last executing test programs: 6m54.320559539s ago: executing program 4 (id=2124): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x101122, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x2, 0x1, 0xffff8001, 0x4}) 6m54.062162446s ago: executing program 4 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m53.795594149s ago: executing program 4 (id=2131): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000b00)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 6m53.515224198s ago: executing program 4 (id=2136): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0xc) 6m53.248271798s ago: executing program 4 (id=2139): syz_open_dev$video(&(0x7f0000000040), 0x80, 0x80140) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@setlink={0x30, 0x13, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x410, 0x52000}, [@IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x30}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m52.913875064s ago: executing program 4 (id=2142): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ad8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000025a000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000497000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23a08000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m52.486364347s ago: executing program 32 (id=2142): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ad8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000025a000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000497000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23a08000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m24.285786039s ago: executing program 3 (id=3211): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0x9}, 0x10) 5m24.015122737s ago: executing program 3 (id=3214): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 5m22.42632395s ago: executing program 3 (id=3229): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) 5m21.424662173s ago: executing program 3 (id=3239): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@multicast, @remote, @void, {@llc_tr={0x11, {@llc={0x42, 0x80, "f2"}}}}}, 0x0) 5m20.924661096s ago: executing program 3 (id=3248): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m20.68892371s ago: executing program 3 (id=3252): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x7fffffff, 0x3fd, 0x7f, 0x2}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x3, 0x0, 0xff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m5.596251766s ago: executing program 33 (id=3252): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x7fffffff, 0x3fd, 0x7f, 0x2}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x3, 0x0, 0xff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m41.172429429s ago: executing program 0 (id=3673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m40.666081718s ago: executing program 0 (id=3676): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r2, 0x5}) 4m39.931639163s ago: executing program 0 (id=3681): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) 4m39.642920849s ago: executing program 0 (id=3684): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 4m39.345417293s ago: executing program 0 (id=3686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m37.842375837s ago: executing program 0 (id=3694): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) 4m37.161478606s ago: executing program 34 (id=3694): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) 2m0.744430798s ago: executing program 7 (id=5195): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000680)=0x600000, 0x4) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) 2m0.543627195s ago: executing program 7 (id=5199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) 2m0.107448756s ago: executing program 7 (id=5205): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, r1, 0x1, 0x0, &(0x7f00000004c0)=[{0xffffffffffffedca, 0xfffffffffffffff9}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m59.983946166s ago: executing program 7 (id=5207): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x201008e, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 1m59.59559028s ago: executing program 7 (id=5210): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 1m58.753479459s ago: executing program 7 (id=5215): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m58.318657235s ago: executing program 35 (id=5215): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m29.38517975s ago: executing program 6 (id=5407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)="20e0", 0x2}], 0x1}, 0xd007) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/199, 0xc7}], 0x1}, 0x1) 1m29.18453091s ago: executing program 6 (id=5412): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(r0, &(0x7f00000004c0)="0b0300000a00eb926a9158a19df715841382ea7fed2d1dc7bd43", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m28.994235847s ago: executing program 6 (id=5416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80085}, 0x8004) accept4(r1, 0x0, 0x0, 0x800) 1m28.783115618s ago: executing program 6 (id=5419): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 1m28.522678252s ago: executing program 6 (id=5422): r0 = syz_io_uring_setup(0x34b4, &(0x7f0000000540)={0x0, 0x6723, 0x8, 0xffffffff, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x11, 0x0, @fd=r0, 0x100, 0x0, 0x0, 0x12, 0x0, {0x4, 0x0, 0x5d, '\x00', 0x0, 0x200}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m28.047497246s ago: executing program 6 (id=5427): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 1m12.901970406s ago: executing program 36 (id=5427): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 20.057149681s ago: executing program 8 (id=5919): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x76, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 19.846003651s ago: executing program 8 (id=5921): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file1'}, 0xb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 19.545423661s ago: executing program 8 (id=5923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42582, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0xfffffa3b, 0x2, 0xfe, 0x4, 0x9, 0x79, 0x7, 0x0, 0x67, 0x1, 0x1, 0xa, 0x200000000000007}, {0xfffffa84, 0x9, 0xc, 0x4, 0x80, 0x4, 0x9, 0x43, 0xb8, 0x7, 0xb, 0x3a, 0x7}, {0x0, 0x8000, 0x5, 0x6, 0x1, 0x8, 0xfd, 0x5, 0x8, 0x0, 0x1, 0x81, 0x8}], 0x1}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x40, 0x0, [{0x1, 0x9, 0x2, 0x5, 0x2, 0x21726574}]}) 19.147009495s ago: executing program 8 (id=5925): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = io_uring_setup(0x1, &(0x7f0000000380)={0x0, 0x0, 0x3800, 0x2}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002040), 0x101000, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400), 0x0) 18.86400655s ago: executing program 8 (id=5927): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc) 18.366923463s ago: executing program 8 (id=5930): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 6.245087106s ago: executing program 2 (id=6037): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) sendto(r0, &(0x7f0000000180)="0d000000010001", 0x7, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000300)="5900000017000000000000000000000000000000000000050402010600", 0x1d, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000400)='X\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x0) 6.15059816s ago: executing program 9 (id=6038): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) 5.936421433s ago: executing program 2 (id=6039): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) 5.84021914s ago: executing program 5 (id=6040): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7103b3a4d991e2"], 0xb6) 5.340307254s ago: executing program 5 (id=6043): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2284, 0x0) 5.244800509s ago: executing program 9 (id=6045): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x200088a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rmdir(&(0x7f0000000080)='./file0\x00') 4.796566303s ago: executing program 5 (id=6046): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 4.490916992s ago: executing program 5 (id=6047): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xf, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 4.356482285s ago: executing program 9 (id=6048): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='measure', 0x7) write$FUSE_INTERRUPT(r0, &(0x7f0000002280)={0x10}, 0x10) close(0x3) 3.662944486s ago: executing program 9 (id=6049): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000bc0)={0x0, 0x0, 0x7}) 3.484622662s ago: executing program 5 (id=6050): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 3.186773265s ago: executing program 37 (id=5930): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 3.18487556s ago: executing program 5 (id=6052): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xf74, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x150}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 3.184597461s ago: executing program 9 (id=6053): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40106183, &(0x7f0000000240)) 2.638245223s ago: executing program 1 (id=6054): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) 2.615620462s ago: executing program 2 (id=6055): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x800010100000, 0x4}, 0x0, &(0x7f00000000c0)={0x1b, 0x3, 0x0, 0x800000000000000, 0x0, 0x200000000, 0x6a9, 0x4000000000}, 0x0, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2.06922s ago: executing program 1 (id=6056): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) 1.453255908s ago: executing program 2 (id=6057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x4000) 1.274655262s ago: executing program 1 (id=6058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003540)=@vmx={0x9, 0x0, 0x2080, {0xa000, 0xc000, {}, 0x1, 0x9}, {"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", "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"}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001080)=@svm={0x102, 0x1, 0x1080, {0x10000}, {"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"}}) 1.019886327s ago: executing program 2 (id=6059): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) 856.919903ms ago: executing program 9 (id=6060): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000000) 769.996988ms ago: executing program 1 (id=6061): r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xfdef}, {0x0, 0xe00}], 0x10000000000000fb) 608.107742ms ago: executing program 2 (id=6062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0x9}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 327.729382ms ago: executing program 1 (id=6063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=6064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) kernel console output (not intermixed with test programs): 12] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.029841][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.095800][T18511] veth1_vlan: entered promiscuous mode [ 533.196976][T18511] veth0_macvtap: entered promiscuous mode [ 533.223542][T18511] veth1_macvtap: entered promiscuous mode [ 533.276369][T18511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.318959][T18511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.472829][ T149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.472857][ T149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.472876][ T149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.530450][ T1432] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.816162][ T1564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.816177][ T1564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.923508][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5273'. [ 533.942490][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.942504][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.029111][ T31] audit: type=1400 audit(1789570910.450:1036): avc: denied { mount } for pid=18679 comm="syz.5.5270" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 534.128028][ T31] audit: type=1400 audit(1789570910.780:1037): avc: denied { mounton } for pid=18511 comm="syz-executor" path="/root/syzkaller.fZ9k0X/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=73322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 534.166637][ T5613] Bluetooth: hci1: command tx timeout [ 534.282101][T18697] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.5275'. [ 534.282136][T18697] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.5275'. [ 534.331710][T18696] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5274'. [ 534.621452][T18704] Bluetooth: hci0: load_link_keys: too big key_count value 16384 [ 534.887507][T18722] input: syz1 as /devices/virtual/input/input61 [ 534.938501][ T13] IPVS: starting estimator thread 0... [ 534.943372][T18720] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 535.028075][T18726] IPVS: using max 65 ests per chain, 156000 per kthread [ 535.206696][T18555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.794467][ T31] audit: type=1400 audit(1789570912.440:1038): avc: denied { setopt } for pid=18737 comm="syz.6.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.913448][T18555] veth0_vlan: entered promiscuous mode [ 535.977309][T18555] veth1_vlan: entered promiscuous mode [ 536.093302][T18555] veth0_macvtap: entered promiscuous mode [ 536.123033][T18555] veth1_macvtap: entered promiscuous mode [ 536.210760][T18555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.245868][T18555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.390593][ T1564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.430215][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.451517][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.477864][ T1564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.826185][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.827863][ T5713] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 537.827877][ T5713] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 537.911320][ T31] audit: type=1400 audit(1789570914.560:1039): avc: denied { accept } for pid=18777 comm="syz.5.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.064513][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 540.064632][ T5713] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 540.064643][ T5713] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 540.340242][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.340254][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.466681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.466696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.934445][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5230'. [ 541.291089][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5316'. [ 541.754220][ T31] audit: type=1400 audit(1789570918.400:1040): avc: denied { mount } for pid=18826 comm="syz.5.5322" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 541.842569][ T31] audit: type=1400 audit(1789570918.490:1041): avc: denied { unmount } for pid=10670 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 542.123918][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5326'. [ 542.368526][ T31] audit: type=1400 audit(1789570919.020:1042): avc: denied { read write } for pid=18843 comm="syz.1.5330" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 542.368559][ T31] audit: type=1400 audit(1789570919.020:1043): avc: denied { open } for pid=18843 comm="syz.1.5330" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 542.575532][ T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 542.577244][ T5713] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 542.733061][ T9] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 542.747234][ T5713] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.747416][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 542.747433][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.747446][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 542.747493][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.750318][ T5713] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 542.750337][ T5713] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 542.750357][ T5713] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.750377][ T5713] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 542.750392][ T5713] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.752208][ T9] usb 6-1: config 0 descriptor?? [ 542.776064][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.776081][ T5713] usb 7-1: Product: syz [ 542.776091][ T5713] usb 7-1: Manufacturer: syz [ 542.776099][ T5713] usb 7-1: SerialNumber: syz [ 542.908204][T18845] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 543.136548][T18845] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 543.142708][T18860] syzkaller1: entered promiscuous mode [ 543.142722][T18860] syzkaller1: entered allmulticast mode [ 543.273212][ T9] hid-multitouch 0003:0457:07DA.0025: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 543.364358][ T5693] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 543.371055][ T31] audit: type=1400 audit(1789570920.020:1044): avc: denied { search } for pid=18864 comm="syz.1.5339" name="/" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.371103][ T31] audit: type=1400 audit(1789570920.020:1045): avc: denied { search } for pid=18864 comm="syz.1.5339" name="dlm" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.371127][ T31] audit: type=1400 audit(1789570920.020:1046): avc: denied { write search } for pid=18864 comm="syz.1.5339" name="dlm" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.371149][ T31] audit: type=1400 audit(1789570920.020:1047): avc: denied { add_name } for pid=18864 comm="syz.1.5339" name="cl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.512728][ T31] audit: type=1400 audit(1789570920.160:1048): avc: denied { search } for pid=18864 comm="syz.1.5339" name="/" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.512770][ T31] audit: type=1400 audit(1789570920.160:1049): avc: denied { search } for pid=18864 comm="syz.1.5339" name="dlm" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.575511][ T5693] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 543.577813][ T5693] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.577840][ T5693] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 543.577871][ T5693] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.583288][ T9] usb 6-1: USB disconnect, device number 29 [ 543.682659][T18863] fido_id[18863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 543.780476][T18845] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 543.864670][ T5693] cxacru 9-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 543.864795][ T5693] cxacru 9-1:1.0: probe with driver cxacru failed with error -22 [ 543.899331][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5340'. [ 543.987862][ T5713] cdc_ncm 7-1:1.0: bind() failure [ 544.007760][ T5713] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 544.008872][ T5713] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 544.010570][ T5713] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 544.046401][ T5713] usb 7-1: USB disconnect, device number 21 [ 544.138104][ T9] usb 9-1: USB disconnect, device number 2 [ 544.342617][T18873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.427165][T18876] jffs2: notice: (18876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (8 unchecked, 0 orphan) and 8 of xref (0 dead, 0 orphan) found. [ 544.524141][T18881] pim6reg: entered allmulticast mode [ 544.564329][T18881] team0: entered allmulticast mode [ 544.564344][T18881] team_slave_1: entered allmulticast mode [ 544.567086][T18881] team0: left allmulticast mode [ 544.567098][T18881] team_slave_1: left allmulticast mode [ 544.567191][T18881] pim6reg: left allmulticast mode [ 544.828721][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5351'. [ 547.572321][T18891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5347'. [ 548.444586][ T5713] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 548.595401][ T5713] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 548.597663][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 548.597682][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.597702][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.599196][ T5713] usb 6-1: config 0 descriptor?? [ 548.836002][T18923] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 548.836030][T18923] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 548.836055][T18923] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 548.841812][T18923] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 548.943346][T18923] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 549.084919][T18927] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 549.222997][ T5713] usb 6-1: string descriptor 0 read error: -22 [ 549.631898][ T5713] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71 [ 549.631947][ T5713] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 549.631958][ T5713] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71 [ 549.631985][ T5713] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 549.632036][ T5713] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 549.633793][ T5713] usb 6-1: USB disconnect, device number 30 [ 550.789435][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 550.789456][ T31] audit: type=1326 audit(1789570927.440:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.2.5384" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb59d9e159 code=0x0 [ 551.083688][T18972] serio: Serial port ptm0 [ 551.440074][ T31] audit: type=1400 audit(1789570928.090:1055): avc: denied { setattr } for pid=18987 comm="syz.6.5392" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 551.894102][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5397'. [ 551.986574][T19000] block nbd6: shutting down sockets [ 552.587003][T19031] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 552.900372][ T31] audit: type=1400 audit(1789570929.550:1056): avc: denied { watch watch_reads } for pid=19045 comm="syz.8.5417" path="pipe:[71095]" dev="pipefs" ino=71095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 553.057750][T19051] random: crng reseeded on system resumption [ 553.161474][T19057] pim6reg: entered allmulticast mode [ 554.331900][ T31] audit: type=1400 audit(1789570930.980:1057): avc: denied { write } for pid=19090 comm="syz.8.5432" name="usb_gadget" dev="configfs" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 554.922673][T19110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19110 comm=syz.8.5438 [ 554.922733][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5438'. [ 555.058939][T19114] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 555.437843][T19122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5446'. [ 555.968177][T19137] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 555.983864][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5453'. [ 556.575124][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 556.730718][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.744128][ T9] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 556.744158][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.744174][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 556.744189][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.744204][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.744227][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.746434][ T9] usb 6-1: config 0 descriptor?? [ 556.754981][T19152] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.202272][ T9] hid_parser_main: 22 callbacks suppressed [ 557.202290][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202309][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202324][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202349][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202364][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202378][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202393][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202407][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202422][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.202437][ T9] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 557.333223][ T9] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 557.508494][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.508529][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.513415][ T5714] usb 6-1: USB disconnect, device number 31 [ 557.573709][T19172] fido_id[19172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 558.028838][T19187] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.6225946.0), cmd(2) [ 558.114828][T19190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5475'. [ 558.114852][T19190] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 558.197673][ T31] audit: type=1400 audit(1789570934.850:1058): avc: denied { write } for pid=19192 comm="syz.5.5476" path="socket:[76863]" dev="sockfs" ino=76863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 558.407435][T19195] syz.8.5477 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 558.407465][T19195] CPU: 0 UID: 0 PID: 19195 Comm: syz.8.5477 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 558.407485][T19195] Tainted: [L]=SOFTLOCKUP [ 558.407490][T19195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 558.407499][T19195] Call Trace: [ 558.407504][T19195] [ 558.407509][T19195] dump_stack_lvl+0x100/0x190 [ 558.407532][T19195] dump_header+0xfb/0x606 [ 558.407551][T19195] out_of_memory.cold+0xd/0x170 [ 558.407568][T19195] ? __pfx_out_of_memory+0x10/0x10 [ 558.407590][T19195] mem_cgroup_out_of_memory+0xc6/0x130 [ 558.407604][T19195] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 558.407617][T19195] ? find_held_lock+0x2b/0x80 [ 558.407637][T19195] ? do_raw_spin_unlock+0x145/0x1e0 [ 558.407653][T19195] ? _raw_spin_unlock+0x28/0x50 [ 558.407668][T19195] try_charge_memcg+0x783/0xf60 [ 558.407689][T19195] ? __pfx_try_charge_memcg+0x10/0x10 [ 558.407705][T19195] ? find_held_lock+0x2b/0x80 [ 558.407721][T19195] ? rcu_read_unlock+0x17/0x60 [ 558.407737][T19195] ? rcu_read_unlock+0x17/0x60 [ 558.407759][T19195] obj_cgroup_charge_pages+0x2b/0x1f0 [ 558.407777][T19195] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 558.407799][T19195] ? kasan_unpoison+0x27/0x60 [ 558.407813][T19195] __kmalloc_cache_noprof+0x52a/0x6d0 [ 558.407830][T19195] ? mem_cgroup_css_alloc+0x11f/0x1d10 [ 558.407843][T19195] ? mem_cgroup_css_alloc+0x8cd/0x1d10 [ 558.407865][T19195] mem_cgroup_css_alloc+0x8cd/0x1d10 [ 558.407884][T19195] cgroup_apply_control_enable+0x602/0xdd0 [ 558.407912][T19195] cgroup_mkdir+0x57f/0x1330 [ 558.407929][T19195] ? __pfx_cgroup_mkdir+0x10/0x10 [ 558.407943][T19195] kernfs_iop_mkdir+0x111/0x190 [ 558.407960][T19195] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 558.407974][T19195] vfs_mkdir+0x364/0x850 [ 558.407989][T19195] filename_mkdirat+0x48b/0x5e0 [ 558.408006][T19195] ? __pfx_filename_mkdirat+0x10/0x10 [ 558.408021][T19195] ? strncpy_from_user+0x19d/0x2d0 [ 558.408036][T19195] ? do_getname+0x191/0x390 [ 558.408054][T19195] __x64_sys_mkdirat+0x89/0xc0 [ 558.408070][T19195] do_syscall_64+0x123/0x790 [ 558.408087][T19195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.408099][T19195] RIP: 0033:0x7f32bed9e159 [ 558.408110][T19195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.408121][T19195] RSP: 002b:00007f32bfbf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 558.408133][T19195] RAX: ffffffffffffffda RBX: 00007f32bf025fa0 RCX: 00007f32bed9e159 [ 558.408140][T19195] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 558.408148][T19195] RBP: 00007f32bee3506b R08: 0000000000000000 R09: 0000000000000000 [ 558.408155][T19195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.408162][T19195] R13: 00007f32bf026038 R14: 00007f32bf025fa0 R15: 00007ffc9e5c1b58 [ 558.408180][T19195] [ 558.802310][T19195] memory: usage 0kB, limit 0kB, failcnt 19 [ 558.802325][T19195] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 558.802334][T19195] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 558.802342][T19195] Memory cgroup stats for /syz8/test: [ 558.802452][T19195] cache 0 [ 558.802457][T19195] rss 0 [ 558.802461][T19195] rss_huge 0 [ 558.802465][T19195] shmem 0 [ 558.802469][T19195] mapped_file 0 [ 558.802474][T19195] dirty 0 [ 558.802478][T19195] writeback 0 [ 558.802482][T19195] workingset_refault_anon 0 [ 558.802486][T19195] workingset_refault_file 0 [ 558.802491][T19195] swap 0 [ 558.802495][T19195] swapcached 0 [ 558.802499][T19195] pgpgin 0 [ 558.802503][T19195] pgpgout 0 [ 558.802507][T19195] pgfault 0 [ 558.802511][T19195] pgmajfault 0 [ 558.802516][T19195] inactive_anon 0 [ 558.802520][T19195] active_anon 0 [ 558.802525][T19195] inactive_file 0 [ 558.802529][T19195] active_file 0 [ 558.802534][T19195] unevictable 0 [ 558.802538][T19195] hierarchical_memory_limit 0 [ 558.802543][T19195] hierarchical_memsw_limit 9223372036854771712 [ 558.802549][T19195] total_cache 0 [ 558.802553][T19195] total_rss 0 [ 558.802557][T19195] total_rss_huge 0 [ 558.802562][T19195] total_shmem 0 [ 558.802567][T19195] total_mapped_file 0 [ 558.802571][T19195] total_dirty 0 [ 558.802575][T19195] total_writeback 0 [ 558.802579][T19195] total_workingset_refault_anon 0 [ 558.802584][T19195] total_workingset_refault_file 0 [ 558.802589][T19195] total_swap 0 [ 558.802593][T19195] total_swapcached 0 [ 558.802597][T19195] total_pgpgin 0 [ 558.802601][T19195] total_pgpgout 0 [ 558.802606][T19195] total_pgfault 0 [ 558.802610][T19195] total_pgmajfault 0 [ 558.802614][T19195] total_inactive_anon 0 [ 558.802619][T19195] total_active_anon 0 [ 558.802623][T19195] total_inactive_file 0 [ 558.802627][T19195] total_active_file 0 [ 558.802631][T19195] total_unevictable 0 [ 558.802636][T19195] anon_cost 0 [ 558.802640][T19195] file_cost 0 [ 558.802644][T19195] Out of memory and no killable processes... [ 559.386275][T19206] loop2: detected capacity change from 0 to 2640 [ 559.404093][ T6553] buffer_io_error: 138 callbacks suppressed [ 559.404106][ T6553] Buffer I/O error on dev loop2, logical block 0, async page read [ 559.420463][ T6553] Buffer I/O error on dev loop2, logical block 0, async page read [ 559.490364][T19206] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 559.490416][T19206] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 559.490439][T19206] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 559.490454][T19206] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 559.490476][T19206] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 559.490490][T19206] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 559.490504][T19206] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 559.490517][T19206] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 560.167551][T19221] tap0: tun_chr_ioctl cmd 2148553947 [ 560.172312][T19221] tap0: tun_chr_ioctl cmd 1074025677 [ 560.172418][T19221] tap0: linktype set to 270 [ 560.937280][T19240] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5494'. [ 561.115647][ T5693] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 561.243169][ T31] audit: type=1400 audit(1789570937.890:1059): avc: denied { ioctl } for pid=19247 comm="syz.1.5497" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 561.270006][ T5693] usb 3-1: Using ep0 maxpacket: 16 [ 561.277075][ T5693] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 561.288681][ T5693] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 561.288698][ T5693] usb 3-1: config 1 has no interface number 0 [ 561.288720][ T5693] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 561.288742][ T5693] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 561.288756][ T5693] usb 3-1: config 1 interface 105 has no altsetting 0 [ 561.317544][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 561.317561][ T5693] usb 3-1: Product: syz [ 561.317569][ T5693] usb 3-1: Manufacturer: syz [ 561.317578][ T5693] usb 3-1: SerialNumber: syz [ 561.329564][T19237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.329621][T19237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.770616][T19237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.770695][T19237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 562.395351][ T5693] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 562.397293][ T5693] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 562.467769][T19274] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 562.472861][ T5693] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 82:14:1c:ca:ae:a0 [ 562.602237][ T5693] usb 3-1: USB disconnect, device number 42 [ 562.603494][ T5693] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 562.628218][ T31] audit: type=1400 audit(1789570939.270:1060): avc: denied { create } for pid=19273 comm="syz.8.5507" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 562.630278][ T31] audit: type=1400 audit(1789570939.280:1061): avc: denied { associate } for pid=19273 comm="syz.8.5507" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 562.761328][ T31] audit: type=1400 audit(1789570939.410:1062): avc: denied { mounton } for pid=19273 comm="syz.8.5507" path="/55/file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 562.968931][ T31] audit: type=1400 audit(1789570939.610:1063): avc: denied { write } for pid=19273 comm="syz.8.5507" name="bus" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 563.105792][ T5693] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 563.105860][ T5693] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 563.105932][ T5693] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 563.274788][ T31] audit: type=1400 audit(1789570939.920:1064): avc: denied { add_name } for pid=19273 comm="syz.8.5507" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 563.287365][ T31] audit: type=1400 audit(1789570939.940:1065): avc: denied { setattr } for pid=19273 comm="syz.8.5507" name="work" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 563.397520][ T31] audit: type=1400 audit(1789570940.050:1066): avc: denied { write } for pid=19273 comm="syz.8.5507" name="work" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 563.531894][ T31] audit: type=1400 audit(1789570940.180:1067): avc: denied { write open } for pid=19273 comm="syz.8.5507" path=2F202864656C6574656429 dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 563.532177][ T31] audit: type=1400 audit(1789570940.180:1068): avc: denied { write } for pid=19273 comm="syz.8.5507" name="work" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 563.532436][ T31] audit: type=1400 audit(1789570940.180:1069): avc: denied { create } for pid=19273 comm="syz.8.5507" name="#27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 563.532701][ T31] audit: type=1400 audit(1789570940.180:1070): avc: denied { write } for pid=19273 comm="syz.8.5507" name="work" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 564.042801][ T31] audit: type=1400 audit(1789570940.180:1071): avc: denied { write } for pid=19273 comm="syz.8.5507" name="work" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 564.043082][ T31] audit: type=1400 audit(1789570940.590:1072): avc: denied { remove_name } for pid=19273 comm="syz.8.5507" name="#27" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 564.043330][ T31] audit: type=1400 audit(1789570940.590:1073): avc: denied { rename } for pid=19273 comm="syz.8.5507" name="#27" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 564.613433][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead [ 564.613451][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead [ 564.613461][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead [ 564.613471][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead [ 564.613487][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead [ 564.613497][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead [ 564.613507][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead [ 564.613516][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead [ 564.613527][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead [ 564.613536][T19287] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead [ 564.613546][T19287] jffs2: Further such events for this erase block will not be printed [ 564.614192][T19287] jffs2: notice: (19287) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (8 unchecked, 0 orphan) and 11 of xref (0 dead, 0 orphan) found. [ 565.106724][T19295] netlink: 'syz.1.5515': attribute type 83 has an invalid length. [ 565.231554][T19300] device-mapper: ioctl: Empty message received. [ 565.762628][T19317] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 565.817852][T19317] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 567.039054][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5534'. [ 567.615617][T19344] syzkaller1: entered promiscuous mode [ 567.615633][T19344] syzkaller1: entered allmulticast mode [ 569.331691][T19364] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 569.349728][T19362] IPVS: stopping master sync thread 19364 ... [ 569.781451][T19372] netlink: 'syz.2.5549': attribute type 4 has an invalid length. [ 569.876449][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 569.953737][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 569.970175][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 569.983660][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 570.002706][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 570.012232][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.024585][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 570.026450][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 570.029243][ T9] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 570.029259][ T9] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 570.029271][ T9] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 570.029284][ T9] usb 6-1: config 250 has no interface number 0 [ 570.029304][ T9] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 570.029318][ T9] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 570.029331][ T9] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.029343][ T9] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 570.029357][ T9] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 570.029372][ T9] usb 6-1: config 250 interface 228 has no altsetting 0 [ 570.035883][ T9] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 570.035900][ T9] usb 6-1: Product: syz [ 570.035929][ T9] usb 6-1: SerialNumber: syz [ 570.044369][ T9] hub 6-1:250.228: bad descriptor, ignoring hub [ 570.044383][ T9] hub 6-1:250.228: probe with driver hub failed with error -5 [ 570.271555][ T9] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 570.497463][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 570.497476][ T31] audit: type=1400 audit(1789570947.140:1082): avc: denied { read write } for pid=19367 comm="syz.5.5547" name="lp0" dev="devtmpfs" ino=3728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 570.497507][ T31] audit: type=1400 audit(1789570947.140:1083): avc: denied { open } for pid=19367 comm="syz.5.5547" path="/dev/usb/lp0" dev="devtmpfs" ino=3728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 571.694485][ T5714] usb 6-1: USB disconnect, device number 32 [ 571.697396][ T5714] usblp0: removed [ 572.072997][ T149] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.306311][ T5614] Bluetooth: hci3: command tx timeout [ 572.377929][ T149] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.475710][ T31] audit: type=1400 audit(1789570949.120:1084): avc: denied { setopt } for pid=19400 comm="syz.5.5556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 572.605223][ T149] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.782235][T19374] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.782286][T19374] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.782388][T19374] bridge_slave_0: entered allmulticast mode [ 572.784145][T19374] bridge_slave_0: entered promiscuous mode [ 572.785845][T19374] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.785893][T19374] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.785981][T19374] bridge_slave_1: entered allmulticast mode [ 572.786825][T19374] bridge_slave_1: entered promiscuous mode [ 572.857075][ T149] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.938115][T19412] tipc: Enabling of bearer rejected, failed to enable media [ 572.939712][T19374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.968664][T19374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.178667][T19374] team0: Port device team_slave_0 added [ 573.182129][T19374] team0: Port device team_slave_1 added [ 573.262094][T19374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.262109][T19374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.262123][T19374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.263314][T19374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.263323][T19374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.263337][T19374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.382598][T19416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5561'. [ 573.401283][T19416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5561'. [ 573.529498][T19374] hsr_slave_0: entered promiscuous mode [ 573.530068][T19374] hsr_slave_1: entered promiscuous mode [ 573.566142][T19374] debugfs: 'hsr0' already exists in 'hsr' [ 573.566160][T19374] Cannot create hsr debugfs directory [ 573.895901][T19423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 573.930043][ T50] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.931161][ T71] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.287286][ T71] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.385464][ T5614] Bluetooth: hci3: command tx timeout [ 574.385572][ T1564] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.751385][ T149] bridge_slave_1: left allmulticast mode [ 574.751405][ T149] bridge_slave_1: left promiscuous mode [ 574.751532][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.808774][ T149] bridge_slave_0: left allmulticast mode [ 574.808794][ T149] bridge_slave_0: left promiscuous mode [ 574.808935][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.857442][ T149] pim6reg: left allmulticast mode [ 575.338361][ T31] audit: type=1400 audit(1789570951.990:1085): avc: denied { write } for pid=19432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.711862][ T31] audit: type=1400 audit(1789570952.360:1086): avc: denied { write } for pid=19464 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.008040][T19328] Set syz1 is full, maxelem 65536 reached [ 576.300064][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.313890][T19473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5581'. [ 576.337271][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.340602][ T149] bond0 (unregistering): Released all slaves [ 576.466073][ T5614] Bluetooth: hci3: command tx timeout [ 576.540346][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 576.540959][ T149] tipc: Disabling bearer [ 576.541033][ T149] tipc: Left network mode [ 576.752605][ T149] IPVS: stopping master sync thread 14516 ... [ 577.249037][T19486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.565748][ T149] hsr_slave_0: left promiscuous mode [ 577.570906][ T149] hsr_slave_1: left promiscuous mode [ 577.571405][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.571418][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.571875][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.571886][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.652983][ T31] audit: type=1400 audit(1789570954.300:1087): avc: denied { write } for pid=19496 comm="syz.2.5589" name="instances" dev="tracefs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 577.729717][ T149] veth1_macvtap: left promiscuous mode [ 577.729757][ T149] veth0_macvtap: left promiscuous mode [ 577.729880][ T149] veth1_vlan: left promiscuous mode [ 577.729932][ T149] veth0_vlan: left promiscuous mode [ 577.968929][ T31] audit: type=1400 audit(1789570954.620:1088): avc: denied { write } for pid=19482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.191176][ T31] audit: type=1400 audit(1789570954.840:1089): avc: denied { write } for pid=19513 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.545432][ T5614] Bluetooth: hci3: command tx timeout [ 579.131356][ T149] team0 (unregistering): Port device team_slave_1 removed [ 579.159369][ T149] team0 (unregistering): Port device team_slave_0 removed [ 579.466751][T19491] syzkaller1: entered promiscuous mode [ 579.466770][T19491] syzkaller1: entered allmulticast mode [ 579.600367][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 579.699041][T19526] syzkaller1: entered promiscuous mode [ 579.699056][T19526] syzkaller1: entered allmulticast mode [ 580.701143][ T149] IPVS: stop unused estimator thread 0... [ 581.095451][T19374] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 581.118063][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.142214][T19374] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 581.176384][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.282893][T19374] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 581.302347][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.303033][T19374] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 581.335670][T19374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.386675][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5610'. [ 581.780329][T19374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.836679][T19374] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.840830][ T31] audit: type=1400 audit(1789570958.490:1090): avc: denied { write } for pid=19560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.889872][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.889949][ T1564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.912838][T19606] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 581.966463][ T1564] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.966520][ T1564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.222477][ T31] audit: type=1400 audit(1789570958.870:1091): avc: denied { write } for pid=19612 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.473275][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 583.217756][ T31] audit: type=1400 audit(1789570959.870:1092): avc: denied { write } for pid=19629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.507094][T19374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.531974][ T31] audit: type=1400 audit(1789570960.180:1093): avc: denied { write } for pid=19652 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.599209][T19657] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5625'. [ 583.599240][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5625'. [ 583.819612][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 584.027766][T19670] netlink: 'syz.1.5630': attribute type 1 has an invalid length. [ 584.547258][T19374] veth0_vlan: entered promiscuous mode [ 584.595194][T19374] veth1_vlan: entered promiscuous mode [ 584.778253][T19374] veth0_macvtap: entered promiscuous mode [ 584.793645][T19374] veth1_macvtap: entered promiscuous mode [ 584.871952][T19374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.910721][T19374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.985339][ T1412] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.995253][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.995714][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.995735][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.147517][ T31] audit: type=1326 audit(1789570961.800:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.2.5637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb59d9e159 code=0x0 [ 585.386821][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.386836][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.483396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.483411][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.967221][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5644'. [ 585.991900][T19711] ipvlan2: entered allmulticast mode [ 585.991932][T19711] syz_tun: entered allmulticast mode [ 586.756090][T19735] syzkaller1: entered allmulticast mode [ 586.857989][T19738] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5654'. [ 586.887687][T19738] gretap0: entered promiscuous mode [ 586.908252][T19738] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5654'. [ 586.908574][T19738] 0ªî{X¹¦: renamed from gretap0 [ 586.911367][T19738] 0ªî{X¹¦: left promiscuous mode [ 586.911381][T19738] 0ªî{X¹¦: entered allmulticast mode [ 586.912757][T19738] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 587.042979][ T31] audit: type=1400 audit(1789570963.690:1095): avc: denied { create } for pid=19739 comm="syz.5.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 587.278729][ T31] audit: type=1400 audit(1789570963.930:1096): avc: denied { append } for pid=19745 comm="syz.9.5657" name="uprobe_events" dev="tracefs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 587.323045][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead [ 587.323118][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead [ 587.323130][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead [ 587.323140][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead [ 587.323150][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead [ 587.323159][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead [ 587.323169][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead [ 587.323178][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead [ 587.323188][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead [ 587.323197][T19748] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead [ 587.323206][T19748] jffs2: Further such events for this erase block will not be printed [ 587.323853][T19748] jffs2: notice: (19748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (8 unchecked, 0 orphan) and 11 of xref (0 dead, 0 orphan) found. [ 587.521878][T19750] trusted_key: syz.8.5659 sent an empty control message without MSG_MORE. [ 587.715097][ T31] audit: type=1400 audit(1789570964.360:1097): avc: denied { read } for pid=19757 comm="syz.8.5662" name="badblocks_once" dev="configfs" ino=80824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 587.751516][ T31] audit: type=1400 audit(1789570964.390:1098): avc: denied { open } for pid=19757 comm="syz.8.5662" path="/81/config/nullb/nullb1/badblocks_once" dev="configfs" ino=80824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 587.816658][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead [ 587.816673][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead [ 587.816683][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead [ 587.816693][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead [ 587.816702][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead [ 587.816712][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead [ 587.816721][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead [ 587.816731][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead [ 587.816740][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead [ 587.816749][T19761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead [ 587.816759][T19761] jffs2: Further such events for this erase block will not be printed [ 587.818636][T19761] jffs2: notice: (19761) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (8 unchecked, 0 orphan) and 11 of xref (0 dead, 0 orphan) found. [ 590.100743][T19831] input: syz1 as /devices/virtual/input/input63 [ 590.814763][T19850] serio: Serial port ttynull [ 590.995499][T19856] FAULT_INJECTION: forcing a failure. [ 590.995499][T19856] name failslab, interval 1, probability 0, space 0, times 0 [ 590.995526][T19856] CPU: 0 UID: 0 PID: 19856 Comm: syz.5.5703 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 590.995544][T19856] Tainted: [L]=SOFTLOCKUP [ 590.995549][T19856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 590.995556][T19856] Call Trace: [ 590.995625][T19856] [ 590.995631][T19856] dump_stack_lvl+0x100/0x190 [ 590.995717][T19856] should_fail_ex.cold+0x5/0xa [ 590.995752][T19856] should_failslab+0xc2/0x120 [ 590.995823][T19856] __kmalloc_noprof+0xfc/0x840 [ 590.995856][T19856] ? tomoyo_encode2+0xfb/0x3c0 [ 590.995923][T19856] tomoyo_encode2+0xfb/0x3c0 [ 590.995941][T19856] tomoyo_encode+0x29/0x50 [ 590.995955][T19856] tomoyo_mount_acl+0x14c/0x8b0 [ 590.995967][T19856] ? is_bpf_text_address+0x8a/0x1a0 [ 590.996028][T19856] ? is_bpf_text_address+0x8a/0x1a0 [ 590.996046][T19856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 590.996076][T19856] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 590.996090][T19856] ? kernel_text_address+0x8d/0x100 [ 590.996117][T19856] ? unwind_get_return_address+0x59/0xa0 [ 590.996140][T19856] ? arch_stack_walk+0xa6/0xf0 [ 590.996162][T19856] ? __lock_acquire+0x5c0/0x1f40 [ 590.996185][T19856] ? tomoyo_mount_permission+0x1f6/0x460 [ 590.996200][T19856] ? tomoyo_domain+0xb2/0x150 [ 590.996214][T19856] ? tomoyo_profile+0x47/0x60 [ 590.996253][T19856] tomoyo_mount_permission+0x214/0x460 [ 590.996266][T19856] ? tomoyo_mount_permission+0x1f6/0x460 [ 590.996282][T19856] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 590.996306][T19856] security_sb_mount+0xdd/0x270 [ 590.996340][T19856] path_mount+0x158/0x24c0 [ 590.996400][T19856] ? __pfx_path_mount+0x10/0x10 [ 590.996417][T19856] ? lockdep_hardirqs_on+0x7d/0x110 [ 590.996502][T19856] ? putname+0xb1/0x110 [ 590.996549][T19856] ? kmem_cache_free+0x127/0x6c0 [ 590.996592][T19856] ? __x64_sys_mount+0x293/0x310 [ 590.996609][T19856] __x64_sys_mount+0x293/0x310 [ 590.996627][T19856] ? __pfx___x64_sys_mount+0x10/0x10 [ 590.996650][T19856] do_syscall_64+0x123/0x790 [ 590.996667][T19856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.996685][T19856] RIP: 0033:0x7f3d4b79e159 [ 590.996697][T19856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.996708][T19856] RSP: 002b:00007f3d4c739028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 590.996747][T19856] RAX: ffffffffffffffda RBX: 00007f3d4ba25fa0 RCX: 00007f3d4b79e159 [ 590.996755][T19856] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 590.996763][T19856] RBP: 00007f3d4b83506b R08: 0000000000000000 R09: 0000000000000000 [ 590.996771][T19856] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000000 [ 590.996779][T19856] R13: 00007f3d4ba26038 R14: 00007f3d4ba25fa0 R15: 00007ffff3f87e08 [ 590.996799][T19856] [ 591.934796][ T9] libceph: connect (1)[c::]:6789 error -101 [ 591.934944][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 591.988200][T19871] ceph: No mds server is up or the cluster is laggy [ 592.135210][ T5713] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 592.300404][ T5713] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 592.314582][ T5713] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.314611][ T5713] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 592.314624][ T5713] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 592.314637][ T5713] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.314667][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.403082][T19884] netlink: 'syz.1.5714': attribute type 3 has an invalid length. [ 593.215152][ T5713] gud 9-1:1.0: Failed to get connectors (error=-5) [ 593.215174][ T5713] gud 9-1:1.0: probe with driver gud failed with error -5 [ 593.446858][ T5714] usb 9-1: USB disconnect, device number 3 [ 593.848641][T19919] sd 0:0:1:0: PR command failed: 1026 [ 593.848672][T19919] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 593.848695][T19919] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 593.874392][ T5714] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 594.025666][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 594.027642][ T5714] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 594.031005][ T5714] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 594.031023][ T5714] usb 6-1: config 0 has no interface number 0 [ 594.040986][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.041001][ T5714] usb 6-1: Product: syz [ 594.041010][ T5714] usb 6-1: Manufacturer: syz [ 594.041019][ T5714] usb 6-1: SerialNumber: syz [ 594.099140][ T5714] usb 6-1: config 0 descriptor?? [ 594.100898][ T5714] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 594.390405][ T5714] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 594.419577][ T5714] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 594.755762][ T5693] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 594.764122][T19942] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5736'. [ 594.896631][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 594.897321][ T5713] usb 6-1: USB disconnect, device number 33 [ 594.914650][ T5693] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 594.927502][ T5693] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 594.927519][ T5693] usb 3-1: config 127 has no interface number 0 [ 594.927540][ T5693] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 594.933674][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.933689][ T5693] usb 3-1: Product: syz [ 594.933698][ T5693] usb 3-1: Manufacturer: syz [ 594.933706][ T5693] usb 3-1: SerialNumber: syz [ 594.994941][T19939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 595.057825][ T5713] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 595.116919][ T5713] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 595.117360][ T5713] quatech2 6-1:0.51: device disconnected [ 595.487900][T19939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 595.514185][ T31] audit: type=1400 audit(1789570972.160:1099): avc: denied { write } for pid=19924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.737659][ T31] audit: type=1400 audit(1789570972.390:1100): avc: denied { write } for pid=19960 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.030407][T19970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.030471][T19970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 596.062717][T19970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 596.110505][ T5693] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 596.110525][ T5693] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 596.266701][ T5693] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 596.266722][ T5693] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 596.395545][ T31] audit: type=1400 audit(1789570973.050:1101): avc: denied { shutdown } for pid=19984 comm="syz.8.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.427452][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 596.451382][ T5693] asix 3-1:127.57 eth17: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 68:98:fb:e4:7f:02 [ 596.488862][ T5693] usb 3-1: USB disconnect, device number 43 [ 596.493968][ T5693] asix 3-1:127.57 eth17: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 596.586279][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 596.589191][ T10] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 596.618878][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 596.618896][ T10] usb 10-1: Product: syz [ 596.618905][ T10] usb 10-1: Manufacturer: syz [ 596.618928][ T10] usb 10-1: SerialNumber: syz [ 596.652770][ T10] usb 10-1: config 0 descriptor?? [ 596.669762][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 597.147042][ T31] audit: type=1400 audit(1789570973.800:1102): avc: denied { write } for pid=19976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.309734][ T10] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 597.309782][ T10] sq905 10-1:0.0: probe with driver sq905 failed with error -71 [ 597.331732][ T10] usb 10-1: USB disconnect, device number 2 [ 597.453589][ T31] audit: type=1400 audit(1789570974.100:1103): avc: denied { write } for pid=20010 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.986224][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 598.293102][T20037] binder_alloc: binder_alloc_mmap_handler: 20036 200000ffe000-200001000000 already mapped failed -16 [ 598.550569][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead [ 598.550586][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead [ 598.550596][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead [ 598.550606][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead [ 598.550615][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead [ 598.550625][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead [ 598.550634][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead [ 598.550644][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead [ 598.550653][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead [ 598.550662][T20048] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead [ 598.550671][T20048] jffs2: Further such events for this erase block will not be printed [ 598.551318][T20048] jffs2: notice: (20048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (8 unchecked, 0 orphan) and 11 of xref (0 dead, 0 orphan) found. [ 598.793849][ T31] audit: type=1400 audit(1789570975.440:1104): avc: denied { write } for pid=20016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.899466][ T31] audit: type=1400 audit(1789570975.550:1105): avc: denied { listen } for pid=20054 comm="syz.9.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 598.938217][ T31] audit: type=1400 audit(1789570975.590:1106): avc: denied { accept } for pid=20054 comm="syz.9.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 599.239554][ T31] audit: type=1400 audit(1789570975.890:1107): avc: denied { write } for pid=20064 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.630896][T20082] FAULT_INJECTION: forcing a failure. [ 599.630896][T20082] name failslab, interval 1, probability 0, space 0, times 0 [ 599.630936][T20082] CPU: 0 UID: 0 PID: 20082 Comm: syz.2.5776 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 599.630954][T20082] Tainted: [L]=SOFTLOCKUP [ 599.630959][T20082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 599.630967][T20082] Call Trace: [ 599.630972][T20082] [ 599.630977][T20082] dump_stack_lvl+0x100/0x190 [ 599.631000][T20082] should_fail_ex.cold+0x5/0xa [ 599.631018][T20082] should_failslab+0xc2/0x120 [ 599.631034][T20082] __kmalloc_node_noprof+0xff/0x880 [ 599.631046][T20082] ? __get_vm_area_node+0x1ff/0x350 [ 599.631156][T20082] ? __get_vm_area_node+0x22b/0x350 [ 599.631170][T20082] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 599.631189][T20082] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 599.631206][T20082] ? lock_acquire+0x1d1/0x380 [ 599.631219][T20082] ? clockevents_program_event+0x23e/0x820 [ 599.631241][T20082] ? clockevents_program_event+0x23e/0x820 [ 599.631258][T20082] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 599.631275][T20082] ? find_held_lock+0x2b/0x80 [ 599.631291][T20082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.631306][T20082] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 599.631360][T20082] ? avc_has_perm_noaudit+0x145/0x3b0 [ 599.631378][T20082] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 599.631393][T20082] __vmalloc_node_noprof+0xad/0xf0 [ 599.631409][T20082] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 599.631427][T20082] __vmalloc_noprof+0xa3/0x120 [ 599.631443][T20082] ? __pfx___vmalloc_noprof+0x10/0x10 [ 599.631460][T20082] ? rcu_is_watching+0x13/0xc0 [ 599.631476][T20082] ? cap_capable+0x107/0x430 [ 599.631527][T20082] bpf_prog_alloc_no_stats+0x59/0x690 [ 599.631542][T20082] ? security_capable+0x80/0x260 [ 599.631560][T20082] bpf_prog_alloc+0x3b/0x200 [ 599.631573][T20082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.631592][T20082] bpf_prog_load+0x49e/0x2a80 [ 599.631630][T20082] ? __pfx_bpf_prog_load+0x10/0x10 [ 599.631660][T20082] __sys_bpf+0x1f46/0x4a30 [ 599.631676][T20082] ? __pfx___sys_bpf+0x10/0x10 [ 599.631688][T20082] ? find_held_lock+0x2b/0x80 [ 599.631704][T20082] ? futex_wake+0x4ea/0x5e0 [ 599.631732][T20082] ? rcu_read_lock_any_held+0x6a/0x90 [ 599.631748][T20082] ? find_held_lock+0x2b/0x80 [ 599.631763][T20082] ? ksys_write+0x190/0x250 [ 599.631796][T20082] ? ksys_write+0x190/0x250 [ 599.631818][T20082] ? __x64_sys_futex+0x34f/0x4d0 [ 599.631834][T20082] ? __x64_sys_futex+0x358/0x4d0 [ 599.631851][T20082] ? xfd_validate_state+0x129/0x190 [ 599.631867][T20082] ? __x64_sys_bpf+0xce/0x140 [ 599.631878][T20082] __x64_sys_bpf+0xce/0x140 [ 599.631890][T20082] ? do_syscall_64+0xae/0x790 [ 599.631911][T20082] do_syscall_64+0x123/0x790 [ 599.631927][T20082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.631941][T20082] RIP: 0033:0x7ffb59d9e159 [ 599.631952][T20082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.631962][T20082] RSP: 002b:00007ffb5ad1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.631976][T20082] RAX: ffffffffffffffda RBX: 00007ffb5a025fa0 RCX: 00007ffb59d9e159 [ 599.631985][T20082] RDX: 0000000000000094 RSI: 00002000000010c0 RDI: 0000000000000005 [ 599.631992][T20082] RBP: 00007ffb59e3506b R08: 0000000000000000 R09: 0000000000000000 [ 599.632000][T20082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.632007][T20082] R13: 00007ffb5a026038 R14: 00007ffb5a025fa0 R15: 00007fff80afe298 [ 599.632025][T20082] [ 599.632047][T20082] syz.2.5776: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 599.632092][T20082] CPU: 0 UID: 0 PID: 20082 Comm: syz.2.5776 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 599.632110][T20082] Tainted: [L]=SOFTLOCKUP [ 599.632114][T20082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 599.632122][T20082] Call Trace: [ 599.632127][T20082] [ 599.632132][T20082] dump_stack_lvl+0x100/0x190 [ 599.632158][T20082] warn_alloc.cold+0x9e/0xb2 [ 599.632173][T20082] ? __pfx_warn_alloc+0x10/0x10 [ 599.632219][T20082] ? dump_stack_lvl+0x17c/0x190 [ 599.632237][T20082] ? rcu_is_watching+0x13/0xc0 [ 599.632255][T20082] ? __kasan_kmalloc+0x8a/0xb0 [ 599.632270][T20082] ? __kmalloc_node_noprof+0x360/0x880 [ 599.632282][T20082] ? __get_vm_area_node+0x1ff/0x350 [ 599.632295][T20082] ? __get_vm_area_node+0x22b/0x350 [ 599.632309][T20082] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 599.632328][T20082] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 599.632344][T20082] ? lock_acquire+0x1d1/0x380 [ 599.632357][T20082] ? clockevents_program_event+0x23e/0x820 [ 599.632376][T20082] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 599.632393][T20082] ? find_held_lock+0x2b/0x80 [ 599.632408][T20082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.632423][T20082] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 599.632441][T20082] ? avc_has_perm_noaudit+0x145/0x3b0 [ 599.632457][T20082] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 599.632471][T20082] __vmalloc_node_noprof+0xad/0xf0 [ 599.632486][T20082] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 599.632502][T20082] __vmalloc_noprof+0xa3/0x120 [ 599.632517][T20082] ? __pfx___vmalloc_noprof+0x10/0x10 [ 599.632533][T20082] ? rcu_is_watching+0x13/0xc0 [ 599.632547][T20082] ? cap_capable+0x107/0x430 [ 599.632565][T20082] bpf_prog_alloc_no_stats+0x59/0x690 [ 599.632579][T20082] ? security_capable+0x80/0x260 [ 599.632597][T20082] bpf_prog_alloc+0x3b/0x200 [ 599.632610][T20082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.632624][T20082] bpf_prog_load+0x49e/0x2a80 [ 599.632642][T20082] ? __pfx_bpf_prog_load+0x10/0x10 [ 599.632671][T20082] __sys_bpf+0x1f46/0x4a30 [ 599.632686][T20082] ? __pfx___sys_bpf+0x10/0x10 [ 599.632697][T20082] ? find_held_lock+0x2b/0x80 [ 599.632711][T20082] ? futex_wake+0x4ea/0x5e0 [ 599.632739][T20082] ? rcu_read_lock_any_held+0x6a/0x90 [ 599.632754][T20082] ? find_held_lock+0x2b/0x80 [ 599.632769][T20082] ? ksys_write+0x190/0x250 [ 599.632781][T20082] ? ksys_write+0x190/0x250 [ 599.632801][T20082] ? __x64_sys_futex+0x34f/0x4d0 [ 599.632816][T20082] ? __x64_sys_futex+0x358/0x4d0 [ 599.632832][T20082] ? xfd_validate_state+0x129/0x190 [ 599.632847][T20082] ? __x64_sys_bpf+0xce/0x140 [ 599.632857][T20082] __x64_sys_bpf+0xce/0x140 [ 599.632870][T20082] ? do_syscall_64+0xae/0x790 [ 599.632886][T20082] do_syscall_64+0x123/0x790 [ 599.632902][T20082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.632914][T20082] RIP: 0033:0x7ffb59d9e159 [ 599.632925][T20082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.632936][T20082] RSP: 002b:00007ffb5ad1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.632948][T20082] RAX: ffffffffffffffda RBX: 00007ffb5a025fa0 RCX: 00007ffb59d9e159 [ 599.632957][T20082] RDX: 0000000000000094 RSI: 00002000000010c0 RDI: 0000000000000005 [ 599.632965][T20082] RBP: 00007ffb59e3506b R08: 0000000000000000 R09: 0000000000000000 [ 599.632972][T20082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.632980][T20082] R13: 00007ffb5a026038 R14: 00007ffb5a025fa0 R15: 00007fff80afe298 [ 599.632997][T20082] [ 599.797185][T20082] Mem-Info: [ 599.797196][T20082] active_anon:18295 inactive_anon:10595 isolated_anon:0 [ 599.797196][T20082] active_file:1183 inactive_file:47793 isolated_file:0 [ 599.797196][T20082] unevictable:0 dirty:453 writeback:0 [ 599.797196][T20082] slab_reclaimable:12350 slab_unreclaimable:108830 [ 599.797196][T20082] mapped:33271 shmem:14451 pagetables:2165 [ 599.797196][T20082] sec_pagetables:0 bounce:0 [ 599.797196][T20082] kernel_misc_reclaimable:0 [ 599.797196][T20082] free:1003329 free_pcp:8678 free_cma:0 [ 599.797228][T20082] Node 0 active_anon:73180kB inactive_anon:42380kB active_file:4732kB inactive_file:190816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132924kB dirty:1808kB writeback:0kB shmem:57804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14656kB pagetables:8524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.797260][T20082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.797288][T20082] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.797319][T20082] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 599.797338][T20082] Node 0 DMA32 free:1117568kB boost:0kB min:34252kB low:42812kB high:51372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:73180kB inactive_anon:42380kB active_file:4732kB inactive_file:190816kB unevictable:0kB writepending:1808kB zspages:1728kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:32664kB local_pcp:32664kB free_cma:0kB [ 599.797370][T20082] lowmem_reserve[]: 0 0 0 0 0 [ 599.797388][T20082] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.797417][T20082] lowmem_reserve[]: 0 0 0 0 0 [ 599.797435][T20082] Node 1 Normal free:2880420kB boost:0kB min:55648kB low:69560kB high:83472kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 599.797466][T20082] lowmem_reserve[]: 0 0 0 0 0 [ 599.797484][T20082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 599.797558][T20082] Node 0 DMA32: 1383*4kB (UE) 1411*8kB (UME) 1340*16kB (UME) 860*32kB (UME) 306*64kB (UME) 140*128kB (UME) 54*256kB (UM) 26*512kB (UM) 6*1024kB (UM) 5*2048kB (UME) 237*4096kB (UM) = 1117556kB [ 599.797644][T20082] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.797697][T20082] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 4*16kB (UM) 2*32kB (U) 6*64kB (UM) 3*128kB (U) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 701*4096kB (M) = 2880420kB [ 599.797782][T20082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.797791][T20082] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 599.797800][T20082] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 599.797809][T20082] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 599.797817][T20082] 63448 total pagecache pages [ 599.797822][T20082] 15 pages in swap cache [ 599.797826][T20082] Free swap = 124192kB [ 599.797829][T20082] Total swap = 124996kB [ 599.797834][T20082] 2097051 pages RAM [ 599.797837][T20082] 0 pages HighMem/MovableOnly [ 599.797841][T20082] 432785 pages reserved [ 599.797845][T20082] 0 pages cma reserved [ 600.065739][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 601.216382][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 601.368244][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 601.369323][ T9] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 601.370285][ T9] usb 10-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 601.370304][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 601.370322][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.371729][ T9] usb 10-1: config 0 descriptor?? [ 601.922625][ T31] audit: type=1400 audit(1789570978.570:1108): avc: denied { write } for pid=20081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.970173][ T9] hid_parser_main: 5 callbacks suppressed [ 601.970189][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970207][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970222][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970237][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970253][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970268][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970283][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970297][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970312][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 601.970326][ T9] isku 0003:1E7D:319C.0028: unknown main item tag 0x0 [ 602.029166][ T9] isku 0003:1E7D:319C.0028: hidraw0: USB HID v0.09 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 602.145396][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 602.325252][ T9] usb 10-1: USB disconnect, device number 3 [ 602.381626][T20117] fido_id[20117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 602.459348][ T31] audit: type=1400 audit(1789570979.110:1109): avc: denied { write } for pid=20121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.074153][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5796'. [ 603.313497][T20150] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 603.335747][T20150] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 603.648231][ T31] audit: type=1400 audit(1789570980.300:1110): avc: denied { read write } for pid=20153 comm="syz.5.5802" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 603.648263][ T31] audit: type=1400 audit(1789570980.300:1111): avc: denied { open } for pid=20153 comm="syz.5.5802" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 604.113365][T20167] FAULT_INJECTION: forcing a failure. [ 604.113365][T20167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.113393][T20167] CPU: 0 UID: 0 PID: 20167 Comm: syz.2.5807 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 604.113411][T20167] Tainted: [L]=SOFTLOCKUP [ 604.113416][T20167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 604.113424][T20167] Call Trace: [ 604.113429][T20167] [ 604.113436][T20167] dump_stack_lvl+0x100/0x190 [ 604.113460][T20167] should_fail_ex.cold+0x5/0xa [ 604.113479][T20167] core_sys_select+0x9b9/0xbb0 [ 604.113561][T20167] ? __pfx_core_sys_select+0x10/0x10 [ 604.113575][T20167] ? __lock_acquire+0x5c0/0x1f40 [ 604.113604][T20167] ? __pfx_set_user_sigmask+0x10/0x10 [ 604.113627][T20167] ? ktime_get_ts64+0x318/0x420 [ 604.113641][T20167] ? ktime_get_ts64+0x257/0x420 [ 604.113656][T20167] do_pselect.constprop.0+0x238/0x270 [ 604.113673][T20167] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 604.113688][T20167] ? __x64_sys_futex+0x358/0x4d0 [ 604.113707][T20167] ? xfd_validate_state+0x129/0x190 [ 604.113723][T20167] __x64_sys_pselect6+0x149/0x1c0 [ 604.113739][T20167] do_syscall_64+0x123/0x790 [ 604.113756][T20167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.113769][T20167] RIP: 0033:0x7ffb59d9e159 [ 604.113780][T20167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.113791][T20167] RSP: 002b:00007ffb5ad1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 604.113803][T20167] RAX: ffffffffffffffda RBX: 00007ffb5a025fa0 RCX: 00007ffb59d9e159 [ 604.113811][T20167] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000020 [ 604.113818][T20167] RBP: 00007ffb59e3506b R08: 0000200000000280 R09: 0000200000000300 [ 604.113825][T20167] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 604.113832][T20167] R13: 00007ffb5a026038 R14: 00007ffb5a025fa0 R15: 00007fff80afe298 [ 604.113855][T20167] [ 604.703087][ T31] audit: type=1400 audit(1789570981.350:1112): avc: denied { setopt } for pid=20173 comm="syz.8.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 604.743488][ T31] audit: type=1400 audit(1789570981.390:1113): avc: denied { connect } for pid=20173 comm="syz.8.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 605.060738][T20184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20184 comm=syz.8.5814 [ 605.060757][T20184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20184 comm=syz.8.5814 [ 605.396349][T20191] ALSA: mixer_oss: invalid OSS volume '' [ 606.061048][ T31] audit: type=1400 audit(1789570982.710:1114): avc: denied { listen } for pid=20206 comm="syz.5.5826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 606.063523][ T31] audit: type=1400 audit(1789570982.710:1115): avc: denied { accept } for pid=20206 comm="syz.5.5826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 606.816801][T20227] ip_tables: iptables: counters copy to user failed while replacing table [ 606.922496][ T84] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.153592][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.170716][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 607.171654][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 607.173471][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 607.198885][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 607.410391][T20240] ip6gretap1: entered allmulticast mode [ 607.437861][T20240] batman_adv: batadv0: Adding interface: ip6gretap1 [ 607.437873][T20240] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.437891][T20240] batman_adv: batadv0: Interface activated: ip6gretap1 [ 607.793949][ T84] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.078007][T20260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.093973][ T84] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.397838][ T84] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.677749][ T31] audit: type=1400 audit(1789570985.330:1116): avc: denied { mount } for pid=20273 comm="syz.5.5852" name="/" dev="autofs" ino=82809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 608.799705][ T31] audit: type=1400 audit(1789570985.450:1117): avc: denied { unmount } for pid=10670 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 609.268213][ T5614] Bluetooth: hci1: command tx timeout [ 609.321174][ T1432] netdevsim netdevsim2 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.480368][T20289] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 609.542059][ T13] netdevsim netdevsim2 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.555362][ T149] netdevsim netdevsim2 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.593449][ T31] audit: type=1400 audit(1789570986.240:1118): avc: denied { execmod } for pid=20283 comm="syz.1.5855" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=83079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 609.731285][ T84] bridge_slave_1: left allmulticast mode [ 609.731305][ T84] bridge_slave_1: left promiscuous mode [ 609.731426][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.757215][T10972] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 609.786745][ T84] bridge_slave_0: left allmulticast mode [ 609.786762][ T84] bridge_slave_0: left promiscuous mode [ 609.786882][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.916842][T10972] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.917861][T10972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.920145][T10972] usb 10-1: config 0 descriptor?? [ 610.180984][T10972] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 610.471554][T10972] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 610.471570][T10972] [drm] Initialized udl on minor 1 [ 610.643125][ T31] audit: type=1400 audit(1789570987.290:1119): avc: denied { read } for pid=20287 comm="syz.9.5857" name="card1" dev="devtmpfs" ino=3758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 610.643159][ T31] audit: type=1400 audit(1789570987.290:1120): avc: denied { open } for pid=20287 comm="syz.9.5857" path="/dev/dri/card1" dev="devtmpfs" ino=3758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 610.705844][ T31] audit: type=1400 audit(1789570987.360:1121): avc: denied { ioctl } for pid=20287 comm="syz.9.5857" path="/dev/dri/card1" dev="devtmpfs" ino=3758 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 610.820626][T20316] gadgetfs: bound to dummy_udc driver [ 610.961255][ T31] audit: type=1400 audit(1789570987.610:1122): avc: denied { write } for pid=20300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.062975][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.082905][ T1507] smbdirect: ib_dev[syz1] removed [ 611.102989][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.140426][ T84] bond0 (unregistering): Released all slaves [ 611.224781][ T13] netdevsim netdevsim2 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.345498][ T5614] Bluetooth: hci1: command tx timeout [ 611.388668][ T31] audit: type=1400 audit(1789570988.040:1123): avc: denied { write } for pid=20326 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.664034][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 611.793961][ T31] audit: type=1400 audit(1789570988.440:1124): avc: denied { mount } for pid=20333 comm="syz.8.5870" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 611.942711][ T31] audit: type=1400 audit(1789570988.590:1125): avc: denied { unmount } for pid=18511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 612.017098][ T84] hsr_slave_0: left promiscuous mode [ 612.021243][ T84] hsr_slave_1: left promiscuous mode [ 612.021759][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.021772][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.062117][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.062132][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.146519][ T84] veth1_macvtap: left promiscuous mode [ 612.146545][ T84] veth0_macvtap: left promiscuous mode [ 612.146609][ T84] veth1_vlan: left promiscuous mode [ 612.147765][ T84] veth0_vlan: left promiscuous mode [ 612.812647][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805777d400: rx timeout, send abort [ 612.847465][ T84] team0 (unregistering): Port device team_slave_1 removed [ 612.887881][ T84] team0 (unregistering): Port device team_slave_0 removed [ 613.146761][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 613.312682][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805777d400: abort rx timeout. Force session deactivation [ 613.426066][ T5614] Bluetooth: hci1: command tx timeout [ 613.688506][T20234] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.688558][T20234] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.688671][T20234] bridge_slave_0: entered allmulticast mode [ 613.689602][T20234] bridge_slave_0: entered promiscuous mode [ 613.816989][T20234] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.817055][T20234] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.817173][T20234] bridge_slave_1: entered allmulticast mode [ 613.818143][T20234] bridge_slave_1: entered promiscuous mode [ 613.971393][T20234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.311366][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 614.311379][ T31] audit: type=1400 audit(1789570990.960:1129): avc: denied { write } for pid=20365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.377676][T20234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.506693][T20234] team0: Port device team_slave_0 added [ 614.508536][T20234] team0: Port device team_slave_1 added [ 614.595248][T20387] ip6gretap1: entered allmulticast mode [ 614.599820][T20387] batman_adv: batadv0: Adding interface: ip6gretap1 [ 614.599830][T20387] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.599855][T20387] batman_adv: batadv0: Interface activated: ip6gretap1 [ 614.600844][T20234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.600853][T20234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.600866][T20234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.602068][T20234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.602076][T20234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.602090][T20234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.769984][ T31] audit: type=1400 audit(1789570991.420:1130): avc: denied { write } for pid=20388 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.958260][T20234] hsr_slave_0: entered promiscuous mode [ 614.971307][T20234] hsr_slave_1: entered promiscuous mode [ 614.971750][T20234] debugfs: 'hsr0' already exists in 'hsr' [ 614.971762][T20234] Cannot create hsr debugfs directory [ 614.998060][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 615.413930][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5882'. [ 615.508715][ T5614] Bluetooth: hci1: command tx timeout [ 615.510354][T10972] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 615.530070][T10972] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 615.553217][T10972] usb 10-1: USB disconnect, device number 4 [ 615.565245][ T9] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 615.565700][ T9] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 615.731383][T20405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.991667][T20234] netdevsim netdevsim2 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.022864][T10972] kernel write not supported for file [eventfd] (pid: 10972 comm: kworker/0:9) [ 616.116533][ T31] audit: type=1400 audit(1789570992.770:1131): avc: denied { write } for pid=20394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.360927][ T31] audit: type=1400 audit(1789570993.010:1132): avc: denied { write } for pid=20423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.399320][T20425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.580780][T20425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.893489][T20234] netdevsim netdevsim2 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.513252][ T31] audit: type=1400 audit(1789570994.160:1133): avc: denied { write } for pid=20443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.621810][ T31] audit: type=1400 audit(1789570994.270:1134): avc: denied { write } for pid=20467 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.784767][T20234] netdevsim netdevsim2 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.204828][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 618.243532][T20234] netdevsim netdevsim2 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.356078][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 618.356697][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 618.357647][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 618.357674][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.357688][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.357702][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.357716][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.357738][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.580753][ T9] usb 10-1: usb_control_msg returned -32 [ 618.580781][ T9] usbtmc 10-1:16.0: can't read capabilities [ 618.606653][ T31] audit: type=1400 audit(1789570995.260:1135): avc: denied { write } for pid=20469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.749858][ T31] audit: type=1400 audit(1789570995.400:1136): avc: denied { write } for pid=20493 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.947952][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.947986][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.131036][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 619.292751][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 619.293269][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 619.315542][T20485] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 619.315565][T20485] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 619.315591][T20485] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 619.433062][T20485] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 619.873001][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 619.940660][ T31] audit: type=1400 audit(1789570996.590:1137): avc: denied { write } for pid=20501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.996128][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 619.997026][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 620.076731][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 620.077622][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 620.079288][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 620.080147][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 620.082168][T20485] syzkaller0 speed is unknown, defaulting to 1000 [ 620.142937][ T31] audit: type=1400 audit(1789570996.790:1138): avc: denied { write } for pid=20517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.174043][T20234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.206121][T20234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.206644][T20234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.241241][T20234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.241718][T20234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 620.295214][T20234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 620.296509][T20234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 620.331842][T20234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.560857][T20234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.592150][T20234] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.621273][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.621334][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.659450][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.659506][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.103560][ T9] usb 10-1: USB disconnect, device number 5 [ 621.252726][ T31] audit: type=1400 audit(1789570997.900:1139): avc: denied { write } for pid=20527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.543604][ T31] audit: type=1400 audit(1789570998.190:1140): avc: denied { map } for pid=20552 comm="syz.8.5916" path="/146/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 621.692574][ T31] audit: type=1400 audit(1789570998.340:1141): avc: denied { write } for pid=20554 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.450083][T20234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.581817][T20234] veth0_vlan: entered promiscuous mode [ 622.616768][T20234] veth1_vlan: entered promiscuous mode [ 622.739578][T20234] veth0_macvtap: entered promiscuous mode [ 622.761229][T20234] veth1_macvtap: entered promiscuous mode [ 622.802334][ T31] audit: type=1400 audit(1789570999.450:1142): avc: denied { write } for pid=20567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.839550][T20234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.861513][T20234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.899926][ T1412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.900039][ T1412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.900069][ T1412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.900088][ T1412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.268501][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.268518][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.372253][ T31] audit: type=1400 audit(1789571000.020:1143): avc: denied { write } for pid=20598 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.477117][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.477132][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.520158][ T5714] kernel read not supported for file /tomoyo/domain_policy (pid: 5714 comm: kworker/0:6) [ 623.984645][ T5613] Bluetooth: hci5: command 0x1003 tx timeout [ 623.984727][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 624.199219][T20628] FAULT_INJECTION: forcing a failure. [ 624.199219][T20628] name failslab, interval 1, probability 0, space 0, times 0 [ 624.199245][T20628] CPU: 0 UID: 0 PID: 20628 Comm: syz.9.5935 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 624.199264][T20628] Tainted: [L]=SOFTLOCKUP [ 624.199269][T20628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 624.199277][T20628] Call Trace: [ 624.199282][T20628] [ 624.199287][T20628] dump_stack_lvl+0x100/0x190 [ 624.199312][T20628] should_fail_ex.cold+0x5/0xa [ 624.199331][T20628] should_failslab+0xc2/0x120 [ 624.199347][T20628] kmem_cache_alloc_noprof+0x92/0x6a0 [ 624.199360][T20628] ? mntput_no_expire+0x21/0x220 [ 624.199374][T20628] ? alloc_empty_file+0x5b/0x1c0 [ 624.199394][T20628] alloc_empty_file+0x5b/0x1c0 [ 624.199410][T20628] dentry_open+0x46/0xd0 [ 624.199487][T20628] vfs_open_tree+0x852/0xae0 [ 624.199507][T20628] ? __pfx_vfs_open_tree+0x10/0x10 [ 624.199527][T20628] __x64_sys_open_tree+0xa3/0x150 [ 624.199551][T20628] do_syscall_64+0x123/0x790 [ 624.199571][T20628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.199584][T20628] RIP: 0033:0x7fbd6459e159 [ 624.199596][T20628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.199607][T20628] RSP: 002b:00007fbd654ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 624.199620][T20628] RAX: ffffffffffffffda RBX: 00007fbd64825fa0 RCX: 00007fbd6459e159 [ 624.199628][T20628] RDX: 0000000000089901 RSI: 0000200000000100 RDI: 0000000000000003 [ 624.199635][T20628] RBP: 00007fbd6463506b R08: 0000000000000000 R09: 0000000000000000 [ 624.199643][T20628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.199650][T20628] R13: 00007fbd64826038 R14: 00007fbd64825fa0 R15: 00007ffccaaa8c08 [ 624.199668][T20628] [ 625.649613][T20655] SELinux: ebitmap: map size 2147549188 does not match my size 64 (high bit was 0) [ 625.649653][T20655] SELinux: failed to load policy [ 626.041576][ T31] audit: type=1400 audit(1789571002.690:1144): avc: denied { write } for pid=20665 comm="syz.5.5951" lport=46335 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 626.161748][T20666] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5950'. [ 626.161759][T20666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.932452][T20692] input: syz1 as /devices/virtual/input/input64 [ 627.018697][T20695] input: syz0 as /devices/virtual/input/input65 [ 628.470259][T20608] vivid-000: kernel_thread() failed [ 629.310493][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5982'. [ 629.574591][T20746] bridge0: port 3(veth0) entered blocking state [ 629.574646][T20746] bridge0: port 3(veth0) entered disabled state [ 629.574752][T20746] veth0: entered allmulticast mode [ 629.575701][T20746] veth0: entered promiscuous mode [ 629.634647][T20746] bridge0: port 3(veth0) entered blocking state [ 629.634716][T20746] bridge0: port 3(veth0) entered forwarding state [ 629.852523][T20753] sctp: [Deprecated]: syz.5.5986 (pid 20753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.852523][T20753] Use struct sctp_sack_info instead [ 629.887203][T20753] sctp: [Deprecated]: syz.5.5986 (pid 20753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.887203][T20753] Use struct sctp_sack_info instead [ 630.162750][T20762] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 631.056301][T20779] netlink: 'syz.2.5998': attribute type 3 has an invalid length. [ 631.952829][T20795] erspan0: entered promiscuous mode [ 631.971827][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6006'. [ 632.135295][ T5693] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 632.286184][ T5693] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 632.291572][ T5693] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 632.291592][ T5693] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 632.327128][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.327146][ T5693] usb 3-1: Product: syz [ 632.327155][ T5693] usb 3-1: Manufacturer: syz [ 632.327164][ T5693] usb 3-1: SerialNumber: syz [ 632.329207][T20797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 632.329264][T20797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 632.332417][ T5693] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 632.332430][ T5693] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 632.332516][ T5693] usbserial_generic 3-1:1.0: generic converter detected [ 632.424233][ T5693] usb 3-1: generic converter now attached to ttyUSB0 [ 632.600095][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 632.604975][ T5693] usb 3-1: USB disconnect, device number 44 [ 632.633076][ T5693] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 632.633444][ T5693] usbserial_generic 3-1:1.0: device disconnected [ 632.840208][T20814] ip_tables: iptables: counters copy to user failed while replacing table [ 633.264761][ T5693] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 633.329411][T20825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.414707][ T5693] usb 10-1: Using ep0 maxpacket: 8 [ 633.420601][ T5693] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 633.431293][ T5693] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.451863][ T5693] pvrusb2: Hardware description: Terratec Grabster AV400 [ 633.451875][ T5693] pvrusb2: ********** [ 633.451879][ T5693] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 633.451886][ T5693] pvrusb2: Important functionality might not be entirely working. [ 633.495199][ T5693] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 633.495208][ T5693] pvrusb2: ********** [ 633.686657][ T2353] pvrusb2: Invalid write control endpoint [ 633.920339][T10972] usb 10-1: USB disconnect, device number 6 [ 633.957076][ T2353] pvrusb2: Invalid write control endpoint [ 633.957092][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 633.957097][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 633.957102][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 633.957108][ T2353] pvrusb2: Device being rendered inoperable [ 633.957133][ T2353] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 633.957217][ T2353] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 634.031326][ T2353] pvrusb2: Attached sub-driver cx25840 [ 634.031360][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 634.031365][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 634.830023][T20851] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6029'. [ 634.977113][T20854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.342733][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6034'. [ 635.426043][T20858] ima: policy update failed [ 635.426247][ T31] audit: type=1802 audit(1789571012.080:1145): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.9.6033" res=0 errno=0 [ 635.554000][T20864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.404416][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 636.555152][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 636.560242][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.575348][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 636.575380][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 636.575395][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 636.575410][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 636.575424][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 636.575438][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.575461][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.845812][ T9] usb 3-1: usb_control_msg returned -32 [ 636.845840][ T9] usbtmc 3-1:16.0: can't read capabilities [ 637.085037][ T31] audit: type=1400 audit(1789571013.740:1146): avc: denied { write } for pid=20867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.130486][ T31] audit: type=1400 audit(1789571013.780:1147): avc: denied { write } for pid=20900 comm="syz.9.6045" name="cluster" dev="configfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.303186][ T31] audit: type=1400 audit(1789571013.950:1148): avc: denied { write } for pid=20900 comm="syz.9.6045" name="cluster" dev="configfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.440071][ T31] audit: type=1400 audit(1789571014.090:1149): avc: denied { write } for pid=20909 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.751998][T20899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input66 [ 637.895070][ T31] audit: type=1807 audit(1789571014.550:1150): action=measure res=1 [ 637.902483][ T31] audit: type=1807 audit(1789571014.550:1151): UNKNOWN= res=0 [ 637.902510][ T31] audit: type=1802 audit(1789571014.550:1152): pid=20916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.9.6048" res=0 errno=0 [ 637.960978][T20916] ima: policy update failed [ 637.961131][ T31] audit: type=1802 audit(1789571014.610:1153): pid=20916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.9.6048" res=0 errno=0 [ 638.986989][ T31] audit: type=1400 audit(1789571015.640:1154): avc: denied { write } for pid=20917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.085189][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 639.120048][T10972] usb 3-1: USB disconnect, device number 45 [ 639.238584][ T9] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 639.245075][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.245108][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 639.245124][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 639.245147][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.503487][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.523329][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.524433][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.541823][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.542375][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.975558][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 639.975574][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 639.976615][ T9] cxacru 10-1:1.0: probe with driver cxacru failed with error -71 [ 640.103002][ T9] usb 10-1: USB disconnect, device number 7 [ 641.332731][T20940] syzkaller0 speed is unknown, defaulting to 1000 [ 641.467356][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 641.467368][ T31] audit: type=1400 audit(1789571018.120:1156): avc: denied { write } for pid=20950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.665564][ T5613] Bluetooth: hci5: command tx timeout [ 641.911455][ T31] audit: type=1400 audit(1789571018.560:1157): avc: denied { write } for pid=20990 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.068532][T20992] BUG: unable to handle page fault for address: fffffffffffffc10 [ 642.076275][T20992] #PF: supervisor read access in kernel mode [ 642.082220][T20992] #PF: error_code(0x0000) - not-present page [ 642.088165][T20992] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 [ 642.094124][T20992] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 642.099642][T20992] CPU: 0 UID: 0 PID: 20992 Comm: syz.1.6064 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 642.110544][T20992] Tainted: [L]=SOFTLOCKUP [ 642.114836][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 642.124859][T20992] RIP: 0010:strnlen+0x4b/0x80 [ 642.129597][T20992] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 642.149184][T20992] RSP: 0018:ffffc900034cf130 EFLAGS: 00010246 [ 642.155223][T20992] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 642.163166][T20992] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 642.171107][T20992] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 642.179050][T20992] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 642.186992][T20992] R13: ffff88801c68fe00 R14: 0000000000000006 R15: 0000000000000010 [ 642.194933][T20992] FS: 00007f985352e6c0(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 642.203832][T20992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.210385][T20992] CR2: fffffffffffffc10 CR3: 00000000574db000 CR4: 00000000003526f0 [ 642.218328][T20992] Call Trace: [ 642.221584][T20992] [ 642.224492][T20992] trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0 [ 642.231336][T20992] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 642.238595][T20992] ? __pfx___might_resched+0x10/0x10 [ 642.243853][T20992] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 642.249496][T20992] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 642.255629][T20992] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 642.261539][T20992] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 642.267924][T20992] ? __pfx_down_write+0x10/0x10 [ 642.272782][T20992] tcf_block_get_ext+0x7ed/0x1950 [ 642.277779][T20992] tcf_block_get+0xa8/0x100 [ 642.282250][T20992] ? __pfx_tcf_block_get+0x10/0x10 [ 642.287331][T20992] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 642.293576][T20992] ? lockdep_init_map_type+0x5c/0x250 [ 642.298920][T20992] ? __pfx_multiq_init+0x10/0x10 [ 642.303869][T20992] multiq_init+0x70/0x2b0 [ 642.308169][T20992] ? __pfx_multiq_init+0x10/0x10 [ 642.313075][T20992] qdisc_create+0x47b/0x1060 [ 642.317636][T20992] tc_modify_qdisc+0xdcf/0x2120 [ 642.322458][T20992] ? __mutex_lock+0x829/0x1bd0 [ 642.327216][T20992] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 642.332479][T20992] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 642.337737][T20992] rtnetlink_rcv_msg+0x3c9/0xe90 [ 642.342709][T20992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.348143][T20992] ? ref_tracker_free+0x37e/0x6c0 [ 642.353185][T20992] netlink_rcv_skb+0x159/0x420 [ 642.357948][T20992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.363379][T20992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.368660][T20992] ? netlink_deliver_tap+0x1ae/0xcc0 [ 642.373941][T20992] netlink_unicast+0x585/0x850 [ 642.378688][T20992] ? __pfx_netlink_unicast+0x10/0x10 [ 642.383954][T20992] netlink_sendmsg+0x8b0/0xda0 [ 642.388698][T20992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.393956][T20992] ? selinux_socket_sendmsg+0x198/0x2f0 [ 642.399536][T20992] ____sys_sendmsg+0xa4d/0xbe0 [ 642.404350][T20992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.409614][T20992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.414874][T20992] ___sys_sendmsg+0x190/0x1e0 [ 642.419525][T20992] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.424699][T20992] ? futex_wait+0x11e/0x370 [ 642.429176][T20992] ? find_held_lock+0x2b/0x80 [ 642.433831][T20992] __sys_sendmsg+0x160/0x210 [ 642.438436][T20992] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.443522][T20992] do_syscall_64+0x123/0x790 [ 642.448086][T20992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.453949][T20992] RIP: 0033:0x7f985259e159 [ 642.458337][T20992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.477918][T20992] RSP: 002b:00007f985352e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.486306][T20992] RAX: ffffffffffffffda RBX: 00007f9852825fa0 RCX: 00007f985259e159 [ 642.494247][T20992] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 642.502189][T20992] RBP: 00007f985263506b R08: 0000000000000000 R09: 0000000000000000 [ 642.510149][T20992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.518090][T20992] R13: 00007f9852826038 R14: 00007f9852825fa0 R15: 00007fff13035598 [ 642.526039][T20992] [ 642.529033][T20992] Modules linked in: [ 642.532917][T20992] CR2: fffffffffffffc10 [ 642.537044][T20992] ---[ end trace 0000000000000000 ]--- [ 642.542481][T20992] RIP: 0010:strnlen+0x4b/0x80 [ 642.542503][T20992] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 642.542514][T20992] RSP: 0018:ffffc900034cf130 EFLAGS: 00010246 [ 642.542524][T20992] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 642.542532][T20992] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 642.542539][T20992] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 642.542546][T20992] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 642.542553][T20992] R13: ffff88801c68fe00 R14: 0000000000000006 R15: 0000000000000010 [ 642.542561][T20992] FS: 00007f985352e6c0(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 642.542572][T20992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.542580][T20992] CR2: fffffffffffffc10 CR3: 00000000574db000 CR4: 00000000003526f0 [ 642.542589][T20992] Kernel panic - not syncing: Fatal exception [ 642.641948][T20992] Kernel Offset: disabled [ 642.646246][T20992] Rebooting in 86400 seconds..