last executing test programs: 9m15.242164594s ago: executing program 32 (id=7777): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[@ANYBLOB="4400000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) 7m44.602561585s ago: executing program 1 (id=9430): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m44.522936906s ago: executing program 1 (id=9433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) r1 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 7m44.410936276s ago: executing program 1 (id=9435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250100000000000000014100000018001700000000107564703a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m44.302017719s ago: executing program 1 (id=9439): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x0, 0x300}}, 0x26}}, 0x0) 7m44.224703341s ago: executing program 1 (id=9441): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 7m44.154870333s ago: executing program 1 (id=9443): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 7m28.024435789s ago: executing program 33 (id=9443): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 4m57.955916208s ago: executing program 3 (id=11973): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0x541b, 0x0) 4m57.893148728s ago: executing program 3 (id=11975): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, 0x0, 0x0, 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x3, {0x6}, 0x0, r4, '\x00', {0x8001, 0x48a, 0x0, 0x0}}, 0x0) 4m57.684697925s ago: executing program 3 (id=11979): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x149002) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4m57.0076087s ago: executing program 3 (id=11990): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 4m56.954678493s ago: executing program 3 (id=11992): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) 4m56.51257086s ago: executing program 3 (id=11996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4m56.120029954s ago: executing program 34 (id=11996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4m37.225444105s ago: executing program 4 (id=12215): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/ifindex\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x64) 4m37.054782584s ago: executing program 4 (id=12217): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x9ef96000) 4m36.870752518s ago: executing program 4 (id=12220): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x300, 0x140) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/214, 0xd6}], 0x1) 4m36.627928503s ago: executing program 4 (id=12223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 4m36.453769202s ago: executing program 4 (id=12226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 4m36.102053421s ago: executing program 4 (id=12232): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m35.688739291s ago: executing program 35 (id=12232): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m46.944744826s ago: executing program 2 (id=13514): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c) write$binfmt_script(r0, &(0x7f00000028c0)={'#! ', '', [], 0xa, "bdd92f0efe80000000000000b320655800b2b184ef1b05713031e573a3d16b0acc6de928"}, 0x28) 2m46.799163639s ago: executing program 2 (id=13515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) 2m46.705269594s ago: executing program 2 (id=13516): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m45.728324668s ago: executing program 2 (id=13527): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x201008e, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 2m45.469989248s ago: executing program 2 (id=13530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 2m44.707398676s ago: executing program 2 (id=13538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 2m44.362030923s ago: executing program 36 (id=13538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 2m2.755629323s ago: executing program 8 (id=13936): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x1000) 2m2.376369899s ago: executing program 8 (id=13941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000071b000/0x18000)=nil, &(0x7f0000019180)=[@text16={0x10, 0x0}], 0x1, 0x10d90286fb34e7c1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 2m1.979932755s ago: executing program 8 (id=13947): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrwo|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00'/898, 0x42, 0x1f0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mq_timedsend(r0, 0x0, 0x0, 0x8000000000000001, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 2m1.77292693s ago: executing program 8 (id=13951): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m1.549042057s ago: executing program 8 (id=13954): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m0.43540464s ago: executing program 8 (id=13964): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002700)='w', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000029c0)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004bc0)="d075ab", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000005180)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000006400)="dc", 0x1}], 0x1}}], 0x5, 0x4048040) 2m0.162566431s ago: executing program 37 (id=13964): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002700)='w', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000029c0)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004bc0)="d075ab", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000005180)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000006400)="dc", 0x1}], 0x1}}], 0x5, 0x4048040) 4.783659142s ago: executing program 6 (id=15062): r0 = socket$unix(0x1, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 4.598433074s ago: executing program 6 (id=15066): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 4.366541539s ago: executing program 6 (id=15068): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220e00000056235479"], 0x0}, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.069198912s ago: executing program 9 (id=15083): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x20}], 0x1}, 0xb}], 0x1, 0x40000182, 0x0) 2.854133016s ago: executing program 9 (id=15086): r0 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f0000000040)=r3, 0x4) 2.662130883s ago: executing program 9 (id=15089): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x5, r1, 0x0, &(0x7f0000607000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 2.484137923s ago: executing program 9 (id=15091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044810}, 0x0) 2.208502669s ago: executing program 9 (id=15094): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.123034511s ago: executing program 0 (id=15095): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back\n\x00', 0x2c) write(r0, &(0x7f0000000300)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) 1.923114049s ago: executing program 5 (id=15097): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000780)={0x5, [[0x4, 0x10001, 0x7, 0x4, 0x1ff, 0xffff, 0x401, 0x8000], [0x7f, 0x800, 0x3, 0x78, 0x0, 0x4, 0x62e2, 0x80], [0x401, 0x8, 0x400, 0x1, 0x0, 0x10000, 0x6c2, 0x5]], '\x00', [{0x4, 0x7fffffff, 0x1, 0x1}, {0xbbade33f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x101, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0xfffffffa, 0x1, 0x1, 0x1}, {0x0, 0x3}, {0x1, 0x5, 0x1, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x9e98, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x7, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x3e800000}) 1.917780628s ago: executing program 0 (id=15098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.687353899s ago: executing program 5 (id=15100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 1.662656809s ago: executing program 0 (id=15101): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x10000000) ioctl$FS_IOC_GETVERSION(r1, 0x5b16, 0x0) 1.643734766s ago: executing program 9 (id=15102): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='guest,vers=2.1\x00') 1.641897374s ago: executing program 7 (id=15103): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) ioctl$SNDCTL_TMR_START(r0, 0x5402) close(r1) 1.44772633s ago: executing program 5 (id=15104): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000140)) 1.4279832s ago: executing program 7 (id=15105): socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read(r0, &(0x7f0000001000)=""/8192, 0x2000) 1.255502473s ago: executing program 5 (id=15106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x104, 0x0, 0x2080, {0x3000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) 1.171532s ago: executing program 7 (id=15107): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x27) 975.503762ms ago: executing program 6 (id=15108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001980)={0x2c, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}}, 0x0) 927.471294ms ago: executing program 7 (id=15109): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x80025b}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 792.101931ms ago: executing program 5 (id=15110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 780.477397ms ago: executing program 0 (id=15111): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17, 0xffffff7f}, 0x6}], 0x636, 0x40010003, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 665.160959ms ago: executing program 7 (id=15112): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab7809009fd1e00d96072000001ea89de2b7fb0000e60080b8000000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900000000000000980000000000000100", [0x100000000, 0x8000000000000000]}}) 663.872161ms ago: executing program 6 (id=15122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x9}]}) 461.852816ms ago: executing program 5 (id=15113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x12, 0x1, 0xde}) 370.454532ms ago: executing program 0 (id=15114): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000140)=0x7) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x48, 0xfb, 0x0, 0xfdeffffe}, {0x6, 0x60, 0x10, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 271.756395ms ago: executing program 6 (id=15115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xd, 0xffff1000, 0x0, r2}) 159.010885ms ago: executing program 7 (id=15116): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 0s ago: executing program 0 (id=15117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): rom eth0 [ 906.388993][ T2948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 906.408230][ T2948] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 906.419366][ T2948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 906.430450][ T2948] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 906.448749][ T2948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 906.492795][ T2948] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 906.499661][ T6086] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 906.512085][ T2948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.610591][ T2948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.625369][ T2948] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.670147][ T6086] usb 7-1: Using ep0 maxpacket: 8 [ 906.686659][ T6086] usb 7-1: config 0 has no interfaces? [ 906.699348][ T6086] usb 7-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7 [ 906.718785][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.725906][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.735209][ T6086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.749059][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.756137][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.766138][ T6086] usb 7-1: Product: syz [ 906.770290][ T6086] usb 7-1: Manufacturer: syz [ 906.774883][ T6086] usb 7-1: SerialNumber: syz [ 907.057481][ T2948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.221831][ T2948] veth0_vlan: entered promiscuous mode [ 907.231769][ T2948] veth1_vlan: entered promiscuous mode [ 907.254849][ T2948] veth0_macvtap: entered promiscuous mode [ 907.263771][ T2948] veth1_macvtap: entered promiscuous mode [ 907.280071][ T2948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.297154][ T2948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.332268][ T3307] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.349483][T13206] usb 9-1: USB disconnect, device number 8 [ 907.371273][ T3307] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.431066][ T3307] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.552134][ T188] usb 6-1: USB disconnect, device number 33 [ 907.580808][ T3307] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.774923][T15563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.832490][T15563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.973442][T14165] Bluetooth: hci0: command tx timeout [ 907.993278][T15563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.044056][T15563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.479485][ T3485] loop8: detected capacity change from 0 to 7 [ 908.532299][ T3485] Dev loop8: unable to read RDB block 7 [ 908.564342][ T3485] loop8: unable to read partition table [ 908.601046][ T3485] loop8: partition table beyond EOD, truncated [ 908.645741][ T3485] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 908.730408][ T3491] input: syz0 as /devices/virtual/input/input81 [ 909.443015][ T188] usb 7-1: USB disconnect, device number 23 [ 909.603663][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 909.603674][ T29] audit: type=1400 audit(1130.662:81792): avc: denied { create } for pid=3525 comm="syz.7.13593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 909.646692][ T3524] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 909.675938][ T3526] netlink: 76 bytes leftover after parsing attributes in process `syz.7.13593'. [ 909.741915][ T3526] nbd: illegal input index 65508 [ 909.813155][ T29] audit: type=1400 audit(1130.690:81793): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 910.025353][ T29] audit: type=1400 audit(1130.690:81794): avc: denied { mounton } for pid=3522 comm="syz.6.13592" path="/745/debug" dev="tmpfs" ino=3897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 910.058030][ T3538] binder: 3537:3538 ioctl 4018620d 0 returned -22 [ 910.200081][T14165] Bluetooth: hci0: command tx timeout [ 910.205589][T28448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 910.213196][ T3543] audit: audit_backlog=65 > audit_backlog_limit=64 [ 910.252294][ T29] audit: type=1400 audit(1130.690:81795): avc: denied { mount } for pid=3522 comm="syz.6.13592" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 910.286924][T28448] audit: audit_lost=479 audit_rate_limit=0 audit_backlog_limit=64 [ 910.302894][ T3546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 910.311474][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 910.318001][ C0] audit: audit_lost=480 audit_rate_limit=0 audit_backlog_limit=64 [ 910.689211][ T188] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 910.907706][ T188] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 910.989400][ T188] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 911.086452][ T188] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 911.155914][ T188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.392070][ T3622] sit0: entered promiscuous mode [ 911.407162][ T3622] netlink: 'syz.6.13617': attribute type 1 has an invalid length. [ 911.426260][ T3622] netlink: 1 bytes leftover after parsing attributes in process `syz.6.13617'. [ 912.103306][ T188] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 912.225535][ T3663] netlink: 'syz.5.13625': attribute type 13 has an invalid length. [ 912.305478][ T188] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 912.353652][ T188] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 912.416096][ T188] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.490074][ T188] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 912.539110][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.074241][ T3705] input: syz0 as /devices/virtual/input/input82 [ 913.231079][ T3712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13636'. [ 913.301870][ T3718] Bluetooth: MGMT ver 1.23 [ 913.308482][ T3720] netlink: 'syz.9.13638': attribute type 1 has an invalid length. [ 913.338414][ T3720] netlink: 200 bytes leftover after parsing attributes in process `syz.9.13638'. [ 913.432177][ T188] hid_parser_main: 70 callbacks suppressed [ 913.432191][ T188] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 913.550251][ T188] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 913.633681][ T188] usb 8-1: USB disconnect, device number 11 [ 913.811512][ T3745] netlink: 72 bytes leftover after parsing attributes in process `syz.9.13643'. [ 914.776667][ T3789] syz.8.13656 (3789) used greatest stack depth: 19512 bytes left [ 915.022384][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 915.022396][ T29] audit: type=1400 audit(1135.732:82323): avc: denied { write } for pid=3772 comm="syz.7.13651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 915.061148][ T188] usb 7-1: USB disconnect, device number 24 [ 915.176836][ T29] audit: type=1400 audit(1135.760:82324): avc: denied { ioctl } for pid=3800 comm="syz.9.13659" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 915.202141][ T6100] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 915.327892][ T29] audit: type=1400 audit(1135.770:82325): avc: denied { recv } for pid=188 comm="kworker/0:2" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 915.392470][ T6100] usb 10-1: Using ep0 maxpacket: 32 [ 915.418705][ T6100] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 915.466367][ T6100] usb 10-1: config 0 has no interface number 0 [ 915.507085][ T29] audit: type=1400 audit(1135.770:82326): avc: denied { read } for pid=3772 comm="syz.7.13651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 915.545318][ T6100] usb 10-1: config 0 interface 184 has no altsetting 0 [ 915.599752][ T6100] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 915.656643][ T6100] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.674416][ T29] audit: type=1400 audit(1135.788:82327): avc: denied { read write } for pid=19717 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 915.715886][ T6100] usb 10-1: Product: syz [ 915.732767][ T6100] usb 10-1: Manufacturer: syz [ 915.755187][ T6100] usb 10-1: SerialNumber: syz [ 915.827101][ T29] audit: type=1400 audit(1135.788:82328): avc: denied { open } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 915.886442][ T3834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 915.905921][ T3834] audit: audit_lost=517 audit_rate_limit=0 audit_backlog_limit=64 [ 915.934499][ T3834] audit: backlog limit exceeded [ 915.943594][ T29] audit: type=1400 audit(1135.788:82329): avc: denied { ioctl } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 916.390095][ T3850] loop6: detected capacity change from 0 to 7 [ 916.422654][ T3850] Dev loop6: unable to read RDB block 7 [ 916.448303][ T3850] loop6: unable to read partition table [ 916.478890][ T3850] loop6: partition table beyond EOD, truncated [ 916.503451][ T3850] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 917.555522][ T188] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 917.736724][ T188] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 917.772778][ T188] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 917.852747][ T188] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 917.912257][ T188] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 917.981118][ T188] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 918.048528][ T188] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 918.065259][ T3936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3936 comm=syz.7.13691 [ 918.080493][ T188] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 918.112385][ T3939] input: syz0 as /devices/virtual/input/input83 [ 918.129377][ T188] usb 9-1: Product: syz [ 918.144834][ T5344] usb 10-1: USB disconnect, device number 2 [ 918.164492][ T188] usb 9-1: Manufacturer: syz [ 918.484569][ T3963] netlink: 'syz.7.13695': attribute type 1 has an invalid length. [ 918.507025][ T3968] input: syz1 as /devices/virtual/input/input84 [ 918.555244][ T3968] input: failed to attach handler leds to device input84, error: -6 [ 919.007711][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13703'. [ 919.369067][ T5344] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 919.541291][ T5344] usb 8-1: Using ep0 maxpacket: 8 [ 919.560183][ T5344] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 919.579141][ T5344] usb 8-1: config 0 has an invalid interface number: 149 but max is -1 [ 919.608217][ T5344] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 919.640166][ T5344] usb 8-1: config 0 has no interface number 0 [ 919.662136][ T5344] usb 8-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 919.698339][ T5344] usb 8-1: config 0 interface 149 altsetting 215 endpoint 0x84 has invalid wMaxPacketSize 0 [ 919.728941][ T5344] usb 8-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 919.774095][ T5344] usb 8-1: config 0 interface 149 has no altsetting 0 [ 919.811404][ T5344] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 919.828955][ T5344] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.854957][ T5344] usb 8-1: Product: syz [ 919.868373][ T5344] usb 8-1: Manufacturer: syz [ 919.884630][ T5344] usb 8-1: SerialNumber: syz [ 919.898759][ T3969] kexec: Could not allocate control_code_buffer [ 920.417887][ T4023] tipc: Started in network mode [ 920.422883][ T4023] tipc: Node identity ac14142f, cluster identity 4711 [ 920.438878][ T4023] tipc: New replicast peer: 127.0.0.1 [ 920.451500][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 920.451510][ T29] audit: type=1400 audit(1140.811:82863): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 920.496112][ T188] usb 9-1: USB disconnect, device number 9 [ 920.527326][ T4023] tipc: Enabled bearer , priority 10 [ 920.576501][ T4024] netlink: 64 bytes leftover after parsing attributes in process `syz.9.13711'. [ 920.691922][ T29] audit: type=1400 audit(1140.868:82864): avc: denied { recv } for pid=3307 comm="kworker/u8:9" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 920.883254][ T29] audit: type=1400 audit(1140.868:82865): avc: denied { read write } for pid=29643 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 920.950314][ T4053] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 921.023950][ T4056] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 921.041076][ T29] audit: type=1400 audit(1140.868:82866): avc: denied { open } for pid=29643 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 921.070511][ T188] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 921.089443][ T4060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 921.098681][ T4059] audit: audit_backlog=65 > audit_backlog_limit=64 [ 921.106219][ T4044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 921.118348][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 921.124874][ C0] audit: audit_lost=526 audit_rate_limit=0 audit_backlog_limit=64 [ 921.132663][ C0] audit: backlog limit exceeded [ 921.153705][ T4062] 9p: Bad value for 'wfdno' [ 921.304525][ T188] usb 9-1: Using ep0 maxpacket: 8 [ 921.311438][ T188] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 921.339259][ T188] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.399434][ T188] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.466436][ T188] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.515656][ T188] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.585972][ T188] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 921.646937][ T188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.712658][ T188] tipc: Node number set to 2886997039 [ 921.946063][ T6100] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 922.041204][ T4104] 9pnet: p9_errstr2errno: server reported unknown error [ 922.120869][ T6100] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 922.144165][ T6100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.190067][ T6100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.237192][ T6100] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.279750][ T4122] netlink: 'syz.9.13733': attribute type 39 has an invalid length. [ 922.292839][ T6100] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.317948][ T5344] usb 8-1: USB disconnect, device number 12 [ 922.342613][ T6100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.637377][ T4142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.678933][ T4142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.707565][ T4142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.750391][ T4142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.796639][ T4141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.854874][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.874374][ T4141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.906133][ T4141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.537771][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.555368][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.568105][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.585673][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.600643][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.616991][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.638203][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.665091][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.673850][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.688964][ T188] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 923.709061][ T188] hid-generic 0006:0008:0001.0056: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 923.815772][ T4175] fido_id[4175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 923.970388][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.980519][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.014716][ T188] usb 9-1: USB disconnect, device number 10 [ 924.342021][ T4198] ip6erspan0: entered allmulticast mode [ 924.401307][ T4203] netlink: 'syz.7.13752': attribute type 11 has an invalid length. [ 924.449293][ T4203] netlink: 'syz.7.13752': attribute type 4 has an invalid length. [ 924.499356][ T4203] netlink: 232 bytes leftover after parsing attributes in process `syz.7.13752'. [ 924.793662][ T4219] netlink: 260 bytes leftover after parsing attributes in process `syz.8.13756'. [ 924.904454][ T6086] usb 7-1: USB disconnect, device number 25 [ 924.998353][ T4228] loop5: detected capacity change from 0 to 7 [ 925.084398][ T4228] Dev loop5: unable to read RDB block 7 [ 925.126329][ T4228] loop5: unable to read partition table [ 925.158565][ T4232] gadgetfs: bound to dummy_udc driver [ 925.168611][ T4228] loop5: partition table beyond EOD, truncated [ 925.220538][ T4228] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 925.609109][ T4257] netlink: 56 bytes leftover after parsing attributes in process `syz.7.13763'. [ 925.876639][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 925.876651][ T29] audit: type=1400 audit(1401.883:83290): avc: denied { execute } for pid=4271 comm="syz.7.13766" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=129609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 926.005835][ T4276] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 926.101554][ T4276] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 926.145194][ T29] audit: type=1400 audit(1401.958:83291): avc: denied { mounton } for pid=4275 comm="syz.8.13767" path="/298/file0" dev="tmpfs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 926.319368][ T29] audit: type=1400 audit(1401.977:83292): avc: denied { unlink } for pid=4275 comm="syz.8.13767" name="#18" dev="tmpfs" ino=1581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 926.461969][ T29] audit: type=1400 audit(1401.986:83293): avc: denied { mount } for pid=4275 comm="syz.8.13767" name="/" dev="overlay" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 926.632457][ T29] audit: type=1400 audit(1402.005:83294): avc: denied { mounton } for pid=4275 comm="syz.8.13767" path="/298/file1" dev="tmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 926.723302][T19717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 926.734257][ T4295] audit: audit_backlog=65 > audit_backlog_limit=64 [ 926.760158][T29643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 926.783477][T19717] audit: audit_lost=544 audit_rate_limit=0 audit_backlog_limit=64 [ 926.795123][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 927.711456][ T4343] zram: Cannot change disksize for initialized device [ 927.922015][ T188] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 927.962645][ T4357] netlink: 'syz.7.13789': attribute type 13 has an invalid length. [ 928.000813][ T4363] dlm: non-version read from control device 4096 [ 928.117993][ T188] usb 9-1: config 0 has no interfaces? [ 928.142194][ T188] usb 9-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 928.197992][ T188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.287233][ T188] net_ratelimit: 3 callbacks suppressed [ 928.287245][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.372986][ T4374] netlink: 48 bytes leftover after parsing attributes in process `syz.9.13793'. [ 928.417674][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.677287][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 928.928412][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.183636][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.525935][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.747283][ T4434] netlink: 'syz.9.13808': attribute type 13 has an invalid length. [ 930.442998][ T4468] usb usb8: usbfs: process 4468 (syz.9.13818) did not claim interface 0 before use [ 930.638754][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.809197][T25052] Bluetooth: hci4: command 0x1003 tx timeout [ 930.821769][T14165] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 930.903580][ T6100] usb 9-1: USB disconnect, device number 11 [ 931.091470][ T4511] 8021q: VLANs not supported on lo [ 931.134458][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13829'. [ 931.227949][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 931.227961][ T29] audit: type=1400 audit(1406.897:83822): avc: denied { recv } for pid=5596 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 931.270750][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13829'. [ 931.471833][ T29] audit: type=1400 audit(1406.944:83823): avc: denied { read write } for pid=12432 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 931.662139][ T29] audit: type=1400 audit(1406.944:83824): avc: denied { open } for pid=12432 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 931.751691][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.847785][ T29] audit: type=1400 audit(1406.944:83825): avc: denied { ioctl } for pid=12432 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 932.078610][ T29] audit: type=1400 audit(1406.972:83826): avc: denied { mounton } for pid=4521 comm="syz.8.13831" path="/306/dev" dev="tmpfs" ino=1628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 932.202549][ T4589] audit: audit_backlog=65 > audit_backlog_limit=64 [ 932.228517][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.257569][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 932.264152][ C0] audit: audit_lost=552 audit_rate_limit=0 audit_backlog_limit=64 [ 932.271952][ C0] audit: backlog limit exceeded [ 932.292701][ T2948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 932.861778][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.976800][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.229655][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.581308][ T188] hid-generic 0005:16C0:5505.0057: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 934.625036][ T6100] hid_parser_main: 7 callbacks suppressed [ 934.625049][ T6100] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 934.752038][ T6100] hid-generic 0000:0000:0000.0058: hidraw1: HID v0.00 Device [syz1] on syz0 [ 934.908933][ T4666] fido_id[4666]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 935.088126][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.513053][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.552036][ T4698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.577550][ T4700] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13865'. [ 936.197186][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.587319][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 936.587330][ T29] audit: type=1400 audit(1411.901:84173): avc: denied { read write } for pid=19717 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 936.841406][ T29] audit: type=1400 audit(1411.901:84174): avc: denied { open } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 936.972279][ T4745] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13876'. [ 937.032278][ T4748] input: syz1 as /devices/virtual/input/input85 [ 937.056558][ T29] audit: type=1400 audit(1411.901:84175): avc: denied { ioctl } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 937.246070][ T29] audit: type=1400 audit(1411.939:84176): avc: denied { write } for pid=4727 comm="syz.9.13873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 937.310957][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.397858][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 937.404404][ C0] audit: audit_lost=560 audit_rate_limit=0 audit_backlog_limit=64 [ 937.412204][ C0] audit: backlog limit exceeded [ 937.424399][ T4963] audit: audit_backlog=65 > audit_backlog_limit=64 [ 937.450383][ T4768] audit: audit_backlog=65 > audit_backlog_limit=64 [ 937.459649][ T29] audit: type=1400 audit(1411.957:84177): avc: denied { recv } for pid=4725 comm="kvm-nx-lpage-re" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 937.489099][T14165] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 937.501361][T14165] Bluetooth: hci0: Injecting HCI hardware error event [ 937.511284][T14165] Bluetooth: hci0: hardware error 0x00 [ 938.161895][ T4810] netlink: 'syz.8.13893': attribute type 10 has an invalid length. [ 938.204103][ T4810] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13893'. [ 938.217407][ T6086] kernel read not supported for file /sequencer (pid: 6086 comm: kworker/0:4) [ 938.420815][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.763114][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.391702][ T4869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13908'. [ 939.408820][ T6086] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 939.428753][ T6086] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 939.532628][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.724508][ T4877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13908'. [ 939.757604][ T4877] nbd: nbd64 already in use [ 939.789992][T14165] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 940.086281][ T4895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13913'. [ 940.279267][ T4895] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 940.518848][ T4895] bond1 (unregistering): Released all slaves [ 940.647957][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.741769][ T5000] netlink: 'syz.6.13919': attribute type 2 has an invalid length. [ 940.824771][ T5000] netlink: 'syz.6.13919': attribute type 2 has an invalid length. [ 941.758741][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.963074][ T5036] netlink: 9 bytes leftover after parsing attributes in process `syz.9.13927'. [ 941.977609][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 941.977621][ T29] audit: type=1400 audit(1416.943:84608): avc: denied { recv } for pid=5012 comm="syz.8.13923" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 942.015476][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.051033][ T5038] netlink: 5 bytes leftover after parsing attributes in process `syz.9.13927'. [ 942.094296][ T5036] gretap0: entered promiscuous mode [ 942.118161][ T5038] 0ªî{X¹¦: renamed from gretap0 [ 942.128049][ T29] audit: type=1400 audit(1416.999:84609): avc: denied { read write } for pid=19717 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 942.176546][ T5038] 0ªî{X¹¦: left promiscuous mode [ 942.211899][ T5038] 0ªî{X¹¦: entered allmulticast mode [ 942.229036][ T5038] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 942.249621][ T29] audit: type=1400 audit(1416.999:84610): avc: denied { open } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 942.355903][ T29] audit: type=1400 audit(1416.999:84611): avc: denied { ioctl } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 942.566332][ T29] audit: type=1400 audit(1417.037:84612): avc: denied { create } for pid=5039 comm="syz.6.13930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 942.691551][ T5060] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 942.730708][ T29] audit: type=1400 audit(1417.046:84613): avc: denied { create } for pid=5039 comm="syz.6.13930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 942.853907][ T5077] audit: audit_backlog=65 > audit_backlog_limit=64 [ 942.862603][T28448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 942.869848][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.885382][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 942.891901][ C0] audit: audit_lost=591 audit_rate_limit=0 audit_backlog_limit=64 [ 943.326010][ T5108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.619144][ T5126] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 943.709639][ T5126] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 943.786032][ T5126] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 943.982996][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.259536][ T5155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.493701][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.092207][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.180367][ T75] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.263440][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.287296][ T5189] mtrr: base(0x2000) is not aligned on a size(0x0000) boundary [ 945.623364][T25052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 945.640826][T25052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 945.666290][T25052] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 945.677442][T25052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 945.688409][T25052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 945.978325][ T5238] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 945.994926][ T75] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.036608][ T6086] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 946.089570][ T5238] CPU: 0 UID: 0 PID: 5238 Comm: syz.7.13972 Tainted: G S L syzkaller #0 PREEMPT(lazy) [ 946.089592][ T5238] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 946.089598][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 946.089606][ T5238] Call Trace: [ 946.089610][ T5238] [ 946.089615][ T5238] dump_stack_lvl+0x100/0x190 [ 946.089632][ T5238] sysfs_warn_dup.cold+0x1c/0x28 [ 946.089650][ T5238] sysfs_create_dir_ns+0x24b/0x2b0 [ 946.089663][ T5238] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 946.089674][ T5238] ? find_held_lock+0x2b/0x80 [ 946.089686][ T5238] ? kobject_add_internal+0x25f/0x930 [ 946.089703][ T5238] ? kobject_add_internal+0x25f/0x930 [ 946.089721][ T5238] ? class_dir_child_ns_type+0xd/0x60 [ 946.089739][ T5238] kobject_add_internal+0x2c8/0x930 [ 946.089758][ T5238] kobject_add+0x16a/0x1e0 [ 946.089775][ T5238] ? __pfx_kobject_add+0x10/0x10 [ 946.089792][ T5238] ? get_device_parent+0x1b3/0x4c0 [ 946.089808][ T5238] ? kobject_put+0xb9/0x640 [ 946.089828][ T5238] device_add+0x294/0x1970 [ 946.089844][ T5238] ? lockdep_init_map_type+0x5c/0x250 [ 946.089859][ T5238] ? __pfx_device_add+0x10/0x10 [ 946.089875][ T5238] ? lockdep_init_map_type+0x5c/0x250 [ 946.089891][ T5238] ? __init_waitqueue_head+0xca/0x150 [ 946.089911][ T5238] tty_register_device_attr+0x388/0x7f0 [ 946.089926][ T5238] ? lockdep_init_map_type+0x5c/0x250 [ 946.089941][ T5238] ? __pfx_tty_register_device_attr+0x10/0x10 [ 946.089959][ T5238] ? tty_port_init+0x156/0x1c0 [ 946.089976][ T5238] gsm_activate_mux+0x155/0x2a0 [ 946.089991][ T5238] gsmld_ioctl+0xbbc/0x15c0 [ 946.090011][ T5238] ? __pfx_gsmld_ioctl+0x10/0x10 [ 946.090028][ T5238] ? __ldsem_down_read_nested+0xf3/0x890 [ 946.090047][ T5238] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 946.090068][ T5238] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 946.090082][ T5238] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 946.090095][ T5238] ? __pfx_gsmld_ioctl+0x10/0x10 [ 946.090110][ T5238] tty_ioctl+0x11b4/0x1640 [ 946.090125][ T5238] ? __pfx_tty_ioctl+0x10/0x10 [ 946.090139][ T5238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 946.090162][ T5238] ? __fget_files+0x215/0x3d0 [ 946.090173][ T5238] ? hook_file_ioctl_common+0x140/0x440 [ 946.090191][ T5238] ? selinux_file_ioctl+0x13b/0x290 [ 946.090207][ T5238] ? selinux_file_ioctl+0xb6/0x290 [ 946.090225][ T5238] ? __pfx_tty_ioctl+0x10/0x10 [ 946.090239][ T5238] __x64_sys_ioctl+0x18e/0x210 [ 946.090258][ T5238] do_syscall_64+0x115/0x870 [ 946.090270][ T5238] ? clear_bhb_loop+0x40/0x90 [ 946.090284][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.090296][ T5238] RIP: 0033:0x7f7f93f9e019 [ 946.090306][ T5238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.090317][ T5238] RSP: 002b:00007f7f94ed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.090329][ T5238] RAX: ffffffffffffffda RBX: 00007f7f94226090 RCX: 00007f7f93f9e019 [ 946.090336][ T5238] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 946.090343][ T5238] RBP: 00007f7f9403500c R08: 0000000000000000 R09: 0000000000000000 [ 946.090350][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.090356][ T5238] R13: 00007f7f94226128 R14: 00007f7f94226090 R15: 00007ffc7b756658 [ 946.090378][ T5238] [ 946.090409][ T5238] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 946.553467][ T6164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.676307][ T75] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.874191][ T6086] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 946.917028][ T6086] usb 7-1: config 0 has no interface number 0 [ 946.955758][ T6086] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 947.011299][ T6086] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 947.059177][ T75] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.108811][ T6086] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 947.171656][ T6086] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 947.210912][ T6086] usb 7-1: Manufacturer: syz [ 947.221988][ T5279] netlink: 'syz.9.13982': attribute type 2 has an invalid length. [ 947.237531][ T6086] usb 7-1: SerialNumber: syz [ 947.353644][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 947.353655][ T29] audit: type=1400 audit(1421.976:85057): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 947.475371][ T29] audit: type=1400 audit(1422.032:85058): avc: denied { read append } for pid=5283 comm="syz.9.13983" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 947.659593][ T6164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.719916][ T29] audit: type=1400 audit(1422.032:85059): avc: denied { read open } for pid=5283 comm="syz.9.13983" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 947.915258][T14165] Bluetooth: hci3: command tx timeout [ 948.004500][ T29] audit: type=1400 audit(1422.050:85060): avc: denied { ioctl } for pid=5283 comm="syz.9.13983" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 948.039182][ T5380] audit: audit_backlog=65 > audit_backlog_limit=64 [ 948.048782][ T5399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 948.059306][ T75] bridge_slave_1: left allmulticast mode [ 948.093663][ T5380] audit: audit_lost=599 audit_rate_limit=0 audit_backlog_limit=64 [ 948.116695][ T75] bridge_slave_1: left promiscuous mode [ 948.122487][ T5399] audit: audit_lost=600 audit_rate_limit=0 audit_backlog_limit=64 [ 948.153612][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 948.160171][ C0] audit: audit_lost=601 audit_rate_limit=0 audit_backlog_limit=64 [ 948.195561][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.326138][ T75] bridge_slave_0: left allmulticast mode [ 948.376222][ T75] bridge_slave_0: left promiscuous mode [ 948.430176][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.518309][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.770875][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.924302][ T6100] usb 7-1: USB disconnect, device number 26 [ 949.456544][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.537685][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.616166][ T75] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 949.648421][ T75] bond0 (unregistering): Released all slaves [ 949.679398][ T75] bond1 (unregistering): Released all slaves [ 949.884261][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.931547][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 950.137634][T14165] Bluetooth: hci3: command tx timeout [ 950.627670][ T75] hsr_slave_0: left promiscuous mode [ 950.677100][ T75] hsr_slave_1: left promiscuous mode [ 950.715793][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.766361][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.828316][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.870322][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.995739][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.117286][ T75] veth1_macvtap: left promiscuous mode [ 951.148937][ T75] veth0_macvtap: left promiscuous mode [ 951.189659][ T75] veth1_vlan: left promiscuous mode [ 951.228147][ T75] veth0_vlan: left promiscuous mode [ 951.769356][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.844077][ T75] team0 (unregistering): Port device team_slave_1 removed [ 951.855698][ T5591] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.14009'. [ 951.893195][ T75] team0 (unregistering): Port device team_slave_0 removed [ 952.030629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.112019][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.316626][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 952.363241][T14165] Bluetooth: hci3: command tx timeout [ 952.710133][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 952.710143][ T29] audit: type=1400 audit(1426.980:85561): avc: denied { bind } for pid=5629 comm="syz.9.14015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 952.976532][ T29] audit: type=1400 audit(1426.980:85562): avc: denied { read } for pid=5629 comm="syz.9.14015" dev="nsfs" ino=4026532203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 953.133974][ T5670] audit: audit_backlog=65 > audit_backlog_limit=64 [ 953.158940][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 953.165508][ C0] audit: audit_lost=618 audit_rate_limit=0 audit_backlog_limit=64 [ 953.173345][ C0] audit: backlog limit exceeded [ 953.203671][ T29] audit: type=1400 audit(1426.980:85563): avc: denied { open } for pid=5629 comm="syz.9.14015" path="net:[4026532203]" dev="nsfs" ino=4026532203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 953.232130][ T5670] audit: audit_lost=619 audit_rate_limit=0 audit_backlog_limit=64 [ 953.244360][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.254361][ T5692] audit: audit_backlog=65 > audit_backlog_limit=64 [ 953.261409][ T2948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 953.309183][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.373844][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.431026][ T5203] bridge_slave_0: entered allmulticast mode [ 953.480823][ T5203] bridge_slave_0: entered promiscuous mode [ 953.544696][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.614318][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.680343][ T5203] bridge_slave_1: entered allmulticast mode [ 953.734647][ T5203] bridge_slave_1: entered promiscuous mode [ 953.926092][ T5203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.020736][ T5203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.224513][ T5203] team0: Port device team_slave_0 added [ 954.278836][ T5203] team0: Port device team_slave_1 added [ 954.332388][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.461481][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.507528][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.584289][T14165] Bluetooth: hci3: command tx timeout [ 954.650000][ T5203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.750239][ T5796] veth0: entered promiscuous mode [ 954.755938][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.770200][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 954.782910][ T5807] input: syz1 as /devices/virtual/input/input86 [ 954.802798][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.837532][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.971047][ T5203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.014182][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.044588][ T5788] veth0: left promiscuous mode [ 955.211018][ T5203] hsr_slave_0: entered promiscuous mode [ 955.262390][ T5203] hsr_slave_1: entered promiscuous mode [ 955.303872][ T5203] debugfs: 'hsr0' already exists in 'hsr' [ 955.344949][ T5203] Cannot create hsr debugfs directory [ 955.442503][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.052715][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14040'. [ 956.131531][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14040'. [ 956.554161][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.564057][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.575175][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.585263][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.367840][ T6005] VFS: file-max limit 0 reached [ 957.414859][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16 [ 957.755794][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.068545][ T29] kauditd_printk_skb: 696 callbacks suppressed [ 958.068555][ T29] audit: type=1400 audit(1431.994:86177): avc: denied { sys_admin } for pid=6023 comm="dhcpcd-run-hook" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 958.213705][ T29] audit: type=1400 audit(1432.050:86178): avc: denied { sys_admin } for pid=6023 comm="dhcpcd-run-hook" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 958.264321][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.346469][ T29] audit: type=1400 audit(1432.050:86179): avc: denied { sys_module } for pid=6033 comm="syz.5.14057" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 958.520674][ T29] audit: type=1400 audit(1432.050:86180): avc: denied { module_request } for pid=6033 comm="syz.5.14057" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 958.610648][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14059'. [ 958.628296][ T6077] audit: audit_backlog=65 > audit_backlog_limit=64 [ 958.636842][ T6069] audit: audit_backlog=65 > audit_backlog_limit=64 [ 958.652455][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 958.671969][ T6077] audit: audit_lost=648 audit_rate_limit=0 audit_backlog_limit=64 [ 958.682486][ T6069] audit: audit_lost=649 audit_rate_limit=0 audit_backlog_limit=64 [ 958.696255][ T6076] audit: audit_lost=650 audit_rate_limit=0 audit_backlog_limit=64 [ 958.781701][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14060'. [ 958.860403][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.376704][ T6097] syzkaller1: entered promiscuous mode [ 959.393238][ T6097] syzkaller1: entered allmulticast mode [ 959.765975][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.842408][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14072'. [ 959.872633][ T5203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 959.885236][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.949076][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.960333][ T5203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.023440][ T5203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 960.107432][ T5203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.188111][ T5203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 960.292326][ T5203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.372321][ T5203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.446330][ T5203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.003748][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.187932][ T5203] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.265170][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.272287][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.405317][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.412440][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.198558][ T188] net_ratelimit: 6 callbacks suppressed [ 962.198570][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.511647][ T6255] block2mtd: device name too long [ 962.971578][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.980820][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.989322][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.241497][ T6277] netlink: 'syz.6.14094': attribute type 3 has an invalid length. [ 963.300567][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14094'. [ 963.415410][ T29] kauditd_printk_skb: 1072 callbacks suppressed [ 963.415422][ T29] audit: type=1400 audit(1437.007:87250): avc: denied { ioctl } for pid=12432 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 963.528435][ T5203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.711460][ T29] audit: type=1400 audit(1437.045:87251): avc: denied { search } for pid=6285 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.828139][ T5203] veth0_vlan: entered promiscuous mode [ 963.867651][ T6305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 963.878536][ T29] audit: type=1400 audit(1437.045:87252): avc: denied { read } for pid=6285 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 963.908886][ T5203] veth1_vlan: entered promiscuous mode [ 963.923360][ T6305] audit: audit_lost=651 audit_rate_limit=0 audit_backlog_limit=64 [ 963.953617][ T6305] audit: backlog limit exceeded [ 963.965270][ T6305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 964.016086][ T29] audit: type=1400 audit(1437.045:87253): avc: denied { read open } for pid=6285 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 964.053516][T12432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 964.064728][ T6305] audit: audit_lost=652 audit_rate_limit=0 audit_backlog_limit=64 [ 964.164390][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.256160][ T5203] veth0_macvtap: entered promiscuous mode [ 964.354474][ T5203] veth1_macvtap: entered promiscuous mode [ 964.484630][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.597553][ T6325] ip6erspan0: entered allmulticast mode [ 964.662148][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.762278][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.774595][T15563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.844037][T15563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.934781][T15563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.012715][T15563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.021999][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.276268][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.507379][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.526049][ T188] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 965.634848][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.658042][ T188] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 965.828164][T15563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.909455][T15563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.066845][ T6356] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 966.156040][ T6398] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14116'. [ 966.387236][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.372374][ T6455] binder: 6453:6455 ioctl c0306201 200000000080 returned -14 [ 967.500931][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.893898][ T6482] syzkaller1: entered promiscuous mode [ 967.946619][ T6482] syzkaller1: entered allmulticast mode [ 968.012785][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.610383][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.805698][ T29] kauditd_printk_skb: 1106 callbacks suppressed [ 968.805710][ T29] audit: type=1400 audit(1442.040:88309): avc: denied { sys_admin } for pid=6533 comm="dhcpcd-run-hook" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 968.857175][ T6534] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 968.929080][ T29] audit: type=1400 audit(1442.077:88310): avc: denied { read write } for pid=6532 comm="syz.6.14148" name="vmci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 969.021869][ T29] audit: type=1400 audit(1442.077:88311): avc: denied { read write open } for pid=6532 comm="syz.6.14148" path="/dev/vmci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 969.106769][ T29] audit: type=1400 audit(1442.087:88312): avc: denied { ioctl } for pid=6532 comm="syz.6.14148" path="/dev/vmci" dev="devtmpfs" ino=698 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 969.132221][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.145241][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.153618][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.221980][ T29] audit: type=1400 audit(1442.087:88313): avc: denied { sys_admin } for pid=6533 comm="rm" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 969.460427][ T29] audit: type=1400 audit(1442.096:88314): avc: denied { ioctl } for pid=6532 comm="syz.6.14148" path="/dev/vmci" dev="devtmpfs" ino=698 ioctlcmd=0x7a9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 969.565932][ T6547] netlink: 'syz.6.14149': attribute type 13 has an invalid length. [ 969.634129][ T2948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 969.642391][ T6549] audit: audit_backlog=65 > audit_backlog_limit=64 [ 969.673412][ T29] audit: type=1400 audit(1442.133:88315): avc: denied { search } for pid=6533 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.699917][ T2948] audit: audit_lost=670 audit_rate_limit=0 audit_backlog_limit=64 [ 969.904607][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.017281][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.147803][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.206283][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.264064][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.734613][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14172'. [ 972.292224][ T6679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.853437][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14187'. [ 972.922058][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14187'. [ 973.008651][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14187'. [ 973.131975][ T6725] overlayfs: upper fs does not support file handles, falling back to index=off. [ 973.513920][ T6744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.657630][ T188] net_ratelimit: 126 callbacks suppressed [ 973.657642][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.729354][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14196'. [ 973.776200][ T6756] loop5: detected capacity change from 0 to 7 [ 973.830927][ T6756] Dev loop5: unable to read RDB block 7 [ 973.860939][ T6756] loop5: AHDI p1 p2 p3 [ 973.895311][ T6756] loop5: partition table partially beyond EOD, truncated [ 973.945803][ T6756] loop5: p1 start 7562610 is beyond EOD, truncated [ 973.992374][ T6756] loop5: p2 start 1702059890 is beyond EOD, truncated [ 974.177132][ T29] kauditd_printk_skb: 1007 callbacks suppressed [ 974.177143][ T29] audit: type=1400 audit(1447.063:89260): avc: denied { ioctl } for pid=6741 comm="syz.7.14194" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 974.377892][ T6771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 974.397004][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 974.403545][ C0] audit: audit_lost=692 audit_rate_limit=0 audit_backlog_limit=64 [ 974.411352][ C0] audit: backlog limit exceeded [ 974.416839][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 974.423343][ C0] audit: audit_lost=693 audit_rate_limit=0 audit_backlog_limit=64 [ 974.431157][ C0] audit: backlog limit exceeded [ 974.450637][T12432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 974.460869][T19717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 974.512751][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.570228][ T6779] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 974.592123][ T6778] could not open pipe file descriptor [ 974.729473][ T6779] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 974.769242][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.982830][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 975.063289][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 975.284163][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.292678][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.301749][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.310365][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.479851][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.517950][ T6873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.243680][ T6908] syzkaller1: entered promiscuous mode [ 977.291155][ T6908] syzkaller1: entered allmulticast mode [ 977.592276][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.670728][ T6930] binder: 6929:6930 ioctl 4018620d 0 returned -22 [ 977.761833][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.529958][ T6990] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 979.544365][ T29] kauditd_printk_skb: 1044 callbacks suppressed [ 979.544377][ T29] audit: type=1400 audit(1452.077:90188): avc: denied { mounton } for pid=6989 comm="syz.7.14253" path="/377/file1" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 979.628271][ T6990] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 979.704996][ T29] audit: type=1400 audit(1452.236:90189): avc: denied { recv } for pid=145 comm="kworker/u8:6" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 979.817436][ T6100] net_ratelimit: 1 callbacks suppressed [ 979.817447][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.850632][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14255'. [ 979.864995][ T29] audit: type=1400 audit(1452.264:90190): avc: denied { unlink } for pid=6989 comm="syz.7.14253" name="#27" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 980.008891][ T29] audit: type=1400 audit(1452.273:90191): avc: denied { read write } for pid=19717 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 980.228742][ T29] audit: type=1400 audit(1452.273:90192): avc: denied { open } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 980.423548][ T7018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 980.438476][ T29] audit: type=1400 audit(1452.273:90193): avc: denied { ioctl } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 980.469826][ T7022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 980.486499][ T7023] audit: audit_backlog=65 > audit_backlog_limit=64 [ 980.494823][ T7024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 980.634496][ T7022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.770449][ T7039] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 980.926587][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.019477][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.444726][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.453449][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.462485][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.490578][ T7124] netlink: 240 bytes leftover after parsing attributes in process `syz.6.14283'. [ 982.638142][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.053829][ T7151] Trying to write to read-only block-device nullb0 [ 983.658382][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14301'. [ 983.749974][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.781944][ T7190] ima: policy update completed [ 984.258308][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.268817][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.905494][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 984.905506][ T29] audit: type=1400 audit(1457.100:90936): avc: denied { search } for pid=7228 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.016573][ T7231] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.027055][ T2948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.033766][ T2948] audit: audit_lost=757 audit_rate_limit=0 audit_backlog_limit=64 [ 985.061682][ T7234] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.079022][ T7236] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.089543][ T7231] audit: audit_lost=758 audit_rate_limit=0 audit_backlog_limit=64 [ 985.105182][ T7234] audit: audit_lost=759 audit_rate_limit=0 audit_backlog_limit=64 [ 985.122945][ T7236] audit: audit_lost=760 audit_rate_limit=0 audit_backlog_limit=64 [ 985.131070][ T29] audit: type=1400 audit(1457.100:90937): avc: denied { search } for pid=7228 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.228393][ T7242] input: syz0 as /devices/virtual/input/input87 [ 985.404366][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.500470][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.549642][T13206] net_ratelimit: 5 callbacks suppressed [ 985.549654][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.972823][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.423481][ T7297] lapbether: lapb_data_request error - 4 [ 986.709004][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14334'. [ 986.825126][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14336'. [ 987.001942][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.011056][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.021231][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.348334][ T7337] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14342'. [ 987.368365][ T7341] kernel read not supported for file /policy (pid: 7341 comm: syz.0.14343) [ 987.422491][ T7343] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 987.511893][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.578501][ T7343] SELinux: failed to load policy [ 988.068449][T13206] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 988.196168][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.293561][T13206] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.339064][T13206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.393388][T13206] usb 8-1: Product: syz [ 988.417565][T13206] usb 8-1: Manufacturer: syz [ 988.442118][T13206] usb 8-1: SerialNumber: syz [ 989.310163][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.492528][ T7442] comedi comedi0: comedi_config --init_data is deprecated [ 989.676715][ T7450] input: syz0 as /devices/virtual/input/input88 [ 990.268827][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 990.268838][ T29] audit: type=1400 audit(1718.116:91667): avc: denied { search } for pid=7477 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.297709][T13206] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 990.336099][ T75] rpcbind: server 127.0.0.1 not responding, timed out [ 990.454358][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.470894][ T29] audit: type=1400 audit(1718.116:91668): avc: denied { search } for pid=7477 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.502727][T13206] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 990.574546][T13206] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 990.663602][T13206] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 990.690570][ T29] audit: type=1400 audit(1718.116:91669): avc: denied { search } for pid=7477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.754459][T13206] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.785866][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.821000][ T7494] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.840363][ T7500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.855268][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.861803][ C0] audit: audit_lost=801 audit_rate_limit=0 audit_backlog_limit=64 [ 990.869615][ C0] audit: backlog limit exceeded [ 990.896342][ T7494] audit: audit_lost=802 audit_rate_limit=0 audit_backlog_limit=64 [ 990.911919][ T7500] audit: audit_lost=803 audit_rate_limit=0 audit_backlog_limit=64 [ 991.038625][T13206] usb 8-1: USB disconnect, device number 13 [ 991.443094][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.453765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.531033][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.945165][ T7551] lo: Caught tx_queue_len zero misconfig [ 992.643870][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.071257][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.079975][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.096782][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.228690][T13206] usb 10-1: USB disconnect, device number 3 [ 994.011780][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.268405][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.899735][T13206] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 995.105595][T13206] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 995.166333][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14430'. [ 995.182806][ T7699] input: syz0 as /devices/virtual/input/input89 [ 995.190326][T13206] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.254008][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14430'. [ 995.365805][ T7701] geneve2: entered promiscuous mode [ 995.382077][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.415783][ T7701] geneve2: entered allmulticast mode [ 995.645658][ T29] kauditd_printk_skb: 823 callbacks suppressed [ 995.645680][ T29] audit: type=1400 audit(1723.148:92491): avc: denied { recv } for pid=7725 comm="syz.7.14435" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 995.848455][ T29] audit: type=1400 audit(1723.186:92492): avc: denied { create } for pid=7725 comm="syz.7.14435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 995.927616][ T29] audit: type=1400 audit(1723.195:92493): avc: denied { read write } for pid=12432 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 996.077274][ T29] audit: type=1400 audit(1723.195:92494): avc: denied { open } for pid=12432 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 996.154190][ T7742] audit: audit_backlog=65 > audit_backlog_limit=64 [ 996.188274][ T7747] audit: audit_backlog=65 > audit_backlog_limit=64 [ 996.200665][ T7748] audit: audit_backlog=65 > audit_backlog_limit=64 [ 996.208254][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 996.214778][ C0] audit: audit_lost=804 audit_rate_limit=0 audit_backlog_limit=64 [ 996.222557][ C0] audit: backlog limit exceeded [ 996.328347][ T7759] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 997.165455][ T6100] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 997.263596][ T3202] net_ratelimit: 2 callbacks suppressed [ 997.263607][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.361102][ T6100] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 997.398798][ T6100] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.604128][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.847278][ T3202] usb 10-1: USB disconnect, device number 4 [ 998.544759][T14165] Bluetooth: hci5: command 0x0405 tx timeout [ 998.550937][ T6378] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 998.579459][ T6378] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 998.715279][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.175030][ T188] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 999.231838][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.240925][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.249755][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.381903][ T188] usb 10-1: not running at top speed; connect to a high speed hub [ 999.406933][ T188] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.441477][ T188] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 49408, setting to 64 [ 999.508147][ T188] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 999.569527][ T188] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 999.610945][ T188] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.099488][ T6100] usb 8-1: USB disconnect, device number 14 [ 1000.236592][ T188] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1000.404526][ T188] usb 7-1: Using ep0 maxpacket: 16 [ 1000.423761][ T188] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.436276][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.476847][ T188] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1000.509632][ T188] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1000.520579][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.570586][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.012466][ T29] kauditd_printk_skb: 1085 callbacks suppressed [ 1001.012478][ T29] audit: type=1400 audit(1728.162:93457): avc: denied { recv } for pid=7991 comm="syz.0.14495" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.107018][ T29] audit: type=1400 audit(1728.209:93458): avc: denied { read write } for pid=12432 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.197171][ T29] audit: type=1400 audit(1728.209:93459): avc: denied { open } for pid=12432 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.256692][ T29] audit: type=1400 audit(1728.209:93460): avc: denied { ioctl } for pid=12432 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1001.286271][T14165] Bluetooth: hci1: command 0x0406 tx timeout [ 1001.292897][ T6378] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1001.307422][ T6378] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1001.373859][ T29] audit: type=1800 audit(1728.227:93461): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 1001.420106][ T29] audit: type=1400 audit(1728.255:93462): avc: denied { mounton } for pid=7995 comm="syz.5.14496" path="/1424/file0" dev="tmpfs" ino=7317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1001.467544][ T29] audit: type=1400 audit(1728.255:93463): avc: denied { mount } for pid=7995 comm="syz.5.14496" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1001.537798][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.576683][ T29] audit: type=1400 audit(1728.302:93464): avc: denied { unmount } for pid=12432 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1001.657709][ T29] audit: type=1400 audit(1728.312:93465): avc: denied { recv } for pid=7991 comm="syz.0.14495" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1001.784236][ T29] audit: type=1400 audit(1728.321:93466): avc: denied { read write } for pid=12432 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1002.111285][ T3202] usb 10-1: USB disconnect, device number 5 [ 1002.651198][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.227374][ T6100] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1003.383052][ T188] usb 7-1: USB disconnect, device number 27 [ 1003.504457][ T6378] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1003.547548][ T6100] usb 8-1: Using ep0 maxpacket: 8 [ 1003.562297][ T6378] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1003.574684][ T8071] syzkaller1: entered promiscuous mode [ 1003.590344][T14165] Bluetooth: hci2: command 0x0406 tx timeout [ 1003.608389][ T6100] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1003.628625][ T8071] syzkaller1: entered allmulticast mode [ 1003.656569][ T6100] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1003.749826][ T6100] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1003.762759][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.773101][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.826137][ T8084] netlink: 'syz.5.14516': attribute type 32 has an invalid length. [ 1003.850013][ T6100] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1003.884503][ T6100] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.949692][ T6100] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1004.006007][ T6100] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.221332][ T8105] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14519'. [ 1004.873063][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.389796][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.399338][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.408030][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.418340][ T6100] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1005.612774][ T6100] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1005.659365][ T6100] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1005.707363][ T6100] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1005.757636][ T6100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.072505][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.192548][ T6100] usb 8-1: USB disconnect, device number 15 [ 1006.327194][T14165] Bluetooth: hci3: command 0x0c1a tx timeout [ 1006.333306][ T6378] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1006.376084][ T6378] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1006.397713][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 1006.397740][ T29] audit: type=1400 audit(1733.194:93938): avc: denied { recv } for pid=4967 comm="klogd" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1006.586439][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.652407][ T29] audit: type=1400 audit(1733.194:93939): avc: denied { recv } for pid=4967 comm="klogd" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1006.820624][ T3202] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1006.847379][ T29] audit: type=1400 audit(1733.194:93940): avc: denied { mount } for pid=8184 comm="syz.7.14541" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1006.985211][ T29] audit: type=1400 audit(1733.204:93941): avc: denied { watch watch_reads } for pid=8182 comm="syz.9.14540" path="/proc/515/net/netlink" dev="proc" ino=4026532207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1007.023328][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.056207][ T3202] usb 6-1: Using ep0 maxpacket: 8 [ 1007.080847][ T3202] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1007.143006][ T3202] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1007.157247][ T8218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1007.167098][ T29] audit: type=1400 audit(1733.241:93942): avc: denied { read write } for pid=12432 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1007.205258][ T8218] audit: audit_lost=847 audit_rate_limit=0 audit_backlog_limit=64 [ 1007.218924][ T3202] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1007.241885][ T8218] audit: backlog limit exceeded [ 1007.257417][ T3202] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.281022][ T8221] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1007.290370][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1007.324394][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14548'. [ 1007.337153][ T3202] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1007.367314][ T3202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.764265][ T3202] IPVS: starting estimator thread 0... [ 1007.866519][ T8242] IPVS: using max 83 ests per chain, 199200 per kthread [ 1008.291117][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14559'. [ 1008.356836][ T6100] usb 7-1: USB disconnect, device number 28 [ 1008.808797][ T3202] net_ratelimit: 1 callbacks suppressed [ 1008.808809][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.934205][ T8293] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.14570'. [ 1008.975556][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14566'. [ 1009.374224][ T3202] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1009.567021][ T3202] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1009.595217][ T3202] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.684001][ T3202] usb 10-1: Product: syz [ 1009.736015][T13206] usb 6-1: USB disconnect, device number 34 [ 1009.764236][ T3202] usb 10-1: Manufacturer: syz [ 1009.802548][ T3202] usb 10-1: SerialNumber: syz [ 1009.870006][ T3202] IPVS: starting estimator thread 0... [ 1009.919946][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.005302][ T8338] IPVS: using max 84 ests per chain, 201600 per kthread [ 1010.261577][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.006895][T13206] IPVS: starting estimator thread 0... [ 1011.033099][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.138729][ T8390] IPVS: using max 84 ests per chain, 201600 per kthread [ 1011.545494][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.556835][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.571805][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.759145][ T29] kauditd_printk_skb: 808 callbacks suppressed [ 1011.759157][ T29] audit: type=1400 audit(1738.227:94747): avc: denied { accept } for pid=8410 comm="syz.7.14605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1011.945091][ T29] audit: type=1800 audit(1738.245:94748): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 1012.092769][ T29] audit: type=1400 audit(1738.255:94749): avc: denied { sys_admin } for pid=8428 comm="dhcpcd-run-hook" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1012.261309][ T29] audit: type=1400 audit(1738.255:94750): avc: denied { read write } for pid=8425 comm="syz.6.14608" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1012.336332][ T8372] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1012.363208][ T6100] usb 10-1: USB disconnect, device number 6 [ 1012.379844][ T8443] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1012.389055][ T2948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1012.396216][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1012.396228][ C0] audit: audit_lost=850 audit_rate_limit=0 audit_backlog_limit=64 [ 1012.396237][ C0] audit: backlog limit exceeded [ 1012.562498][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14614'. [ 1012.741761][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.070630][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.083212][ T3202] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1013.126816][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.269874][ T8498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.280359][ T3202] usb 7-1: config index 0 descriptor too short (expected 1572, got 36) [ 1013.309202][ T3202] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.367852][ T3202] usb 7-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1013.393807][ T3202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.443631][ T3202] usb 7-1: Product: syz [ 1013.465724][ T3202] usb 7-1: Manufacturer: syz [ 1013.492036][ T3202] usb 7-1: SerialNumber: syz [ 1013.512429][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.853961][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.257342][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14636'. [ 1014.536982][ T3202] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1014.697445][ T3202] usb 8-1: Using ep0 maxpacket: 8 [ 1014.705626][ T3202] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 1014.723780][ T3202] usb 8-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1014.745229][ T3202] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.965958][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.595732][ T3202] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1015.771837][ T3202] usb 6-1: Using ep0 maxpacket: 32 [ 1015.783687][ T3202] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1015.793452][ T3202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.971175][ T3202] usb 7-1: USB disconnect, device number 29 [ 1016.079099][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.333357][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.762516][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.848662][ T8639] nbd: nbd0 already in use [ 1016.871284][ T8639] block nbd0: NBD_DISCONNECT [ 1016.892955][ T8639] block nbd0: Send disconnect failed -32 [ 1016.916927][ T8639] block nbd0: shutting down sockets [ 1017.102700][ T3202] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1017.118236][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 1017.118246][ T29] audit: type=1400 audit(1743.231:95338): avc: denied { recv } for pid=5203 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1017.189445][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.228423][ T29] audit: type=1400 audit(1743.269:95339): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1017.275543][ T3202] usb 7-1: Using ep0 maxpacket: 8 [ 1017.303326][ T3202] usb 7-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1017.343023][ T3202] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1017.372146][ T3202] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1017.387626][ T3365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.403558][ T29] audit: type=1400 audit(1743.306:95340): avc: denied { ioctl } for pid=8640 comm="syz.6.14666" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1017.442847][ T3202] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.470154][T13206] usb 8-1: USB disconnect, device number 16 [ 1017.486760][ T8653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14669'. [ 1017.579546][ T29] audit: type=1400 audit(1743.325:95341): avc: denied { create } for pid=8649 comm="syz.0.14668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1017.703117][T15563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.715075][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.723553][ T3202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.734186][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.784889][ T29] audit: type=1400 audit(1743.334:95342): avc: denied { ioctl } for pid=8649 comm="syz.0.14668" path="socket:[142697]" dev="sockfs" ino=142697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1017.974042][ T29] audit: type=1400 audit(1743.334:95343): avc: denied { bind } for pid=8649 comm="syz.0.14668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1018.024252][ T8676] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1018.037764][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1018.044329][ C0] audit: audit_lost=860 audit_rate_limit=0 audit_backlog_limit=64 [ 1018.052131][ C0] audit: backlog limit exceeded [ 1018.158083][ T3365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.316120][ T3365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.375594][T13206] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1018.464488][ T3365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.540459][ T3202] usb 6-1: USB disconnect, device number 35 [ 1018.552173][T13206] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.605021][T13206] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.680722][T13206] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1018.773285][T13206] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1018.801388][ T8709] batadv_slave_1: entered promiscuous mode [ 1018.817256][T13206] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.899397][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.910387][ T6378] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1018.972077][ T8708] batadv_slave_1: left promiscuous mode [ 1019.103506][ T6378] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1019.136399][ T6378] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.320154][ T3365] pimreg: left allmulticast mode [ 1019.948141][ T8752] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1020.068332][T13206] usb 7-1: USB disconnect, device number 30 [ 1020.267680][ T6100] SELinux: failure in sel_netif_sid_slow(), invalid network interface (86) [ 1020.440143][ T6100] SELinux: failure in sel_netif_sid_slow(), invalid network interface (93) [ 1020.471462][ T8768] Invalid ELF header magic: != ELF [ 1020.668991][ T3365] bond1 (unregistering): Released all slaves [ 1020.724690][ T3365] bond2 (unregistering): Released all slaves [ 1020.805628][ T3365] bond3 (unregistering): Released all slaves [ 1020.861901][ T3365] bond4 (unregistering): Released all slaves [ 1020.940132][ T3365] bond5 (unregistering): Released all slaves [ 1021.018338][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1021.124567][ T6378] net_ratelimit: 2 callbacks suppressed [ 1021.124579][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.223809][ T3365] tipc: Left network mode [ 1021.356425][ T6100] usb 10-1: USB disconnect, device number 7 [ 1021.831072][ T3365] IPVS: stopping backup sync thread 28444 ... [ 1021.896808][ T6378] usb 8-1: USB disconnect, device number 17 [ 1022.032403][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.039527][ T8841] bridge0: port 2(bridge_slave_1) entered listening state [ 1022.046793][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.053854][ T8841] bridge0: port 1(bridge_slave_0) entered listening state [ 1022.235126][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.339466][ T8856] loop5: detected capacity change from 0 to 7 [ 1022.376831][ T8841] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1022.402080][ T8856] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1022.434164][ T8856] loop5: partition table partially beyond EOD, truncated [ 1022.459925][ T8856] loop5: p1 size 487441168 extends beyond EOD, truncated [ 1022.472485][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 1022.472512][ T29] audit: type=1400 audit(1748.245:96011): avc: denied { sys_admin } for pid=8860 comm="sed" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1022.674260][ T29] audit: type=1400 audit(1748.301:96012): avc: denied { sys_admin } for pid=8860 comm="sed" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1022.836502][ T8851] SELinux: failed to load policy [ 1022.852538][T12432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.860881][ T8876] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.882027][ T8871] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.896194][ T29] audit: type=1400 audit(1748.301:96013): avc: denied { search } for pid=8860 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.925006][T12432] audit: audit_lost=867 audit_rate_limit=0 audit_backlog_limit=64 [ 1022.933944][ T8876] audit: audit_lost=868 audit_rate_limit=0 audit_backlog_limit=64 [ 1022.951915][ T8880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.963609][T12432] audit: backlog limit exceeded [ 1023.092606][T16634] udevd[16634]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1023.175668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.190687][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.249153][ T3365] hsr_slave_0: left promiscuous mode [ 1023.260972][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.318702][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.347264][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.408152][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.508709][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.575279][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.775294][ T3365] veth1_macvtap: left promiscuous mode [ 1023.861862][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.872509][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.883472][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.023329][ T8929] gadgetfs: bound to dummy_udc driver [ 1025.151927][ T8974] SELinux: ebitmap start bit (982102474) is not a multiple of the map unit size (64) [ 1025.215546][ T8974] SELinux: invalid class [ 1025.283231][ T8974] SELinux: failed to load policy [ 1025.982764][ T9011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.512713][ T6100] net_ratelimit: 2 callbacks suppressed [ 1026.512726][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.282067][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.361537][ T3365] veth0_macvtap (unregistering): left allmulticast mode [ 1027.697991][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1027.827226][ T29] kauditd_printk_skb: 876 callbacks suppressed [ 1027.827237][ T29] audit: type=1400 audit(1753.259:96804): avc: denied { read write } for pid=19717 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1028.083721][ T29] audit: type=1400 audit(1753.259:96805): avc: denied { open } for pid=19717 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1028.267494][ T9085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.283508][ T9083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.327172][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.333713][ C0] audit: audit_lost=898 audit_rate_limit=0 audit_backlog_limit=64 [ 1028.341528][ C0] audit: backlog limit exceeded [ 1028.358375][ T9088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.372454][ T9083] audit: audit_lost=899 audit_rate_limit=0 audit_backlog_limit=64 [ 1028.382922][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.394693][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.600241][ T9094] syzkaller1: entered promiscuous mode [ 1028.658889][ T9094] syzkaller1: entered allmulticast mode [ 1028.746066][ T3365] IPVS: stop unused estimator thread 0... [ 1029.046621][ T9120] netlink: 197276 bytes leftover after parsing attributes in process `syz.7.14775'. [ 1029.126401][ T9120] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1029.509163][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.738626][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14779'. [ 1029.761991][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.842313][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14779'. [ 1030.018772][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.027424][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.037937][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.587130][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1030.974211][ T9194] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1031.220696][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.088569][ T9248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.175436][ T9248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.266619][ T9248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.331670][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.426123][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.459812][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.489976][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.528992][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.569045][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.652597][ T9266] IPVS: Scheduler module ip_vs_ not found [ 1032.676438][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.721366][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.772339][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.818577][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1033.191457][ T29] kauditd_printk_skb: 1201 callbacks suppressed [ 1033.191473][ T29] audit: type=1400 audit(1758.263:97985): avc: denied { recv } for pid=9245 comm="syz.7.14806" saddr=172.20.20.31 src=20001 daddr=172.20.20.31 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1033.396403][ T9299] dummy0: entered allmulticast mode [ 1033.468894][ T9296] dummy0: left allmulticast mode [ 1033.496042][ T29] audit: type=1400 audit(1758.300:97986): avc: denied { read append } for pid=9286 comm="syz.5.14814" name="frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1033.530033][T19717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1033.580225][T19717] audit: audit_lost=908 audit_rate_limit=0 audit_backlog_limit=64 [ 1033.588406][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1033.594907][ C0] audit: audit_lost=909 audit_rate_limit=0 audit_backlog_limit=64 [ 1033.602716][ C0] audit: backlog limit exceeded [ 1033.619082][ T9282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1033.627300][T12432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1033.635432][ T9309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1034.294010][T13206] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1034.483962][ T9353] retu-mfd 0-0001: could not read Retu revision: -5 [ 1034.519703][T13206] usb 10-1: Using ep0 maxpacket: 16 [ 1034.565355][T13206] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1034.590899][ T9353] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 1034.622605][T13206] usb 10-1: config 9 has an invalid interface number: 57 but max is 0 [ 1034.655177][ T9353] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 1034.678455][T13206] usb 10-1: config 9 has no interface number 0 [ 1034.705588][ T9363] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 1034.731222][T13206] usb 10-1: config 9 interface 57 has no altsetting 0 [ 1034.812869][T13206] usb 10-1: string descriptor 0 read error: -22 [ 1034.862650][T13206] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1034.877475][ T9363] retu-mfd 0-0002: probe with driver retu-mfd failed with error -5 [ 1034.942976][T13206] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.034320][ T9363] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 1035.067016][ T9384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1035.646359][ T9415] dlm: no local IP address has been set [ 1035.728409][ T9415] dlm: cannot start dlm midcomms -107 [ 1035.772509][ T9415] (syz.5.14841,9415,0):user_dlm_register:674 ERROR: status = -107 [ 1035.830448][ T9415] (syz.5.14841,9415,0):dlmfs_mkdir:437 ERROR: Error -107 could not register domain "file0" [ 1035.849626][ T9429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9429 comm=syz.0.14844 [ 1037.120621][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14860'. [ 1037.271179][ T6100] usb 10-1: USB disconnect, device number 8 [ 1037.461189][ T9519] netlink: 92 bytes leftover after parsing attributes in process `syz.9.14863'. [ 1037.957242][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14868'. [ 1038.052774][ T9540] netlink: 'syz.7.14868': attribute type 7 has an invalid length. [ 1038.117148][ T9540] netlink: 'syz.7.14868': attribute type 8 has an invalid length. [ 1038.187040][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14868'. [ 1038.398919][ T6100] net_ratelimit: 1295 callbacks suppressed [ 1038.398931][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.538294][ T29] kauditd_printk_skb: 1302 callbacks suppressed [ 1038.538306][ T29] audit: type=1400 audit(1763.267:99237): avc: denied { sys_admin } for pid=9559 comm="dhcpcd-run-hook" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1038.621064][ T9565] netlink: 'syz.7.14875': attribute type 8 has an invalid length. [ 1038.685100][ T2948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1038.693405][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1038.699926][ C0] audit: audit_lost=928 audit_rate_limit=0 audit_backlog_limit=64 [ 1038.707724][ C0] audit: backlog limit exceeded [ 1038.712692][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1038.719188][ C0] audit: audit_lost=929 audit_rate_limit=0 audit_backlog_limit=64 [ 1038.726969][ C0] audit: backlog limit exceeded [ 1038.749700][ T9559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1038.765732][ T9576] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1038.922335][T13206] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1039.117256][T13206] usb 6-1: Using ep0 maxpacket: 32 [ 1039.165988][T13206] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1039.239658][T13206] usb 6-1: config 0 has no interface number 0 [ 1039.294867][T13206] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 1039.370151][ T9597] syzkaller1: entered promiscuous mode [ 1039.390840][T13206] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1039.429968][ T9597] syzkaller1: entered allmulticast mode [ 1039.467444][T13206] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1039.513162][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.539074][T13206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.624929][T13206] usb 6-1: Product: syz [ 1039.657183][T13206] usb 6-1: Manufacturer: syz [ 1039.696758][T13206] usb 6-1: SerialNumber: syz [ 1039.997953][ T3200] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 1040.090945][ T3200] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1040.623396][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.631895][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.052859][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.106429][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.138453][ T9683] trusted_key: syz.9.14899 sent an empty control message without MSG_MORE. [ 1041.734137][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.865401][ T3200] usb 6-1: USB disconnect, device number 36 [ 1041.952441][ T9729] input: syz0 as /devices/virtual/input/input90 [ 1042.379733][ T9746] overlay: filesystem on ./file0 is read-only [ 1042.596712][ T9748] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1042.849407][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.872546][ T6378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.899708][ T29] kauditd_printk_skb: 1440 callbacks suppressed [ 1043.899720][ T29] audit: type=1800 audit(1768.285:100597): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1043.969598][ T3200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.142403][ T29] audit: type=1400 audit(1768.313:100598): avc: denied { search } for pid=9804 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.248626][ T9828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1044.256517][ T9827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1044.266476][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1044.273016][ C0] audit: audit_lost=958 audit_rate_limit=0 audit_backlog_limit=64 [ 1044.280872][ C0] audit: backlog limit exceeded [ 1044.293385][T19717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1044.306085][ T29] audit: type=1400 audit(1768.313:100599): avc: denied { search } for pid=9804 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.329227][ T9828] audit: audit_lost=959 audit_rate_limit=0 audit_backlog_limit=64 [ 1044.387253][T13206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.425624][ T9823] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1045.430844][ T9866] ceph: No mds server is up or the cluster is laggy [ 1045.441312][ T3202] libceph: connect (1)[c::]:6789 error -101 [ 1045.495035][ T3202] libceph: mon0 (1)[c::]:6789 connect error [ 1045.858921][ T9887] netlink: 7 bytes leftover after parsing attributes in process `syz.7.14941'. [ 1045.939764][ T9890] loop5: detected capacity change from 0 to 7 [ 1046.006292][ T9890] Dev loop5: unable to read RDB block 7 [ 1046.068936][ C0] operation not supported error, dev loop5, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 1046.081275][ T9890] loop5: unable to read partition table [ 1046.147919][ T9890] loop5: partition table beyond EOD, truncated [ 1046.188018][ T9890] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1046.403165][ T9910] loop2: detected capacity change from 0 to 7 [ 1046.492122][ T9910] Dev loop2: unable to read RDB block 7 [ 1046.542970][ T9910] loop2: unable to read partition table [ 1046.592866][ T9910] loop2: partition table beyond EOD, truncated [ 1046.621393][ T9924] 9p: Bad value for 'rfdno' [ 1046.653690][ T9910] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1047.306085][ T9960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.342957][T10001] netlink: 248 bytes leftover after parsing attributes in process `syz.7.14966'. [ 1048.414757][T10001] NCSI netlink: No device for ifindex 0 [ 1049.254115][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 1049.254127][ T29] audit: type=1400 audit(1773.290:101206): avc: denied { write search } for pid=10011 comm="syz.9.14969" name="rd_mcp_0" dev="configfs" ino=147010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1049.464282][ T29] audit: type=1400 audit(1773.290:101207): avc: denied { remove_name search } for pid=10011 comm="syz.9.14969" name="dev0" dev="configfs" ino=147019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1049.622111][ T29] audit: type=1400 audit(1773.290:101208): avc: denied { rmdir } for pid=10011 comm="syz.9.14969" name="dev0" dev="configfs" ino=147019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1049.817728][T10024] kvm: apic: phys broadcast and lowest prio [ 1049.875347][ T29] audit: type=1400 audit(1773.327:101209): avc: denied { recv } for pid=10008 comm="syz.7.14968" saddr=fe80::1b src=16385 daddr=fe80::c dest=50838 netif=teql0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1050.123955][T19717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1050.139345][T10034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1050.161771][ T29] audit: type=1400 audit(1773.393:101210): avc: denied { recv } for pid=10008 comm="syz.7.14968" saddr=fe80::1b src=16385 daddr=fe80::c dest=50838 netif=teql0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1050.225746][T19717] audit: audit_lost=977 audit_rate_limit=0 audit_backlog_limit=64 [ 1050.234040][T10034] audit: audit_lost=978 audit_rate_limit=0 audit_backlog_limit=64 [ 1050.292702][T19717] audit: backlog limit exceeded [ 1051.664087][T10083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10083 comm=syz.9.14983 [ 1051.787124][T10083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10083 comm=syz.9.14983 [ 1053.563331][T10149] binder_alloc: binder_alloc_mmap_handler: 10147 200000ffe000-200001000000 already mapped failed -16 [ 1053.658868][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15006'. [ 1053.765165][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15006'. [ 1054.075716][T10167] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 1054.630312][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 1054.630324][ T29] audit: type=1400 audit(1778.322:101604): avc: denied { create } for pid=10193 comm="syz.0.15018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1054.658080][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1054.660266][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1054.667782][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079289c00: rx timeout, send abort [ 1054.677299][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079289c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1055.108256][ T29] audit: type=1400 audit(1778.406:101605): avc: denied { write } for pid=10193 comm="syz.0.15018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1055.311448][ T29] audit: type=1400 audit(1778.406:101606): avc: denied { read } for pid=10193 comm="syz.0.15018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1055.413738][T10224] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1055.424513][ T2948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1055.439244][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1055.445773][ C0] audit: audit_lost=984 audit_rate_limit=0 audit_backlog_limit=64 [ 1055.453582][ C0] audit: backlog limit exceeded [ 1055.463939][T12432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1055.478197][T10225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1055.886110][T10244] overlayfs: failed to clone lowerpath [ 1056.769100][T10272] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1056.912753][T10272] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1057.075439][T10272] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1057.218947][T10272] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1057.940048][T10320] loop5: detected capacity change from 0 to 7 [ 1058.073776][T10320] Dev loop5: unable to read RDB block 7 [ 1058.109779][T10320] loop5: unable to read partition table [ 1058.158570][T10320] loop5: partition table beyond EOD, truncated [ 1058.206842][T10320] loop_reread_partitions: partition scan of loop5 (þ被x ) failed (rc=-5) [ 1058.265890][ T35] smbdirect: ib_dev[syz2] removed [ 1058.452599][T10326] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10326 comm=syz.0.15045 [ 1059.238575][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15051'. [ 1059.984487][ T29] kauditd_printk_skb: 750 callbacks suppressed [ 1059.984498][ T29] audit: type=1400 audit(1783.336:102334): avc: denied { ioctl } for pid=12432 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1060.048780][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15055'. [ 1060.150718][T10386] overlayfs: failed to clone upperpath [ 1060.279786][T10388] netlink: 'syz.0.15058': attribute type 2 has an invalid length. [ 1060.300904][ T29] audit: type=1400 audit(1783.373:102335): avc: denied { write } for pid=10377 comm="syz.7.15055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1060.391969][T10388] netlink: 'syz.0.15058': attribute type 2 has an invalid length. [ 1060.483071][T10390] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1060.504258][T10399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1060.515483][ T29] audit: type=1400 audit(1783.392:102336): avc: denied { ioctl } for pid=10377 comm="syz.7.15055" path="socket:[148394]" dev="sockfs" ino=148394 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1060.568092][T10390] audit: audit_lost=994 audit_rate_limit=0 audit_backlog_limit=64 [ 1060.580716][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1060.587253][ C0] audit: audit_lost=995 audit_rate_limit=0 audit_backlog_limit=64 [ 1060.595051][ C0] audit: backlog limit exceeded [ 1060.611195][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.384392][ T6100] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1061.582329][ T6100] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.642570][ T6100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1061.733091][ T6100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.815908][ T6100] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1061.840575][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15076'. [ 1061.898684][ T6100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.924492][T10469] netlink: 'syz.7.15076': attribute type 10 has an invalid length. [ 1061.991870][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15076'. [ 1062.091698][T10469] geneve3: entered promiscuous mode [ 1062.138815][T10469] geneve3: entered allmulticast mode [ 1062.152150][T10484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1062.167663][T10475] overlayfs: failed to verify upper root origin [ 1062.553494][T10505] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 1063.270110][T10507] SELinux: failed to load policy [ 1063.818406][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.895708][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.028341][T10576] CIFS: Attempting to mount //127.0.0.1/share [ 1064.069552][T10582] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1064.336882][ T6378] usb 7-1: USB disconnect, device number 31 [ 1064.863603][T10621] loop5: detected capacity change from 0 to 7 [ 1064.920769][T10621] Dev loop5: unable to read RDB block 7 [ 1064.956753][T10621] loop5: unable to read partition table [ 1065.001486][T10621] loop5: partition table beyond EOD, truncated [ 1065.037634][T10621] loop_reread_partitions: partition scan of loop5 (þ被x ) failed (rc=-5) [ 1065.145238][T10576] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 1065.364119][ T29] kauditd_printk_skb: 1205 callbacks suppressed [ 1065.364130][ T29] audit: type=1400 audit(1788.368:103483): avc: denied { recv } for pid=6378 comm="kworker/0:9" saddr=10.128.0.169 src=30006 daddr=10.128.1.30 dest=33346 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1065.439555][T10576] ------------[ cut here ]------------ [ 1065.446726][T10576] server->in_flight == 0 [ 1065.446737][T10576] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#0: syz.9.15102/10576 [ 1065.462761][T10576] Modules linked in: [ 1065.467152][T10576] CPU: 0 UID: 0 PID: 10576 Comm: syz.9.15102 Tainted: G S L syzkaller #0 PREEMPT(lazy) [ 1065.478334][T10576] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1065.484580][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1065.495348][T10576] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1065.501304][T10576] Code: c6 e8 d1 e9 b5 fe 84 db 0f 85 0a fb ff ff e8 b4 ef b5 fe 48 8d 3d 9d ad d5 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 9e ef b5 fe 90 <0f> 0b 90 0f b6 05 9c e3 b5 0d 31 ff 89 c6 88 44 24 28 e8 96 e9 b5 [ 1065.521431][T10576] RSP: 0018:ffffc900032cf208 EFLAGS: 00010287 [ 1065.527592][T10576] RAX: 0000000000010cd2 RBX: ffff88804999e300 RCX: ffffc90006151000 [ 1065.535717][T10576] RDX: 0000000000080000 RSI: ffffffff83547542 RDI: ffff8880286c4a80 [ 1065.543958][T10576] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1065.552076][T10576] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900032cf448 [ 1065.560518][T10576] R13: 0000000000000200 R14: 0000000000000001 R15: ffff88804999e000 [ 1065.568643][T10576] FS: 00007faa20b506c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1065.577679][T10576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1065.584249][T10576] CR2: 0000555592ae04e8 CR3: 00000000b2af9000 CR4: 00000000003526f0 [ 1065.592436][T10576] Call Trace: [ 1065.596476][T10576] [ 1065.599392][T10576] ? compound_send_recv+0xee0/0x2a10 [ 1065.604672][T10576] compound_send_recv+0x1030/0x2a10 [ 1065.609943][T10576] ? __pfx_compound_send_recv+0x10/0x10 [ 1065.615503][T10576] ? find_held_lock+0x2b/0x80 [ 1065.620353][T10576] ? __smb2_plain_req_init+0x45c/0x1140 [ 1065.625875][T10576] ? __smb2_plain_req_init+0x45c/0x1140 [ 1065.631445][T10576] cifs_send_recv+0x43/0x60 [ 1065.635930][T10576] SMB2_negotiate+0x15c4/0x5380 [ 1065.640773][T10576] ? check_prev_add+0x354/0xe60 [ 1065.645611][T10576] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1065.651012][T10576] ? smb2_negotiate+0x57/0x80 [ 1065.655677][T10576] ? smb2_negotiate+0x57/0x80 [ 1065.660355][T10576] ? do_raw_spin_unlock+0x145/0x1e0 [ 1065.665545][T10576] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1065.671187][T10576] cifs_negotiate_protocol+0x268/0x4c0 [ 1065.676622][T10576] cifs_get_smb_ses+0xfc9/0x2170 [ 1065.681833][T10576] cifs_mount_get_session+0xf8/0x460 [ 1065.687121][T10576] dfs_mount_share+0x200/0x1e20 [ 1065.691983][T10576] ? check_prev_add+0xfe/0xe60 [ 1065.696734][T10576] ? __pfx_dfs_mount_share+0x10/0x10 [ 1065.702005][T10576] ? lockdep_unlock+0x5a/0xc0 [ 1065.706693][T10576] ? __lock_acquire+0xd5b/0x1a40 [ 1065.711607][T10576] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1065.717587][T10576] cifs_mount+0xc4/0xdb0 [ 1065.721824][T10576] ? find_held_lock+0x2b/0x80 [ 1065.726544][T10576] ? find_nls+0x125/0x170 [ 1065.730874][T10576] ? find_nls+0x125/0x170 [ 1065.735228][T10576] ? __pfx_cifs_mount+0x10/0x10 [ 1065.740086][T10576] ? do_raw_spin_unlock+0x145/0x1e0 [ 1065.745489][T10576] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1065.750665][T10576] cifs_smb3_do_mount+0x2c0/0x1b20 [ 1065.755789][T10576] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1065.762010][T10576] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1065.767604][T10576] smb3_get_tree+0x1fd/0x440 [ 1065.772186][T10576] vfs_get_tree+0x92/0x320 [ 1065.776586][T10576] path_mount+0x7d0/0x23d0 [ 1065.781178][T10576] ? __pfx_path_mount+0x10/0x10 [ 1065.786005][T10576] ? lockdep_hardirqs_on+0x78/0x100 [ 1065.791239][T10576] ? putname+0xb1/0x110 [ 1065.795373][T10576] ? kmem_cache_free+0x127/0x6b0 [ 1065.800318][T10576] ? __x64_sys_mount+0x293/0x310 [ 1065.805230][T10576] __x64_sys_mount+0x293/0x310 [ 1065.810178][T10576] ? __pfx___x64_sys_mount+0x10/0x10 [ 1065.815452][T10576] do_syscall_64+0x115/0x870 [ 1065.820038][T10576] ? clear_bhb_loop+0x40/0x90 [ 1065.824699][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.830597][T10576] RIP: 0033:0x7faa1fb9e019 [ 1065.834985][T10576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.854928][T10576] RSP: 002b:00007faa20b50028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1065.863347][T10576] RAX: ffffffffffffffda RBX: 00007faa1fe25fa0 RCX: 00007faa1fb9e019 [ 1065.871302][T10576] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 1065.879320][T10576] RBP: 00007faa1fc3500c R08: 0000200000000500 R09: 0000000000000000 [ 1065.887505][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.895494][T10576] R13: 00007faa1fe26038 R14: 00007faa1fe25fa0 R15: 00007ffebe1a6518 [ 1065.903469][T10576] [ 1065.906514][T10576] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1065.913768][T10576] CPU: 0 UID: 0 PID: 10576 Comm: syz.9.15102 Tainted: G S L syzkaller #0 PREEMPT(lazy) [ 1065.924760][T10576] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1065.930890][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1065.941003][T10576] Call Trace: [ 1065.944258][T10576] [ 1065.947173][T10576] dump_stack_lvl+0x100/0x190 [ 1065.951828][T10576] vpanic+0x552/0x970 [ 1065.955794][T10576] ? __pfx_vpanic+0x10/0x10 [ 1065.960273][T10576] panic+0xd1/0xe0 [ 1065.963965][T10576] ? __pfx_panic+0x10/0x10 [ 1065.968358][T10576] check_panic_on_warn.cold+0x19/0x34 [ 1065.973701][T10576] ? smb2_add_credits+0x1213/0x1790 [ 1065.978888][T10576] __warn.cold+0x191/0x318 [ 1065.983282][T10576] __report_bug+0x30f/0x440 [ 1065.987759][T10576] ? smb2_add_credits+0x1213/0x1790 [ 1065.992934][T10576] ? __pfx___report_bug+0x10/0x10 [ 1065.997937][T10576] ? try_to_wake_up+0x158/0x1c90 [ 1066.002855][T10576] ? smb2_add_credits+0x1213/0x1790 [ 1066.008041][T10576] report_bug+0xb2/0x220 [ 1066.012277][T10576] ? smb2_add_credits+0x1213/0x1790 [ 1066.017460][T10576] handle_bug+0x16a/0x2a0 [ 1066.021766][T10576] exc_invalid_op+0x17/0x50 [ 1066.026243][T10576] asm_exc_invalid_op+0x1a/0x20 [ 1066.031066][T10576] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1066.036855][T10576] Code: c6 e8 d1 e9 b5 fe 84 db 0f 85 0a fb ff ff e8 b4 ef b5 fe 48 8d 3d 9d ad d5 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 9e ef b5 fe 90 <0f> 0b 90 0f b6 05 9c e3 b5 0d 31 ff 89 c6 88 44 24 28 e8 96 e9 b5 [ 1066.056454][T10576] RSP: 0018:ffffc900032cf208 EFLAGS: 00010287 [ 1066.062507][T10576] RAX: 0000000000010cd2 RBX: ffff88804999e300 RCX: ffffc90006151000 [ 1066.070473][T10576] RDX: 0000000000080000 RSI: ffffffff83547542 RDI: ffff8880286c4a80 [ 1066.078421][T10576] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1066.086372][T10576] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900032cf448 [ 1066.094314][T10576] R13: 0000000000000200 R14: 0000000000000001 R15: ffff88804999e000 [ 1066.102262][T10576] ? smb2_add_credits+0x1212/0x1790 [ 1066.107445][T10576] ? smb2_add_credits+0x1212/0x1790 [ 1066.112622][T10576] ? compound_send_recv+0xee0/0x2a10 [ 1066.117896][T10576] compound_send_recv+0x1030/0x2a10 [ 1066.123080][T10576] ? __pfx_compound_send_recv+0x10/0x10 [ 1066.128622][T10576] ? find_held_lock+0x2b/0x80 [ 1066.133270][T10576] ? __smb2_plain_req_init+0x45c/0x1140 [ 1066.138800][T10576] ? __smb2_plain_req_init+0x45c/0x1140 [ 1066.144323][T10576] cifs_send_recv+0x43/0x60 [ 1066.148817][T10576] SMB2_negotiate+0x15c4/0x5380 [ 1066.153644][T10576] ? check_prev_add+0x354/0xe60 [ 1066.158471][T10576] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1066.163653][T10576] ? smb2_negotiate+0x57/0x80 [ 1066.168304][T10576] ? smb2_negotiate+0x57/0x80 [ 1066.172969][T10576] ? do_raw_spin_unlock+0x145/0x1e0 [ 1066.178146][T10576] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1066.183748][T10576] cifs_negotiate_protocol+0x268/0x4c0 [ 1066.189190][T10576] cifs_get_smb_ses+0xfc9/0x2170 [ 1066.194108][T10576] cifs_mount_get_session+0xf8/0x460 [ 1066.199365][T10576] dfs_mount_share+0x200/0x1e20 [ 1066.204193][T10576] ? check_prev_add+0xfe/0xe60 [ 1066.208931][T10576] ? __pfx_dfs_mount_share+0x10/0x10 [ 1066.214202][T10576] ? lockdep_unlock+0x5a/0xc0 [ 1066.218860][T10576] ? __lock_acquire+0xd5b/0x1a40 [ 1066.223781][T10576] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1066.229564][T10576] cifs_mount+0xc4/0xdb0 [ 1066.233777][T10576] ? find_held_lock+0x2b/0x80 [ 1066.238424][T10576] ? find_nls+0x125/0x170 [ 1066.242736][T10576] ? find_nls+0x125/0x170 [ 1066.247040][T10576] ? __pfx_cifs_mount+0x10/0x10 [ 1066.251862][T10576] ? do_raw_spin_unlock+0x145/0x1e0 [ 1066.257051][T10576] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1066.262230][T10576] cifs_smb3_do_mount+0x2c0/0x1b20 [ 1066.267315][T10576] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1066.273543][T10576] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1066.279067][T10576] smb3_get_tree+0x1fd/0x440 [ 1066.283647][T10576] vfs_get_tree+0x92/0x320 [ 1066.288050][T10576] path_mount+0x7d0/0x23d0 [ 1066.292453][T10576] ? __pfx_path_mount+0x10/0x10 [ 1066.297278][T10576] ? lockdep_hardirqs_on+0x78/0x100 [ 1066.302460][T10576] ? putname+0xb1/0x110 [ 1066.306587][T10576] ? kmem_cache_free+0x127/0x6b0 [ 1066.311499][T10576] ? __x64_sys_mount+0x293/0x310 [ 1066.316411][T10576] __x64_sys_mount+0x293/0x310 [ 1066.321151][T10576] ? __pfx___x64_sys_mount+0x10/0x10 [ 1066.326425][T10576] do_syscall_64+0x115/0x870 [ 1066.330991][T10576] ? clear_bhb_loop+0x40/0x90 [ 1066.335657][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.341534][T10576] RIP: 0033:0x7faa1fb9e019 [ 1066.345926][T10576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.365519][T10576] RSP: 002b:00007faa20b50028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1066.373917][T10576] RAX: ffffffffffffffda RBX: 00007faa1fe25fa0 RCX: 00007faa1fb9e019 [ 1066.381881][T10576] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 1066.389836][T10576] RBP: 00007faa1fc3500c R08: 0000200000000500 R09: 0000000000000000 [ 1066.397797][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.405746][T10576] R13: 00007faa1fe26038 R14: 00007faa1fe25fa0 R15: 00007ffebe1a6518 [ 1066.413714][T10576] [ 1066.416759][T10576] Kernel Offset: disabled [ 1066.421060][T10576] Rebooting in 86400 seconds..