orphan) and 8 of xref (0 dead, 2 orphan) found. [ 375.064111][T15553] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.064176][T15553] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.082264][T15665] netlink: 'syz.3.3412': attribute type 12 has an invalid length. [ 375.082284][T15665] netlink: 'syz.3.3412': attribute type 29 has an invalid length. [ 375.082296][T15665] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3412'. [ 375.082311][T15665] netlink: 'syz.3.3412': attribute type 1 has an invalid length. [ 375.082330][T15665] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3412'. [ 375.092951][T15668] netlink: 'syz.3.3412': attribute type 12 has an invalid length. [ 375.092969][T15668] netlink: 'syz.3.3412': attribute type 29 has an invalid length. [ 375.092980][T15668] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3412'. [ 375.092995][T15668] netlink: 'syz.3.3412': attribute type 1 has an invalid length. [ 375.093007][T15668] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3412'. [ 375.259989][T15553] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.260041][T15553] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.272043][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.429965][T15553] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.447482][T15553] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.677212][T15553] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.677284][T15553] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.753182][ T5609] Bluetooth: hci6: command tx timeout [ 375.885263][T15697] syzkaller1: entered promiscuous mode [ 375.885319][T15697] syzkaller1: entered allmulticast mode [ 376.008360][ T30] audit: type=1326 audit(1787780895.268:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15701 comm="syz.1.3426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb804f9e0d9 code=0x0 [ 376.163051][ T5782] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 376.289549][T15553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.312083][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.320440][ T5782] usb 8-1: Using ep0 maxpacket: 32 [ 376.328547][ T5782] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 376.339007][ T5782] usb 8-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 376.339049][ T5782] usb 8-1: config 120 has 0 interfaces, different from the descriptor's value: 1 [ 376.349113][T15715] input: syz1 as /devices/virtual/input/input59 [ 376.365997][T15553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.373017][T15553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.374227][ T5782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.374250][ T5782] usb 8-1: Product: syz [ 376.374263][ T5782] usb 8-1: Manufacturer: syz [ 376.374276][ T5782] usb 8-1: SerialNumber: syz [ 376.379113][ T5782] r8152-cfgselector 8-1: Unknown version 0x0000 [ 376.419090][T15553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.427925][T15553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.442769][T15553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.451677][T15553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 376.464731][T15553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.616111][ T5782] r8152-cfgselector 8-1: USB disconnect, device number 25 [ 376.628272][T15553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.669167][T15553] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.676895][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.677021][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.678995][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.679063][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.794442][ T986] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 377.044710][ T986] usb 5-1: Using ep0 maxpacket: 8 [ 377.050232][ T986] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 377.064788][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.073044][ T986] usb 5-1: Product: syz [ 377.077348][ T986] usb 5-1: Manufacturer: syz [ 377.083476][ T986] usb 5-1: SerialNumber: syz [ 377.090434][ T986] usb 5-1: Device is not authorized for usage [ 377.101138][T15553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.353202][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.398339][T15553] veth0_vlan: entered promiscuous mode [ 377.412533][T15553] veth1_vlan: entered promiscuous mode [ 377.480160][T15553] veth0_macvtap: entered promiscuous mode [ 377.500986][T15553] veth1_macvtap: entered promiscuous mode [ 377.529341][T15553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.549383][T15553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.643977][T14259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.644172][T14259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.644200][T14259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.644226][T14259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.771868][ T5782] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 377.794083][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.794125][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.831863][ T5609] Bluetooth: hci6: command tx timeout [ 377.846995][T13269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.847065][T13269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.923092][ T5782] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 377.926901][ T5782] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.926930][ T5782] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.926959][ T5782] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.928893][ T5782] usb 8-1: config 0 descriptor?? [ 377.998380][ T30] audit: type=1400 audit(1787780897.258:1164): avc: denied { getopt } for pid=15772 comm="syz.5.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 378.091779][ T1786] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 378.250500][ T1786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 378.268865][ T1786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.268912][ T1786] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.268935][ T1786] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.304289][ T1786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 378.304334][ T1786] usb 4-1: Product: syz [ 378.304349][ T1786] usb 4-1: Manufacturer: syz [ 378.304362][ T1786] usb 4-1: SerialNumber: syz [ 378.342944][ T5782] cm6533_jd 0003:0D8C:0022.002F: unknown main item tag 0x0 [ 378.350344][ T5782] cm6533_jd 0003:0D8C:0022.002F: unknown main item tag 0x0 [ 378.360909][ T5782] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.002F/input/input60 [ 378.392456][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.400044][ T5782] cm6533_jd 0003:0D8C:0022.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 378.526272][ T1786] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 378.565184][ T1786] usb 8-1: USB disconnect, device number 26 [ 378.901579][T15797] gadgetfs: bound to dummy_udc driver [ 379.184629][T15805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.193026][ T8823] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 379.322670][ T1786] usb 5-1: USB disconnect, device number 31 [ 379.353402][ T8823] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 379.369631][ T8823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.369680][ T8823] usb 2-1: Product: syz [ 379.369695][ T8823] usb 2-1: Manufacturer: syz [ 379.369707][ T8823] usb 2-1: SerialNumber: syz [ 379.372751][ T8823] usb 2-1: config 0 descriptor?? [ 379.431780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.543054][ T5709] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 379.723198][ T5709] usb 8-1: Using ep0 maxpacket: 16 [ 379.725371][ T5709] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 379.727436][ T5709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 38762, setting to 1024 [ 379.727480][ T5709] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 379.729699][ T5709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.729719][ T5709] usb 8-1: Product: syz [ 379.729731][ T5709] usb 8-1: Manufacturer: syz [ 379.729744][ T5709] usb 8-1: SerialNumber: syz [ 379.735431][ T5709] usb 8-1: config 0 descriptor?? [ 379.736567][T15809] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 379.808174][ T8823] usb 2-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0) [ 379.898866][ T5709] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 379.912056][ T5609] Bluetooth: hci6: command tx timeout [ 379.957668][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 379.957760][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 379.959408][ T5709] usb 8-1: USB disconnect, device number 27 [ 379.964959][ T5709] mcba_usb 8-1:0.0 can0: device disconnected [ 380.010035][ T8823] usb 2-1: no permanent extended address found, random address set [ 380.230012][ T8823] usb 2-1: USB disconnect, device number 33 [ 380.471788][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.616919][T15821] kvm: user requested TSC rate below hardware speed [ 380.626927][T15821] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 380.826614][ T5783] usb 4-1: USB disconnect, device number 37 [ 380.842372][ T5783] usblp1: removed [ 380.876389][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3470'. [ 380.876460][T15829] netlink: 'syz.5.3470': attribute type 21 has an invalid length. [ 380.876494][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3470'. [ 380.980041][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3470'. [ 380.980105][T15829] netlink: 'syz.5.3470': attribute type 21 has an invalid length. [ 380.980117][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3470'. [ 380.992144][T13269] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.002660][T13269] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.004088][T13269] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.004118][T13269] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.287488][ T10] libceph: connect (1)[c::]:6789 error -101 [ 381.293963][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 381.384433][T15845] ceph: No mds server is up or the cluster is laggy [ 381.512016][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.607735][T15855] netlink: 'syz.3.3480': attribute type 11 has an invalid length. [ 381.607790][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3480'. [ 381.631031][T15855] netlink: 'syz.3.3480': attribute type 11 has an invalid length. [ 381.631094][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3480'. [ 381.641857][T14258] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.652008][T13269] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.654677][T14258] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.654709][T14258] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.467050][T15881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.551804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.199847][ T31] INFO: task syz.5.1942:10848 blocked for more than 143 seconds. [ 383.200327][ T31] Tainted: G L syzkaller #0 [ 383.200363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.200383][ T31] task:syz.5.1942 state:D stack:27656 pid:10848 tgid:10847 ppid:8546 task_flags:0x400140 flags:0x00080002 [ 383.200460][ T31] Call Trace: [ 383.200480][ T31] [ 383.200496][ T31] __schedule+0x1259/0x6920 [ 383.200529][ T31] ? __lock_acquire+0x4c5/0x1ec0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 383.200555][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 383.200588][ T31] ? __pfx___schedule+0x10/0x10 [ 383.200611][ T31] ? find_held_lock+0x2b/0x80 [ 383.200639][ T31] ? schedule+0x225/0x2c0 [ 383.200668][ T31] schedule+0xdd/0x2c0 [ 383.200693][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.200720][ T31] __mutex_lock+0xcbf/0x1bc0 [ 383.200749][ T31] ? nfsd_nrthreads+0x57/0xd0 [ 383.200783][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 383.200819][ T31] ? net_generic+0xea/0x2a0 [ 383.200847][ T31] ? net_generic+0xea/0x2a0 [ 383.200882][ T31] ? nfsd_nrthreads+0x57/0xd0 [ 383.200912][ T31] nfsd_nrthreads+0x57/0xd0 [ 383.200944][ T31] write_threads+0x34a/0x600 [ 383.200971][ T31] ? __pfx_write_threads+0x10/0x10 [ 383.200999][ T31] ? __might_fault+0xc5/0x140 [ 383.201028][ T31] ? __might_fault+0xc5/0x140 [ 383.201061][ T31] ? __pfx_write_threads+0x10/0x10 [ 383.201089][ T31] ? __pfx_write_threads+0x10/0x10 [ 383.201115][ T31] ? _copy_from_user+0x59/0xd0 [ 383.201147][ T31] ? __pfx_write_threads+0x10/0x10 [ 383.201172][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 383.201199][ T31] vfs_write+0x2aa/0x1050 [ 383.201235][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 383.201288][ T31] ? __pfx_vfs_write+0x10/0x10 [ 383.204558][ T31] ? find_held_lock+0x2b/0x80 [ 383.204871][ T31] ? __fget_files+0x215/0x3d0 [ 383.204907][ T31] ? __fget_files+0x21f/0x3d0 [ 383.204942][ T31] ksys_write+0x12a/0x250 [ 383.204978][ T31] ? __pfx_ksys_write+0x10/0x10 [ 383.205018][ T31] do_syscall_64+0x123/0x790 [ 383.205057][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.205087][ T31] RIP: 0033:0x7f27b1d9e0d9 [ 383.205111][ T31] RSP: 002b:00007f27b2bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.205146][ T31] RAX: ffffffffffffffda RBX: 00007f27b2025fa0 RCX: 00007f27b1d9e0d9 [ 383.205167][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 383.205186][ T31] RBP: 00007f27b1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 383.205206][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.205225][ T31] R13: 00007f27b2026038 R14: 00007f27b2025fa0 R15: 00007fffbfec4448 [ 383.205267][ T31] [ 383.205285][ T31] INFO: task syz.5.1942:10849 blocked for more than 143 seconds. [ 383.205310][ T31] Tainted: G L syzkaller #0 [ 383.205329][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.205344][ T31] task:syz.5.1942 state:D stack:28728 pid:10849 tgid:10847 ppid:8546 task_flags:0x400040 flags:0x00080002 [ 383.205418][ T31] Call Trace: [ 383.205433][ T31] [ 383.205452][ T31] __schedule+0x1259/0x6920 [ 383.205487][ T31] ? __lock_acquire+0x4c5/0x1ec0 [ 383.205528][ T31] ? __pfx___schedule+0x10/0x10 [ 383.205560][ T31] ? find_held_lock+0x2b/0x80 [ 383.205594][ T31] ? schedule+0x225/0x2c0 [ 383.205630][ T31] schedule+0xdd/0x2c0 [ 383.205663][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.205696][ T31] __mutex_lock+0xcbf/0x1bc0 [ 383.205733][ T31] ? fdget_pos+0x2aa/0x380 [ 383.205768][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 383.205808][ T31] ? find_held_lock+0x2b/0x80 [ 383.205842][ T31] ? __fget_files+0x215/0x3d0 [ 383.205876][ T31] ? __fget_files+0x21f/0x3d0 [ 383.205910][ T31] ? fdget_pos+0x2aa/0x380 [ 383.205938][ T31] fdget_pos+0x2aa/0x380 [ 383.205969][ T31] ksys_read+0x71/0x250 [ 383.206005][ T31] ? __pfx_ksys_read+0x10/0x10 [ 383.206041][ T31] ? kcov_ioctl+0x17a/0x760 [ 383.206075][ T31] do_syscall_64+0x123/0x790 [ 383.206114][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.206143][ T31] RIP: 0033:0x7f27b1d9e0d9 [ 383.206166][ T31] RSP: 002b:00007f27b2bb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.206201][ T31] RAX: ffffffffffffffda RBX: 00007f27b2026090 RCX: 00007f27b1d9e0d9 [ 383.206224][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 383.206245][ T31] RBP: 00007f27b1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 383.206271][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.206293][ T31] R13: 00007f27b2026128 R14: 00007f27b2026090 R15: 00007fffbfec4448 [ 383.206329][ T31] [ 383.206397][ T31] [ 383.206397][ T31] Showing all locks held in the system: [ 383.206418][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 383.206442][ T31] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 383.206582][ T31] locks held by getty/5352: 2, on CPU#0: [ 383.206607][ T31] #0: ffff8880338b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 383.206719][ T31] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 383.206837][ T31] locks held by syz.4.1396/9282: 3, on CPU#1: [ 383.206861][ T31] #0: ffff888020b775f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 383.206975][ T31] #1: ffff88807db82460 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 383.207101][ T31] #2: ffffffff8f284440 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 383.207181][ T31] locks held by syz.5.1942/10848: 3, on CPU#1: [ 383.207200][ T31] #0: ffff88807562deb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 383.207284][ T31] #1: ffff888040656460 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 383.207381][ T31] #2: ffffffff8f284440 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x57/0xd0 [ 383.207472][ T31] locks held by syz.5.1942/10849: 1, on CPU#0: [ 383.207492][ T31] #0: ffff88807562deb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 383.207577][ T31] locks held by kworker/u8:14/13269: 4, last CPU#0: [ 383.207623][ T31] #0: ffff88801f3d2940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 383.207720][ T31] #1: ffffc9000611fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 383.207816][ T31] #2: ffff88807f4d40a0 (&ctx->uring_lock){+.+.}-{4:4}, at: io_ring_exit_work+0x422/0xd59 [ 383.207916][ T31] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 383.208018][ T31] locks held by kworker/u8:22/14261: 2, on CPU#1: [ 383.208040][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 383.208144][ T31] #1: ffffc90006c9fd08 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 383.208249][ T31] locks held by syz.0.3240/15025: 3, on CPU#1: [ 383.208278][ T31] #0: ffff8880756840f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 383.208380][ T31] #1: ffff888037bb8460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 383.208505][ T31] #2: ffff888056933080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 383.208619][ T31] locks held by syz.0.3240/15030: 1, on CPU#1: [ 383.208642][ T31] #0: ffff8880756840f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 383.208752][ T31] locks held by syz-executor/15160: 4, last CPU#0: [ 383.208776][ T31] #0: ffffffff8ef3cab0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4815/0x8370 [ 383.208894][ T31] #1: ffff8880504e1d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 383.208999][ T31] #2: ffff8880339829f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 383.209082][ T31] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 383.209160][ T31] locks held by syz.4.3499/15896: 1, last CPU#1: [ 383.209178][ T31] #0: ffff88803306aac8 (&pcm->open_mutex){+.+.}-{4:4}, at: snd_pcm_oss_release+0xfb/0x300 [ 383.209264][ T31] [ 383.209275][ T31] ============================================= [ 383.209275][ T31] [ 383.209289][ T31] NMI backtrace for cpu 0 [ 383.209307][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 383.209332][ T31] Tainted: [L]=SOFTLOCKUP [ 383.209339][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 383.209350][ T31] Call Trace: [ 383.209357][ T31] [ 383.209364][ T31] dump_stack_lvl+0x100/0x190 [ 383.209392][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 383.209420][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 383.209442][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 383.209468][ T31] sys_info+0x141/0x190 [ 383.209487][ T31] watchdog+0xcb1/0x1030 [ 383.209512][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 383.209537][ T31] ? __pfx_watchdog+0x10/0x10 [ 383.209558][ T31] ? __kthread_parkme+0x18f/0x230 [ 383.209583][ T31] ? kthread+0x13a/0x450 [ 383.209606][ T31] ? __pfx_watchdog+0x10/0x10 [ 383.209625][ T31] kthread+0x373/0x450 [ 383.209649][ T31] ? __pfx_kthread+0x10/0x10 [ 383.209676][ T31] ret_from_fork+0x730/0xd60 [ 383.209699][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 383.209722][ T31] ? __switch_to+0x800/0x10f0 [ 383.209747][ T31] ? __pfx_kthread+0x10/0x10 [ 383.209772][ T31] ret_from_fork_asm+0x1a/0x30 [ 383.209804][ T31] [ 383.209814][ T31] Sending NMI from CPU 0 to CPUs 1: [ 383.209842][ C1] NMI backtrace for cpu 1 [ 383.209857][ C1] CPU: 1 UID: 0 PID: 15832 Comm: syz.1.3471 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.209877][ C1] Tainted: [L]=SOFTLOCKUP [ 383.209882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 383.209890][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x6b/0x70 [ 383.209908][ C1] Code: 82 08 17 00 00 83 f8 02 75 20 48 8b 8a 10 17 00 00 8b 92 0c 17 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 40 e1 c4 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 383.209921][ C1] RSP: 0018:ffffc90004e378f0 EFLAGS: 00000046 [ 383.209933][ C1] RAX: 0000000000080000 RBX: ffff88802d38a2bc RCX: ffffc9001b780000 [ 383.209943][ C1] RDX: 0000000000080000 RSI: ffffffff820ec036 RDI: ffff88805a58cb00 [ 383.209953][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 383.209962][ C1] R10: 00000000000002ac R11: 0000000000000001 R12: 0000000000000000 [ 383.209971][ C1] R13: ffffc90004e379a8 R14: 0000000000000000 R15: ffff88801d2bc000 [ 383.209984][ C1] FS: 00007fb805db56c0(0000) GS:ffff888123c6d000(0000) knlGS:0000000000000000 [ 383.210000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.210010][ C1] CR2: 0000001b34422ff8 CR3: 00000000297f8000 CR4: 00000000003526f0 [ 383.210019][ C1] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 383.210027][ C1] DR3: 00000000c0f00480 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 383.210036][ C1] Call Trace: [ 383.210041][ C1] [ 383.210046][ C1] ring_buffer_lock_reserve+0x4b6/0x1220 [ 383.210069][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 383.210084][ C1] ? trace_write_msr+0x77/0x1f0 [ 383.210107][ C1] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 383.210133][ C1] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 383.210153][ C1] trace_event_buffer_reserve+0x1f9/0x350 [ 383.210169][ C1] trace_event_raw_event_msr_trace_class+0xe8/0x270 [ 383.210189][ C1] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 383.210211][ C1] ? clockevents_program_event+0x23e/0x820 [ 383.210231][ C1] ? clockevents_program_event+0x23e/0x820 [ 383.210251][ C1] trace_write_msr+0x160/0x1f0 [ 383.210269][ C1] lapic_next_event+0x10/0x20 [ 383.210284][ C1] clockevents_program_event+0x375/0x820 [ 383.210305][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 383.210325][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 383.210341][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 383.210360][ C1] tick_program_event+0xa9/0x140 [ 383.210374][ C1] __hrtimer_rearm_deferred+0x234/0x7b0 [ 383.210395][ C1] ? irqentry_enter+0x2f/0x130 [ 383.210414][ C1] irqentry_exit+0x5f3/0xa10 [ 383.210434][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.210450][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 383.210467][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ca a7 16 f6 48 89 df e8 e2 fd 16 f6 e8 cd b7 43 f6 fb bf 01 00 00 00 e2 07 06 f6 65 48 83 3d 71 c6 ba 08 00 74 06 5b c3 cc cc cc cc [ 383.210479][ C1] RSP: 0018:ffffc90004e37e40 EFLAGS: 00000206 [ 383.210490][ C1] RAX: 0000000000050741 RBX: ffff88802da61bc0 RCX: 0000000000000000 [ 383.210500][ C1] RDX: 0000000000000001 RSI: ffffffff8e3eb0b9 RDI: 0000000000000001 [ 383.210511][ C1] RBP: ffff88805a58d498 R08: 0000000000000001 R09: 0000000000000000 [ 383.210520][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805a58cb00 [ 383.210529][ C1] R13: 0000000100000000 R14: 0000000000000007 R15: 0000000000000000 [ 383.210543][ C1] set_current_blocked+0xdd/0x120 [ 383.210565][ C1] __do_sys_rt_sigreturn+0x1a2/0x2c0 [ 383.210584][ C1] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 383.210607][ C1] do_syscall_64+0x123/0x790 [ 383.210628][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.210642][ C1] RIP: 0033:0x7fb804f3f459 [ 383.210653][ C1] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 383.210665][ C1] RSP: 002b:00007fb805db4340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 383.210677][ C1] RAX: ffffffffffffffda RBX: 00007fb805225fa0 RCX: 00007fb804f3f459 [ 383.210686][ C1] RDX: 00007fb805db4340 RSI: 00007fb805db4470 RDI: 0000000000000021 [ 383.210695][ C1] RBP: 00007fb805035024 R08: 0000000000000000 R09: 0000000000000000 [ 383.210704][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 383.210712][ C1] R13: 00007fb805226038 R14: 00007fb805225fa0 R15: 00007ffee7eee2b8 [ 383.210727][ C1] [ 383.210851][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 384.558278][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 384.568935][ T31] Tainted: [L]=SOFTLOCKUP [ 384.573239][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 384.583278][ T31] Call Trace: [ 384.586538][ T31] [ 384.589449][ T31] dump_stack_lvl+0x100/0x190 [ 384.594125][ T31] vpanic+0x553/0x970 [ 384.598089][ T31] ? __pfx_vpanic+0x10/0x10 [ 384.602575][ T31] panic+0xd1/0xe0 [ 384.606275][ T31] ? __pfx_panic+0x10/0x10 [ 384.610670][ T31] ? wq_watchdog_touch+0xec/0x1a0 [ 384.615683][ T31] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 384.621821][ T31] ? watchdog.cold+0x1ec/0x234 [ 384.626570][ T31] watchdog.cold+0x1fd/0x234 [ 384.631146][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 384.636936][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.641597][ T31] ? __kthread_parkme+0x18f/0x230 [ 384.646605][ T31] ? kthread+0x13a/0x450 [ 384.650832][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.655488][ T31] kthread+0x373/0x450 [ 384.659544][ T31] ? __pfx_kthread+0x10/0x10 [ 384.664135][ T31] ret_from_fork+0x730/0xd60 [ 384.668711][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 384.673816][ T31] ? __switch_to+0x800/0x10f0 [ 384.678483][ T31] ? __pfx_kthread+0x10/0x10 [ 384.683060][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.687820][ T31] [ 384.691070][ T31] Kernel Offset: disabled [ 384.695384][ T31] Rebooting in 86400 seconds..