last executing test programs: 4m5.000944781s ago: executing program 4 (id=170): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) syz_usb_disconnect(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) 4m2.413130082s ago: executing program 4 (id=182): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@#@'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 4m0.485487861s ago: executing program 4 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}}, 0xc048) openat$nullb(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0000000008b67d6f5e3c67f155c302d15300"/32, @ANYRES32=r2, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r2], 0x50) 4m0.210316206s ago: executing program 4 (id=190): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r2}}, 0x48) 3m59.994919878s ago: executing program 4 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) close(r1) 3m59.781718272s ago: executing program 4 (id=193): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 3m44.598442299s ago: executing program 32 (id=193): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 2m38.648657038s ago: executing program 3 (id=692): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 2m36.739665907s ago: executing program 3 (id=710): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x6, &(0x7f0000000000)={0xe, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) 2m33.689368963s ago: executing program 3 (id=717): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 2m32.37525992s ago: executing program 3 (id=721): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x6020400) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xa) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2m31.828271394s ago: executing program 3 (id=736): socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.694344024s ago: executing program 3 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x11) connect$inet(r3, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000900)="123456780000000000000002000186a30000000300000000000003e700"/40, 0x28) 2m15.994505167s ago: executing program 33 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x11) connect$inet(r3, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000900)="123456780000000000000002000186a30000000300000000000003e700"/40, 0x28) 9.112663198s ago: executing program 1 (id=1505): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$inet(0x2, 0x80001, 0x84) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 8.889879778s ago: executing program 0 (id=1507): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 8.689576062s ago: executing program 5 (id=1508): openat$tun(0xffffffffffffff9c, 0x0, 0x582, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8.579880583s ago: executing program 6 (id=1510): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 8.477708587s ago: executing program 0 (id=1511): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) 7.317900712s ago: executing program 6 (id=1514): r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000004c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x900) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r4, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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"/4096, 0x1000}], 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f0000000080)=[{r0, 0x370}, {0xffffffffffffffff, 0x8000}, {r2, 0x84}, {r3, 0x30}, {r4, 0x4010}, {r5, 0x1280}], 0x6, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0xf2d]}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fc017208030478fa0400000000010902120001000090000904"], 0x0) 7.316527048s ago: executing program 2 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_io_uring_setup(0x7b1d, &(0x7f0000000100)={0x0, 0xf40, 0x20, 0x3, 0xab}, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 3.838499442s ago: executing program 2 (id=1515): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) syz_io_uring_complete(0x0, r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.700444817s ago: executing program 0 (id=1516): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x81}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) close(0x3) 3.665034096s ago: executing program 6 (id=1517): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd70000000000003"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x202801, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x400}}]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 3.354374203s ago: executing program 6 (id=1518): r0 = socket$tipc(0x1e, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x1}) 3.338563354s ago: executing program 5 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044004) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socket(0x5, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x189040, 0x136) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000001600)) 3.197360405s ago: executing program 1 (id=1520): r0 = fanotify_init(0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x11e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0xe8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, [{0x18, 0xf, "00000000e50053bff4db7fb81947a98ef6c30aef8bffd4310d8c8cfbdfdcf5ad49792ea9afa9553dcd662ba253fb01a9bda9916838f848a6e18c02bf95848d398ec9dba34d082016dcb10b44b93da65d02ba88666428204a908ad971d0047aabc2491e667b9900"/118}, {0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x2, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x1d80, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.103297832s ago: executing program 2 (id=1521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a"], 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.890458227s ago: executing program 5 (id=1522): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) mlockall(0x2) sendto$inet(r3, &(0x7f0000000040)="ab", 0x1, 0x8c5, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) 2.635899974s ago: executing program 6 (id=1523): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e0104100000020000000000000800"], 0x11) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0e0104100002020001000000000000"], 0x11) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="0b000000010001", 0x7) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0401560c00"], 0x7) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000180)="2d000000010001", 0x7) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) close(r0) 2.546317515s ago: executing program 0 (id=1525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.479109692s ago: executing program 1 (id=1526): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) getsockopt(r0, 0xffffff80, 0x3, &(0x7f0000000600)=""/131, &(0x7f00000006c0)=0x83) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 2.478037061s ago: executing program 5 (id=1527): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2.246091276s ago: executing program 5 (id=1528): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='2', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000940)='dummy_udc.0', 0xb) 2.164946565s ago: executing program 6 (id=1529): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.133458526s ago: executing program 5 (id=1530): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cdab01ef0001010203010902270001010080fa0904000003ff000000070581034000010705020200020007058602000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write(r1, &(0x7f0000000800)='abcd ef01\x00', 0xa) nanosleep(&(0x7f0000000400)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./debug\x00', &(0x7f0000000a00)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/mmc0/err_stats\x00', 0x0, 0x0) read(r2, &(0x7f0000000c00)=""/256, 0x100) 2.049345672s ago: executing program 2 (id=1531): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[], 0x428}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="7105020001"], 0x13) 1.946470272s ago: executing program 0 (id=1532): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101301, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000440)=ANY=[], 0x2a) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) syz_io_uring_setup(0x34b8, 0x0, 0x0, 0x0, &(0x7f0000000100)) 1.301404805s ago: executing program 0 (id=1533): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) syz_io_uring_complete(0x0, r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1.299252081s ago: executing program 1 (id=1534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0xa, 0x7, 0x800004, 0xffdffff3, 0x7a2a}]}) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000500)) 1.299005133s ago: executing program 2 (id=1535): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) 1.152584375s ago: executing program 1 (id=1536): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80d08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) 18.562771ms ago: executing program 1 (id=1537): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_io_uring_complete(0x0, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) close_range(r1, 0xffffffffffffffff, 0x200000000000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=1538): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) mlockall(0x2) sendto$inet(r3, &(0x7f0000000040)="ab", 0x1, 0x8c5, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) kernel console output (not intermixed with test programs): 56][ T5794] Registered device Abilis Systems DVB-Titan [ 217.347360][ T8543] comedi comedi3: comedi_config --init_data is deprecated [ 217.605085][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'. [ 218.043617][ T8551] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 218.134483][ T8555] syzkaller0: entered promiscuous mode [ 218.140304][ T8555] syzkaller0: entered allmulticast mode [ 218.475132][ T5610] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 218.636845][ T5610] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 218.650213][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.661996][ T5610] usb 2-1: Product: syz [ 218.672356][ T5610] usb 2-1: Manufacturer: syz [ 218.679769][ T5610] usb 2-1: SerialNumber: syz [ 219.144776][ T5610] rtl8150 2-1:1.0: couldn't reset the device [ 219.151075][ T5610] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 219.164130][ T5610] usb 2-1: USB disconnect, device number 14 [ 220.324117][ T5727] usb 6-1: USB disconnect, device number 7 [ 220.350596][ T5727] Unregistered device Abilis Systems DVB-Titan [ 220.356497][ T5727] as10x_usb: device has been disconnected [ 220.405631][ T8580] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 220.608196][ T8589] netlink: 14 bytes leftover after parsing attributes in process `syz.0.814'. [ 222.543474][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.563073][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.572321][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.596034][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.617524][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.639877][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.647494][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.663602][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.671598][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.680520][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.186632][ T29] audit: type=1400 audit(1785897454.850:2634): avc: denied { mounton } for pid=8616 comm="syz.5.810" path="/93/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 223.922003][ T29] audit: type=1804 audit(1785897455.590:2635): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.812" name="bus" dev="ramfs" ino=32793 res=1 errno=0 [ 224.013011][ T29] audit: type=1804 audit(1785897455.590:2636): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.812" name="bus" dev="ramfs" ino=32793 res=1 errno=0 [ 224.423248][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.430524][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.437951][ T8601] bridge_slave_0: entered allmulticast mode [ 224.450975][ T8601] bridge_slave_0: entered promiscuous mode [ 224.466685][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.480049][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.487577][ T8601] bridge_slave_1: entered allmulticast mode [ 224.495253][ T8601] bridge_slave_1: entered promiscuous mode [ 224.530392][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.551331][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.639452][ T8601] team0: Port device team_slave_0 added [ 224.661253][ T8601] team0: Port device team_slave_1 added [ 224.760886][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.763512][ T5614] Bluetooth: hci4: command tx timeout [ 224.785063][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.881262][ T8601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.941988][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.965633][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.050000][ T8601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.206278][ T8601] hsr_slave_0: entered promiscuous mode [ 225.219613][ T8601] hsr_slave_1: entered promiscuous mode [ 225.230018][ T8601] debugfs: 'hsr0' already exists in 'hsr' [ 225.239951][ T8601] Cannot create hsr debugfs directory [ 225.818687][ T29] audit: type=1400 audit(1785897457.490:2637): avc: denied { read } for pid=8656 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.385620][ T8601] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.420281][ T8601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.445223][ T8601] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.470719][ T8601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.508176][ T8601] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.538662][ T8601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.568131][ T8601] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.609277][ T8601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.843554][ T5614] Bluetooth: hci4: command tx timeout [ 226.888982][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.968482][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.003721][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.010870][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.077480][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.084608][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.187572][ T29] audit: type=1400 audit(1785897458.860:2638): avc: denied { mounton } for pid=8684 comm="syz.5.832" path="/file0" dev="ramfs" ino=33036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 227.713785][ T8706] tipc: Failed to remove unknown binding: 66,0,0/0:4050322053/4050322054 [ 227.746378][ T5768] sl0: header compression turned on [ 227.772280][ T8706] tipc: Failed to remove unknown binding: 66,0,0/0:4050322053/4050322054 [ 228.564137][ T29] audit: type=1400 audit(1785897460.230:2639): avc: denied { write } for pid=8709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.671485][ T8601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.814536][ T29] audit: type=1400 audit(1785897460.480:2640): avc: denied { write } for pid=8735 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.924160][ T5614] Bluetooth: hci4: command tx timeout [ 229.450391][ T8601] veth0_vlan: entered promiscuous mode [ 229.489366][ T8601] veth1_vlan: entered promiscuous mode [ 229.549680][ T8601] veth0_macvtap: entered promiscuous mode [ 229.579653][ T8601] veth1_macvtap: entered promiscuous mode [ 229.621890][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.662324][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.731727][ T29] audit: type=1400 audit(1785897461.400:2641): avc: denied { write } for pid=8744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.793754][ T5768] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.825127][ T5768] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.844761][ T5768] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.869330][ T5768] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.906967][ T29] audit: type=1400 audit(1785897461.580:2642): avc: denied { write } for pid=8760 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.058286][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.068735][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.110800][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.118715][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.269065][ T8766] netlink: 'syz.2.851': attribute type 11 has an invalid length. [ 230.496444][ T8770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.522779][ T8770] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.568451][ T8770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.701148][ T8770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.735702][ T8770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.802499][ T8770] veth1_vlan: left promiscuous mode [ 230.835101][ T8770] veth0_vlan: left promiscuous mode [ 230.866916][ T8770] veth0_vlan: entered promiscuous mode [ 230.907563][ T8770] veth1_vlan: entered promiscuous mode [ 230.956713][ T8770] veth1_macvtap: left promiscuous mode [ 230.975766][ T8770] veth0_macvtap: left promiscuous mode [ 230.999827][ T8770] veth0_macvtap: entered promiscuous mode [ 231.003203][ T5614] Bluetooth: hci4: command tx timeout [ 231.045709][ T8770] veth1_macvtap: entered promiscuous mode [ 231.174847][ T8770] 8021q: adding VLAN 0 to HW filter on device eth0 [ 231.216091][ T8770] 8021q: adding VLAN 0 to HW filter on device eth1 [ 231.290731][ T8770] 8021q: adding VLAN 0 to HW filter on device eth2 [ 231.345934][ T8770] 8021q: adding VLAN 0 to HW filter on device eth3 [ 231.383309][ T6006] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.804989][ T5991] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.013130][ T6006] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.031051][ T6006] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.227391][ T29] audit: type=1400 audit(1785897463.900:2643): avc: denied { connect } for pid=8805 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.321834][ T29] audit: type=1400 audit(1785897463.990:2644): avc: denied { getopt } for pid=8805 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.351324][ T8827] netlink: 'syz.6.856': attribute type 25 has an invalid length. [ 233.858261][ T8831] netlink: 'syz.6.860': attribute type 9 has an invalid length. [ 234.309164][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 234.322413][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 234.424465][ T8841] ceph: No mds server is up or the cluster is laggy [ 234.761978][ T8855] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 234.880027][ T8861] netlink: 'syz.0.868': attribute type 10 has an invalid length. [ 234.930661][ T8861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.868'. [ 235.122406][ T8855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.757173][ T8871] nbd: must specify a size in bytes for the device [ 235.800462][ T8871] xt_hashlimit: size too large, truncated to 1048576 [ 235.896039][ T8876] netlink: 'syz.6.875': attribute type 1 has an invalid length. [ 235.899184][ T8871] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.035727][ T8876] bond1 (unregistering): Released all slaves [ 236.111799][ T8882] netlink: 256 bytes leftover after parsing attributes in process `syz.2.876'. [ 236.303664][ T29] audit: type=1400 audit(1785897467.980:2645): avc: denied { map } for pid=8887 comm="syz.2.878" path="socket:[34219]" dev="sockfs" ino=34219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.437042][ T29] audit: type=1400 audit(1785897468.110:2646): avc: denied { setopt } for pid=8889 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.479493][ T29] audit: type=1400 audit(1785897468.130:2647): avc: denied { bind } for pid=8889 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.505018][ T29] audit: type=1400 audit(1785897468.130:2648): avc: denied { listen } for pid=8889 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.536968][ T29] audit: type=1400 audit(1785897468.200:2649): avc: denied { accept } for pid=8889 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.539077][ T5728] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 236.617379][ T29] audit: type=1400 audit(1785897468.280:2650): avc: denied { getopt } for pid=8889 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.649690][ T29] audit: type=1400 audit(1785897468.290:2651): avc: denied { ioctl } for pid=8892 comm="syz.2.882" path="socket:[33654]" dev="sockfs" ino=33654 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 236.753075][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 236.759778][ T5728] usb 1-1: config 0 has no interfaces? [ 236.768382][ T5728] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 236.787390][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.813188][ T5728] usb 1-1: config 0 descriptor?? [ 236.993106][ T5621] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 237.001688][ T8911] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 237.334371][ T5621] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.401021][ T5621] usb 6-1: config 0 has no interface number 0 [ 237.510533][ T5621] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 237.591826][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.665448][ T5621] usb 6-1: Product: syz [ 237.702037][ T5621] usb 6-1: Manufacturer: syz [ 237.754485][ T5621] usb 6-1: SerialNumber: syz [ 237.939498][ T5621] usb 6-1: config 0 descriptor?? [ 238.100328][ T5728] usb 1-1: USB disconnect, device number 7 [ 238.198583][ T29] audit: type=1400 audit(1785897469.870:2652): avc: denied { bind } for pid=8918 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.235381][ T5621] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 238.247910][ T5621] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 238.266450][ T29] audit: type=1400 audit(1785897469.930:2653): avc: denied { mount } for pid=8920 comm="syz.2.890" name="/" dev="pstore" ino=4239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 238.290307][ T5621] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 238.299290][ T5621] usb 6-1: media controller created [ 238.317982][ T5621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.365972][ T29] audit: type=1400 audit(1785897470.040:2654): avc: denied { watch watch_reads } for pid=8920 comm="syz.2.890" path="/" dev="pstore" ino=4239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 238.496219][ T8919] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.584036][ T5728] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 238.678008][ T8919] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.753872][ T5728] usb 7-1: Using ep0 maxpacket: 32 [ 238.781221][ T5728] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.813677][ T5728] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.856338][ T5728] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 238.890688][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.923571][ T5728] usb 7-1: Product: syz [ 238.939691][ T5728] usb 7-1: Manufacturer: syz [ 238.952666][ T5728] usb 7-1: SerialNumber: syz [ 238.970961][ T5728] usb 7-1: config 0 descriptor?? [ 239.134709][ T8919] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.281012][ T8919] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.409626][ T5621] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 239.609245][ T5621] usb 6-1: USB disconnect, device number 8 [ 239.646078][ T5619] udevd[5619]: setting owner of /dev/bus/usb/006/008 to uid=0, gid=0 failed: No such file or directory [ 239.813081][ T6006] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.842094][ T8957] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5608] was attempted by " [ 239.894843][ T5999] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.999406][ T5999] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.071424][ T5999] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.392712][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 240.420924][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 240.661300][ T8975] kvm: pic: single mode not supported [ 240.661319][ T8975] kvm: pic: level sensitive irq not supported [ 240.679585][ T8975] kvm: pic: single mode not supported [ 240.693298][ T8975] kvm: pic: single mode not supported [ 240.699487][ T8975] kvm: pic: level sensitive irq not supported [ 240.738614][ T8975] kvm: pic: single mode not supported [ 240.756262][ T8975] kvm: pic: single mode not supported [ 240.761679][ T8975] kvm: pic: level sensitive irq not supported [ 240.788333][ T8975] kvm: pic: single mode not supported [ 240.806038][ T8975] kvm: pic: single mode not supported [ 240.811473][ T8975] kvm: pic: level sensitive irq not supported [ 240.817197][ T8975] kvm: pic: single mode not supported [ 240.834789][ T8975] kvm: pic: single mode not supported [ 240.840219][ T8975] kvm: pic: level sensitive irq not supported [ 240.854384][ T8975] kvm: pic: single mode not supported [ 240.861058][ T8975] kvm: pic: level sensitive irq not supported [ 240.866855][ T8975] kvm: pic: level sensitive irq not supported [ 240.875843][ T8975] kvm: pic: level sensitive irq not supported [ 240.882375][ T8975] kvm: pic: level sensitive irq not supported [ 240.983148][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'. [ 241.423956][ T5727] usb 7-1: USB disconnect, device number 2 [ 242.226511][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.6.915'. [ 242.333549][ T9006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9006 comm=syz.6.915 [ 243.170696][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 243.170712][ T29] audit: type=1326 audit(1785897474.840:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9026 comm="syz.1.923" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1e2b9e019 code=0x0 [ 244.093064][ T5735] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 244.273044][ T5735] usb 1-1: Using ep0 maxpacket: 8 [ 244.294183][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.337527][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 244.370364][ T5735] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 244.389099][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.412129][ T5735] usb 1-1: config 0 descriptor?? [ 245.041906][ T5735] usbhid 1-1:0.0: can't add hid device: -71 [ 245.060957][ T5735] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 245.085160][ T5735] usb 1-1: USB disconnect, device number 8 [ 245.399506][ T9051] netlink: 'syz.5.931': attribute type 9 has an invalid length. [ 246.178370][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'. [ 246.275711][ T9058] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 246.832973][ T5735] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 246.995383][ T5735] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.060687][ T5735] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.106894][ T5735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.145765][ T5735] usb 6-1: config 0 descriptor?? [ 247.170128][ T5735] pwc: Askey VC010 type 2 USB webcam detected. [ 247.343667][ T5794] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 247.391233][ T29] audit: type=1400 audit(1785897479.060:2657): avc: denied { getopt } for pid=9082 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.504639][ T29] audit: type=1400 audit(1785897479.140:2658): avc: denied { write } for pid=9082 comm="syz.1.942" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.574350][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.575509][ T5794] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 247.600155][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.615878][ T29] audit: type=1400 audit(1785897479.150:2659): avc: denied { remove_name } for pid=9082 comm="syz.1.942" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.626331][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.939'. [ 247.654209][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.675664][ T5794] usb 7-1: Product: syz [ 247.687774][ T5794] usb 7-1: Manufacturer: syz [ 247.696826][ T29] audit: type=1400 audit(1785897479.150:2660): avc: denied { unlink } for pid=9082 comm="syz.1.942" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.727915][ T5794] usb 7-1: SerialNumber: syz [ 247.821583][ T5735] pwc: recv_control_msg error -71 req 02 val 2b00 [ 247.840891][ T5735] pwc: recv_control_msg error -71 req 02 val 2700 [ 247.862706][ T5735] pwc: recv_control_msg error -71 req 02 val 2c00 [ 247.869603][ T5728] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 247.883283][ T5735] pwc: recv_control_msg error -71 req 04 val 1000 [ 247.900274][ T5735] pwc: recv_control_msg error -71 req 04 val 1300 [ 247.916708][ T5735] pwc: recv_control_msg error -71 req 04 val 1400 [ 247.933477][ T5735] pwc: recv_control_msg error -71 req 02 val 2000 [ 247.940265][ T5735] pwc: recv_control_msg error -71 req 02 val 2100 [ 247.953357][ T5735] pwc: recv_control_msg error -71 req 04 val 1500 [ 247.970369][ T5735] pwc: recv_control_msg error -71 req 02 val 2500 [ 247.988940][ T5735] pwc: recv_control_msg error -71 req 02 val 2400 [ 248.003570][ T5735] pwc: recv_control_msg error -71 req 02 val 2600 [ 248.021568][ T5735] pwc: recv_control_msg error -71 req 02 val 2900 [ 248.033028][ T5735] pwc: recv_control_msg error -71 req 02 val 2800 [ 248.044463][ T5728] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 248.054559][ T5728] usb 2-1: config 0 has no interface number 0 [ 248.063243][ T5735] pwc: recv_control_msg error -71 req 04 val 1100 [ 248.082565][ T5728] usb 2-1: config 0 interface 41 has no altsetting 0 [ 248.090969][ T5735] pwc: recv_control_msg error -71 req 04 val 1200 [ 248.099733][ T5728] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 248.108925][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.120255][ T5735] pwc: Registered as video103. [ 248.132986][ T5728] usb 2-1: Product: syz [ 248.149010][ T5735] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 248.159477][ T5728] usb 2-1: Manufacturer: syz [ 248.166401][ T5794] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 248.185427][ T5728] usb 2-1: SerialNumber: syz [ 248.206087][ T5735] usb 6-1: USB disconnect, device number 9 [ 248.221217][ T5728] usb 2-1: config 0 descriptor?? [ 248.233070][ T5794] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 248.666953][ T5621] IPVS: starting estimator thread 0... [ 248.773202][ T9092] IPVS: using max 40 ests per chain, 96000 per kthread [ 248.923312][ T9099] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 248.936105][ T9081] IPVS: stopping backup sync thread 9099 ... [ 249.011441][ T5794] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 249.060519][ T5794] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 249.082235][ T5728] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 249.176513][ T5794] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.213469][ T5794] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 249.252539][ T5794] usb 7-1: USB disconnect, device number 3 [ 250.388154][ T5728] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 250.417311][ T5728] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 250.459703][ T5728] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 250.494528][ T5728] usb 2-1: USB disconnect, device number 15 [ 251.137815][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.961'. [ 251.743453][ T5728] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 252.003713][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 252.026997][ T5728] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.060191][ T5728] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.092410][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.125819][ T5728] usb 6-1: Product: syz [ 252.142326][ T5728] usb 6-1: Manufacturer: syz [ 252.150514][ T29] audit: type=1326 audit(1785897483.820:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.156356][ T5728] usb 6-1: SerialNumber: syz [ 252.230611][ T5735] IPVS: starting estimator thread 0... [ 252.239224][ T5728] usb 6-1: config 0 descriptor?? [ 252.251285][ T29] audit: type=1326 audit(1785897483.820:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.255557][ T9144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 252.346242][ T29] audit: type=1326 audit(1785897483.820:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.375376][ T9155] IPVS: using max 65 ests per chain, 156000 per kthread [ 252.388645][ T29] audit: type=1326 audit(1785897483.820:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.418660][ T29] audit: type=1326 audit(1785897483.860:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.450647][ T29] audit: type=1326 audit(1785897483.860:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.489480][ T29] audit: type=1326 audit(1785897483.860:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.522713][ T29] audit: type=1326 audit(1785897483.860:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.551120][ T29] audit: type=1326 audit(1785897483.860:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.578415][ T29] audit: type=1326 audit(1785897483.870:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.2.967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 252.883635][ T9173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.904200][ T9175] xfrm0: left allmulticast mode [ 252.928767][ T9175] xfrm0: entered allmulticast mode [ 252.952787][ T9175] team0: Port device xfrm0 added [ 253.008762][ T9173] tipc: Enabled bearer , priority 0 [ 254.223001][ T5728] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 254.388126][ T5728] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 254.423244][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 254.453715][ T5728] usb 2-1: Product: syz [ 254.466795][ T5728] usb 2-1: Manufacturer: syz [ 254.507297][ T5728] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input17 [ 254.520632][ T5727] usb 6-1: USB disconnect, device number 10 [ 255.415640][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.436462][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.763563][ T5610] usb 2-1: USB disconnect, device number 16 [ 255.853467][ T5727] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 256.014507][ T5727] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 256.014536][ T5727] usb 1-1: config 0 has no interface number 0 [ 256.014561][ T5727] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 256.014576][ T5727] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.014592][ T5727] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.015850][ T5727] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 256.015867][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 256.015880][ T5727] usb 1-1: Product: syz [ 256.015889][ T5727] usb 1-1: SerialNumber: syz [ 256.017606][ T5727] usb 1-1: config 0 descriptor?? [ 256.030653][ T5727] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 256.053419][ T5727] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input18 [ 256.244734][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 256.246893][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 256.247063][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 256.247076][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 256.247114][ T5727] usb 1-1: USB disconnect, device number 9 [ 256.249534][ T5727] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 257.183093][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 257.183108][ T29] audit: type=1400 audit(1785897488.850:2757): avc: denied { getopt } for pid=9230 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.370467][ T29] audit: type=1400 audit(1785897489.040:2758): avc: denied { write } for pid=9218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.558809][ T29] audit: type=1400 audit(1785897489.230:2759): avc: denied { write } for pid=9253 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.604688][ T5728] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 257.621579][ T29] audit: type=1804 audit(1785897489.290:2760): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.995" name="bus" dev="ramfs" ino=35535 res=1 errno=0 [ 257.694778][ T29] audit: type=1804 audit(1785897489.320:2761): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.995" name="bus" dev="ramfs" ino=35535 res=1 errno=0 [ 257.767560][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 257.784990][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.804611][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 257.819387][ T5728] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 257.848306][ T5728] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 257.862189][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.882858][ T5728] usb 3-1: config 0 descriptor?? [ 257.956267][ T29] audit: type=1400 audit(1785897489.630:2762): avc: denied { getopt } for pid=9251 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.084281][ T9271] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 258.128056][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.1.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.128094][ T9271] Tainted: [L]=SOFTLOCKUP [ 258.128103][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.128118][ T9271] Call Trace: [ 258.128126][ T9271] [ 258.128135][ T9271] dump_stack_lvl+0x100/0x190 [ 258.128170][ T9271] sysfs_warn_dup.cold+0x1c/0x28 [ 258.128203][ T9271] sysfs_create_dir_ns+0x24b/0x2b0 [ 258.128228][ T9271] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 258.128250][ T9271] ? find_held_lock+0x2b/0x80 [ 258.128272][ T9271] ? kobject_add_internal+0x25f/0x930 [ 258.128311][ T9271] ? kobject_add_internal+0x25f/0x930 [ 258.128351][ T9271] ? class_dir_child_ns_type+0xd/0x60 [ 258.128387][ T9271] kobject_add_internal+0x2c8/0x930 [ 258.128428][ T9271] kobject_add+0x16a/0x1e0 [ 258.128462][ T9271] ? __pfx_kobject_add+0x10/0x10 [ 258.128499][ T9271] ? get_device_parent+0x1b3/0x4c0 [ 258.128530][ T9271] ? kobject_put+0xb9/0x640 [ 258.128570][ T9271] device_add+0x294/0x1970 [ 258.128604][ T9271] ? lockdep_init_map_type+0x5c/0x250 [ 258.128632][ T9271] ? __pfx_device_add+0x10/0x10 [ 258.128664][ T9271] ? lockdep_init_map_type+0x5c/0x250 [ 258.128694][ T9271] ? __init_waitqueue_head+0xca/0x150 [ 258.128732][ T9271] tty_register_device_attr+0x388/0x7f0 [ 258.128762][ T9271] ? lockdep_init_map_type+0x5c/0x250 [ 258.128792][ T9271] ? __pfx_tty_register_device_attr+0x10/0x10 [ 258.128828][ T9271] ? tty_port_init+0x156/0x1c0 [ 258.128870][ T9271] gsm_activate_mux+0x155/0x2a0 [ 258.128902][ T9271] gsmld_ioctl+0x346/0x15c0 [ 258.128940][ T9271] ? kasan_quarantine_put+0x104/0x240 [ 258.128966][ T9271] ? __pfx_gsmld_ioctl+0x10/0x10 [ 258.129002][ T9271] ? __ldsem_down_read_nested+0xf3/0x890 [ 258.129044][ T9271] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 258.129087][ T9271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.129115][ T9271] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 258.129141][ T9271] ? __pfx_gsmld_ioctl+0x10/0x10 [ 258.129172][ T9271] tty_ioctl+0x11b4/0x1640 [ 258.129201][ T9271] ? __pfx_tty_ioctl+0x10/0x10 [ 258.129229][ T9271] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 258.129278][ T9271] ? __fget_files+0x215/0x3d0 [ 258.129302][ T9271] ? hook_file_ioctl_common+0x140/0x440 [ 258.129335][ T9271] ? selinux_file_ioctl+0x13b/0x290 [ 258.129366][ T9271] ? selinux_file_ioctl+0xb6/0x290 [ 258.129403][ T9271] ? __pfx_tty_ioctl+0x10/0x10 [ 258.129431][ T9271] __x64_sys_ioctl+0x18e/0x210 [ 258.129466][ T9271] do_syscall_64+0x115/0x870 [ 258.129495][ T9271] ? clear_bhb_loop+0x40/0x90 [ 258.129524][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.129547][ T9271] RIP: 0033:0x7fe1e2b9e019 [ 258.129567][ T9271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.129590][ T9271] RSP: 002b:00007fe1e3b31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.129613][ T9271] RAX: ffffffffffffffda RBX: 00007fe1e2e26090 RCX: 00007fe1e2b9e019 [ 258.129628][ T9271] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 258.129641][ T9271] RBP: 00007fe1e2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 258.129655][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.129668][ T9271] R13: 00007fe1e2e26128 R14: 00007fe1e2e26090 R15: 00007ffdfe3cf018 [ 258.129699][ T9271] [ 258.193252][ T9271] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 258.527576][ T29] audit: type=1400 audit(1785897490.190:2763): avc: denied { write } for pid=9260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.867553][ T29] audit: type=1400 audit(1785897490.540:2764): avc: denied { write } for pid=9279 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.943766][ T5728] usbhid 3-1:0.0: can't add hid device: -71 [ 258.953197][ T5728] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 258.992694][ T5728] usb 3-1: USB disconnect, device number 18 [ 259.877066][ T9302] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 259.958146][ T29] audit: type=1400 audit(1785897491.620:2765): avc: denied { write } for pid=9287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.182379][ T29] audit: type=1400 audit(1785897491.850:2766): avc: denied { write } for pid=9312 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.553005][ T5728] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.726654][ T5728] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 260.747743][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.772827][ T5728] usb 3-1: Product: syz [ 260.794507][ T5728] usb 3-1: Manufacturer: syz [ 260.813501][ T5728] usb 3-1: SerialNumber: syz [ 261.279374][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 261.305162][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 261.400181][ T5610] IPVS: starting estimator thread 0... [ 261.525586][ T9344] IPVS: using max 32 ests per chain, 76800 per kthread [ 261.804649][ T5610] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 261.958168][ T9365] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 261.968962][ T9319] IPVS: stopping backup sync thread 9365 ... [ 261.980160][ T5610] usb 6-1: Using ep0 maxpacket: 8 [ 261.999375][ T5610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.015325][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 262.032514][ T5610] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 262.060104][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 262.072819][ T5610] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 262.098837][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 262.101353][ T5610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.120255][ T5728] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 262.160448][ T5610] usb 6-1: config 0 descriptor?? [ 262.161714][ T5728] usb 3-1: USB disconnect, device number 19 [ 262.859746][ T5610] usbhid 6-1:0.0: can't add hid device: -71 [ 262.880912][ T9382] ip6gre1: entered promiscuous mode [ 262.881658][ T5610] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 262.892180][ T9382] ip6gre1: entered allmulticast mode [ 262.934083][ T5610] usb 6-1: USB disconnect, device number 11 [ 263.364076][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 263.364092][ T29] audit: type=1400 audit(1785897495.040:2771): avc: denied { mounton } for pid=9384 comm="syz.1.1019" path="/file0" dev="bpf" ino=36633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 263.398645][ T9389] overlayfs: upper fs does not support tmpfile. [ 263.493353][ T5610] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 263.511265][ T9394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9394 comm=syz.0.1031 [ 263.536772][ T9394] netlink: 'syz.0.1031': attribute type 3 has an invalid length. [ 263.544858][ T9394] netlink: 'syz.0.1031': attribute type 3 has an invalid length. [ 263.653017][ T5610] usb 3-1: Using ep0 maxpacket: 8 [ 263.666331][ T5610] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 263.685919][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 263.698125][ T5610] usb 3-1: Product: syz [ 263.702292][ T5610] usb 3-1: Manufacturer: syz [ 263.707158][ T5610] usb 3-1: SerialNumber: syz [ 263.715101][ T5610] usb 3-1: config 0 descriptor?? [ 263.745032][ T5610] gspca_main: sq905-2.14.0 probing 2770:9120 [ 264.135392][ T29] audit: type=1400 audit(1785897495.810:2772): avc: denied { execute } for pid=9387 comm="syz.2.1020" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 264.226844][ T5610] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 264.258545][ T5610] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 264.292812][ T5610] usb 3-1: USB disconnect, device number 20 [ 264.885413][ T5610] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 265.063009][ T5610] usb 6-1: Using ep0 maxpacket: 16 [ 265.095867][ T5610] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.165716][ T5610] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.210894][ T5610] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 265.273177][ T5610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.397097][ T5610] usb 6-1: config 0 descriptor?? [ 265.871642][ T5610] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 266.188677][ T29] audit: type=1804 audit(1785897497.860:2773): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1034" name="bus" dev="ramfs" ino=37900 res=1 errno=0 [ 266.255899][ T29] audit: type=1804 audit(1785897497.880:2774): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1034" name="bus" dev="ramfs" ino=37900 res=1 errno=0 [ 266.403500][ T5610] usb 6-1: USB disconnect, device number 12 [ 266.622114][ T9452] overlayfs: upper fs does not support tmpfile. [ 268.373159][ T5621] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 268.547204][ T5621] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.591219][ T5621] usb 3-1: config 0 has no interface number 0 [ 268.626063][ T5621] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 268.657999][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.678410][ T5621] usb 3-1: Product: syz [ 268.685551][ T5621] usb 3-1: Manufacturer: syz [ 268.697655][ T5621] usb 3-1: SerialNumber: syz [ 268.716844][ T5621] usb 3-1: config 0 descriptor?? [ 268.955557][ T5621] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 269.008867][ T5621] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 269.073576][ T5621] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 269.120565][ T5621] usb 3-1: media controller created [ 269.210429][ T5621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.331276][ T29] audit: type=1400 audit(1785897501.000:2775): avc: denied { create } for pid=9483 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 269.478048][ T29] audit: type=1400 audit(1785897501.080:2776): avc: denied { bind } for pid=9483 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.503027][ T5727] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 269.663145][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 269.706270][ T5727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.744293][ T5727] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.795590][ T5727] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 269.830780][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.841771][ T5727] usb 1-1: Product: syz [ 269.847677][ T5727] usb 1-1: Manufacturer: syz [ 269.852849][ T5727] usb 1-1: SerialNumber: syz [ 269.883615][ T5727] usb 1-1: config 0 descriptor?? [ 270.285896][ T5621] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 270.398159][ T5621] usb 3-1: USB disconnect, device number 21 [ 270.487204][ T29] audit: type=1400 audit(1785897502.160:2777): avc: denied { lock } for pid=9495 comm="syz.1.1053" path="socket:[38031]" dev="sockfs" ino=38031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 270.925897][ T29] audit: type=1400 audit(1785897502.590:2778): avc: denied { read write } for pid=9500 comm="syz.2.1054" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.015698][ T29] audit: type=1400 audit(1785897502.590:2779): avc: denied { open } for pid=9500 comm="syz.2.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.093343][ T29] audit: type=1400 audit(1785897502.600:2780): avc: denied { ioctl } for pid=9500 comm="syz.2.1054" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.172975][ T5728] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 271.180072][ T29] audit: type=1400 audit(1785897502.740:2781): avc: denied { lock } for pid=9495 comm="syz.1.1053" path="socket:[38031]" dev="sockfs" ino=38031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 271.251941][ T29] audit: type=1400 audit(1785897502.740:2782): avc: denied { read write } for pid=8601 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.331572][ T29] audit: type=1400 audit(1785897502.740:2783): avc: denied { open } for pid=8601 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.333195][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 271.431163][ T29] audit: type=1400 audit(1785897502.740:2784): avc: denied { ioctl } for pid=8601 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.461470][ T5728] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 271.491050][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.546224][ T5728] usb 3-1: config 0 descriptor?? [ 271.604700][ T5728] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 271.647815][ T5728] usb 3-1: Detected SIO [ 271.692364][ T5728] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 271.833277][ T5727] usb 3-1: USB disconnect, device number 22 [ 271.873460][ T5727] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 271.898455][ T5727] ftdi_sio 3-1:0.0: device disconnected [ 272.530731][ T5610] usb 1-1: USB disconnect, device number 10 [ 274.205287][ T9539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.240375][ T9547] sctp: [Deprecated]: syz.2.1067 (pid 9547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.240375][ T9547] Use struct sctp_sack_info instead [ 274.261359][ T9540] syz_tun (unregistering): left allmulticast mode [ 274.338690][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 274.338705][ T29] audit: type=1400 audit(1785897506.010:2891): avc: denied { read } for pid=9548 comm="syz.1.1068" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.391141][ T9541] bond1: (slave ip6erspan0): making interface the new active one [ 274.411667][ T9541] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 274.453251][ T29] audit: type=1400 audit(1785897506.010:2892): avc: denied { open } for pid=9548 comm="syz.1.1068" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.484950][ T29] audit: type=1400 audit(1785897506.020:2893): avc: denied { ioctl } for pid=9548 comm="syz.1.1068" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.092532][ T9549] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 275.106653][ T9563] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 275.159155][ T29] audit: type=1400 audit(1785897506.830:2894): avc: denied { map } for pid=9558 comm="syz.5.1071" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 275.197100][ T9549] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 275.230619][ T29] audit: type=1400 audit(1785897506.860:2895): avc: denied { read write } for pid=9558 comm="syz.5.1071" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 275.461909][ T29] audit: type=1400 audit(1785897507.130:2896): avc: denied { bind } for pid=9567 comm="syz.5.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.467153][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 275.516061][ T29] audit: type=1400 audit(1785897507.130:2897): avc: denied { setopt } for pid=9567 comm="syz.5.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.561519][ T29] audit: type=1400 audit(1785897507.130:2898): avc: denied { write } for pid=9567 comm="syz.5.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.683028][ T5610] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 275.700435][ T29] audit: type=1400 audit(1785897507.370:2899): avc: denied { create } for pid=9572 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 275.725718][ T29] audit: type=1400 audit(1785897507.370:2900): avc: denied { setopt } for pid=9572 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 275.864432][ T5610] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 275.885424][ T5610] usb 3-1: config 2 has no interface number 0 [ 275.908533][ T5610] usb 3-1: config 2 interface 43 has no altsetting 0 [ 275.928311][ T5610] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 275.940110][ T9582] syzkaller0: entered promiscuous mode [ 275.942944][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.955365][ T9582] syzkaller0: entered allmulticast mode [ 275.956379][ T5610] usb 3-1: Product: syz [ 275.982794][ T5610] usb 3-1: Manufacturer: syz [ 275.990237][ T5610] usb 3-1: SerialNumber: syz [ 277.004849][ T5610] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 277.048936][ T5610] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 277.157658][ T5610] usb 3-1: USB disconnect, device number 23 [ 278.913385][ T5728] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 279.061658][ T9648] block nbd6: shutting down sockets [ 279.092689][ T5728] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 279.105154][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.114109][ T5728] usb 1-1: Product: syz [ 279.124922][ T5728] usb 1-1: Manufacturer: syz [ 279.135538][ T5728] usb 1-1: SerialNumber: syz [ 279.240187][ T9660] binder: 9658:9660 unknown command 0 [ 279.255254][ T9660] binder: 9658:9660 ioctl c0306201 200000004a40 returned -22 [ 279.833851][ T5728] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 279.853072][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 279.853085][ T29] audit: type=1326 audit(1785897511.520:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.2.1101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7fc00000 [ 280.056015][ T29] audit: type=1400 audit(1785897511.720:2946): avc: denied { read write } for pid=9670 comm="syz.2.1110" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 280.111336][ T29] audit: type=1400 audit(1785897511.720:2947): avc: denied { open } for pid=9670 comm="syz.2.1110" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 281.024344][ T29] audit: type=1400 audit(1785897511.830:2948): avc: denied { append } for pid=9670 comm="syz.2.1110" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 281.072498][ T29] audit: type=1400 audit(1785897511.840:2949): avc: denied { read write } for pid=9670 comm="syz.2.1110" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 281.110262][ T29] audit: type=1400 audit(1785897511.840:2950): avc: denied { open } for pid=9670 comm="syz.2.1110" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 281.135789][ T29] audit: type=1400 audit(1785897511.890:2951): avc: denied { read write } for pid=9638 comm="syz.0.1098" name="lp0" dev="devtmpfs" ino=3286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 281.163677][ T29] audit: type=1400 audit(1785897511.900:2952): avc: denied { open } for pid=9638 comm="syz.0.1098" path="/dev/usb/lp0" dev="devtmpfs" ino=3286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 281.202991][ T29] audit: type=1400 audit(1785897512.690:2953): avc: denied { read write } for pid=9678 comm="syz.6.1112" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 281.314500][ T29] audit: type=1400 audit(1785897512.690:2954): avc: denied { open } for pid=9678 comm="syz.6.1112" path="/dev/video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 282.193676][ T5735] usb 1-1: USB disconnect, device number 11 [ 282.255568][ T5735] usblp0: removed [ 282.698673][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 282.933471][ T5621] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 283.104552][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.123290][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.134044][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.154618][ T5621] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.171386][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.194420][ T5621] usb 1-1: config 0 descriptor?? [ 283.666595][ T5621] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 283.723723][ T5735] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 283.894906][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 283.920168][ T5735] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 283.948134][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.974625][ T5735] usb 3-1: config 0 descriptor?? [ 283.989298][ T5735] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 284.461751][ T5735] gspca_vc032x: reg_r err -71 [ 284.482559][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.495286][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.505381][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.514967][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.525489][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.536167][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.543072][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.548511][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.554108][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.559543][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.565574][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.571054][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.581875][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.591029][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.599765][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.609274][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.620250][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.628191][ T5735] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.640184][ T5735] gspca_vc032x: Unknown sensor... [ 284.655273][ T5735] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 284.685286][ T5735] usb 3-1: USB disconnect, device number 24 [ 285.028033][ T5727] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 285.200068][ T5727] usb 7-1: Using ep0 maxpacket: 32 [ 285.256810][ T5727] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 285.274868][ T5727] usb 7-1: config 0 has no interface number 0 [ 285.292782][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 285.292796][ T29] audit: type=1400 audit(1785897516.960:2968): avc: denied { create } for pid=9759 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.321993][ T5727] usb 7-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 285.343218][ T5727] usb 7-1: config 0 interface 89 has no altsetting 0 [ 285.354373][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 285.360962][ T29] audit: type=1400 audit(1785897517.010:2969): avc: denied { setopt } for pid=9759 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.384709][ T29] audit: type=1400 audit(1785897517.010:2970): avc: denied { read } for pid=9759 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.406759][ T5727] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 285.425850][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.447555][ T5727] usb 7-1: Product: syz [ 285.456240][ T29] audit: type=1400 audit(1785897517.080:2971): avc: denied { write } for pid=9759 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.477488][ T5727] usb 7-1: Manufacturer: syz [ 285.492253][ T5727] usb 7-1: SerialNumber: syz [ 285.539695][ T5727] usb 7-1: config 0 descriptor?? [ 285.555238][ T9748] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 286.019233][ T5727] hub 7-1:0.89: bad descriptor, ignoring hub [ 286.025424][ T5727] hub 7-1:0.89: probe with driver hub failed with error -5 [ 286.033854][ T5727] option 7-1:0.89: GSM modem (1-port) converter detected [ 286.050838][ T5727] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 286.635527][ T5735] usb 1-1: USB disconnect, device number 12 [ 286.935519][ T29] audit: type=1400 audit(1785897518.600:2972): avc: denied { mmap_zero } for pid=9777 comm="syz.2.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 287.102423][ T29] audit: type=1400 audit(1785897518.770:2973): avc: denied { create } for pid=9780 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.150049][ T29] audit: type=1400 audit(1785897518.770:2974): avc: denied { bind } for pid=9780 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.219953][ T29] audit: type=1400 audit(1785897518.770:2975): avc: denied { listen } for pid=9780 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.244418][ T29] audit: type=1400 audit(1785897518.770:2976): avc: denied { connect } for pid=9780 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.307362][ T29] audit: type=1400 audit(1785897518.980:2977): avc: denied { create } for pid=9785 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 287.373863][ T9788] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1147'. [ 287.693147][ T5735] usb 7-1: USB disconnect, device number 4 [ 287.703694][ T5735] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 287.731128][ T5735] option 7-1:0.89: device disconnected [ 288.442859][ T9666] syz.6.1108 (9666) used greatest stack depth: 19608 bytes left [ 290.494306][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 290.494322][ T29] audit: type=1400 audit(1785897522.170:3025): avc: denied { setopt } for pid=9816 comm="syz.0.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.436444][ T29] audit: type=1400 audit(1785897523.110:3026): avc: denied { write } for pid=9833 comm="syz.2.1160" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 291.462889][ T9835] binder: BINDER_SET_CONTEXT_MGR already set [ 291.610333][ T9835] binder: 9833:9835 ioctl 4018620d 200000004a80 returned -16 [ 291.702503][ T29] audit: type=1400 audit(1785897523.370:3027): avc: denied { write } for pid=9842 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 291.881906][ T9849] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 291.902704][ T29] audit: type=1400 audit(1785897523.570:3028): avc: denied { bind } for pid=9850 comm="syz.0.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.986741][ T29] audit: type=1400 audit(1785897523.660:3029): avc: denied { create } for pid=9853 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 292.006170][ T9852] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.028942][ T29] audit: type=1400 audit(1785897523.690:3030): avc: denied { ioctl } for pid=9853 comm="syz.1.1168" path="socket:[38648]" dev="sockfs" ino=38648 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 292.071987][ T29] audit: type=1400 audit(1785897523.690:3031): avc: denied { read } for pid=9853 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 292.091734][ T5610] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 292.125484][ T9849] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.146310][ T29] audit: type=1400 audit(1785897523.820:3032): avc: denied { write } for pid=9853 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 292.220391][ T9849] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.253457][ T5610] usb 3-1: Using ep0 maxpacket: 8 [ 292.260911][ T9852] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.261660][ T5610] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.305813][ T5610] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 292.314508][ T5610] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.327113][ T5610] usb 3-1: config 0 has no interface number 0 [ 292.333515][ T5610] usb 3-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.347196][ T5610] usb 3-1: config 0 interface 49 has no altsetting 0 [ 292.374678][ T9849] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.391956][ T5610] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 292.402115][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.413792][ T5610] usb 3-1: Product: syz [ 292.422295][ T5610] usb 3-1: Manufacturer: syz [ 292.432093][ T5610] usb 3-1: SerialNumber: syz [ 292.445668][ T9852] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.468931][ T5610] usb 3-1: config 0 descriptor?? [ 292.619498][ T9849] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.766702][ T9849] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.820687][ T29] audit: type=1400 audit(1785897524.460:3033): avc: denied { create } for pid=9846 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.842060][ T29] audit: type=1400 audit(1785897524.460:3034): avc: denied { read } for pid=9846 comm="syz.2.1165" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 292.854456][ T9852] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.889148][ T5610] rtsx_usb 3-1:0.49: probe with driver rtsx_usb failed with error -22 [ 293.376545][ T5610] usb 3-1: USB disconnect, device number 25 [ 293.832694][ T9882] netlink: 'syz.5.1175': attribute type 1 has an invalid length. [ 293.856808][ T9882] netlink: 'syz.5.1175': attribute type 4 has an invalid length. [ 293.866280][ T9882] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.1175'. [ 294.165239][ T9893] netlink: 'syz.2.1181': attribute type 12 has an invalid length. [ 294.423274][ T9903] fuse: fd is not a fuse device [ 294.546798][ T9901] smpboot: CPU 1 is now offline [ 295.094164][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1192'. [ 295.667466][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 295.667478][ T29] audit: type=1400 audit(1785897527.340:3064): avc: denied { create } for pid=9930 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 295.754763][ T5727] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 295.772700][ T29] audit: type=1400 audit(1785897527.340:3065): avc: denied { getopt } for pid=9930 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 296.132286][ T29] audit: type=1400 audit(1785897527.800:3066): avc: denied { setopt } for pid=9943 comm="syz.1.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 296.154825][ T5727] usb 7-1: Using ep0 maxpacket: 32 [ 296.186017][ T5727] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 296.273542][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.298934][ T29] audit: type=1400 audit(1785897527.830:3067): avc: denied { read } for pid=9943 comm="syz.1.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 296.340911][ T5727] usb 7-1: config 0 descriptor?? [ 296.520057][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 296.588241][ T5727] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 296.620119][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.664422][ T9955] bridge2: port 1(veth5) entered blocking state [ 296.727534][ T5727] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 296.748492][ T29] audit: type=1400 audit(1785897528.350:3068): avc: denied { create } for pid=9957 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.785818][ T9955] bridge2: port 1(veth5) entered disabled state [ 296.803652][ T5727] usb 7-1: media controller created [ 296.828253][ T9955] veth5: entered allmulticast mode [ 296.846806][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.858462][ T9955] veth5: entered promiscuous mode [ 296.863810][ T29] audit: type=1400 audit(1785897528.350:3069): avc: denied { setopt } for pid=9957 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.912753][ T5727] az6027: usb out operation failed. (-71) [ 296.934120][ T5727] az6027: usb out operation failed. (-71) [ 296.940508][ T29] audit: type=1400 audit(1785897528.350:3070): avc: denied { name_bind } for pid=9957 comm="syz.1.1206" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 296.963256][ T5727] stb0899_attach: Driver disabled by Kconfig [ 296.974325][ T5728] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 296.983231][ T9958] bridge2: port 2(veth0_to_bond) entered blocking state [ 296.994101][ T5727] az6027: no front-end attached [ 296.994101][ T5727] [ 297.008405][ T9958] bridge2: port 2(veth0_to_bond) entered disabled state [ 297.017291][ T5727] az6027: usb out operation failed. (-71) [ 297.023262][ T9958] veth0_to_bond: entered allmulticast mode [ 297.029141][ T5727] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 297.036884][ T29] audit: type=1400 audit(1785897528.470:3071): avc: denied { bind } for pid=9929 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.058249][ T9958] veth0_to_bond: entered promiscuous mode [ 297.065254][ T5727] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 297.099137][ T5727] dvb-usb: schedule remote query interval to 400 msecs. [ 297.108060][ T29] audit: type=1400 audit(1785897528.470:3072): avc: denied { write } for pid=9929 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.145536][ T5727] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 297.155051][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 297.188212][ T5728] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 297.205045][ T5727] usb 7-1: USB disconnect, device number 5 [ 297.215471][ T5728] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.228162][ T29] audit: type=1400 audit(1785897528.770:3073): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=3324 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.260675][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.285021][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.296641][ T5727] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 297.307949][ T5728] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.379520][ T5728] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.422252][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.674205][ T5728] usb 1-1: GET_CAPABILITIES returned 0 [ 297.700841][ T5728] usbtmc 1-1:16.0: can't read capabilities [ 297.833745][ T9982] syzkaller0: entered promiscuous mode [ 297.858187][ T9982] syzkaller0: entered allmulticast mode [ 297.901773][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.927101][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.936148][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.945179][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.954205][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.963230][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.972255][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.981277][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 297.990299][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 298.000372][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 298.009412][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 298.018435][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 298.027457][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 298.036480][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 298.045504][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 298.063156][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 298.095842][ T5728] usb 1-1: USB disconnect, device number 13 [ 300.826663][ T9992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 300.893867][ T5727] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 301.053654][ T5728] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 301.083236][ T5727] usb 1-1: Using ep0 maxpacket: 16 [ 301.106400][ T5727] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.151730][ T5727] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.179151][ T5727] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 301.223758][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.246204][ T5728] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.271938][ T5727] usb 1-1: config 0 descriptor?? [ 301.298513][ T5728] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 301.363232][ T5728] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.402808][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.445894][ T5728] usb 6-1: Product: syz [ 301.467399][ T5728] usb 6-1: Manufacturer: syz [ 301.490338][ T5728] usb 6-1: SerialNumber: syz [ 301.527704][ T5728] cdc_mbim 6-1:1.0: skipping garbage [ 301.787925][T10013] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 301.795328][ T5727] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 302.293269][ T5727] usb 1-1: USB disconnect, device number 14 [ 302.498238][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 302.498252][ T29] audit: type=1400 audit(1785897534.170:3082): avc: denied { write } for pid=10018 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.581764][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 302.637930][T10013] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 302.675089][ T29] audit: type=1400 audit(1785897534.200:3083): avc: denied { bind } for pid=10018 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.699767][T10022] (NULL device *): [drm] All encoders must have at least one possible CRTC [ 302.731155][ T5728] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 302.803962][ T29] audit: type=1400 audit(1785897534.210:3084): avc: denied { mount } for pid=10021 comm="syz.6.1227" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 302.872701][ T5728] wwan wwan0: port wwan0mbim0 attached [ 302.952022][ T29] audit: type=1400 audit(1785897534.210:3085): avc: denied { search } for pid=10021 comm="syz.6.1227" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.057585][ T5728] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, da:d7:d4:2d:83:e8 [ 303.082856][ T29] audit: type=1400 audit(1785897534.210:3086): avc: denied { search } for pid=10021 comm="syz.6.1227" name="vkms" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.161928][ T5728] usb 6-1: USB disconnect, device number 13 [ 303.167977][ T1236] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.367506][ T29] audit: type=1400 audit(1785897534.210:3087): avc: denied { write search } for pid=10021 comm="syz.6.1227" name="vkms" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.390710][ T1236] usb 7-1: Using ep0 maxpacket: 8 [ 303.578223][ T5728] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 303.597930][ T1236] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 303.648804][ T1236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.683741][ T29] audit: type=1400 audit(1785897534.210:3088): avc: denied { add_name } for pid=10021 comm="syz.6.1227" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.717631][ T1236] usb 7-1: Product: syz [ 303.743093][ T1236] usb 7-1: Manufacturer: syz [ 303.768534][ T1236] usb 7-1: SerialNumber: syz [ 303.809680][ T29] audit: type=1400 audit(1785897534.210:3089): avc: denied { create } for pid=10021 comm="syz.6.1227" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 303.850706][ T1236] usb 7-1: config 0 descriptor?? [ 303.909315][ T5728] wwan wwan0: port wwan0mbim0 disconnected [ 303.938943][ T29] audit: type=1400 audit(1785897534.240:3090): avc: denied { search } for pid=10021 comm="syz.6.1227" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.107349][ T1236] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 304.154168][ T29] audit: type=1400 audit(1785897534.240:3091): avc: denied { search } for pid=10021 comm="syz.6.1227" name="vkms" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 305.483019][T10067] syzkaller0: entered promiscuous mode [ 305.521534][T10067] syzkaller0: entered allmulticast mode [ 305.607247][ T1236] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 305.678863][ T1236] usb 7-1: USB disconnect, device number 6 [ 305.899152][T10070] cifs: Unknown parameter 'timeo' [ 306.133714][T10082] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 306.346902][ T1236] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 306.557614][T10082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.731632][ T1236] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 306.756664][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 306.796173][ T1236] usb 1-1: Product: syz [ 306.809778][ T1236] usb 1-1: SerialNumber: syz [ 306.832009][ T1236] usb 1-1: config 0 descriptor?? [ 307.067663][ T1236] hso 1-1:0.0: Failed to find INT IN ep [ 307.379562][ T5727] usb 1-1: USB disconnect, device number 15 [ 307.540936][T10112] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 307.550314][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 307.550323][ T29] audit: type=1400 audit(1785897539.210:3144): avc: denied { execute } for pid=10111 comm="syz.5.1260" path="/184/file0" dev="tmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.617940][T10112] ref_ctr increment failed for inode: 0x3cd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ed04c80 [ 307.763039][T10118] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 307.787418][ T29] audit: type=1804 audit(1785897539.210:3145): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1260" name="/newroot/184/file0" dev="tmpfs" ino=973 res=1 errno=0 [ 307.838600][T10118] ref_ctr decrement failed for inode: 0x3cd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ed04c80 [ 307.905300][T10118] uprobe: syz.5.1260:10118 failed to unregister, leaking uprobe [ 308.334153][ T5727] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 308.494499][ T5727] usb 1-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 0.00 [ 308.531764][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.785035][ T5727] usb 1-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 308.861664][ T29] audit: type=1400 audit(1785897540.530:3146): avc: denied { create } for pid=10140 comm="syz.6.1266" name="#1c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 308.957454][ T29] audit: type=1400 audit(1785897540.570:3147): avc: denied { link } for pid=10140 comm="syz.6.1266" name="#1c" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.102183][T10145] binder_alloc: 10144: binder_alloc_buf, no vma [ 309.123263][ T29] audit: type=1400 audit(1785897540.580:3148): avc: denied { rename } for pid=10140 comm="syz.6.1266" name="#1d" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.200292][T10147] syzkaller0: entered promiscuous mode [ 309.227464][T10147] syzkaller0: entered allmulticast mode [ 309.419757][T10152] ve: renamed from veth0_vlan [ 310.709711][ T29] audit: type=1400 audit(1785897541.450:3149): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.883918][ T29] audit: type=1400 audit(1785897541.450:3150): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.041746][ T29] audit: type=1400 audit(1785897541.450:3151): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.178170][ T29] audit: type=1400 audit(1785897541.450:3152): avc: denied { read } for pid=5272 comm="dhcpcd" name="n53" dev="tmpfs" ino=6982 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 311.296853][ T29] audit: type=1400 audit(1785897542.140:3154): avc: denied { mount } for pid=10155 comm="syz.5.1271" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 311.871822][T10184] netlink: 'syz.2.1277': attribute type 9 has an invalid length. [ 312.297925][ T5272] ve: left promiscuous mode [ 312.326494][ T5728] ve: entered promiscuous mode [ 312.503567][ T5728] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 312.523783][ T5727] dvb_usb_rtl28xxu 1-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 312.686025][ T5728] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 312.716667][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 312.758797][ T5727] usb 1-1: USB disconnect, device number 16 [ 312.773989][ T5728] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 312.828608][ T5728] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 312.863982][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.904458][ T5728] usb 3-1: config 0 descriptor?? [ 312.939808][T10193] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 313.097722][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 313.097732][ T29] audit: type=1400 audit(1785897544.770:3170): avc: denied { write } for pid=10204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.499358][ T29] audit: type=1400 audit(1785897545.170:3171): avc: denied { write } for pid=10223 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.083150][ T5727] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 314.231039][ T5728] usbhid 3-1:0.0: can't add hid device: -71 [ 314.251968][ T5728] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 314.272733][ T5727] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.305245][ T5728] usb 3-1: USB disconnect, device number 26 [ 314.327129][ T5727] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 314.385982][ T5727] usb 7-1: config 0 interface 0 has no altsetting 0 [ 314.421240][ T5727] usb 7-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 314.460436][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.511237][ T5727] usb 7-1: config 0 descriptor?? [ 314.538353][T10218] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 314.775786][ T5727] usbhid 7-1:0.0: can't add hid device: -71 [ 314.821868][ T5727] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 314.882110][ T5727] usb 7-1: USB disconnect, device number 7 [ 314.894384][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1289'. [ 314.911235][T10257] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1290'. [ 315.236611][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'. [ 315.334149][ T29] audit: type=1400 audit(1785897547.010:3172): avc: denied { mount } for pid=10269 comm="syz.1.1296" name="/" dev="gadgetfs" ino=8260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 316.408418][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.414795][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.425797][ T29] audit: type=1400 audit(1785897548.070:3173): avc: denied { write } for pid=10276 comm="syz.6.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 316.637813][ T29] audit: type=1400 audit(1785897548.310:3174): avc: denied { getopt } for pid=10282 comm="syz.6.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 316.750716][T10286] fuse: fd is not a fuse device [ 316.772701][ T29] audit: type=1400 audit(1785897548.340:3175): avc: denied { ioctl } for pid=10282 comm="syz.6.1300" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 317.174770][T10291] sctp: [Deprecated]: syz.6.1303 (pid 10291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.174770][T10291] Use struct sctp_sack_info instead [ 317.845033][ T29] audit: type=1400 audit(1785897549.520:3176): avc: denied { append } for pid=10306 comm="syz.0.1309" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 318.051538][ T29] audit: type=1400 audit(1785897549.720:3177): avc: denied { sys_module } for pid=10306 comm="syz.0.1309" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 318.294594][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 318.334532][ T29] audit: type=1400 audit(1785897550.000:3178): avc: denied { write } for pid=10294 comm="syz.2.1304" path="socket:[42781]" dev="sockfs" ino=42781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 318.383991][T10317] SET target dimension over the limit! [ 319.293130][ T5727] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 319.552985][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 319.603315][ T5727] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 319.770222][ T5727] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.679960][ T5727] usb 1-1: config 0 interface 0 has no altsetting 0 [ 320.718735][ T5727] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 320.787734][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.858303][ T5727] usb 1-1: config 0 descriptor?? [ 320.905799][ T29] audit: type=1400 audit(1785897552.580:3179): avc: denied { connect } for pid=10350 comm="syz.6.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.016590][ T29] audit: type=1400 audit(1785897552.600:3180): avc: denied { setopt } for pid=10350 comm="syz.6.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.208432][T10360] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1337'. [ 321.230606][T10362] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 321.269503][ T29] audit: type=1400 audit(1785897552.940:3181): avc: denied { search } for pid=10361 comm="syz.6.1327" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 321.317394][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.351449][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.390009][ T29] audit: type=1400 audit(1785897552.940:3182): avc: denied { write } for pid=10361 comm="syz.6.1327" name="trace_marker" dev="tracefs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 321.426733][ T5728] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 321.458642][ T5727] usbhid 1-1:0.0: can't add hid device: -71 [ 321.488302][ T5727] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 321.508481][ T29] audit: type=1400 audit(1785897552.940:3183): avc: denied { open } for pid=10361 comm="syz.6.1327" path="/94/debug/tracing/trace_marker" dev="tracefs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 321.538129][ T5727] usb 1-1: USB disconnect, device number 17 [ 321.554379][T10371] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 321.611685][T10368] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 321.619660][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 321.631009][ T5728] usb 3-1: config 0 has no interfaces? [ 321.637933][ T5728] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 321.657061][T10368] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 321.673623][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.706106][ T5728] usb 3-1: config 0 descriptor?? [ 322.191876][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1333'. [ 322.202787][ T5728] usb 3-1: USB disconnect, device number 27 [ 322.336849][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.544559][ T5727] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 322.670395][T10397] bridge0: left allmulticast mode [ 322.698840][T10397] bridge0: port 1(vlan2) entered blocking state [ 322.705204][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 322.723933][ T5727] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 322.737319][T10397] bridge0: port 1(vlan2) entered disabled state [ 322.755106][ T5727] usb 1-1: config 0 has no interface number 0 [ 322.765447][T10397] vlan2: entered allmulticast mode [ 322.782443][ T5727] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 322.798283][T10397] geneve0: entered allmulticast mode [ 322.831299][ T5727] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 322.907345][ T5727] usb 1-1: config 0 interface 49 has no altsetting 0 [ 322.962001][ T5727] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 323.118402][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.308449][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1338'. [ 323.327740][ T5727] usb 1-1: config 0 descriptor?? [ 323.672436][ T5727] usb 1-1: string descriptor 0 read error: -71 [ 323.739443][ T5727] usb 1-1: USB disconnect, device number 18 [ 324.148605][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'. [ 324.202191][ T29] audit: type=1400 audit(1785897555.870:3184): avc: denied { watch watch_reads } for pid=10421 comm="syz.5.1346" path="/207" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 324.302739][T10424] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1347'. [ 324.347853][ T29] audit: type=1400 audit(1785897556.020:3185): avc: denied { getopt } for pid=10412 comm="syz.6.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.730479][ T29] audit: type=1400 audit(1785897556.400:3186): avc: denied { accept } for pid=10436 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.899008][ T29] audit: type=1400 audit(1785897556.430:3187): avc: denied { write } for pid=10436 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.113633][ T29] audit: type=1400 audit(1785897556.480:3188): avc: denied { read } for pid=10436 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.133166][T10428] serio: Serial port ttyS3 [ 325.298821][ T29] audit: type=1400 audit(1785897556.520:3189): avc: denied { watch } for pid=10439 comm="syz.6.1354" path="/101/bus/file1" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 325.471602][ T29] audit: type=1400 audit(1785897556.520:3190): avc: denied { watch_sb watch_reads } for pid=10439 comm="syz.6.1354" path="/101/bus/file1" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 325.649935][ T29] audit: type=1400 audit(1785897556.530:3191): avc: denied { ioctl } for pid=10436 comm="syz.1.1352" path="socket:[43445]" dev="sockfs" ino=43445 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.704350][ T5727] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 325.850229][T10466] tipc: Failed to remove unknown binding: 66,0,0/0:3615367345/3615367347 [ 325.891149][T10466] tipc: Failed to remove unknown binding: 66,0,0/0:3615367345/3615367346 [ 325.908906][ T29] audit: type=1400 audit(1785897557.570:3192): avc: denied { write } for pid=10444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.954146][ T5727] usb 3-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 325.970309][T10466] tipc: Failed to remove unknown binding: 66,0,0/0:3615367345/3615367347 [ 326.001113][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.015119][T10466] tipc: Failed to remove unknown binding: 66,0,0/0:3615367345/3615367346 [ 326.041752][ T5727] usb 3-1: Product: syz [ 326.075330][ T5727] usb 3-1: Manufacturer: syz [ 326.105623][ T5727] usb 3-1: SerialNumber: syz [ 326.146256][ T29] audit: type=1400 audit(1785897557.820:3193): avc: denied { write } for pid=10470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.175390][ T5727] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 326.390247][ T5727] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 326.408200][T10482] netlink: 'syz.5.1362': attribute type 1 has an invalid length. [ 326.435715][ T5727] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 326.489101][ T5727] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 326.504560][T10482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.526808][ T5727] usb 3-1: media controller created [ 326.549112][T10487] bond2: (slave geneve2): making interface the new active one [ 326.564599][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.602876][T10487] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 326.867551][T10496] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x04 [ 327.686713][ T5727] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 327.888741][ T5727] usb 3-1: USB disconnect, device number 28 [ 328.565791][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1390'. [ 328.800320][T10546] bridge1: port 1(veth0_to_bond) entered blocking state [ 328.898906][T10546] bridge1: port 1(veth0_to_bond) entered disabled state [ 328.956343][T10546] veth0_to_bond: entered allmulticast mode [ 329.000898][T10546] veth0_to_bond: entered promiscuous mode [ 329.267532][T10562] syzkaller0: left promiscuous mode [ 329.297794][T10562] syzkaller0: left allmulticast mode [ 329.385637][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 329.385646][ T29] audit: type=1400 audit(1785897561.060:3197): avc: denied { watch_mount } for pid=10564 comm="syz.6.1385" path="/108/file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 329.613891][ T29] audit: type=1400 audit(1785897561.120:3198): avc: denied { write } for pid=10565 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.029775][ T29] audit: type=1400 audit(1785897562.110:3199): avc: denied { create } for pid=10584 comm="syz.1.1392" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 331.184853][ T29] audit: type=1400 audit(1785897562.260:3200): avc: denied { mounton } for pid=10584 comm="syz.1.1392" path="/300/file0" dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 331.320488][T10596] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 331.350629][ T29] audit: type=1400 audit(1785897562.720:3201): avc: denied { unlink } for pid=5609 comm="syz-executor" name="file0" dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 331.480766][ T29] audit: type=1400 audit(1785897562.980:3202): avc: denied { connect } for pid=10595 comm="syz.6.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.317796][ T29] audit: type=1400 audit(1785897563.990:3203): avc: denied { setopt } for pid=10618 comm="syz.1.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 332.601981][T10624] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1405'. [ 332.627596][ T29] audit: type=1400 audit(3933381212.294:3204): avc: denied { name_bind 0x1000000 } for pid=10622 comm="syz.2.1405" path="socket:[44023]" dev="sockfs" ino=44023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.725811][ T29] audit: type=1400 audit(3933381212.324:3205): avc: denied { read } for pid=10622 comm="syz.2.1405" path="socket:[44017]" dev="sockfs" ino=44017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 333.382290][ T29] audit: type=1400 audit(3933381213.044:3206): avc: denied { write } for pid=10639 comm="syz.5.1411" path="socket:[44065]" dev="sockfs" ino=44065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 334.763131][ T5727] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 334.974037][ T5727] usb 1-1: Dual-Role OTG device on HNP port [ 335.002210][ T5727] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 335.042326][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.093648][ T1236] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 335.105939][ T5727] gspca_main: spca501-2.14.0 probing 0000:0000 [ 335.145213][ T5727] gspca_spca501: reg write: error -32 [ 335.170935][ T5727] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 335.199790][ T5727] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 335.294790][ T1236] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.350164][ T1236] usb 7-1: config 0 has no interface number 0 [ 335.419802][ T1236] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 335.487788][ T1236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.556667][ T1236] usb 7-1: Product: syz [ 335.589444][ T1236] usb 7-1: Manufacturer: syz [ 335.633477][ T1236] usb 7-1: SerialNumber: syz [ 335.677540][ T1236] usb 7-1: config 0 descriptor?? [ 335.916852][ T1236] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 335.968769][ T1236] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 336.001864][ T1236] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 336.049404][ T1236] usb 7-1: media controller created [ 336.111138][ T1236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.134964][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 336.134974][ T29] audit: type=1400 audit(3933381215.794:3214): avc: denied { append } for pid=10681 comm="syz.6.1424" name="i2c-1" dev="devtmpfs" ino=3526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.172282][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1430'. [ 338.003253][ T1236] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 338.442701][ T1236] usb 7-1: USB disconnect, device number 8 [ 338.512562][ T29] audit: type=1326 audit(3933381218.174:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 338.709183][ T29] audit: type=1326 audit(3933381218.214:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 338.894507][ T29] audit: type=1326 audit(3933381218.214:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 339.080437][ T29] audit: type=1326 audit(3933381218.214:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 339.258488][ T29] audit: type=1326 audit(3933381218.214:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 339.350651][T10762] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1452'. [ 339.389717][ T29] audit: type=1326 audit(3933381218.214:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 339.519665][ T29] audit: type=1326 audit(3933381218.214:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 339.555693][T10767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1454'. [ 339.632730][T10767] ip6gre2: entered promiscuous mode [ 339.671223][T10767] ip6gre2: entered allmulticast mode [ 339.678837][ T29] audit: type=1326 audit(3933381218.214:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 339.765830][T10774] netlink: 'syz.6.1454': attribute type 6 has an invalid length. [ 339.784063][T10774] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1454'. [ 339.802458][ T29] audit: type=1326 audit(3933381218.224:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.2.1444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f809039e019 code=0x7ffc0000 [ 339.842234][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.877743][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.996115][T10779] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1457'. [ 340.340721][T10791] syzkaller0: entered promiscuous mode [ 340.349202][T10791] syzkaller0: entered allmulticast mode [ 341.059615][T10810] syzkaller0: entered promiscuous mode [ 341.075764][T10812] fuse: fd is not a fuse device [ 341.100705][T10810] syzkaller0: entered allmulticast mode [ 343.074927][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 344.857808][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 345.179417][ T1236] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 346.207586][ T1236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.246351][ T1236] usb 3-1: config 160 has an invalid interface number: 168 but max is 0 [ 346.277042][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 346.277051][ T29] audit: type=1400 audit(3933381225.934:3255): avc: denied { bind } for pid=10857 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 346.323649][ T1236] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 346.387156][ T1236] usb 3-1: config 160 has no interface number 0 [ 346.434069][ T1236] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 346.470889][ T29] audit: type=1400 audit(3933381225.934:3256): avc: denied { node_bind } for pid=10857 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 346.522215][ T1236] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 346.590639][ T1236] usb 3-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 346.663258][ T1236] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 346.727203][ T1236] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 346.792352][ T1236] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 346.858910][ T1236] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 346.933723][ T1236] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 347.012074][ T1236] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0xC has invalid wMaxPacketSize 0 [ 347.031407][T10876] tipc: Started in network mode [ 347.058402][T10876] tipc: Node identity ac14140f, cluster identity 4711 [ 347.071997][ T1236] usb 3-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 0 [ 347.109702][T10876] tipc: New replicast peer: 255.255.255.255 [ 347.137771][ T1236] usb 3-1: config 160 interface 168 has no altsetting 0 [ 347.161848][T10876] tipc: Enabled bearer , priority 10 [ 347.183245][ T1236] usb 3-1: string descriptor 0 read error: -22 [ 347.202594][ T1236] usb 3-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 347.251222][ T1236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.297200][T10849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 347.327911][T10849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 347.336712][T10883] netlink: 'syz.1.1493': attribute type 1 has an invalid length. [ 347.362484][ T1236] io_edgeport 3-1:160.168: EPiC device converter detected [ 347.398272][ T1236] usb 3-1: detected [ 347.425654][T10883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.457282][T10885] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 347.499131][T10885] bond3: entered allmulticast mode [ 347.602741][ T1236] usb 3-1: EPiC device converter now attached to ttyUSB0 [ 347.655949][T10883] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 347.712605][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.735547][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'. [ 347.776215][T10885] bond3: left allmulticast mode [ 347.845994][T10885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.879943][ T29] audit: type=1400 audit(3933381227.544:3257): avc: denied { create } for pid=10889 comm="syz.5.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.934501][ T1125] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 347.950749][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.038595][ T1219] usb 3-1: USB disconnect, device number 29 [ 348.038639][ C0] usb 3-1: edge_interrupt_callback - Error -19 submitting control urb [ 348.070410][ T29] audit: type=1400 audit(3933381227.584:3258): avc: denied { prog_load } for pid=10889 comm="syz.5.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.136147][ T1125] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.136192][ T1125] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 348.162715][ T1219] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 348.166274][ T1219] io_edgeport 3-1:160.168: device disconnected [ 348.210009][ T29] audit: type=1400 audit(3933381227.584:3259): avc: denied { bpf } for pid=10889 comm="syz.5.1495" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 348.210038][ T29] audit: type=1400 audit(3933381227.584:3260): avc: denied { perfmon } for pid=10889 comm="syz.5.1495" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 348.210061][ T29] audit: type=1400 audit(3933381227.594:3261): avc: denied { read write } for pid=8601 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.210086][ T29] audit: type=1400 audit(3933381227.594:3262): avc: denied { open } for pid=8601 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.210125][ T29] audit: type=1400 audit(3933381227.594:3263): avc: denied { ioctl } for pid=8601 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.210150][ T29] audit: type=1400 audit(3933381227.594:3264): avc: denied { prog_run } for pid=10889 comm="syz.5.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.243841][ T1125] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.258846][T10896] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1497'. [ 348.263037][ T1125] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.263054][ T1125] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 348.274058][ T1236] tipc: Node number set to 2886997007 [ 348.394233][ T1125] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.394266][ T1125] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 348.511956][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.511976][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 348.566413][T10903] overlayfs: failed to clone upperpath [ 349.646840][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 350.005398][T10940] xt_check_target_common: 1 callbacks suppressed [ 350.005411][T10940] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 350.084496][T10943] can0: slcan on ttyS3. [ 350.158173][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 350.216148][T10946] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 350.303103][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.311498][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 350.336047][T10947] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 350.366646][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.420762][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.485800][T10949] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 350.498863][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.652135][T10940] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 350.684679][T10942] can0 (unregistered): slcan off ttyS3. [ 350.787550][T10946] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 350.929698][T10947] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 351.077725][T10940] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 352.248738][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 352.248749][ T29] audit: type=1400 audit(3933381231.914:3323): avc: denied { read write } for pid=10961 comm="syz.6.1514" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.252629][ T1125] net_ratelimit: 67 callbacks suppressed [ 353.252642][ T1125] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.523587][ T5727] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 354.540192][ T1125] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 354.610301][ T29] audit: type=1400 audit(3933381232.904:3324): avc: denied { open } for pid=10961 comm="syz.6.1514" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.763321][ T5990] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.807564][ T5990] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 354.844742][ T29] audit: type=1400 audit(3933381232.904:3325): avc: denied { ioctl } for pid=10961 comm="syz.6.1514" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.993141][ T5990] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 355.047572][ T5990] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 355.082397][ T29] audit: type=1400 audit(3933381234.134:3326): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.127123][T10979] netlink: 'syz.6.1518': attribute type 1 has an invalid length. [ 355.189760][T10979] netlink: 'syz.6.1518': attribute type 4 has an invalid length. [ 355.251829][T10987] netlink: 'syz.6.1518': attribute type 1 has an invalid length. [ 355.264887][ T6006] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 355.300772][ T29] audit: type=1400 audit(3933381234.134:3327): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.356513][T10979] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1518'. [ 355.368028][ T6006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 355.428052][T10987] netlink: 'syz.6.1518': attribute type 4 has an invalid length. [ 355.480950][T10987] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1518'. [ 355.498541][ T29] audit: type=1400 audit(3933381234.134:3328): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.527717][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 355.581815][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 355.737390][ T29] audit: type=1400 audit(3933381234.204:3329): avc: denied { search } for pid=10948 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.834580][ T5614] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 355.851717][ T5614] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 355.934109][ T29] audit: type=1400 audit(3933381234.204:3330): avc: denied { search } for pid=10948 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.986084][ T5614] Bluetooth: hci4: unexpected event for opcode 0x0c56 [ 356.075161][ T29] audit: type=1400 audit(3933381234.204:3331): avc: denied { search } for pid=10948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.231003][T11005] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1526'. [ 356.268729][ T29] audit: type=1400 audit(3933381234.204:3332): avc: denied { getattr } for pid=10948 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.244255][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 358.244269][ T29] audit: type=1400 audit(3933381237.384:3402): avc: denied { perfmon } for pid=11043 comm="syz.1.1536" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 358.284744][ T12] net_ratelimit: 35 callbacks suppressed [ 358.284755][ T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 358.370147][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.447404][ T30] INFO: task syz.3.728:8322 blocked for more than 143 seconds. [ 358.461022][ T29] audit: type=1400 audit(3933381237.384:3403): avc: denied { prog_run } for pid=11043 comm="syz.1.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 358.494117][ T30] Tainted: G L syzkaller #0 [ 358.529373][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.538867][ T5768] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 358.567943][ T5768] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.595582][ T30] task:syz.3.728 state:D stack:28776 pid:8322 tgid:8320 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 358.613212][ T29] audit: type=1400 audit(3933381238.054:3404): avc: denied { mount } for pid=11047 comm="syz.1.1537" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 358.656854][ T30] Call Trace: [ 358.672664][ T30] [ 358.679358][ T30] __schedule+0x125c/0x6730 [ 358.696638][ T29] audit: type=1400 audit(3933381238.104:3405): avc: denied { read write } for pid=11049 comm="syz.2.1538" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 358.722511][ T30] ? do_raw_spin_lock+0x128/0x260 [ 358.732204][ T30] ? __pfx___schedule+0x10/0x10 [ 358.737359][ T30] ? find_held_lock+0x2b/0x80 [ 358.742584][ T30] ? schedule+0x225/0x2c0 [ 358.748450][ T30] schedule+0xdd/0x2c0 [ 358.752545][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.758073][ T6006] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 358.768950][ T29] audit: type=1400 audit(3933381238.104:3406): avc: denied { open } for pid=11049 comm="syz.2.1538" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 358.794412][ T6006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.801816][ T30] __mutex_lock+0xccc/0x1bd0 [ 358.806634][ T30] ? write_threads+0x278/0x570 [ 358.811419][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.816956][ T30] ? simple_strntoull+0xdf/0x170 [ 358.821916][ T30] ? __lock_acquire+0x49f/0x1a40 [ 358.827992][ T30] ? write_threads+0x278/0x570 [ 358.832786][ T30] write_threads+0x278/0x570 [ 358.837653][ T30] ? __pfx_write_threads+0x10/0x10 [ 358.843607][ T30] ? __might_fault+0xc5/0x140 [ 358.848318][ T30] ? _copy_from_user+0x59/0xd0 [ 358.854859][ T30] ? __pfx_write_threads+0x10/0x10 [ 358.859993][ T30] nfsctl_transaction_write+0x106/0x1a0 [ 358.865778][ T30] vfs_write+0x2aa/0x1050 [ 358.870132][ T30] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 358.876415][ T30] ? __pfx_vfs_write+0x10/0x10 [ 358.881200][ T30] ? __fget_files+0x215/0x3d0 [ 358.886073][ T30] ? __fget_files+0x21f/0x3d0 [ 358.890769][ T30] ksys_write+0x12a/0x250 [ 358.895339][ T30] ? __pfx_ksys_write+0x10/0x10 [ 358.900212][ T30] do_syscall_64+0x115/0x870 [ 358.905001][ T30] ? clear_bhb_loop+0x40/0x90 [ 358.909701][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.915642][ T5768] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 358.923806][ T5768] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 358.931409][ T30] RIP: 0033:0x7f733439e019 [ 358.936575][ T30] RSP: 002b:00007f73351e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.945718][ T30] RAX: ffffffffffffffda RBX: 00007f7334626090 RCX: 00007f733439e019 [ 358.953825][ T30] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000005 [ 358.961825][ T30] RBP: 00007f733443500c R08: 0000000000000000 R09: 0000000000000000 [ 358.971293][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.979480][ T30] R13: 00007f7334626128 R14: 00007f7334626090 R15: 00007ffcfcfe1bc8 [ 358.987649][ T30] [ 358.990720][ T30] [ 358.990720][ T30] Showing all locks held in the system: [ 359.013136][ T30] 1 lock held by khungtaskd/30: [ 359.018012][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 359.028104][ T30] 2 locks held by getty/5369: [ 359.032795][ T30] #0: ffff8880384de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 359.042732][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 359.053605][ T5990] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.062233][ T30] 3 locks held by kworker/u8:17/5990: [ 359.067782][ T5990] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 359.076550][ T30] 3 locks held by syz.3.728/8321: [ 359.081606][ T30] #0: ffff88807afe3eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 359.091051][ T30] #1: ffff888055d72450 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 359.100311][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 359.109228][ T30] 3 locks held by syz.3.728/8322: [ 359.114427][ T30] #0: ffff8880592d1cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 359.123602][ T30] #1: ffff888055d72450 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 359.132678][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 359.142058][ T30] [ 359.144558][ T30] ============================================= [ 359.144558][ T30] [ 359.153972][ T30] NMI backtrace for cpu 0 [ 359.153987][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 359.154010][ T30] Tainted: [L]=SOFTLOCKUP [ 359.154015][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 359.154021][ T30] Call Trace: [ 359.154025][ T30] [ 359.154029][ T30] dump_stack_lvl+0x100/0x190 [ 359.154047][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 359.154062][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.154078][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 359.154092][ T30] sys_info+0x141/0x190 [ 359.154108][ T30] watchdog+0xcb1/0x1030 [ 359.154125][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.154138][ T30] ? __pfx_watchdog+0x10/0x10 [ 359.154151][ T30] ? __kthread_parkme+0x18c/0x230 [ 359.154168][ T30] ? kthread+0x13a/0x450 [ 359.154178][ T30] ? __pfx_watchdog+0x10/0x10 [ 359.154190][ T30] kthread+0x370/0x450 [ 359.154201][ T30] ? __pfx_kthread+0x10/0x10 [ 359.154212][ T30] ret_from_fork+0x72b/0xd50 [ 359.154228][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 359.154244][ T30] ? __switch_to+0x800/0x10f0 [ 359.154256][ T30] ? __pfx_kthread+0x10/0x10 [ 359.154268][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.154290][ T30] [ 359.285104][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 359.291935][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 359.302574][ T30] Tainted: [L]=SOFTLOCKUP [ 359.306865][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 359.316887][ T30] Call Trace: [ 359.320137][ T30] [ 359.323037][ T30] dump_stack_lvl+0x100/0x190 [ 359.327688][ T30] vpanic+0x552/0x970 [ 359.331637][ T30] ? __pfx_vpanic+0x10/0x10 [ 359.336110][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 359.342234][ T30] panic+0xd1/0xe0 [ 359.345922][ T30] ? __pfx_panic+0x10/0x10 [ 359.350306][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 359.356426][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 359.362547][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 359.368668][ T30] ? watchdog.cold+0x1ec/0x234 [ 359.373401][ T30] ? watchdog+0xcc1/0x1030 [ 359.377798][ T30] watchdog.cold+0x1fd/0x234 [ 359.382369][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.388147][ T30] ? __pfx_watchdog+0x10/0x10 [ 359.392796][ T30] ? __kthread_parkme+0x18c/0x230 [ 359.397798][ T30] ? kthread+0x13a/0x450 [ 359.402009][ T30] ? __pfx_watchdog+0x10/0x10 [ 359.406655][ T30] kthread+0x370/0x450 [ 359.410693][ T30] ? __pfx_kthread+0x10/0x10 [ 359.415251][ T30] ret_from_fork+0x72b/0xd50 [ 359.419815][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 359.424899][ T30] ? __switch_to+0x800/0x10f0 [ 359.429546][ T30] ? __pfx_kthread+0x10/0x10 [ 359.434104][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.438849][ T30] [ 359.441893][ T30] Kernel Offset: disabled [ 359.446195][ T30] Rebooting in 86400 seconds..