last executing test programs: 5m59.016256142s ago: executing program 1 (id=6245): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) 5m43.382409388s ago: executing program 32 (id=6245): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) 1m6.451137985s ago: executing program 2 (id=7360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140090003010e04060d"], 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m6.423161607s ago: executing program 0 (id=7361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='fc\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='fc\n', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c) close(r6) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87) nanosleep(&(0x7f0000000800)={0x1}, 0x0) 1m6.299269611s ago: executing program 2 (id=7363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/drm\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) 1m6.149655278s ago: executing program 2 (id=7364): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf2502202fc8", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m4.58309716s ago: executing program 0 (id=7369): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000100), 0x3e8) 1m4.340772197s ago: executing program 0 (id=7372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "51ad34d9ea841223e5d0f932af16e921"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m4.338612912s ago: executing program 2 (id=7373): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='si4713 0x63\n', 0xc) 1m4.229139593s ago: executing program 0 (id=7374): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/1000) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000300)=""/1000) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) 1m4.036709718s ago: executing program 2 (id=7375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-3 +4\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='/tmp\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1\n', 0x2) 1m3.950298494s ago: executing program 0 (id=7376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1d, 0x0, 0x2, 0xc, 0x8, 0x101}, {0x7, 0x0, 0x5, 0x5, 0x200, 0x1c0000}, 0x1, 0x5, 0x1bef}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x6, 0xff, 0x5f6a56d7, 0x4, 0xfffffff7, 0x2, 0x6, 0x6, 0x9, 0x0, 0x4, 0x3, 0x7, 0x9, 0x5, 0x4, 0x3, 0x8, 0x317, 0x7, 0xa1, 0x8, 0x65, 0x9, 0x8, 0xfffffffb, 0x8, 0xb, 0x279a2534, 0x3, 0xfff, 0x5, 0x200, 0x8, 0x5, 0x1, 0x2, 0x6, 0x7, 0x8, 0x1000, 0x9, 0x2, 0xfffff39f, 0x6, 0x3, 0x40, 0x6, 0x0, 0x3, 0x5, 0xfffffffa, 0x4, 0x0, 0x1, 0xc82, 0x1, 0x5, 0x1, 0x6, 0x922, 0xffff, 0x6, 0x4, 0x10001, 0x1, 0xc9, 0x8, 0xe9, 0x56c1, 0x4, 0x50, 0x4, 0x8, 0xd3d, 0x63e, 0x1, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x9, 0x80, 0x0, 0x6, 0x6, 0x0, 0xaf, 0x1000, 0xf, 0x7000, 0x6f, 0x5, 0x0, 0x90, 0xa, 0x2, 0x79f7, 0x9, 0x8001, 0x4, 0x4, 0xf281, 0x7, 0xd90c906, 0x6, 0x227, 0x2, 0x7, 0x0, 0xa, 0x2, 0x3, 0x6, 0x7, 0x4, 0x8, 0x5, 0x6, 0x81, 0x6, 0x5, 0xfffff801, 0x100, 0x5, 0x8001, 0x1, 0x1, 0x5, 0x1, 0x39a, 0x0, 0x4, 0x0, 0x6, 0xffff2331, 0x400, 0x4, 0x5431, 0x81, 0x146, 0x200, 0x2, 0x1, 0x5, 0x9cf2, 0xffff, 0x86d, 0xd, 0x3, 0xb6b, 0x2, 0x2, 0x4, 0x3, 0xe4fa, 0x401, 0xa4e3, 0x3, 0x3, 0x7fffffff, 0xfffffff7, 0x7fffffff, 0x5, 0x9029, 0x10, 0x400, 0x0, 0x376, 0x29cf, 0x1000, 0x800, 0x2, 0x1, 0x4, 0x3, 0x6, 0xfff, 0x4, 0x3, 0x7, 0x6, 0x80000001, 0x200, 0x3, 0x1, 0x5, 0x1646, 0x9, 0xfffff6cd, 0x10001, 0x1, 0x8, 0x8, 0xffff, 0x8, 0x6, 0x1, 0xc, 0x83f7, 0x7, 0x0, 0x9, 0x6, 0xdf, 0x1a12, 0xe8, 0x9, 0xc58c, 0x6936501b, 0x4, 0x6, 0x6, 0x2, 0x5, 0x0, 0x9, 0x9, 0x3f80, 0x3ff, 0x1, 0x2, 0x7, 0x0, 0xe, 0xb54, 0x80000000, 0x0, 0x440ce757, 0x2, 0x5, 0x5, 0x8001, 0xfffffffb, 0xa, 0x5b4, 0x6, 0x6, 0x0, 0x2, 0x5, 0x3, 0x4, 0x4, 0x1, 0x7, 0x8, 0xffffffff, 0x8, 0x8000, 0x7fff, 0x2, 0x2, 0x2]}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x101, 0x5, 0x1, 0x4, 0xa4, 0x0, 0x4, 0xfd1, 0x6, 0x0, 0x800, 0xffffd8c0, 0x7f, 0xf4, 0x5, 0xaf, 0x8, 0x4, 0x9, 0x8001, 0x1, 0x6, 0x0, 0x5a6b, 0x7fff, 0x6, 0x200, 0x9, 0x8, 0xfff, 0x80000000, 0x0, 0x1, 0xfffffffd, 0xfffffffe, 0x2b1b3ad7, 0x3, 0x77, 0x530, 0x1, 0x3000, 0x4, 0x3, 0x0, 0x4, 0x1, 0xfff, 0x802000, 0x2, 0x3, 0xbe, 0x1, 0xfffffffa, 0x4, 0x0, 0x5, 0x2, 0x6d1303f, 0x6, 0x401, 0xfffffff8, 0x3, 0x7, 0x0, 0x7, 0x4, 0x4, 0x8, 0xffffff57, 0x5, 0x6, 0x4d, 0x1, 0x9, 0x62d, 0x4, 0x1ff, 0x3, 0xfffffffa, 0x8, 0x9, 0x3, 0x9, 0x1, 0x4, 0x7, 0x5, 0x2, 0x66ad1504, 0x4e, 0x4, 0x9d1a, 0x4, 0x8, 0x8, 0x4f5d, 0x6, 0x8, 0x6, 0x6, 0x80000001, 0xb57, 0x8, 0x5ed, 0x2, 0x9, 0x2, 0x0, 0x1, 0xee, 0x3, 0x4, 0x0, 0x40, 0x7fff, 0x7fff, 0x4, 0x1ff, 0x7, 0x8001, 0x6, 0x1, 0x6, 0x8b77, 0x2, 0x0, 0x3, 0x10000, 0xfffffff8, 0x8, 0xffffff0a, 0x7ff, 0x6, 0x3, 0x6, 0xfca, 0x2, 0x1, 0x6, 0x0, 0x0, 0x8859, 0xee, 0x2, 0x9, 0x7ff, 0x5, 0x7, 0x4, 0x2, 0x0, 0x1, 0x4, 0x612, 0x6, 0x4, 0x9, 0x10000000, 0xdb1, 0x7, 0x8001, 0x1, 0x3, 0x8, 0xce, 0xd, 0x5, 0x4, 0x2, 0xfffffff9, 0x1000, 0x80, 0x2, 0x3, 0x5, 0x6, 0x146, 0x0, 0x2, 0x728, 0xa97, 0x6, 0xb, 0x9, 0x0, 0xfffffff7, 0x3, 0x5, 0x8, 0x9, 0xfffffffc, 0x1, 0x8, 0x1ff, 0x1ff, 0xfffff52a, 0x3, 0x5, 0x2, 0xe5, 0x4, 0xa6, 0x9, 0xd16, 0x2, 0x8, 0x2, 0x4, 0xffffff28, 0x1c6e, 0x2, 0x7ff, 0xb64, 0x4, 0x2, 0x3, 0xc, 0x0, 0x1ff, 0x7fff, 0x44, 0x1, 0x5, 0xffffffff, 0x8, 0x2, 0x40, 0x7ff, 0x200, 0x61, 0x24c2, 0x0, 0xfffffffe, 0x5, 0x7, 0x4, 0x7, 0x52, 0xffffffff, 0x401, 0x6, 0x2, 0xc09, 0x4, 0x6, 0x9, 0x4b9, 0x6, 0x4, 0x8, 0x856, 0x6, 0x7fff, 0x401, 0xfffffffe]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='$', 0x1}, {0x0}], 0x2}, 0x40815) recvfrom$inet(r3, &(0x7f0000002240)=""/4096, 0x1000, 0x40012041, &(0x7f0000003240)={0x2, 0x4e22, @local}, 0x10) r5 = io_uring_setup(0x8, &(0x7f0000000200)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) socket$igmp6(0xa, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setpriority(0x0, 0x0, 0x3) r7 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r7, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r7, &(0x7f00000000c0)=""/72, 0x48, 0x1, 0x0) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f00000000c0)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f00000001c0)={0x1, 0xa7, 0x1, '\x00', 0x7e9}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000110001002abd7000fddbdf", @ANYRES32=r2, @ANYBLOB="20100000000004003100030076657468315f766c616e00000000000004001a80"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fcntl$notify(r3, 0x402, 0xe) 1m3.292720752s ago: executing program 5 (id=7380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0xa, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000010c0)=[0x57a9, 0x4, 0x6a, 0x81, 0x4, 0x7f, 0x101, 0x8]) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x8845) bind$inet(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1m1.986736886s ago: executing program 0 (id=7383): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x6f, @loopback}, 0x10) listen(r0, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x6f, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='tcp 20000\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='1\n', 0x2) close(r3) 1m1.954998842s ago: executing program 5 (id=7384): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/platform/devices\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/panel-edp\x00', 0x0, 0x0) 1m1.826094837s ago: executing program 5 (id=7387): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 1m1.750131983s ago: executing program 3 (id=7389): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x0, @any, "0102030405060708090a0b0c0d0e0f10", "1112131415161718191a1b1c1d1e1f20"}}}, 0x2a) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x1}}}}, 0x7) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 1m1.6618334s ago: executing program 2 (id=7390): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 1m1.160160215s ago: executing program 3 (id=7393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1d, 0x0, 0x2, 0xc, 0x8, 0x101}, {0x7, 0x0, 0x5, 0x5, 0x200, 0x1c0000}, 0x1, 0x5, 0x1bef}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x6, 0xff, 0x5f6a56d7, 0x4, 0xfffffff7, 0x2, 0x6, 0x6, 0x9, 0x0, 0x4, 0x3, 0x7, 0x9, 0x5, 0x4, 0x3, 0x8, 0x317, 0x7, 0xa1, 0x8, 0x65, 0x9, 0x8, 0xfffffffb, 0x8, 0xb, 0x279a2534, 0x3, 0xfff, 0x5, 0x200, 0x8, 0x5, 0x1, 0x2, 0x6, 0x7, 0x8, 0x1000, 0x9, 0x2, 0xfffff39f, 0x6, 0x3, 0x40, 0x6, 0x0, 0x3, 0x5, 0xfffffffa, 0x4, 0x0, 0x1, 0xc82, 0x1, 0x5, 0x1, 0x6, 0x922, 0xffff, 0x6, 0x4, 0x10001, 0x1, 0xc9, 0x8, 0xe9, 0x56c1, 0x4, 0x50, 0x4, 0x8, 0xd3d, 0x63e, 0x1, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x9, 0x80, 0x0, 0x6, 0x6, 0x0, 0xaf, 0x1000, 0xf, 0x7000, 0x6f, 0x5, 0x0, 0x90, 0xa, 0x2, 0x79f7, 0x9, 0x8001, 0x4, 0x4, 0xf281, 0x7, 0xd90c906, 0x6, 0x227, 0x2, 0x7, 0x0, 0xa, 0x2, 0x3, 0x6, 0x7, 0x4, 0x8, 0x5, 0x6, 0x81, 0x6, 0x5, 0xfffff801, 0x100, 0x5, 0x8001, 0x1, 0x1, 0x5, 0x1, 0x39a, 0x0, 0x4, 0x0, 0x6, 0xffff2331, 0x400, 0x4, 0x5431, 0x81, 0x146, 0x200, 0x2, 0x1, 0x5, 0x9cf2, 0xffff, 0x86d, 0xd, 0x3, 0xb6b, 0x2, 0x2, 0x4, 0x3, 0xe4fa, 0x401, 0xa4e3, 0x3, 0x3, 0x7fffffff, 0xfffffff7, 0x7fffffff, 0x5, 0x9029, 0x10, 0x400, 0x0, 0x376, 0x29cf, 0x1000, 0x800, 0x2, 0x1, 0x4, 0x3, 0x6, 0xfff, 0x4, 0x3, 0x7, 0x6, 0x80000001, 0x200, 0x3, 0x1, 0x5, 0x1646, 0x9, 0xfffff6cd, 0x10001, 0x1, 0x8, 0x8, 0xffff, 0x8, 0x6, 0x1, 0xc, 0x83f7, 0x7, 0x0, 0x9, 0x6, 0xdf, 0x1a12, 0xe8, 0x9, 0xc58c, 0x6936501b, 0x4, 0x6, 0x6, 0x2, 0x5, 0x0, 0x9, 0x9, 0x3f80, 0x3ff, 0x1, 0x2, 0x7, 0x0, 0xe, 0xb54, 0x80000000, 0x0, 0x440ce757, 0x2, 0x5, 0x5, 0x8001, 0xfffffffb, 0xa, 0x5b4, 0x6, 0x6, 0x0, 0x2, 0x5, 0x3, 0x4, 0x4, 0x1, 0x7, 0x8, 0xffffffff, 0x8, 0x8000, 0x7fff, 0x2, 0x2, 0x2]}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x101, 0x5, 0x1, 0x4, 0xa4, 0x0, 0x4, 0xfd1, 0x6, 0x0, 0x800, 0xffffd8c0, 0x7f, 0xf4, 0x5, 0xaf, 0x8, 0x4, 0x9, 0x8001, 0x1, 0x6, 0x0, 0x5a6b, 0x7fff, 0x6, 0x200, 0x9, 0x8, 0xfff, 0x80000000, 0x0, 0x1, 0xfffffffd, 0xfffffffe, 0x2b1b3ad7, 0x3, 0x77, 0x530, 0x1, 0x3000, 0x4, 0x3, 0x0, 0x4, 0x1, 0xfff, 0x802000, 0x2, 0x3, 0xbe, 0x1, 0xfffffffa, 0x4, 0x0, 0x5, 0x2, 0x6d1303f, 0x6, 0x401, 0xfffffff8, 0x3, 0x7, 0x0, 0x7, 0x4, 0x4, 0x8, 0xffffff57, 0x5, 0x6, 0x4d, 0x1, 0x9, 0x62d, 0x4, 0x1ff, 0x3, 0xfffffffa, 0x8, 0x9, 0x3, 0x9, 0x1, 0x4, 0x7, 0x5, 0x2, 0x66ad1504, 0x4e, 0x4, 0x9d1a, 0x4, 0x8, 0x8, 0x4f5d, 0x6, 0x8, 0x6, 0x6, 0x80000001, 0xb57, 0x8, 0x5ed, 0x2, 0x9, 0x2, 0x0, 0x1, 0xee, 0x3, 0x4, 0x0, 0x40, 0x7fff, 0x7fff, 0x4, 0x1ff, 0x7, 0x8001, 0x6, 0x1, 0x6, 0x8b77, 0x2, 0x0, 0x3, 0x10000, 0xfffffff8, 0x8, 0xffffff0a, 0x7ff, 0x6, 0x3, 0x6, 0xfca, 0x2, 0x1, 0x6, 0x0, 0x0, 0x8859, 0xee, 0x2, 0x9, 0x7ff, 0x5, 0x7, 0x4, 0x2, 0x0, 0x1, 0x4, 0x612, 0x6, 0x4, 0x9, 0x10000000, 0xdb1, 0x7, 0x8001, 0x1, 0x3, 0x8, 0xce, 0xd, 0x5, 0x4, 0x2, 0xfffffff9, 0x1000, 0x80, 0x2, 0x3, 0x5, 0x6, 0x146, 0x0, 0x2, 0x728, 0xa97, 0x6, 0xb, 0x9, 0x0, 0xfffffff7, 0x3, 0x5, 0x8, 0x9, 0xfffffffc, 0x1, 0x8, 0x1ff, 0x1ff, 0xfffff52a, 0x3, 0x5, 0x2, 0xe5, 0x4, 0xa6, 0x9, 0xd16, 0x2, 0x8, 0x2, 0x4, 0xffffff28, 0x1c6e, 0x2, 0x7ff, 0xb64, 0x4, 0x2, 0x3, 0xc, 0x0, 0x1ff, 0x7fff, 0x44, 0x1, 0x5, 0xffffffff, 0x8, 0x2, 0x40, 0x7ff, 0x200, 0x61, 0x24c2, 0x0, 0xfffffffe, 0x5, 0x7, 0x4, 0x7, 0x52, 0xffffffff, 0x401, 0x6, 0x2, 0xc09, 0x4, 0x6, 0x9, 0x4b9, 0x6, 0x4, 0x8, 0x856, 0x6, 0x7fff, 0x401, 0xfffffffe]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='$', 0x1}, {0x0}], 0x2}, 0x40815) recvfrom$inet(r3, &(0x7f0000002240)=""/4096, 0x1000, 0x40012041, &(0x7f0000003240)={0x2, 0x4e22, @local}, 0x10) r5 = io_uring_setup(0x8, &(0x7f0000000200)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) socket$igmp6(0xa, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setpriority(0x0, 0x0, 0x3) r7 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r7, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r7, &(0x7f00000000c0)=""/72, 0x48, 0x1, 0x0) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f00000000c0)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f00000001c0)={0x1, 0xa7, 0x1, '\x00', 0x7e9}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000110001002abd7000fddbdf", @ANYRES32=r2, @ANYBLOB="20100000000004003100030076657468315f766c616e00000000000004001a80"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fcntl$notify(r3, 0x402, 0xe) 1m0.946705376s ago: executing program 3 (id=7394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0xa, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000010c0)=[0x57a9, 0x4, 0x6a, 0x81, 0x4, 0x7f, 0x101, 0x8]) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x8845) bind$inet(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1m0.918884521s ago: executing program 5 (id=7395): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r0, &(0x7f0000000300), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/virtio/devices/virtio0/modalias\x00', 0x0, 0x0) read(r1, &(0x7f0000000500), 0x100) 1m0.844301045s ago: executing program 3 (id=7396): mkdir(&(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi_ctrl\x00', 0x2, 0x0) 1m0.834965329s ago: executing program 5 (id=7397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 1m0.818765s ago: executing program 3 (id=7398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x7, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.757504092s ago: executing program 5 (id=7399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='freeze\n', 0x7) close(r2) 1m0.702214171s ago: executing program 3 (id=7400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000020)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='4\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000220)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='localhost 1 \\x00000000 2147483647 /\n', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='localhost / 2147483647 9216 0 0 0\n', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000600)='127.0.0.1:/\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1\x00']) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/tmp/testfile\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000900)='\x00'/4096, 0x1000) sync_file_range(r5, 0x0, 0x1000, 0x7) 46.050865238s ago: executing program 33 (id=7383): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x6f, @loopback}, 0x10) listen(r0, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x6f, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='tcp 20000\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='1\n', 0x2) close(r3) 46.018304081s ago: executing program 34 (id=7390): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 45.626126761s ago: executing program 35 (id=7399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='freeze\n', 0x7) close(r2) 45.572721213s ago: executing program 36 (id=7400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000020)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='4\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000220)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='localhost 1 \\x00000000 2147483647 /\n', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='localhost / 2147483647 9216 0 0 0\n', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000600)='127.0.0.1:/\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1\x00']) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/tmp/testfile\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000900)='\x00'/4096, 0x1000) sync_file_range(r5, 0x0, 0x1000, 0x7) 40.641016754s ago: executing program 4 (id=7444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000000c0), 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x495, &(0x7f0000001380)={0x0, 0x104c55, 0x100}, &(0x7f0000000000)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r5, r6, r7, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x2, 0x0, 0x1}) io_uring_enter(r4, 0x6, 0x0, 0x0, 0x0, 0x0) 39.470481682s ago: executing program 4 (id=7445): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 38.486478041s ago: executing program 4 (id=7446): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x67, 0x2, {{'cbc(camellia)\x00'}, 0xf8, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b270566"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 38.323704965s ago: executing program 4 (id=7447): syz_emit_ethernet(0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[], 0x1bb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040056) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 38.229219536s ago: executing program 4 (id=7448): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d041cc2000100000001090224000101008032090400000103000000092100000001222b000905810340000a0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222b0000000600ff0900a10185010901150026ff007508950781028505090575089504b1028507090775089504b102c0"], 0x0}, &(0x7f0000000300)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00004000000005050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000100), &(0x7f0000000300)) syz_usb_control_io$hid(r0, &(0x7f0000000100), &(0x7f0000000300)) syz_usb_control_io$hid(r0, &(0x7f0000000100), &(0x7f0000000300)) syz_usb_control_io$hid(r0, &(0x7f0000000100), &(0x7f0000000300)) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/leds/g13:red:macro_preset_1/brightness\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/leds/g13:red:macro_record/brightness\x00', 0x2, 0x0) write(r2, &(0x7f0000000600), 0x2) 37.06414319s ago: executing program 4 (id=7449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) 32.403821098s ago: executing program 6 (id=7430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='devices\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/rtc/rtc0/wakealarm\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='+1\n', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='freeze\n', 0x7) close(r3) 31.380314954s ago: executing program 7 (id=7431): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffb5404c40, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) r3 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x252}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffd7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20000, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) prctl$PR_MCE_KILL(0x21, 0xb4e0888584280f4, 0x0) 30.216489844s ago: executing program 7 (id=7453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x67, 0x2, {{'cbc(camellia)\x00'}, 0xf8, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b270566"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 30.114994508s ago: executing program 7 (id=7454): syz_emit_ethernet(0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[], 0x1bb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040056) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 30.029595064s ago: executing program 7 (id=7455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffb8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x0, 0x18, &(0x7f0000000000), &(0x7f0000000040)=""/24, 0x6414}, 0x50) 29.892167751s ago: executing program 7 (id=7457): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='0\n', 0x2) close(r2) 29.008389145s ago: executing program 9 (id=7465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/vivid.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/vivid-000\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/vivid\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/vimc.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/vim2m.0\x00', 0x0, 0x0) 28.883933408s ago: executing program 9 (id=7466): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x2) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000200)=[{0x50, 0x0, 0x1, &(0x7f0000000300)='\x00'}, {0x50, 0x0, 0x1, &(0x7f0000000310)='\x00'}], 0x2}) 28.883746186s ago: executing program 8 (id=7467): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xf58b, 0x101}) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x2, 0x0) 28.844967578s ago: executing program 9 (id=7468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x128}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0xfff, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="6797f04cdb6f2c8ff1c922acb0da67dc73c026576fddc232ca696ae6c56d0800e17949d4adaf547b3caf", 0x2a}], 0x1}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x3300, 0x0, 0x8}}}}}}, 0x0) 28.811302753s ago: executing program 8 (id=7469): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000100)=""/176) 28.780446626s ago: executing program 9 (id=7470): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004000)="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", 0x2000, &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) 28.716300831s ago: executing program 8 (id=7471): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 28.714976681s ago: executing program 9 (id=7472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 28.682947587s ago: executing program 9 (id=7473): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/128, 0x80) close(r0) 27.874830709s ago: executing program 8 (id=7474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x1234, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x6, @local, 0x1234, 0x0, 'wlc\x00'}, 0x2c) 27.768292552s ago: executing program 8 (id=7475): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d041cc2000100000001090224000101008032090400000103000000092100000001222b000905810340000a0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222b0000000600ff0900a10185010901150026ff007508950781028505090575089504b1028507090775089504b102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000700)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/hid/devices/0003:046D:C21C.0001/driver\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/hid/devices/0003:046D:C21C.0001/leds\x00', 0x0, 0x0) 25.267302303s ago: executing program 8 (id=7476): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='platform\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='disk\n', 0x5) 22.025011496s ago: executing program 37 (id=7449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) 17.369732998s ago: executing program 38 (id=7430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='devices\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/rtc/rtc0/wakealarm\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='+1\n', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='freeze\n', 0x7) close(r3) 17.366036374s ago: executing program 1 (id=7477): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xee6b280}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='sysfs\x00', &(0x7f0000000500)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/hid/devices/0003:0403:6030.0001/clock\x00', 0x0, 0x0) read(r0, &(0x7f0000000700)=""/128, 0x80) 15.808407819s ago: executing program 1 (id=7479): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 15.7172933s ago: executing program 1 (id=7480): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x2, 0x0) 15.561965494s ago: executing program 1 (id=7481): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0xfff, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="6797f04cdb6f2c8ff1c922acb0da67dc73c026576fddc232ca696ae6c56d0800e17949d4adaf547b3caf", 0x2a}], 0x1}, 0x0) 15.407987087s ago: executing program 1 (id=7482): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) 14.485775887s ago: executing program 39 (id=7457): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='0\n', 0x2) close(r2) 13.478171986s ago: executing program 40 (id=7473): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/128, 0x80) close(r0) 10.012594701s ago: executing program 41 (id=7476): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='platform\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='disk\n', 0x5) 0s ago: executing program 42 (id=7482): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) kernel console output (not intermixed with test programs): C0] net_ratelimit: 45 callbacks suppressed [ 1113.261597][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6696'. [ 1113.542281][T26346] loop5: detected capacity change from 0 to 4095 [ 1113.778044][T26346] buffer_io_error: 6 callbacks suppressed [ 1113.778055][T26346] Buffer I/O error on dev loop5, logical block 511, async page read [ 1113.807694][T26197] Buffer I/O error on dev loop5, logical block 511, async page read [ 1114.719333][T26361] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1115.747805][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.747834][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.687505][T22713] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1116.864936][ C0] net_ratelimit: 42 callbacks suppressed [ 1118.908455][T26402] input: syz1 as /devices/virtual/input/input8 [ 1119.975557][T26424] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6716'. [ 1120.261065][T26428] overlayfs: failed to clone lowerpath [ 1121.121423][T26434] tipc: Enabled bearer , priority 0 [ 1121.123467][T26434] syzkaller0: entered promiscuous mode [ 1121.123477][T26434] syzkaller0: entered allmulticast mode [ 1121.237751][T26438] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1121.263307][T26434] tipc: Resetting bearer [ 1121.273203][T26432] tipc: Resetting bearer [ 1121.348389][T26432] tipc: Disabling bearer [ 1122.064922][ C0] net_ratelimit: 48 callbacks suppressed [ 1122.815259][T26454] fuse: Unknown parameter 'fd0x0000000000000003' [ 1125.143226][ T31] audit: type=1326 audit(1791132533.441:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.0.6738" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7e5b9e159 code=0x0 [ 1125.194588][ T5607] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1127.105072][ C0] net_ratelimit: 33 callbacks suppressed [ 1127.171147][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1127.204812][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1127.346078][T22713] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1128.317706][T14022] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.527666][T26502] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1131.150478][T26528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6755'. [ 1131.429729][T26513] zero sized request [ 1132.384921][ C0] net_ratelimit: 48 callbacks suppressed [ 1132.501932][T26532] »»»»»»: renamed from vlan0 (while UP) [ 1132.560831][T26546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6760'. [ 1136.408513][T26573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6769'. [ 1136.456174][T22713] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1136.825755][T22713] usb 1-1: Using ep0 maxpacket: 16 [ 1136.833462][T22713] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1136.834810][T22713] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1136.834824][T22713] usb 1-1: config 0 has no interface number 0 [ 1136.834846][T22713] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1136.834861][T22713] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1136.883791][T22713] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1136.883802][T22713] usb 1-1: Product: syz [ 1136.883811][T22713] usb 1-1: SerialNumber: syz [ 1136.907659][T22713] usb 1-1: config 0 descriptor?? [ 1136.912230][T22713] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1136.933794][T22713] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9 [ 1137.504919][ C0] net_ratelimit: 44 callbacks suppressed [ 1137.536119][ T190] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1137.591934][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1138.659214][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1138.659452][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1138.659790][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1138.660019][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1138.660102][T22713] usb 1-1: USB disconnect, device number 17 [ 1138.660237][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1138.660249][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1138.941379][T22713] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1140.686379][T26638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.691039][T26638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.785669][ T5790] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1140.992943][ T5790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1140.992973][ T5790] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1141.014198][ T5790] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 1141.014213][ T5790] usb 1-1: config 189 has no interface number 0 [ 1141.014229][ T5790] usb 1-1: config 189 interface 127 has no altsetting 0 [ 1141.056149][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.056163][ T5790] usb 1-1: Product: syz [ 1141.056171][ T5790] usb 1-1: Manufacturer: syz [ 1141.056181][ T5790] usb 1-1: SerialNumber: syz [ 1142.234790][ T5790] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1142.234801][ T5790] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1142.234831][ T5790] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 1142.324446][ T5790] safe_serial 1-1:189.127: safe_serial converter detected [ 1142.324572][ T5790] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 1142.366376][ T5790] usb 1-1: USB disconnect, device number 18 [ 1142.606966][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1142.676409][T26655] macvtap1: entered promiscuous mode [ 1142.676420][T26655] bridge0: entered promiscuous mode [ 1142.676587][T26655] macvtap1: entered allmulticast mode [ 1142.676596][T26655] bridge0: entered allmulticast mode [ 1143.184936][ C0] net_ratelimit: 38 callbacks suppressed [ 1144.396800][T26677] bridge0: port 2(syzkaller0) entered blocking state [ 1144.396923][T26677] bridge0: port 2(syzkaller0) entered disabled state [ 1144.397027][T26677] syzkaller0: entered allmulticast mode [ 1145.261923][T26677] syzkaller0: entered promiscuous mode [ 1145.281836][T26677] bridge0: port 2(syzkaller0) entered blocking state [ 1145.281890][T26677] bridge0: port 2(syzkaller0) entered forwarding state [ 1145.341855][T26669] bridge0: port 2(syzkaller0) entered disabled state [ 1145.490967][T26669] syzkaller0 (unregistering): left allmulticast mode [ 1145.490979][T26669] syzkaller0 (unregistering): left promiscuous mode [ 1145.491022][T26669] bridge0: port 2(syzkaller0) entered disabled state [ 1146.045156][ T190] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1146.103909][T26703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6809'. [ 1146.134831][T26703] macvtap2: entered promiscuous mode [ 1146.141103][T26703] macvtap2: entered allmulticast mode [ 1146.195671][ T190] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.196693][ T190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1146.196708][ T190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.196721][ T190] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.196754][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.199683][ T190] usb 1-1: config 0 descriptor?? [ 1146.406743][ T5790] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1146.968303][ T5790] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1146.968336][ T5790] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1146.972164][ T5790] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 1146.972177][ T5790] usb 6-1: config 189 has no interface number 0 [ 1146.972194][ T5790] usb 6-1: config 189 interface 127 has no altsetting 0 [ 1147.450045][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.450057][ T5790] usb 6-1: Product: syz [ 1147.450066][ T5790] usb 6-1: Manufacturer: syz [ 1147.450074][ T5790] usb 6-1: SerialNumber: syz [ 1148.124162][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1148.203043][T23924] net_ratelimit: 37 callbacks suppressed [ 1148.230551][ T190] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1148.291130][ T190] usb 1-1: USB disconnect, device number 19 [ 1148.401410][ T5790] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1148.401420][ T5790] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1148.401442][ T5790] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 1148.401908][ T5790] safe_serial 6-1:189.127: safe_serial converter detected [ 1148.402017][ T5790] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 1148.473613][ T5790] usb 6-1: USB disconnect, device number 2 [ 1148.569923][T26720] fido_id[26720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1149.136966][ T5607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1149.136978][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1149.136993][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1149.137015][ T5607] Workqueue: hci5 hci_rx_work [ 1149.137043][ T5607] Call Trace: [ 1149.137048][ T5607] [ 1149.137054][ T5607] dump_stack_lvl+0x100/0x190 [ 1149.137075][ T5607] sysfs_warn_dup.cold+0x1c/0x28 [ 1149.137102][ T5607] sysfs_create_dir_ns+0x24b/0x2b0 [ 1149.137120][ T5607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1149.137136][ T5607] ? find_held_lock+0x2b/0x80 [ 1149.137154][ T5607] ? kobject_add_internal+0x25f/0x930 [ 1149.137170][ T5607] ? kobject_add_internal+0x25f/0x930 [ 1149.137189][ T5607] kobject_add_internal+0x2c8/0x930 [ 1149.137208][ T5607] kobject_add+0x16a/0x1e0 [ 1149.137223][ T5607] ? __pfx_kobject_add+0x10/0x10 [ 1149.137238][ T5607] ? class_to_subsys+0x10f/0x150 [ 1149.137252][ T5607] ? kobject_put+0xb9/0x640 [ 1149.137266][ T5607] ? _raw_spin_unlock+0x28/0x50 [ 1149.137288][ T5607] device_add+0x294/0x1970 [ 1149.137306][ T5607] ? __pfx_dev_set_name+0x10/0x10 [ 1149.137318][ T5607] ? __pfx_device_add+0x10/0x10 [ 1149.137336][ T5607] ? mgmt_send_event_skb+0x2fb/0x460 [ 1149.137358][ T5607] hci_conn_add_sysfs+0x1a3/0x260 [ 1149.137371][ T5607] le_conn_complete_evt+0x122f/0x2130 [ 1149.137391][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1149.137413][ T5607] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1149.137430][ T5607] ? skb_pull_data+0x15f/0x1e0 [ 1149.137445][ T5607] hci_le_meta_evt+0x34a/0x5f0 [ 1149.137463][ T5607] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1149.137482][ T5607] hci_event_packet+0x51c/0xcd0 [ 1149.137499][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1149.137519][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 1149.137539][ T5607] ? lockdep_hardirqs_on+0x7d/0x110 [ 1149.137555][ T5607] hci_rx_work+0x451/0xfc0 [ 1149.137574][ T5607] process_one_work+0xac7/0x1b10 [ 1149.137600][ T5607] ? __pfx_process_one_work+0x10/0x10 [ 1149.137618][ T5607] ? lock_acquire+0x1d1/0x380 [ 1149.137636][ T5607] ? __pfx_hci_rx_work+0x10/0x10 [ 1149.137654][ T5607] worker_thread+0x5ef/0xe50 [ 1149.137671][ T5607] ? kthread+0x13a/0x450 [ 1149.137686][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 1149.137696][ T5607] kthread+0x373/0x450 [ 1149.137712][ T5607] ? __pfx_kthread+0x10/0x10 [ 1149.137729][ T5607] ret_from_fork+0x730/0xd60 [ 1149.137743][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 1149.137756][ T5607] ? rcu_is_watching+0x13/0xc0 [ 1149.137773][ T5607] ? __switch_to+0x800/0x10f0 [ 1149.137790][ T5607] ? __pfx_kthread+0x10/0x10 [ 1149.137807][ T5607] ret_from_fork_asm+0x1a/0x30 [ 1149.137828][ T5607] [ 1149.138522][ T5607] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1149.138547][ T5607] Bluetooth: hci5: failed to register connection device [ 1150.677491][T26743] zero sized request [ 1153.011365][T26791] futex_wake_op: syz.2.6829 tries to shift op by 144; fix this program [ 1153.312213][T26797] fuse: Unknown parameter 'fd0x0000000000000003' [ 1154.064914][ C0] net_ratelimit: 39 callbacks suppressed [ 1156.140714][ T31] audit: type=1400 audit(1791132564.441:3489): avc: denied { bind } for pid=26822 comm="syz.4.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1156.557183][ T5707] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1156.724948][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 1156.725422][ T5707] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1156.726271][ T5707] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1156.726285][ T5707] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1156.726313][ T5707] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1156.832180][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.832192][ T5707] usb 3-1: Product: syz [ 1156.832200][ T5707] usb 3-1: Manufacturer: syz [ 1156.832209][ T5707] usb 3-1: SerialNumber: syz [ 1157.536864][ T5707] usb 3-1: config 0 descriptor?? [ 1157.906953][T26838] zero sized request [ 1158.137804][ T5707] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 1158.137822][ T5707] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1158.175273][ T5707] usb 3-1: USB disconnect, device number 47 [ 1159.208037][T22713] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1159.228018][T23421] net_ratelimit: 54 callbacks suppressed [ 1160.065104][ T5707] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1160.177588][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6858'. [ 1160.216237][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 1160.220236][ T5707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1160.221341][ T5707] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1160.221378][ T5707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1160.221391][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1160.221406][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1160.221419][ T5707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.221451][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.544758][T26867] netlink: 'syz.0.6853': attribute type 10 has an invalid length. [ 1160.614789][T22713] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1160.636162][ T5707] usb 1-1: usb_control_msg returned -32 [ 1160.636185][ T5707] usbtmc 1-1:16.0: can't read capabilities [ 1160.663082][T26867] bond1: (slave dummy0): Releasing active interface [ 1160.703545][T26867] team0: Port device dummy0 added [ 1160.769248][T22713] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1160.772421][T22713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.826466][T26894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1161.013306][T22713] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1162.121321][ T190] usb 6-1: USB disconnect, device number 3 [ 1162.618776][T26888] batman_adv: batadv0: Adding interface: veth0 [ 1162.618782][T26888] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.618798][T26888] batman_adv: batadv0: Interface activated: veth0 [ 1162.673986][ T190] usb 1-1: USB disconnect, device number 20 [ 1164.865000][ C0] net_ratelimit: 38 callbacks suppressed [ 1165.811236][T26938] fuse: Bad value for 'fd' [ 1165.914472][T26942] overlayfs: failed to clone lowerpath [ 1166.101110][T26951] netlink: 'syz.4.6881': attribute type 1 has an invalid length. [ 1167.499682][ T31] audit: type=1400 audit(1791132575.801:3490): avc: denied { remount } for pid=26930 comm="syz.0.6875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1168.005057][T14022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1168.014515][T14022] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1168.031605][T14022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1168.033145][T14022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1168.034485][T14022] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1168.960115][T26986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.963316][T26986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.963421][T26986] bridge_slave_0: entered allmulticast mode [ 1168.992688][T26986] bridge_slave_0: entered promiscuous mode [ 1169.007357][T26986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.007406][T26986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.007501][T26986] bridge_slave_1: entered allmulticast mode [ 1169.037497][T26986] bridge_slave_1: entered promiscuous mode [ 1169.227294][T26986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.257678][T26986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.514360][T22713] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1169.542398][T26986] team0: Port device team_slave_0 added [ 1169.560398][T26986] team0: Port device team_slave_1 added [ 1170.374836][ T5607] Bluetooth: hci3: command tx timeout [ 1170.406887][T15259] net_ratelimit: 79 callbacks suppressed [ 1170.447060][T22713] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1170.613711][T22713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1170.613735][T22713] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1170.632929][T22713] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 1170.632942][T22713] usb 1-1: config 189 has no interface number 0 [ 1170.632966][T22713] usb 1-1: config 189 interface 127 has no altsetting 0 [ 1170.675235][T22713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.675246][T22713] usb 1-1: Product: syz [ 1170.675255][T22713] usb 1-1: Manufacturer: syz [ 1170.675263][T22713] usb 1-1: SerialNumber: syz [ 1170.743128][T20356] tipc: Resetting bearer [ 1170.820271][T20356] syz_tun (unregistering): left allmulticast mode [ 1170.820999][T20356] tipc: Disabling bearer [ 1170.853870][T26986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.853876][T26986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.853890][T26986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.912525][T26986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.912532][T26986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.912547][T26986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.982324][T22713] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1170.982334][T22713] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1170.982355][T22713] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 1170.982768][T22713] safe_serial 1-1:189.127: safe_serial converter detected [ 1170.982880][T22713] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 1171.060607][T22713] usb 1-1: USB disconnect, device number 21 [ 1171.612263][T19911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.612282][T19911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.702128][T27043] fuse: fd is not a fuse device [ 1171.775944][T26986] hsr_slave_0: entered promiscuous mode [ 1171.784813][T26986] hsr_slave_1: entered promiscuous mode [ 1171.797630][T26986] debugfs: 'hsr0' already exists in 'hsr' [ 1171.797639][T26986] Cannot create hsr debugfs directory [ 1172.059352][ T31] audit: type=1326 audit(1791132580.361:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.060873][ T31] audit: type=1326 audit(1791132580.361:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.143172][ T31] audit: type=1326 audit(1791132580.451:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.143208][ T31] audit: type=1326 audit(1791132580.451:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.143235][ T31] audit: type=1326 audit(1791132580.451:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.234158][ T31] audit: type=1326 audit(1791132580.541:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.234190][ T31] audit: type=1326 audit(1791132580.541:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.234217][ T31] audit: type=1326 audit(1791132580.541:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27050 comm="syz.3.6907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89979e159 code=0x7ffc0000 [ 1172.384555][T19911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.384573][T19911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.398413][ T5607] Bluetooth: hci3: command tx timeout [ 1172.431256][ T31] audit: type=1326 audit(1791132580.731:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27051 comm="syz.5.6908" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70af9e159 code=0x7fc00000 [ 1173.444382][ T31] audit: type=1326 audit(1791132581.741:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27051 comm="syz.5.6908" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe70af9e159 code=0x7fc00000 [ 1173.708477][T19911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.708495][T19911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.465166][ T5607] Bluetooth: hci3: command tx timeout [ 1174.917277][ T31] audit: type=1400 audit(1791132583.221:3501): avc: denied { setopt } for pid=27069 comm="syz.5.6913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1174.917735][ T31] audit: type=1400 audit(1791132583.221:3502): avc: denied { write } for pid=27069 comm="syz.5.6913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1175.114527][T19911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.114547][T19911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.744945][ C0] net_ratelimit: 48 callbacks suppressed [ 1175.825675][T19927] IPVS: starting estimator thread 0... [ 1175.915265][T27091] IPVS: using max 65 ests per chain, 156000 per kthread [ 1176.141703][T19911] bridge_slave_0: left allmulticast mode [ 1176.141714][T19911] bridge_slave_0: left promiscuous mode [ 1176.141828][T19911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.214588][T19911] tipc: Resetting bearer [ 1177.335634][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.335661][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.336141][ T5607] Bluetooth: hci3: command tx timeout [ 1177.827576][T27116] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1177.970459][ T31] audit: type=1400 audit(1791132586.271:3503): avc: denied { write } for pid=27096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.157056][T19911] tipc: Disabling bearer [ 1178.208107][T19911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.225588][T19911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.234562][T19911] bond0 (unregistering): Released all slaves [ 1178.271799][ T31] audit: type=1400 audit(1791132586.571:3504): avc: denied { write } for pid=27121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.313068][T19911] bond1 (unregistering): (slave veth3): Releasing active interface [ 1178.340184][T19911] bond1 (unregistering): Released all slaves [ 1178.432501][T19911] bond2 (unregistering): (slave veth5): Releasing active interface [ 1178.450039][T19911] bond2 (unregistering): Released all slaves [ 1178.554090][T19911] bond3 (unregistering): (slave veth7): Releasing active interface [ 1178.554103][T19911] dummy0: entered promiscuous mode [ 1178.580411][T19911] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1178.580424][T19911] dummy0: left promiscuous mode [ 1178.602700][T19911] bond3 (unregistering): Released all slaves [ 1178.646969][T19911] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1178.673877][T19911] bond4 (unregistering): Released all slaves [ 1178.893145][T19911] tipc: Left network mode [ 1178.922171][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1180.009330][ T5790] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1180.443884][T19911] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1180.471180][T19911] batman_adv: batadv0: Removing interface: ipvlan2 [ 1180.681657][T27156] fuse: Unknown parameter 'fd0x0000000000000003' [ 1181.025071][ C0] net_ratelimit: 46 callbacks suppressed [ 1182.142369][T27168] overlayfs: failed to clone lowerpath [ 1182.179070][T19911] hsr_slave_0: left promiscuous mode [ 1182.196689][T19911] hsr_slave_1: left promiscuous mode [ 1182.199427][T19911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.199439][T19911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.204595][T19911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.204616][T19911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.276338][T19911] veth1_macvtap: left promiscuous mode [ 1182.276360][T19911] veth0_macvtap: left promiscuous mode [ 1182.276412][T19911] veth1_vlan: left promiscuous mode [ 1182.276453][T19911] veth0_vlan: left promiscuous mode [ 1182.349933][ T31] audit: type=1400 audit(1791132590.651:3505): avc: denied { write } for pid=27142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1182.662329][ T31] audit: type=1400 audit(1791132590.961:3506): avc: denied { write } for pid=27180 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1186.267396][T23922] net_ratelimit: 64 callbacks suppressed [ 1187.410802][T19911] team0 (unregistering): Port device team_slave_1 removed [ 1187.479815][T19911] team0 (unregistering): Port device team_slave_0 removed [ 1188.703777][T19911] IPVS: stop unused estimator thread 0... [ 1188.872935][T27229] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6948'. [ 1189.227153][ T31] audit: type=1400 audit(1791132597.531:3507): avc: denied { write } for pid=27213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.311937][T26986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1189.358640][T26986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1189.361496][T26986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1189.400831][T26986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1189.419889][T26986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1189.491142][T26986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1189.505859][T26986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1189.546214][T26986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1189.650509][ T31] audit: type=1400 audit(1791132597.951:3508): avc: denied { write } for pid=27249 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1190.742204][ T5707] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1191.703517][T23922] net_ratelimit: 29 callbacks suppressed [ 1192.862251][T27267] batman_adv: batadv0: Adding interface: syzkaller0 [ 1192.862258][T27267] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.862275][T27267] batman_adv: batadv0: Interface activated: syzkaller0 [ 1192.900217][T19912] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.900497][T19912] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.900519][T19912] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.900542][T19912] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.980557][T26986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.042282][T27271] overlayfs: failed to clone lowerpath [ 1193.053276][T26986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.100271][T19914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.100321][T19914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.129567][T19914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.129616][T19914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.501870][ T31] audit: type=1400 audit(1791132602.801:3509): avc: denied { write } for pid=27268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.702037][T27309] netlink: 'syz.0.6967': attribute type 1 has an invalid length. [ 1194.760651][ T31] audit: type=1400 audit(1791132603.061:3510): avc: denied { write } for pid=27308 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.860995][T27309] bond2: entered promiscuous mode [ 1194.863310][T27309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1195.200120][T27315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1195.201653][T27315] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1195.201663][T27315] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1195.298461][T27315] bond2: (slave wireguard0): making interface the new active one [ 1195.298472][T27315] wireguard0: entered promiscuous mode [ 1195.302838][T27315] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 1195.541083][ T31] audit: type=1400 audit(1791132603.841:3511): avc: denied { write } for pid=27317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.743448][T26986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.760577][ T31] audit: type=1400 audit(1791132604.061:3512): avc: denied { write } for pid=27337 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.839462][T27341] overlayfs: failed to clone lowerpath [ 1195.895550][T26986] veth0_vlan: entered promiscuous mode [ 1195.917130][T26986] veth1_vlan: entered promiscuous mode [ 1195.993993][T26986] veth0_macvtap: entered promiscuous mode [ 1196.011331][T26986] veth1_macvtap: entered promiscuous mode [ 1196.040295][T26986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.060451][T26986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.115928][T19909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.116844][T19909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.116866][T19909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.116885][T19909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.495662][T19927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.495671][T19927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.059791][T19909] net_ratelimit: 191 callbacks suppressed [ 1197.064090][T19927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.064100][T19927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.206280][T27366] netlink: 'syz.5.6977': attribute type 1 has an invalid length. [ 1197.273121][T27366] bond1: entered promiscuous mode [ 1197.280623][T27366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1197.461497][T27366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1197.462831][T27366] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1197.462841][T27366] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1197.514262][T27366] bond1: (slave wireguard0): making interface the new active one [ 1197.514272][T27366] wireguard0: entered promiscuous mode [ 1197.531484][T27372] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1197.531484][T27372] [ 1197.531647][T27372] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1197.531732][T27372] CIFS: Attempting to mount //172.20.20.170/share [ 1197.533557][T27366] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1197.748508][T27377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6978'. [ 1197.874010][T27379] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1198.863344][T27372] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1199.191235][T27402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6986'. [ 1199.191268][T27402] sit0: entered promiscuous mode [ 1199.191278][T27402] sit0: entered allmulticast mode [ 1199.192485][T27402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6986'. [ 1199.192572][T27402] sit0: left promiscuous mode [ 1199.192580][T27402] sit0: left allmulticast mode [ 1201.231140][ T190] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1201.435449][T27410] netlink: 'syz.5.6989': attribute type 1 has an invalid length. [ 1201.522043][T27410] bond2: entered promiscuous mode [ 1201.522277][T27410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1201.606862][T27410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1201.607080][T27410] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1201.607089][T27410] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1201.661881][T27410] bond2: (slave wireguard1): making interface the new active one [ 1201.661891][T27410] wireguard1: entered promiscuous mode [ 1201.662779][T27410] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 1202.115097][ T5707] net_ratelimit: 267 callbacks suppressed [ 1204.606962][ T5790] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1205.039966][ T5790] usb 3-1: Using ep0 maxpacket: 32 [ 1205.563461][ T5790] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1205.701528][ T5790] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.701557][ T5790] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1205.701573][ T5790] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.701588][ T5790] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1205.869497][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.869509][ T5790] usb 3-1: Product: syz [ 1205.869517][ T5790] usb 3-1: Manufacturer: syz [ 1205.869526][ T5790] usb 3-1: SerialNumber: syz [ 1205.908174][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1205.916083][ T5790] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input11 [ 1206.175138][ T5790] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1206.175149][ T5790] (id 0x00) [ 1206.345237][ T5790] rc_core: IR keymap rc-imon-pad not found [ 1206.345259][ T5790] Registered IR keymap rc-empty [ 1206.345327][ T5790] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1206.345336][ T5790] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1206.418819][ T5790] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1206.419894][ T5790] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input12 [ 1206.490560][ T5790] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:48> initialized [ 1207.110738][T27465] imon:send_packet: task interrupted [ 1207.110746][T27465] imon:send_packet: packet tx failed (-512) [ 1207.110769][T27465] imon:vfd_write: send packet #1 failed [ 1207.158962][ T5790] usb 3-1: USB disconnect, device number 48 [ 1207.345113][ C0] net_ratelimit: 62 callbacks suppressed [ 1207.984388][T27516] netlink: 'syz.3.7001': attribute type 1 has an invalid length. [ 1208.079595][T27516] bond1: entered promiscuous mode [ 1208.079798][T27516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1211.958135][ T190] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1212.380250][ T190] net_ratelimit: 167 callbacks suppressed [ 1212.718876][T22713] libceph: connect (1)[c::]:6789 error -101 [ 1212.762344][T22713] libceph: mon0 (1)[c::]:6789 connect error [ 1212.794421][T27564] ceph: No mds server is up or the cluster is laggy [ 1212.819072][T22713] libceph: connect (1)[c::]:6789 error -101 [ 1212.819196][T22713] libceph: mon0 (1)[c::]:6789 connect error [ 1213.596692][T27591] netlink: 'syz.4.7030': attribute type 1 has an invalid length. [ 1213.781966][T27591] bond1: entered promiscuous mode [ 1213.782164][T27591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1214.060407][T27601] futex_wake_op: syz.5.7032 tries to shift op by 144; fix this program [ 1215.130726][T27612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7038'. [ 1215.404395][T27610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7037'. [ 1215.420077][T27610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.484127][T27623] unloading [ 1215.489863][ T31] audit: type=1400 audit(1791132623.781:3513): avc: denied { write } for pid=27622 comm="syz.5.7041" name="functions" dev="configfs" ino=53777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1215.489892][ T31] audit: type=1400 audit(1791132623.781:3514): avc: denied { remove_name } for pid=27622 comm="syz.5.7041" name="ffs.usb0" dev="configfs" ino=58827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1215.489916][ T31] audit: type=1400 audit(1791132623.781:3515): avc: denied { rmdir } for pid=27622 comm="syz.5.7041" name="ffs.usb0" dev="configfs" ino=58827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1215.602362][T27610] bridge_slave_1 (unregistering): left allmulticast mode [ 1215.602374][T27610] bridge_slave_1 (unregistering): left promiscuous mode [ 1215.602416][T27610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.666993][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 1216.531957][T27632] FAULT_INJECTION: forcing a failure. [ 1216.531957][T27632] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.531973][T27632] CPU: 0 UID: 0 PID: 27632 Comm: syz.0.7044 Not tainted syzkaller #0 PREEMPT(full) [ 1216.531987][T27632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1216.531995][T27632] Call Trace: [ 1216.531999][T27632] [ 1216.532005][T27632] dump_stack_lvl+0x100/0x190 [ 1216.532026][T27632] should_fail_ex.cold+0x5/0xa [ 1216.532048][T27632] should_failslab+0xc2/0x120 [ 1216.532065][T27632] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1216.532080][T27632] ? start_dirop+0x79/0xb0 [ 1216.532095][T27632] ? alloc_inode+0x68/0x250 [ 1216.532109][T27632] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1216.532123][T27632] alloc_inode+0x68/0x250 [ 1216.532136][T27632] new_inode+0x22/0x1c0 [ 1216.532150][T27632] debugfs_create_dir+0xbe/0x440 [ 1216.532163][T27632] kvm_vm_ioctl+0x2033/0x4170 [ 1216.532184][T27632] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1216.532210][T27632] ? kasan_quarantine_put+0x104/0x240 [ 1216.532224][T27632] ? lockdep_hardirqs_on+0x7d/0x110 [ 1216.532238][T27632] ? find_held_lock+0x2b/0x80 [ 1216.532255][T27632] ? tomoyo_path_number_perm+0x28f/0x580 [ 1216.532269][T27632] ? tomoyo_path_number_perm+0x28f/0x580 [ 1216.532286][T27632] ? tomoyo_path_number_perm+0x188/0x580 [ 1216.532302][T27632] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1216.532318][T27632] ? __pfx_futex_wait+0x10/0x10 [ 1216.532334][T27632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1216.532357][T27632] ? do_vfs_ioctl+0x226/0x13e0 [ 1216.532371][T27632] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1216.532383][T27632] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1216.532402][T27632] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1216.532421][T27632] ? __fget_files+0x34/0x3d0 [ 1216.532443][T27632] ? selinux_file_ioctl+0x13b/0x290 [ 1216.532458][T27632] ? selinux_file_ioctl+0xb6/0x290 [ 1216.532474][T27632] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1216.532487][T27632] __x64_sys_ioctl+0x18e/0x210 [ 1216.532502][T27632] do_syscall_64+0x123/0x790 [ 1216.532517][T27632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.532530][T27632] RIP: 0033:0x7fa7e5b9e159 [ 1216.532541][T27632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.532552][T27632] RSP: 002b:00007fa7e69e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.532564][T27632] RAX: ffffffffffffffda RBX: 00007fa7e5e25fa0 RCX: 00007fa7e5b9e159 [ 1216.532572][T27632] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1216.532579][T27632] RBP: 00007fa7e5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1216.532586][T27632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1216.532593][T27632] R13: 00007fa7e5e26038 R14: 00007fa7e5e25fa0 R15: 00007ffdeea3e668 [ 1216.532610][T27632] [ 1216.653247][T27632] debugfs: out of free dentries, can not create directory 'vcpu4' [ 1217.425056][T22713] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1217.504907][ C0] net_ratelimit: 139 callbacks suppressed [ 1217.575944][T22713] usb 3-1: Using ep0 maxpacket: 32 [ 1217.576630][T22713] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1217.577680][T22713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1217.577695][T22713] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1217.577708][T22713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1217.581279][T22713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.581291][T22713] usb 3-1: Product: syz [ 1217.581299][T22713] usb 3-1: Manufacturer: syz [ 1217.581308][T22713] usb 3-1: SerialNumber: syz [ 1217.668538][T22713] usb 3-1: config 0 descriptor?? [ 1217.745644][T14022] Bluetooth: hci1: command 0x0406 tx timeout [ 1217.878626][T22713] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 1217.878644][T22713] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1217.947906][T22713] usb 3-1: USB disconnect, device number 49 [ 1218.397801][ T5707] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1218.468291][T27672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7057'. [ 1218.524981][T22713] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1218.546876][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 1218.549332][ T5707] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 1218.554411][ T5707] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.554426][ T5707] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1218.554441][ T5707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1218.554470][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.616309][ T5707] usb 1-1: config 0 descriptor?? [ 1218.842500][T22713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1218.842525][T22713] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1218.874685][T22713] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 1218.874700][T22713] usb 6-1: config 189 has no interface number 0 [ 1218.874716][T22713] usb 6-1: config 189 interface 127 has no altsetting 0 [ 1218.902634][T22713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.902659][T22713] usb 6-1: Product: syz [ 1218.902668][T22713] usb 6-1: Manufacturer: syz [ 1218.902677][T22713] usb 6-1: SerialNumber: syz [ 1219.080710][T27687] fuse: Bad value for 'fd' [ 1219.170430][T22713] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1219.170440][T22713] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1219.170462][T22713] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 1219.170876][T22713] safe_serial 6-1:189.127: safe_serial converter detected [ 1219.170984][T22713] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 1219.252274][T22713] usb 6-1: USB disconnect, device number 4 [ 1219.274219][T27692] netlink: 'syz.4.7063': attribute type 1 has an invalid length. [ 1219.300936][ T5707] input: HID 046d:c215 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C215.0008/input/input13 [ 1219.450035][ T5707] logitech 0003:046D:C215.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.0-1/input0 [ 1219.654975][ T5707] usb 1-1: USB disconnect, device number 22 [ 1219.896974][T27692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1221.784339][T27718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7069'. [ 1221.985821][ T190] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1222.217488][T27734] FAULT_INJECTION: forcing a failure. [ 1222.217488][T27734] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.217505][T27734] CPU: 0 UID: 0 PID: 27734 Comm: syz.5.7071 Not tainted syzkaller #0 PREEMPT(full) [ 1222.217520][T27734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1222.217529][T27734] Call Trace: [ 1222.217533][T27734] [ 1222.217539][T27734] dump_stack_lvl+0x100/0x190 [ 1222.217561][T27734] should_fail_ex.cold+0x5/0xa [ 1222.217580][T27734] should_failslab+0xc2/0x120 [ 1222.217596][T27734] __kmalloc_cache_noprof+0x91/0x6d0 [ 1222.217610][T27734] ? kobject_uevent_env+0x263/0x18b0 [ 1222.217632][T27734] kobject_uevent_env+0x263/0x18b0 [ 1222.217656][T27734] ? rcu_is_watching+0x13/0xc0 [ 1222.217676][T27734] gadget_bind_driver+0x773/0xbf0 [ 1222.217693][T27734] ? __pfx_dummy_udc_async_callbacks+0x1/0x10 [ 1222.217708][T27734] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1222.217724][T27734] really_probe+0x241/0xa60 [ 1222.217742][T27734] __driver_probe_device+0x210/0x460 [ 1222.217771][T27734] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1222.217802][T27734] driver_probe_device+0x4a/0x140 [ 1222.217819][T27734] __driver_attach+0x21f/0x5b0 [ 1222.217836][T27734] ? __pfx___driver_attach+0x10/0x10 [ 1222.217853][T27734] bus_for_each_dev+0x13e/0x1d0 [ 1222.217867][T27734] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1222.217880][T27734] ? bus_add_driver+0x2b5/0x5b0 [ 1222.217899][T27734] bus_add_driver+0x305/0x5b0 [ 1222.217914][T27734] driver_register+0x1e2/0x360 [ 1222.217930][T27734] ? rcu_is_watching+0x13/0xc0 [ 1222.217948][T27734] usb_gadget_register_driver_owner+0x132/0x210 [ 1222.217964][T27734] raw_ioctl+0x1a85/0x2b80 [ 1222.217982][T27734] ? __pfx_raw_ioctl+0x10/0x10 [ 1222.217995][T27734] ? selinux_file_ioctl+0x13b/0x290 [ 1222.218012][T27734] ? selinux_file_ioctl+0xb6/0x290 [ 1222.218029][T27734] ? __pfx_raw_ioctl+0x10/0x10 [ 1222.218044][T27734] __x64_sys_ioctl+0x18e/0x210 [ 1222.218058][T27734] do_syscall_64+0x123/0x790 [ 1222.218073][T27734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.218085][T27734] RIP: 0033:0x7fe70af9ddeb [ 1222.218096][T27734] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1222.218107][T27734] RSP: 002b:00007fe70bd9bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1222.218120][T27734] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe70af9ddeb [ 1222.218128][T27734] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1222.218135][T27734] RBP: 00007fe70bd9cfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1222.218142][T27734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.218149][T27734] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 1222.218165][T27734] [ 1222.460092][ T190] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1222.624899][ C0] net_ratelimit: 72 callbacks suppressed [ 1222.631465][ T190] usb 6-1: Using ep0 maxpacket: 32 [ 1222.634341][ T190] usb 6-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=82.25 [ 1222.657554][ T190] usb 6-1: config 139 has an invalid interface number: 104 but max is 0 [ 1222.657567][ T190] usb 6-1: config 139 has no interface number 0 [ 1222.657584][ T190] usb 6-1: config 139 interface 104 has no altsetting 0 [ 1222.690526][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.690538][ T190] usb 6-1: Product: syz [ 1222.690546][ T190] usb 6-1: Manufacturer: syz [ 1222.690555][ T190] usb 6-1: SerialNumber: syz [ 1222.747604][ T31] audit: type=1400 audit(1791132631.051:3516): avc: denied { getopt } for pid=27735 comm="syz.4.7072" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1222.942146][ T190] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 1222.942637][ T190] gspca_sn9c20x: Write register 1000 failed -71 [ 1222.942648][ T190] gspca_sn9c20x: Device initialization failed [ 1222.942691][ T190] gspca_sn9c20x 6-1:139.104: probe with driver gspca_sn9c20x failed with error -71 [ 1222.976699][ T190] usb 6-1: USB disconnect, device number 5 ** 29441 printk messages dropped ** [ 1225.404676][ T5607] Bluetooth: hci5: unexpected event for opcode 0x2039 ** 29439 printk messages dropped ** [ 1227.784260][ T5607] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1227.905069][ C0] net_ratelimit: 327 callbacks suppressed [ 1228.339059][T27798] zero sized request [ 1228.596699][ T5607] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 1228.675653][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7096'. [ 1229.142118][ T31] audit: type=1400 audit(1791132637.441:3517): avc: denied { watch watch_reads } for pid=27806 comm="syz.0.7097" path="/" dev="ramfs" ino=78915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1230.484635][ T31] audit: type=1800 audit(1791132638.781:3518): pid=27809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.7097" name="bus" dev="ramfs" ino=78916 res=0 errno=0 [ 1232.225496][ T5790] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1232.625923][ T5607] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1232.625966][ T5607] Bluetooth: hci2: Injecting HCI hardware error event [ 1232.628110][ T5607] Bluetooth: hci2: hardware error 0x00 [ 1232.919945][T27708] net_ratelimit: 58 callbacks suppressed [ 1232.919970][T27708] Set syz1 is full, maxelem 65536 reached [ 1233.585703][T27875] comedi comedi1: multiq3: I/O base address or length out of range [ 1233.802132][T27878] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7122'. [ 1234.786222][ T5607] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1237.689314][T27906] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1238.251829][T23421] net_ratelimit: 38 callbacks suppressed [ 1238.401598][T27927] jffs2: notice: (27927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1238.407767][ T31] audit: type=1400 audit(1791132646.701:3519): avc: denied { write } for pid=27926 comm="syz.0.7138" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1238.407802][ T31] audit: type=1400 audit(1791132646.711:3520): avc: denied { add_name } for pid=27926 comm="syz.0.7138" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1238.407825][ T31] audit: type=1400 audit(1791132646.711:3521): avc: denied { create } for pid=27926 comm="syz.0.7138" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1238.407848][ T31] audit: type=1400 audit(1791132646.711:3522): avc: denied { read write open } for pid=27926 comm="syz.0.7138" path="/172/mnt/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1238.628116][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.628240][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.874421][T27939] FAULT_INJECTION: forcing a failure. [ 1238.874421][T27939] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.874440][T27939] CPU: 0 UID: 0 PID: 27939 Comm: syz.0.7142 Not tainted syzkaller #0 PREEMPT(full) [ 1238.874455][T27939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1238.874462][T27939] Call Trace: [ 1238.874467][T27939] [ 1238.874473][T27939] dump_stack_lvl+0x100/0x190 [ 1238.874497][T27939] should_fail_ex.cold+0x5/0xa [ 1238.874516][T27939] should_failslab+0xc2/0x120 [ 1238.874532][T27939] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1238.874548][T27939] ? key_alloc+0x3c5/0x1310 [ 1238.874567][T27939] key_alloc+0x3c5/0x1310 [ 1238.874588][T27939] ? __pfx_key_alloc+0x10/0x10 [ 1238.874602][T27939] ? __pfx_sprintf+0x10/0x10 [ 1238.874614][T27939] ? _get_random_bytes+0xa8/0x220 [ 1238.874630][T27939] keyring_alloc+0x44/0xc0 [ 1238.874649][T27939] call_sbin_request_key+0x380/0xd90 [ 1238.874670][T27939] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1238.874685][T27939] ? key_instantiate_and_link+0x39d/0x4b0 [ 1238.874701][T27939] ? key_alloc+0xbb4/0x1310 [ 1238.874716][T27939] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 1238.874742][T27939] ? request_key_auth_new+0x732/0xb50 [ 1238.874759][T27939] ? __pfx_request_key_auth_new+0x10/0x10 [ 1238.874779][T27939] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1238.874794][T27939] request_key_and_link+0x1115/0x1330 [ 1238.874812][T27939] ? __pfx_request_key_and_link+0x10/0x10 [ 1238.874826][T27939] ? __pfx___might_resched+0x10/0x10 [ 1238.874841][T27939] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 1238.874855][T27939] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1238.874873][T27939] ? _copy_from_user+0x59/0xd0 [ 1238.874890][T27939] __do_sys_request_key+0x2a2/0x3c0 [ 1238.874903][T27939] ? __pfx___do_sys_request_key+0x10/0x10 [ 1238.874921][T27939] do_syscall_64+0x123/0x790 [ 1238.874935][T27939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.874948][T27939] RIP: 0033:0x7fa7e5b9e159 [ 1238.874958][T27939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.874969][T27939] RSP: 002b:00007fa7e69e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1238.874981][T27939] RAX: ffffffffffffffda RBX: 00007fa7e5e25fa0 RCX: 00007fa7e5b9e159 [ 1238.874988][T27939] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1238.874996][T27939] RBP: 00007fa7e5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1238.875003][T27939] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1238.875010][T27939] R13: 00007fa7e5e26038 R14: 00007fa7e5e25fa0 R15: 00007ffdeea3e668 [ 1238.875026][T27939] [ 1239.413875][T27955] 9pnet_virtio: no channels available for device syz [ 1239.614976][ T190] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1239.765649][ T190] usb 1-1: Using ep0 maxpacket: 8 [ 1239.766185][ T190] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1239.767578][ T190] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1239.767617][ T190] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1239.767630][ T190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1239.767643][ T190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1239.767657][ T190] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.767687][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.943839][T27966] can0: slcan on ttyS3. [ 1240.080902][ T190] usb 1-1: usb_control_msg returned -32 [ 1240.080926][ T190] usbtmc 1-1:16.0: can't read capabilities [ 1240.165723][T27966] can0 (unregistered): slcan off ttyS3. [ 1240.690927][ T190] usb 1-1: USB disconnect, device number 23 [ 1241.438308][T28007] overlayfs: failed to clone lowerpath [ 1241.746033][T28021] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7173'. [ 1241.891161][T28027] sit0: entered promiscuous mode [ 1241.913277][T28027] netlink: 'syz.5.7176': attribute type 1 has an invalid length. [ 1241.913289][T28027] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7176'. [ 1241.965026][T22713] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1242.090166][T28034] netlink: 'syz.5.7178': attribute type 1 has an invalid length. [ 1242.116256][T22713] usb 3-1: Using ep0 maxpacket: 8 [ 1242.121702][T22713] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1242.123943][T22713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1242.123978][T22713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.165335][T22713] usb 3-1: config 0 descriptor?? [ 1242.320118][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7180'. [ 1242.334951][ T31] audit: type=1400 audit(1791132650.631:3523): avc: denied { write } for pid=28038 comm="syz.0.7180" name="functions" dev="configfs" ino=53777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1242.337597][ T31] audit: type=1400 audit(1791132650.641:3524): avc: denied { create } for pid=28038 comm="syz.0.7180" name="rndis.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1242.407154][T22713] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1242.467640][T22713] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1242.687992][ T190] usb 3-1: USB disconnect, device number 50 [ 1242.688119][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1243.424900][ C0] net_ratelimit: 67 callbacks suppressed [ 1244.013322][T28075] netlink: 'syz.5.7192': attribute type 1 has an invalid length. [ 1244.154342][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7193'. [ 1244.194497][T28075] bond3: entered promiscuous mode [ 1244.194720][T28075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1244.209871][T28086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7193'. [ 1245.040754][ T31] audit: type=1400 audit(1791132653.341:3525): avc: denied { read write } for pid=28099 comm="syz.0.7199" name="usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1245.041687][ T31] audit: type=1400 audit(1791132653.341:3526): avc: denied { open } for pid=28099 comm="syz.0.7199" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1245.410912][ T31] audit: type=1400 audit(1791132653.711:3527): avc: denied { audit_write } for pid=28099 comm="syz.0.7199" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1245.569895][T28114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7205'. [ 1245.574392][ T31] audit: type=1400 audit(1791132653.871:3528): avc: denied { ioctl } for pid=28099 comm="syz.0.7199" path="/dev/usbmon6" dev="devtmpfs" ino=733 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1245.807241][T28124] netlink: 'syz.4.7207': attribute type 1 has an invalid length. [ 1245.903322][T28124] bond3: entered promiscuous mode [ 1245.913520][T28124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1246.069067][ T5607] Bluetooth: hci5: connection err: -111 [ 1247.541279][T28142] futex_wake_op: syz.5.7210 tries to shift op by 144; fix this program [ 1247.864138][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7213'. [ 1247.937114][T28150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7212'. [ 1247.966070][T28150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7212'. [ 1248.544882][ C0] net_ratelimit: 59 callbacks suppressed [ 1249.503442][ T31] audit: type=1400 audit(1791132657.801:3529): avc: denied { checkpoint_restore } for pid=28169 comm="syz.0.7221" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1249.833645][T28180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7222'. [ 1251.179893][T28182] jffs2: notice: (28182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1251.209840][ T31] audit: type=1400 audit(1791132659.511:3530): avc: denied { write } for pid=28181 comm="syz.2.7224" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1251.307697][T28189] netlink: 'syz.5.7226': attribute type 1 has an invalid length. [ 1252.144017][T28195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1252.677663][T28205] FAULT_INJECTION: forcing a failure. [ 1252.677663][T28205] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.677680][T28205] CPU: 0 UID: 0 PID: 28205 Comm: syz.0.7231 Not tainted syzkaller #0 PREEMPT(full) [ 1252.677695][T28205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1252.677703][T28205] Call Trace: [ 1252.677707][T28205] [ 1252.677712][T28205] dump_stack_lvl+0x100/0x190 [ 1252.677742][T28205] should_fail_ex.cold+0x5/0xa [ 1252.677761][T28205] should_failslab+0xc2/0x120 [ 1252.677778][T28205] __kmalloc_cache_noprof+0x91/0x6d0 [ 1252.677791][T28205] ? percpu_ref_init+0xec/0x3f0 [ 1252.677805][T28205] ? __pfx_css_release+0x10/0x10 [ 1252.677817][T28205] percpu_ref_init+0xec/0x3f0 [ 1252.677830][T28205] cgroup_mkdir+0x2a0/0x1330 [ 1252.677846][T28205] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1252.677861][T28205] kernfs_iop_mkdir+0x111/0x190 [ 1252.677873][T28205] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1252.677890][T28205] vfs_mkdir+0x364/0x850 [ 1252.677906][T28205] filename_mkdirat+0x48b/0x5e0 [ 1252.677924][T28205] ? __pfx_filename_mkdirat+0x10/0x10 [ 1252.677940][T28205] ? strncpy_from_user+0x19d/0x2d0 [ 1252.677959][T28205] ? do_getname+0x191/0x390 [ 1252.677974][T28205] __x64_sys_mkdirat+0x89/0xc0 [ 1252.677991][T28205] do_syscall_64+0x123/0x790 [ 1252.678007][T28205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.678019][T28205] RIP: 0033:0x7fa7e5b9e159 [ 1252.678029][T28205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.678041][T28205] RSP: 002b:00007fa7e69e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1252.678053][T28205] RAX: ffffffffffffffda RBX: 00007fa7e5e25fa0 RCX: 00007fa7e5b9e159 [ 1252.678061][T28205] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1252.678068][T28205] RBP: 00007fa7e5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1252.678075][T28205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.678082][T28205] R13: 00007fa7e5e26038 R14: 00007fa7e5e25fa0 R15: 00007ffdeea3e668 [ 1252.678099][T28205] [ 1252.710065][ T5790] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1253.044123][T28211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7234'. [ 1253.585029][ C0] net_ratelimit: 62 callbacks suppressed [ 1255.183365][T28238] netlink: 'syz.2.7240': attribute type 1 has an invalid length. [ 1255.275951][T28238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1255.357921][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7240'. [ 1255.992957][T28241] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1256.137948][ T31] audit: type=1400 audit(1791132664.441:3531): avc: denied { write } for pid=28261 comm="syz.5.7244" name="functions" dev="configfs" ino=53777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1256.450781][T28273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7247'. [ 1257.214616][T28277] »»»»»»: renamed from vlan0 (while UP) [ 1258.420576][T28300] netlink: 'syz.2.7256': attribute type 1 has an invalid length. [ 1258.467212][T28306] 9pnet_virtio: no channels available for device syz [ 1258.482769][T28306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1258.507117][T28300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1258.514588][T28303] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1258.565981][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7256'. [ 1258.636018][ T5707] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1258.662777][T28307] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1258.718718][T28311] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1258.732160][T28311] overlayfs: failed to clone upperpath [ 1258.786886][ T5707] usb 6-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 1.00 [ 1258.788174][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.821466][ T5707] upd78f0730 6-1:1.0: upd78f0730 converter detected [ 1258.844820][ T5707] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 1259.012199][T28318] netlink: 'syz.3.7263': attribute type 10 has an invalid length. [ 1259.012330][T28318] net_ratelimit: 38 callbacks suppressed [ 1259.070725][T28318] team0: Device wg2 is of different type [ 1259.451587][T28333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7268'. [ 1261.853420][T28357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1262.570163][ T5790] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1263.699517][ T5707] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1263.714500][ T5790] usb 3-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice= 1.00 [ 1263.725504][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.753500][ T5790] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver' in warm state. [ 1264.704950][ C0] net_ratelimit: 170 callbacks suppressed [ 1264.887939][T28325] upd78f0730 ttyUSB0: failed to send control request 03: -110 [ 1264.934181][T28398] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1264.958064][ T5790] gp8psk: usb in 128 operation failed. [ 1264.959552][ T5790] gp8psk: usb in 137 operation failed. [ 1264.959568][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1264.960758][ T5790] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver) [ 1264.960797][ T5790] usb 3-1: media controller created [ 1265.127565][ T31] audit: type=1400 audit(1791132673.431:3532): avc: denied { ioctl } for pid=28402 comm="syz.3.7295" path="socket:[80843]" dev="sockfs" ino=80843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1265.164271][ T5707] usb 6-1: USB disconnect, device number 6 [ 1265.194746][ T5707] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1265.205449][ T5707] upd78f0730 6-1:1.0: device disconnected [ 1265.229640][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1265.266601][T19911] rpcbind: server 127.0.0.1 not responding, timed out [ 1265.383644][ T5790] gp8psk_fe: Frontend attached [ 1265.383882][ T5790] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1265.424512][ T5790] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1265.663498][ T31] audit: type=1400 audit(1791132673.961:3533): avc: denied { unmount } for pid=24908 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1265.857626][T28419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7301'. [ 1266.929028][ T5790] gp8psk: usb in 138 operation failed. [ 1266.929037][ T5790] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver successfully initialized and connected. [ 1266.929044][ T5790] gp8psk: found Genpix USB device pID = 202 (hex) [ 1266.981942][ T5790] usb 3-1: USB disconnect, device number 51 [ 1267.046539][T28430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7305'. [ 1267.052363][T28433] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1268.178036][T28448] futex_wake_op: syz.0.7311 tries to shift op by 144; fix this program [ 1268.665534][T23008] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1268.673682][T28460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1268.781007][ T5790] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receive successfully deinitialized and disconnected. [ 1268.816578][T23008] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1268.817828][T23008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.193426][T23008] usb 1-1: usb_control_msg returned -71 [ 1269.193452][T23008] usbtmc 1-1:1.0: can't read capabilities [ 1269.744906][ C0] net_ratelimit: 30 callbacks suppressed [ 1270.079749][T23008] usb 1-1: USB disconnect, device number 24 [ 1270.541009][T28483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7320'. [ 1270.704705][ T31] audit: type=1400 audit(1791132679.001:3534): avc: denied { write } for pid=28488 comm="syz.5.7322" name="nullb" dev="configfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1271.786367][T28505] futex_wake_op: syz.0.7325 tries to shift op by 144; fix this program [ 1271.813677][T28506] cfg80211: Invalid regulatory domain detected: BB [ 1271.921222][T28495] block device autoloading is deprecated and will be removed. [ 1271.979899][T28489] Dev nullb1: unable to read RDB block 8 [ 1271.979999][T28489] nullb1: unable to read partition table [ 1272.021119][T28510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7328'. [ 1272.056480][T28489] null_blk: disk nullb1 created [ 1272.209329][T28518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7332'. [ 1272.573818][T28531] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1272.682726][ T31] audit: type=1326 audit(1791132680.981:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1272.683856][ T31] audit: type=1326 audit(1791132680.981:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1273.547502][T28540] futex_wake_op: syz.4.7338 tries to shift op by 144; fix this program [ 1273.581003][ T31] audit: type=1326 audit(1791132681.881:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1273.581128][ T31] audit: type=1326 audit(1791132681.881:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1273.581263][ T31] audit: type=1326 audit(1791132681.881:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1273.584693][ T31] audit: type=1326 audit(1791132681.881:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1273.613224][ T31] audit: type=1326 audit(1791132681.921:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1273.613255][ T31] audit: type=1326 audit(1791132681.921:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e5b9e159 code=0x7ffc0000 [ 1273.641278][T23008] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1273.715863][ T31] audit: type=1326 audit(1791132682.021:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.0.7339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7e5b5e98e code=0x7ffc0000 [ 1273.830023][ T5790] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1273.896875][T23008] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 1273.899861][T23008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.055722][T22713] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1274.219620][T22713] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1274.254349][T22713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.254362][T22713] usb 1-1: Product: syz [ 1274.254370][T22713] usb 1-1: Manufacturer: syz [ 1274.254379][T22713] usb 1-1: SerialNumber: syz [ 1274.298149][T23008] msi2500 6-1:1.0: Registered as swradio24 [ 1274.298161][T23008] msi2500 6-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1274.303722][T22713] usb 1-1: USB2VGA dongle found at address 25 [ 1274.336298][T22713] usb 1-1: Allocated 8 output buffers [ 1274.864870][ C0] net_ratelimit: 22 callbacks suppressed [ 1275.805395][ T190] usb 6-1: USB disconnect, device number 7 [ 1276.172458][T28569] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1276.262060][T22713] usb 1-1: Failed to early initialize device [ 1276.311232][T22713] usb 1-1: USB disconnect, device number 25 [ 1277.290883][T28580] futex_wake_op: syz.3.7350 tries to shift op by 144; fix this program [ 1278.455207][ T31] kauditd_printk_skb: 49 callbacks suppressed [ 1278.455218][ T31] audit: type=1400 audit(1791132686.751:3593): avc: denied { write } for pid=28621 comm="syz.0.7361" name="subsystems" dev="configfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1278.522307][ T31] audit: type=1400 audit(1791132686.821:3594): avc: denied { write } for pid=28621 comm="syz.0.7361" name="ports" dev="configfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1278.599191][T28630] netlink: 'syz.2.7364': attribute type 1 has an invalid length. [ 1278.633164][ T31] audit: type=1400 audit(1791132686.931:3595): avc: denied { write } for pid=28621 comm="syz.0.7361" name="subsystems" dev="configfs" ino=81449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1278.633195][ T31] audit: type=1400 audit(1791132686.931:3596): avc: denied { create } for pid=28621 comm="syz.0.7361" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1278.633218][ T31] audit: type=1400 audit(1791132686.931:3597): avc: denied { write } for pid=28621 comm="syz.0.7361" name="subsystems" dev="configfs" ino=81449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1278.756661][T28630] bond3: entered promiscuous mode [ 1278.758297][T28630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1279.153193][T28622] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 1280.098838][T28630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1280.099058][T28630] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1280.099067][T28630] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1280.163866][T28630] bond3: (slave wireguard0): making interface the new active one [ 1280.163877][T28630] wireguard0: entered promiscuous mode [ 1280.164765][T28630] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 1280.190721][T19911] net_ratelimit: 38 callbacks suppressed [ 1280.330646][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7370'. [ 1280.388836][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7370'. [ 1280.411522][T28651] macvtap1: entered promiscuous mode [ 1280.411535][T28651] team0: entered promiscuous mode [ 1280.411544][T28651] team_slave_0: entered promiscuous mode [ 1280.411659][T28651] team_slave_1: entered promiscuous mode [ 1280.411951][T28651] macvtap1: entered allmulticast mode [ 1280.411960][T28651] team0: entered allmulticast mode [ 1280.411968][T28651] team_slave_0: entered allmulticast mode [ 1280.411983][T28651] team_slave_1: entered allmulticast mode [ 1280.412711][T28651] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1280.504070][T28658] team0: left allmulticast mode [ 1280.504084][T28658] team_slave_0: left allmulticast mode [ 1280.504096][T28658] team_slave_1: left allmulticast mode [ 1280.504126][T28658] team0: left promiscuous mode [ 1280.531356][T28658] macvtap1: left promiscuous mode [ 1280.531370][T28658] macvtap1: left allmulticast mode [ 1280.551418][T22713] team_slave_0: left promiscuous mode [ 1280.551435][T22713] team_slave_1: left promiscuous mode [ 1281.003417][T28673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7376'. [ 1281.029552][T28673] team0 (unregistering): Port device team_slave_0 removed [ 1281.045106][T28673] team0 (unregistering): Port device team_slave_1 removed [ 1281.087680][T28673] team0 (unregistering): Port device dummy0 removed [ 1282.865114][T28668] NFSD: Unable to initialize client recovery tracking! (-110) [ 1282.865123][T28668] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1282.865133][T28668] NFSD: starting 90-second grace period (net f00004c3) [ 1282.954114][ T5607] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 1282.966953][ T31] audit: type=1400 audit(1791132691.271:3598): avc: denied { unmount } for pid=26986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1283.596292][T28716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7393'. [ 1283.602527][T28716] team0 (unregistering): Port device team_slave_0 removed [ 1283.628135][T28716] team0 (unregistering): Port device team_slave_1 removed [ 1283.926241][T28734] PM: suspend entry (s2idle) [ 1284.070931][ T5790] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1284.942668][ T5607] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 1286.144870][ C0] net_ratelimit: 49 callbacks suppressed [ 1289.214779][ T5607] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 1290.322934][ T31] audit: type=1326 audit(1791132698.621:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.323077][ T31] audit: type=1326 audit(1791132698.621:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.324430][ T31] audit: type=1326 audit(1791132698.621:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.324628][ T31] audit: type=1326 audit(1791132698.621:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.324659][ T31] audit: type=1326 audit(1791132698.621:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.324795][ T31] audit: type=1326 audit(1791132698.621:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.383255][ T31] audit: type=1326 audit(1791132698.691:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.523249][ T31] audit: type=1326 audit(1791132698.831:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc9e15e98e code=0x7ffc0000 [ 1290.523508][ T31] audit: type=1326 audit(1791132698.831:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1290.523857][ T31] audit: type=1326 audit(1791132698.831:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28781 comm="syz.4.7417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc9e19e159 code=0x7ffc0000 [ 1291.665161][ C0] net_ratelimit: 47 callbacks suppressed [ 1292.059572][T28786] futex_wake_op: syz.4.7418 tries to shift op by 144; fix this program [ 1292.061905][T14022] Bluetooth: hci3: command 0x0406 tx timeout [ 1294.306942][T22713] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1295.656934][ T5607] Bluetooth: hci4: connection err: -111 [ 1296.864882][ C0] net_ratelimit: 31 callbacks suppressed [ 1298.727141][T14022] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1298.733138][T14022] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1298.733959][T14022] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1298.757699][T14022] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1298.772225][T14022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1298.894521][T14022] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1298.906762][T14022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1298.908222][T14022] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1298.911017][T14022] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1298.912698][T14022] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1299.163589][ T5707] usb 4-1: USB disconnect, device number 6 [ 1299.463959][ T5607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1299.478036][ T5607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1299.480371][ T5607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1299.504168][ T5607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1299.516946][ T5607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1299.629828][ T5607] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1299.632634][ T5607] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1299.634543][ T5607] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1299.660826][ T5607] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1299.664184][ T5607] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1300.066175][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.066203][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.865102][ T5607] Bluetooth: hci0: command tx timeout [ 1301.025079][ T5607] Bluetooth: hci6: command tx timeout [ 1301.585210][ T5607] Bluetooth: hci7: command tx timeout [ 1301.745527][ T5607] Bluetooth: hci8: command tx timeout [ 1302.066416][T28816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.066463][T28816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.066541][T28816] bridge_slave_0: entered allmulticast mode [ 1302.067420][T28816] bridge_slave_0: entered promiscuous mode [ 1302.099714][T28816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.099765][T28816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.099981][T28816] bridge_slave_1: entered allmulticast mode [ 1302.112035][T28816] bridge_slave_1: entered promiscuous mode [ 1302.384931][ C0] net_ratelimit: 161 callbacks suppressed [ 1302.443943][T28816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.464078][T28816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.732722][T28820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.745814][T28820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.745917][T28820] bridge_slave_0: entered allmulticast mode [ 1302.749332][T28820] bridge_slave_0: entered promiscuous mode [ 1302.818072][T28816] team0: Port device team_slave_0 added [ 1302.884639][T28820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.884686][T28820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.884779][T28820] bridge_slave_1: entered allmulticast mode [ 1302.887881][T28820] bridge_slave_1: entered promiscuous mode [ 1302.919169][T28816] team0: Port device team_slave_1 added [ 1302.945007][ T5607] Bluetooth: hci0: command tx timeout [ 1303.105180][ T5607] Bluetooth: hci6: command tx timeout [ 1303.489603][T28820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.494193][T28820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.494785][T28816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.494792][T28816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.514316][T28816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.565315][T28816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.565321][T28816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.565335][T28816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.665150][ T5607] Bluetooth: hci7: command tx timeout [ 1303.826745][ T5607] Bluetooth: hci8: command tx timeout [ 1303.841950][T28838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.841998][T28838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.842087][T28838] bridge_slave_0: entered allmulticast mode [ 1303.844143][T28838] bridge_slave_0: entered promiscuous mode [ 1303.877177][T28838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.877229][T28838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.877557][T28838] bridge_slave_1: entered allmulticast mode [ 1303.879763][T28838] bridge_slave_1: entered promiscuous mode [ 1304.176551][T28820] team0: Port device team_slave_0 added [ 1305.026440][ T5607] Bluetooth: hci0: command tx timeout [ 1305.185668][ T5607] Bluetooth: hci6: command tx timeout [ 1305.192572][T28838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.213348][T28820] team0: Port device team_slave_1 added [ 1305.310382][T28834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.310430][T28834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.310515][T28834] bridge_slave_0: entered allmulticast mode [ 1305.313551][T28834] bridge_slave_0: entered promiscuous mode [ 1305.348152][T28838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.389676][T28820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.389683][T28820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.389696][T28820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.392629][T28820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.392635][T28820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.392649][T28820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.499443][T28816] hsr_slave_0: entered promiscuous mode [ 1305.500802][T28816] hsr_slave_1: entered promiscuous mode [ 1305.503074][T28834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.503158][T28834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.503370][T28834] bridge_slave_1: entered allmulticast mode [ 1305.540300][T28834] bridge_slave_1: entered promiscuous mode [ 1305.666070][T28838] team0: Port device team_slave_0 added [ 1305.716478][T28834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.735482][T28834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.736706][T28838] team0: Port device team_slave_1 added [ 1305.746315][ T5607] Bluetooth: hci7: command tx timeout [ 1305.905090][ T5607] Bluetooth: hci8: command tx timeout [ 1306.020306][T28820] hsr_slave_0: entered promiscuous mode [ 1306.020975][T28820] hsr_slave_1: entered promiscuous mode [ 1306.021396][T28820] debugfs: 'hsr0' already exists in 'hsr' [ 1306.021407][T28820] Cannot create hsr debugfs directory [ 1306.023171][T28834] team0: Port device team_slave_0 added [ 1306.024122][T28838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.024129][T28838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.024143][T28838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.199941][T28838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.199948][T28838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.199962][T28838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.277707][T28834] team0: Port device team_slave_1 added [ 1306.543710][T28834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.543717][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.543731][T28834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.688622][T28834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.688628][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.688642][T28834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.783674][T28838] hsr_slave_0: entered promiscuous mode [ 1306.784281][T28838] hsr_slave_1: entered promiscuous mode [ 1306.784771][T28838] debugfs: 'hsr0' already exists in 'hsr' [ 1306.784781][T28838] Cannot create hsr debugfs directory [ 1307.105221][ T5607] Bluetooth: hci0: command tx timeout [ 1307.219258][T28834] hsr_slave_0: entered promiscuous mode [ 1307.220857][T28834] hsr_slave_1: entered promiscuous mode [ 1307.222333][T28834] debugfs: 'hsr0' already exists in 'hsr' [ 1307.222344][T28834] Cannot create hsr debugfs directory [ 1307.265015][ T5607] Bluetooth: hci6: command tx timeout [ 1307.744999][ C0] net_ratelimit: 36 callbacks suppressed [ 1307.825337][ T5607] Bluetooth: hci7: command tx timeout [ 1307.950513][T28816] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1307.975682][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1307.976135][T28816] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1307.992154][ T5607] Bluetooth: hci8: command tx timeout [ 1308.009318][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.013915][T28816] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1308.058039][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1308.060357][T28816] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1308.088180][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1308.326973][T28820] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1308.346921][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1308.350912][T28820] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1308.378173][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.395474][T28820] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1308.419923][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1308.439396][T28820] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1308.469206][T28820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1308.557771][T28816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.630667][T28816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.664657][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.664707][T19925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.749771][T19925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.749821][T19925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.754236][T28838] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1308.796541][T28838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1308.820383][T28838] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1308.838795][T28838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.841546][T28838] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1308.870711][T28838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1308.874295][T28838] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1308.906740][T28838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.193862][T28820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.249307][T28834] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1309.278342][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1309.278805][T28834] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1309.309021][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1309.331564][T28820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.343849][T28834] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1309.372415][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1309.372871][T28834] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1309.401499][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.431885][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.431936][T19925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.466001][T19925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.466059][T19925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.617294][T28838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.736799][T28838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.757498][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.757549][T19925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.798226][T19912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.798276][T19912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.868296][T28834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.956464][T28834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.988477][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.988527][T19911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.023780][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.023846][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.138507][T28834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1310.436036][T28816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.980018][T28820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.232671][T28838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.254441][T28816] veth0_vlan: entered promiscuous mode [ 1311.294270][T28816] veth1_vlan: entered promiscuous mode [ 1311.378698][T28816] veth0_macvtap: entered promiscuous mode [ 1311.409783][T28834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.411524][T28816] veth1_macvtap: entered promiscuous mode [ 1311.480601][T28816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.511218][T28816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.571822][T19912] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.571845][T19912] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.571865][T19912] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.594741][T19915] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.888396][T19909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.888404][T19909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.031732][T28820] veth0_vlan: entered promiscuous mode [ 1312.049034][T19911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.049044][T19911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.090348][T28820] veth1_vlan: entered promiscuous mode [ 1312.204523][T28820] veth0_macvtap: entered promiscuous mode [ 1312.232484][T28838] veth0_vlan: entered promiscuous mode [ 1312.252616][T28820] veth1_macvtap: entered promiscuous mode [ 1312.270008][T28838] veth1_vlan: entered promiscuous mode [ 1312.344261][T28820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.368093][T28820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.368941][T28838] veth0_macvtap: entered promiscuous mode [ 1312.409663][T28834] veth0_vlan: entered promiscuous mode [ 1312.431028][T28838] veth1_macvtap: entered promiscuous mode [ 1312.460853][T28834] veth1_vlan: entered promiscuous mode [ 1312.461988][T29020] PM: suspend entry (s2idle) [ 1312.461995][T29020] PM: suspend exit [ 1312.481297][T19925] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.481559][T19925] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.557572][T28838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.590809][T28838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.702456][T28834] veth0_macvtap: entered promiscuous mode [ 1312.748549][T19912] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.750785][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.750794][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.783136][T28834] veth1_macvtap: entered promiscuous mode [ 1312.802581][ T1156] net_ratelimit: 266 callbacks suppressed [ 1312.895179][T19911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.905476][ T1156] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.905920][ T1156] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.905942][ T1156] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.905962][ T1156] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.981155][T28834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.021994][T19909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.022004][T19909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.043560][T28834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.201997][T19912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.202006][T19912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.383498][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.383507][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.438040][T19911] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.438337][T19911] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.438497][T19911] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.573689][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.573699][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.591129][ T6066] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.713330][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.713340][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.027682][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7432'. [ 1314.027704][T29034] gre0: entered promiscuous mode [ 1314.027714][T29034] gre0: entered allmulticast mode [ 1314.034546][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7432'. [ 1314.034658][T29034] gre0: left promiscuous mode [ 1314.034666][T29034] gre0: left allmulticast mode [ 1314.131540][T29036] netlink: 'syz.9.7451': attribute type 10 has an invalid length. [ 1314.154715][T29036] team0: Device wg2 is of different type [ 1315.399858][T29063] device-mapper: ioctl: Target spec extends beyond end of parameters [ 1315.399865][T29063] device-mapper: ioctl: unable to find target [ 1315.582874][T29065] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1316.776196][T19912] IPVS: starting estimator thread 0... [ 1316.866092][T29091] IPVS: using max 65 ests per chain, 156000 per kthread [ 1317.066356][T25226] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1317.215909][T25226] usb 9-1: New USB device found, idVendor=046d, idProduct=c21c, bcdDevice= 1.00 [ 1317.216909][T25226] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.639078][T25226] lg-g15 0003:046D:C21C.0009: hidraw0: USB HID v0.00 Device [HID 046d:c21c] on usb-dummy_hcd.8-1/input0 [ 1317.824887][ C0] net_ratelimit: 712 callbacks suppressed [ 1318.831008][T25226] lg-g15 0003:046D:C21C.0009: Error getting backlight brightness: -71 [ 1318.853725][T25226] lg-g15 0003:046D:C21C.0009: probe with driver lg-g15 failed with error -71 [ 1318.873403][T25226] usb 9-1: USB disconnect, device number 2 [ 1322.689476][T14022] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1322.694069][T14022] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1322.711406][T14022] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1322.713990][T14022] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1322.714585][T14022] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1322.864967][ C0] net_ratelimit: 167 callbacks suppressed [ 1323.517685][T29101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.519430][T29101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.519658][T29101] bridge_slave_0: entered allmulticast mode [ 1323.522579][T29101] bridge_slave_0: entered promiscuous mode [ 1323.557826][T29101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.557873][T29101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.558080][T29101] bridge_slave_1: entered allmulticast mode [ 1323.564700][T29101] bridge_slave_1: entered promiscuous mode [ 1323.666671][T29101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.683889][T29101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.761831][T29101] team0: Port device team_slave_0 added [ 1323.775297][T29101] team0: Port device team_slave_1 added [ 1323.844691][T29101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.844698][T29101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.844711][T29101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.902190][T29101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.902197][T29101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.902211][T29101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.041383][T29101] hsr_slave_0: entered promiscuous mode [ 1324.044629][T29101] hsr_slave_1: entered promiscuous mode [ 1324.060539][T29101] debugfs: 'hsr0' already exists in 'hsr' [ 1324.060549][T29101] Cannot create hsr debugfs directory [ 1324.712915][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 1324.712924][ T31] audit: type=1400 audit(1791132733.011:3665): avc: denied { write } for pid=29121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1324.789443][ T5607] Bluetooth: hci9: command tx timeout [ 1324.862793][ T31] audit: type=1400 audit(1791132733.161:3666): avc: denied { write } for pid=29132 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.403472][ T31] audit: type=1400 audit(1791132733.701:3667): avc: denied { write } for pid=29134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.479585][T29101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1325.503816][T29101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1325.514264][T29101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1325.539324][T29101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1325.542427][T29101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1325.578738][T29101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1325.579207][T29101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1325.612942][T29101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1325.643557][ T31] audit: type=1400 audit(1791132733.941:3668): avc: denied { write } for pid=29145 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.809673][T29101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.838563][T29101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.846052][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.846101][T19925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.881827][T19912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.881876][T19912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.204419][ T31] audit: type=1400 audit(1791132734.501:3669): avc: denied { write } for pid=29153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.337303][ T31] audit: type=1400 audit(1791132734.631:3670): avc: denied { write } for pid=29170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.494263][T29101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.591262][T29101] veth0_vlan: entered promiscuous mode [ 1326.608275][T29101] veth1_vlan: entered promiscuous mode [ 1326.670754][T29101] veth0_macvtap: entered promiscuous mode [ 1326.674263][T29101] veth1_macvtap: entered promiscuous mode [ 1326.710055][T29101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.733483][T29101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.825076][ T1156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.825100][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.825119][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.825138][ T1156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.865435][ T5607] Bluetooth: hci9: command tx timeout [ 1327.019864][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.019872][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.097860][ T31] audit: type=1400 audit(1791132735.401:3671): avc: denied { write } for pid=29175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.159242][T19912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.159251][T19912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.301073][ T31] audit: type=1400 audit(1791132735.601:3672): avc: denied { write } for pid=29187 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.519668][T14022] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1327.522200][T14022] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1327.524578][T14022] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1327.554501][T14022] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1327.562306][T14022] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1327.577880][T29021] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1327.725114][T29021] usb 2-1: Using ep0 maxpacket: 32 [ 1327.728625][T29021] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1327.729499][T29021] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.729514][T29021] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.729544][T29021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.731251][T29021] usb 2-1: config 0 descriptor?? [ 1328.012535][ T31] audit: type=1400 audit(1791132736.311:3673): avc: denied { write } for pid=29192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.065001][ C0] net_ratelimit: 456 callbacks suppressed [ 1328.183836][ T31] audit: type=1400 audit(1791132736.481:3674): avc: denied { write } for pid=29213 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.221708][T29021] usbhid 2-1:0.0: can't add hid device: -71 [ 1328.221784][T29021] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1328.246648][T29021] usb 2-1: USB disconnect, device number 6 [ 1328.945260][T14022] Bluetooth: hci9: command tx timeout [ 1329.310357][T29194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.310406][T29194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.310509][T29194] bridge_slave_0: entered allmulticast mode [ 1329.311389][T29194] bridge_slave_0: entered promiscuous mode [ 1329.348113][T29194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.348162][T29194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.348260][T29194] bridge_slave_1: entered allmulticast mode [ 1329.349194][T29194] bridge_slave_1: entered promiscuous mode [ 1329.497913][T29194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.523584][T29194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.643047][T29194] team0: Port device team_slave_0 added [ 1329.661054][T29194] team0: Port device team_slave_1 added [ 1329.665182][T14022] Bluetooth: hci10: command tx timeout [ 1329.777613][T29194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.777620][T29194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.777633][T29194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.782851][T29194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.782858][T29194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.782872][T29194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.967759][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1329.967768][ T31] audit: type=1400 audit(1791132738.271:3678): avc: denied { write } for pid=29242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1330.063438][T29194] hsr_slave_0: entered promiscuous mode [ 1330.072780][T29194] hsr_slave_1: entered promiscuous mode [ 1330.083363][T29194] debugfs: 'hsr0' already exists in 'hsr' [ 1330.083374][T29194] Cannot create hsr debugfs directory [ 1330.249308][ T31] audit: type=1400 audit(1791132738.551:3679): avc: denied { write } for pid=29255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1330.925416][ T31] audit: type=1400 audit(1791132739.231:3680): avc: denied { write } for pid=29259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.025404][T14022] Bluetooth: hci9: command tx timeout [ 1331.059025][ T31] audit: type=1400 audit(1791132739.361:3681): avc: denied { write } for pid=29270 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.632068][ T31] audit: type=1400 audit(1791132739.931:3682): avc: denied { write } for pid=29273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.749940][T14022] Bluetooth: hci10: command tx timeout [ 1331.750709][T29194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1331.779840][T29194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1331.780485][T29194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1331.811751][T29194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1331.814011][T29194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1331.852322][T29194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1331.854446][ T31] audit: type=1400 audit(1791132740.151:3683): avc: denied { write } for pid=29285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.854759][T29194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1331.921112][T29194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1332.094299][T29194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.123490][T29194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.141982][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.142032][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.173403][T19912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.173456][T19912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.466949][ T31] audit: type=1400 audit(1791132740.771:3684): avc: denied { write } for pid=29293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.608184][ T31] audit: type=1400 audit(1791132740.901:3685): avc: denied { write } for pid=29310 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.804448][T29194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.885833][T29194] veth0_vlan: entered promiscuous mode [ 1332.893937][T29194] veth1_vlan: entered promiscuous mode [ 1332.950064][T29194] veth0_macvtap: entered promiscuous mode [ 1332.954061][T29194] veth1_macvtap: entered promiscuous mode [ 1332.993094][T29194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.012791][T29194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1333.048216][T19909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.048633][T19909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.048654][T19909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.048691][T19909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.096916][T29021] net_ratelimit: 238 callbacks suppressed [ 1333.252380][ T31] audit: type=1400 audit(1791132741.551:3686): avc: denied { write } for pid=29316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.336853][ T31] audit: type=1400 audit(1791132741.641:3687): avc: denied { write } for pid=29328 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.825483][T14022] Bluetooth: hci10: command tx timeout [ 1335.906579][T14022] Bluetooth: hci10: command tx timeout [ 1338.144849][ C0] net_ratelimit: 322 callbacks suppressed [ 1343.344895][ C0] net_ratelimit: 176 callbacks suppressed [ 1348.544905][ C0] net_ratelimit: 211 callbacks suppressed [ 1353.664862][ C0] net_ratelimit: 143 callbacks suppressed [ 1358.785111][T19921] net_ratelimit: 146 callbacks suppressed [ 1361.509650][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.509677][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.824851][ C0] net_ratelimit: 149 callbacks suppressed [ 1368.864900][ C0] net_ratelimit: 140 callbacks suppressed [ 1373.904862][ C0] net_ratelimit: 141 callbacks suppressed [ 1378.945609][ C0] net_ratelimit: 150 callbacks suppressed [ 1383.984841][ C0] net_ratelimit: 158 callbacks suppressed [ 1389.026415][T19912] net_ratelimit: 162 callbacks suppressed [ 1394.145203][ C0] net_ratelimit: 151 callbacks suppressed [ 1399.184853][ C0] net_ratelimit: 164 callbacks suppressed [ 1404.224872][ C0] net_ratelimit: 127 callbacks suppressed [ 1409.264926][ C0] net_ratelimit: 132 callbacks suppressed [ 1414.304990][ C0] net_ratelimit: 132 callbacks suppressed [ 1419.344821][ C0] net_ratelimit: 132 callbacks suppressed [ 1422.957001][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.957028][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.464892][ C0] net_ratelimit: 117 callbacks suppressed [ 1425.050634][T29378] Bluetooth: hci8: command 0x0406 tx timeout [ 1425.050664][T29378] Bluetooth: hci0: command 0x0406 tx timeout [ 1425.050686][T29378] Bluetooth: hci6: command 0x0406 tx timeout [ 1425.050708][T29378] Bluetooth: hci7: command 0x0406 tx timeout [ 1429.504907][ C0] net_ratelimit: 120 callbacks suppressed [ 1434.544880][ C0] net_ratelimit: 138 callbacks suppressed [ 1439.664825][ C0] net_ratelimit: 140 callbacks suppressed [ 1440.224790][ C0] wireguard: wg1: Handshake for peer 69 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 18) [ 1440.224850][ C0] wireguard: wg1: Handshake for peer 70 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 10) [ 1440.226808][ T32] INFO: task kworker/u8:44:19927 blocked for more than 143 seconds. [ 1440.226821][ T32] Not tainted syzkaller #0 [ 1440.226828][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1440.226833][ T32] task:kworker/u8:44 state:D stack:22992 pid:19927 tgid:19927 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1440.226868][ T32] Workqueue: pm_fs_sync pm_fs_sync_work_fn [ 1440.226889][ T32] Call Trace: [ 1440.226893][ T32] [ 1440.226901][ T32] __schedule+0x1259/0x6920 [ 1440.226914][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1440.226935][ T32] ? kthread_data+0x53/0xc0 [ 1440.226952][ T32] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1440.226962][ T32] ? find_held_lock+0x2b/0x80 [ 1440.226986][ T32] ? schedule+0x225/0x2c0 [ 1440.226999][ T32] schedule+0xdd/0x2c0 [ 1440.227010][ T32] schedule_preempt_disabled+0x13/0x30 [ 1440.227022][ T32] rwsem_down_read_slowpath+0x5af/0xb40 [ 1440.227040][ T32] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1440.227058][ T32] ? lock_acquire+0x1d1/0x380 [ 1440.227073][ T32] ? __pfx___might_resched+0x10/0x10 [ 1440.227090][ T32] down_read+0xed/0x4c0 [ 1440.227104][ T32] ? __pfx_down_read+0x10/0x10 [ 1440.227119][ T32] ? __pfx___might_resched+0x10/0x10 [ 1440.227134][ T32] super_lock+0x326/0x3f0 [ 1440.227146][ T32] ? __pfx_super_lock+0x10/0x10 [ 1440.227156][ T32] ? lock_acquire+0x1d1/0x380 [ 1440.227170][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1440.227188][ T32] ? find_held_lock+0x2b/0x80 [ 1440.227205][ T32] ? __iterate_supers+0x247/0x4a0 [ 1440.227219][ T32] ? __iterate_supers+0x247/0x4a0 [ 1440.227236][ T32] __iterate_supers+0x38b/0x4a0 [ 1440.227251][ T32] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1440.227264][ T32] ? __pfx___iterate_supers+0x10/0x10 [ 1440.227283][ T32] ksys_sync+0x87/0xf0 [ 1440.227294][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 1440.227304][ T32] ? ktime_get+0x22c/0x320 [ 1440.227320][ T32] ? ktime_get+0x23e/0x320 [ 1440.227333][ T32] ? ktime_get+0x1a4/0x320 [ 1440.227347][ T32] pm_fs_sync_work_fn+0x17/0xe0 [ 1440.227361][ T32] process_one_work+0xac7/0x1b10 [ 1440.227387][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1440.227406][ T32] ? lock_acquire+0x1d1/0x380 [ 1440.227423][ T32] ? __pfx_pm_fs_sync_work_fn+0x10/0x10 [ 1440.227439][ T32] worker_thread+0x5ef/0xe50 [ 1440.227454][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1440.227466][ T32] ? kthread+0x13a/0x450 [ 1440.227482][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1440.227492][ T32] kthread+0x373/0x450 [ 1440.227507][ T32] ? __pfx_kthread+0x10/0x10 [ 1440.227525][ T32] ret_from_fork+0x730/0xd60 [ 1440.227540][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1440.227553][ T32] ? rcu_is_watching+0x13/0xc0 [ 1440.227570][ T32] ? __switch_to+0x800/0x10f0 [ 1440.227588][ T32] ? __pfx_kthread+0x10/0x10 [ 1440.227606][ T32] ret_from_fork_asm+0x1a/0x30 [ 1440.227627][ T32] [ 1440.227651][ T32] INFO: task syz-executor:26986 blocked for more than 143 seconds. [ 1440.227660][ T32] Not tainted syzkaller #0 [ 1440.227666][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1440.227671][ T32] task:syz-executor state:D stack:23864 pid:26986 tgid:26986 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1440.227702][ T32] Call Trace: [ 1440.227706][ T32] [ 1440.227713][ T32] __schedule+0x1259/0x6920 [ 1440.227725][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1440.227741][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1440.227759][ T32] ? lock_acquire+0x1d1/0x380 [ 1440.227773][ T32] ? __pfx___schedule+0x10/0x10 [ 1440.227783][ T32] ? find_held_lock+0x2b/0x80 [ 1440.227801][ T32] ? schedule+0x225/0x2c0 [ 1440.227814][ T32] schedule+0xdd/0x2c0 [ 1440.227826][ T32] schedule_preempt_disabled+0x13/0x30 [ 1440.227837][ T32] __mutex_lock+0xccb/0x1bd0 [ 1440.227851][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1440.227870][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1440.227886][ T32] ? net_generic+0x25/0x2a0 [ 1440.227901][ T32] ? net_generic+0xea/0x2a0 [ 1440.227913][ T32] ? net_generic+0xea/0x2a0 [ 1440.227931][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1440.227945][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 1440.227960][ T32] nfsd_umount+0x3b/0x60 [ 1440.227980][ T32] deactivate_locked_super+0xbd/0x130 [ 1440.227994][ T32] deactivate_super+0xea/0x110 [ 1440.228008][ T32] cleanup_mnt+0x21f/0x450 [ 1440.228026][ T32] task_work_run+0x150/0x240 [ 1440.228045][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1440.228067][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 1440.228083][ T32] ? rcu_is_watching+0x13/0xc0 [ 1440.228101][ T32] do_syscall_64+0x661/0x790 [ 1440.228116][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.228129][ T32] RIP: 0033:0x7fac22d9f397 [ 1440.228139][ T32] RSP: 002b:00007ffc4b87e7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1440.228151][ T32] RAX: 0000000000000000 RBX: 00007fac22e344bb RCX: 00007fac22d9f397 [ 1440.228159][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4b87e8b0 [ 1440.228167][ T32] RBP: 00007ffc4b87e8b0 R08: 00007ffc4b87f8b0 R09: 00000000ffffffff [ 1440.290229][ C0] virtqueue callback for ffff888028046800 (ffffffff86ec92d0) [ 1440.291373][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4b87f940 [ 1440.291385][ T32] R13: 00007fac22e344bb R14: 00000000001390c5 R15: 00007ffc4b87f980 [ 1440.291403][ T32] [ 1440.291423][ T32] INFO: task syz.0.7383:28698 blocked for more than 143 seconds. [ 1440.291432][ T32] Not tainted syzkaller #0 [ 1440.291439][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1440.291444][ T32] task:syz.0.7383 state:D stack:27944 pid:28698 tgid:28689 ppid:24032 task_flags:0x400040 flags:0x00080002 [ 1440.291480][ T32] Call Trace: [ 1440.291484][ T32] [ 1440.291490][ T32] __schedule+0x1259/0x6920 [ 1440.291506][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1440.291523][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1440.291542][ T32] ? lock_acquire+0x1d1/0x380 [ 1440.291556][ T32] ? __pfx___schedule+0x10/0x10 [ 1440.291566][ T32] ? find_held_lock+0x2b/0x80 [ 1440.291584][ T32] ? schedule+0x225/0x2c0 [ 1440.291597][ T32] schedule+0xdd/0x2c0 [ 1440.291608][ T32] schedule_preempt_disabled+0x13/0x30 [ 1440.291620][ T32] __mutex_lock+0xccb/0x1bd0 [ 1440.291634][ T32] ? write_threads+0x288/0x600 [ 1440.291655][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1440.291679][ C0] No more buffers in queue [ 1440.291938][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1440.291953][ C0] No more buffers in queue [ 1440.292907][ T32] ? simple_strntoull+0xdf/0x170 [ 1440.292928][ T32] ? net_generic+0x25/0x2a0 [ 1440.292946][ T32] ? net_generic+0xea/0x2a0 [ 1440.292966][ T32] ? net_generic+0xea/0x2a0 [ 1440.292986][ T32] ? write_threads+0x288/0x600 [ 1440.293003][ T32] write_threads+0x288/0x600 [ 1440.293021][ T32] ? __pfx_write_threads+0x10/0x10 [ 1440.293039][ T32] ? __might_fault+0xc5/0x140 [ 1440.293052][ T32] ? __might_fault+0xc5/0x140 [ 1440.293068][ T32] ? _copy_from_user+0x59/0xd0 [ 1440.293085][ T32] ? __pfx_write_threads+0x10/0x10 [ 1440.293102][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 1440.293120][ T32] vfs_write+0x2aa/0x1050 [ 1440.293135][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1440.293151][ T32] ? lock_acquire+0x1d1/0x380 [ 1440.293165][ T32] ? __fget_files+0x34/0x3d0 [ 1440.293181][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1440.293194][ T32] ? find_held_lock+0x2b/0x80 [ 1440.293212][ T32] ? __fget_files+0x215/0x3d0 [ 1440.293230][ T32] ? __fget_files+0x21f/0x3d0 [ 1440.293251][ T32] ksys_write+0x12a/0x250 [ 1440.293264][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1440.293283][ T32] do_syscall_64+0x123/0x790 [ 1440.293297][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.293311][ T32] RIP: 0033:0x7fa7e5b9e159 [ 1440.293321][ T32] RSP: 002b:00007fa7e69c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1440.293333][ T32] RAX: ffffffffffffffda RBX: 00007fa7e5e26090 RCX: 00007fa7e5b9e159 [ 1440.293341][ T32] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000005 [ 1440.293349][ T32] RBP: 00007fa7e5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1440.293356][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.293363][ T32] R13: 00007fa7e5e26128 R14: 00007fa7e5e26090 R15: 00007ffdeea3e668 [ 1440.293380][ T32] [ 1440.293386][ T32] INFO: task syz.3.7400:28735 blocked for more than 143 seconds. [ 1440.293395][ T32] Not tainted syzkaller #0 [ 1440.293401][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1440.293406][ T32] task:syz.3.7400 state:D stack:28680 pid:28735 tgid:28733 ppid:23055 task_flags:0x400140 flags:0x00080002 [ 1440.293441][ T32] Call Trace: [ 1440.293445][ T32] [ 1440.293451][ T32] __schedule+0x1259/0x6920 [ 1440.293463][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1440.293479][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1440.293498][ T32] ? lock_acquire+0x1d1/0x380 [ 1440.293512][ T32] ? __pfx___schedule+0x10/0x10 [ 1440.293522][ T32] ? find_held_lock+0x2b/0x80 [ 1440.293543][ T32] ? schedule+0x225/0x2c0 [ 1440.293556][ T32] schedule+0xdd/0x2c0 [ 1440.293568][ T32] schedule_preempt_disabled+0x13/0x30 [ 1440.293579][ T32] __mutex_lock+0xccb/0x1bd0 [ 1440.293593][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1440.293611][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1440.293627][ T32] ? net_generic+0x25/0x2a0 [ 1440.293642][ T32] ? net_generic+0xea/0x2a0 [ 1440.293655][ T32] ? net_generic+0xea/0x2a0 [ 1440.293672][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1440.293686][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 1440.293701][ T32] nfsd_umount+0x3b/0x60 [ 1440.293717][ T32] deactivate_locked_super+0xbd/0x130 [ 1440.293732][ T32] deactivate_super+0xea/0x110 [ 1440.293746][ T32] cleanup_mnt+0x21f/0x450 [ 1440.293763][ T32] task_work_run+0x150/0x240 [ 1440.293783][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1440.293805][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 1440.293821][ T32] ? rcu_is_watching+0x13/0xc0 [ 1440.293839][ T32] do_syscall_64+0x661/0x790 [ 1440.293854][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.293866][ T32] RIP: 0033:0x7fd89979e159 [ 1440.293875][ T32] RSP: 002b:00007fd8979f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1440.293886][ T32] RAX: fffffffffffffffe RBX: 00007fd899a25fa0 RCX: 00007fd89979e159 [ 1440.293894][ T32] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000200000000000 [ 1440.293902][ T32] RBP: 00007fd89983506b R08: 0000000000000000 R09: 0000000000000000 [ 1440.293909][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.293916][ T32] R13: 00007fd899a26038 R14: 00007fd899a25fa0 R15: 00007ffe7f63c278 [ 1440.293932][ T32] [ 1440.293980][ T32] [ 1440.293980][ T32] Showing all locks held in the system: [ 1440.293989][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1440.293998][ T32] #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1440.294032][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1440.294040][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1440.294096][ T32] locks held by getty/5363: 2, on CPU#0: [ 1440.294105][ T32] #0: ffff8880378b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1440.294134][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1440.294162][ T32] locks held by kworker/u8:44/19927: 3, on CPU#0: [ 1440.294170][ T32] #0: ffff88801d2e3140 ((wq_completion)pm_fs_sync){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1440.294204][ T32] #1: ffffc9000372fd08 (pm_fs_sync_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1440.294237][ T32] #2: ffff8880585940e8 (&type->s_umount_key#80){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 1440.294272][ T32] locks held by syz-executor/26986: 2, on CPU#0: [ 1440.294280][ T32] #0: ffff8880585940e8 (&type->s_umount_key#80){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1440.294310][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1440.294343][ T32] locks held by syz.0.7383/28691: 3, on CPU#0: [ 1440.294352][ T32] #0: ffff888079f44ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.294383][ T32] #1: ffff888048228460 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.294413][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1440.294444][ T32] locks held by syz.0.7383/28698: 3, on CPU#0: [ 1440.294452][ T32] #0: ffff88807c327cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.294483][ T32] #1: ffff888048228460 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.294513][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 1440.294545][ T32] locks held by syz.5.7399/28734: 5, on CPU#0: [ 1440.294553][ T32] #0: ffff888037239270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.294584][ T32] #1: ffff8880333da460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.294614][ T32] #2: ffff888058eb3c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1440.294643][ T32] #3: ffff88801fee63c8 (kn->active#85){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1440.294674][ T32] #4: ffffffff8eca2900 (system_transition_mutex){+.+.}-{4:4}, at: pm_suspend+0x125/0x7b0 [ 1440.294703][ T32] locks held by syz.3.7400/28735: 2, on CPU#0: [ 1440.294712][ T32] #0: ffff8880333dc0e8 (&type->s_umount_key#80){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1440.294741][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1440.294856][ T32] locks held by syz.4.7449/28927: 2, on CPU#0: [ 1440.294864][ T32] #0: ffff88807c01e0e8 (&type->s_umount_key#80){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1440.294894][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1440.294926][ T32] locks held by syz.6.7430/29019: 5, on CPU#0: [ 1440.294934][ T32] #0: ffff88807aef97b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.294969][ T32] #1: ffff888055b4c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.294999][ T32] #2: ffff888033e69080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1440.295027][ T32] #3: ffff88801fee5d28 (kn->active#84){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1440.295058][ T32] #4: ffffffff8eca2900 (system_transition_mutex){+.+.}-{4:4}, at: pm_test_store+0xc8/0x2f0 [ 1440.295086][ T32] locks held by syz.7.7457/29048: 3, on CPU#0: [ 1440.295095][ T32] #0: ffff8880487b4ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.335070][ C0] eth0: xmit ffff8880667fe500 42:01:0a:80:00:01 [ 1440.335091][ C0] Added buffer head 14 to ffff888028046600 [ 1440.335185][ C0] virtqueue callback for ffff888028046600 (ffffffff86ed2080) [ 1440.335275][ C0] Sent skb ffff8880667fe500 [ 1440.335300][ C0] No more buffers in queue [ 1440.336185][ T5588] eth0: xmit ffff88807aeac870 42:01:0a:80:00:01 [ 1440.336202][ T5588] Added buffer head 11 to ffff888028046a00 [ 1440.336226][ C0] virtqueue callback for ffff888028046a00 (ffffffff86ed2080) [ 1440.336240][ C0] Sent skb ffff88807aeac870 [ 1440.336249][ C0] No more buffers in queue [ 1440.340626][ C0] virtqueue callback for ffff888028046800 (ffffffff86ec92d0) [ 1440.340640][ C0] No more buffers in queue [ 1440.340669][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1440.340684][ C0] No more buffers in queue [ 1440.383126][ T32] #1: ffff888047bd0460 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.510957][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 1440.510992][ T32] locks held by syz.7.7457/29050: 3, on CPU#0: [ 1440.511001][ T32] #0: ffff8880487b4d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.511033][ T32] #1: ffff888047bd0460 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.511063][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1440.593546][ T32] locks held by syz.7.7457/29051: 3, on CPU#0: [ 1440.593555][ T32] #0: ffff8880487b4b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.593588][ T32] #1: ffff888047bd0460 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.593620][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 1440.593652][ T32] locks held by syz.9.7473/29087: 2, on CPU#0: [ 1440.593661][ T32] #0: ffff88803b13c0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.593692][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 1440.593723][ T32] locks held by syz.8.7476/29098: 5, on CPU#0: [ 1440.593731][ T32] #0: ffff88807d7d35f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.593762][ T32] #1: ffff88802ba00460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.593793][ T32] #2: ffff888058c3a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1440.593821][ T32] #3: ffff88801fee5d28 (kn->active#84){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1440.593852][ T32] #4: ffffffff8eca2900 (system_transition_mutex){+.+.}-{4:4}, at: pm_test_store+0xc8/0x2f0 [ 1440.593881][ T32] locks held by syz.8.7476/29099: 5, on CPU#0: [ 1440.593889][ T32] #0: ffff88807d7d27f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1440.593925][ T32] #1: ffff88802ba00460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1440.593955][ T32] #2: ffff888058c3a080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1440.593983][ T32] #3: ffff88801fee63c8 (kn->active#85){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1440.594014][ T32] #4: ffffffff8eca2900 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x56/0x70 [ 1440.594050][ T32] locks held by syz-executor/29194: 1, on CPU#0: [ 1440.594059][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594088][ T32] locks held by syz.1.7482/29244: 2, on CPU#0: [ 1440.594096][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594123][ T32] #1: ffffffff8eca2900 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x56/0x70 [ 1440.594155][ T32] locks held by syz-executor/29258: 1, on CPU#0: [ 1440.594163][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594191][ T32] locks held by syz-executor/29277: 1, on CPU#0: [ 1440.594199][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594227][ T32] locks held by syz-executor/29360: 1, on CPU#0: [ 1440.594235][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594262][ T32] locks held by syz-executor/29362: 1, on CPU#0: [ 1440.594270][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594298][ T32] locks held by syz-executor/29364: 1, on CPU#0: [ 1440.594306][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594333][ T32] locks held by syz-executor/29366: 1, on CPU#0: [ 1440.594341][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594369][ T32] locks held by syz-executor/29368: 1, on CPU#0: [ 1440.594377][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594405][ T32] locks held by syz-executor/29370: 1, on CPU#0: [ 1440.594413][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594441][ T32] locks held by syz-executor/29376: 1, on CPU#0: [ 1440.594449][ T32] #0: ffffffff8fbf0e20 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1440.594480][ T32] [ 1440.594483][ T32] ============================================= [ 1440.594483][ T32] [ 1440.594503][ T32] NMI backtrace for cpu 0 [ 1440.594513][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1440.594527][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1440.594534][ T32] Call Trace: [ 1440.594539][ T32] [ 1440.594543][ T32] dump_stack_lvl+0x100/0x190 [ 1440.594562][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1440.594580][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1440.594595][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1440.594614][ T32] sys_info+0x141/0x190 [ 1440.594629][ T32] watchdog+0xcb1/0x1030 [ 1440.594647][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1440.594658][ T32] ? __pfx_watchdog+0x10/0x10 [ 1440.594673][ T32] ? __kthread_parkme+0x18f/0x230 [ 1440.594689][ T32] ? kthread+0x13a/0x450 [ 1440.594705][ T32] ? __pfx_watchdog+0x10/0x10 [ 1440.594718][ T32] kthread+0x373/0x450 [ 1440.594733][ T32] ? __pfx_kthread+0x10/0x10 [ 1440.594752][ T32] ret_from_fork+0x730/0xd60 [ 1440.594767][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1440.594781][ T32] ? __switch_to+0x800/0x10f0 [ 1440.594798][ T32] ? __pfx_kthread+0x10/0x10 [ 1440.594814][ T32] ret_from_fork_asm+0x1a/0x30 [ 1440.594834][ T32] [ 1440.594883][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1442.277929][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1442.287008][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1442.297038][ T32] Call Trace: [ 1442.300291][ T32] [ 1442.303195][ T32] dump_stack_lvl+0x100/0x190 [ 1442.307851][ T32] vpanic+0x553/0x970 [ 1442.311804][ T32] ? __pfx_vpanic+0x10/0x10 [ 1442.316280][ T32] panic+0xd1/0xe0 [ 1442.319971][ T32] ? __pfx_panic+0x10/0x10 [ 1442.324356][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 1442.329357][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1442.335485][ T32] ? watchdog.cold+0x1ec/0x234 [ 1442.340222][ T32] watchdog.cold+0x1fd/0x234 [ 1442.344786][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1442.350584][ T32] ? __pfx_watchdog+0x10/0x10 [ 1442.355235][ T32] ? __kthread_parkme+0x18f/0x230 [ 1442.360249][ T32] ? kthread+0x13a/0x450 [ 1442.364466][ T32] ? __pfx_watchdog+0x10/0x10 [ 1442.369113][ T32] kthread+0x373/0x450 [ 1442.373156][ T32] ? __pfx_kthread+0x10/0x10 [ 1442.377720][ T32] ret_from_fork+0x730/0xd60 [ 1442.382288][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.387372][ T32] ? __switch_to+0x800/0x10f0 [ 1442.392026][ T32] ? __pfx_kthread+0x10/0x10 [ 1442.396591][ T32] ret_from_fork_asm+0x1a/0x30 [ 1442.401334][ T32] [ 1442.404381][ T32] Kernel Offset: disabled [ 1442.408682][ T32] Rebooting in 86400 seconds..