last executing test programs: 28m50.925875912s ago: executing program 32 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 13m40.04080684s ago: executing program 33 (id=3966): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 10m27.805456702s ago: executing program 1 (id=4339): clock_gettime(0x7, &(0x7f00000009c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={r0, r1+60000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xa477d17605177959) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x1, 0xd, 0x3, 0xd}, {0x3, 0x5, 0x0, 0x2}, {0x3, 0x5, 0x1, 0x5}, {0x5, 0x32, 0x3, 0x2}]}) readv(r5, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004}, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="07ad0000000000000000010000000000000002410000000000137564703a73797a3000000000a7d75495954a23afeade4e9b655d78857fb3016f6de928de6a9b85e844a2f8c5b3dbc3f2f47c7e8c605e47748ab87f9c3db2a23eeddb502fbfbb01da88c45185"], 0x2c}}, 0x0) 10m25.341278658s ago: executing program 1 (id=4342): clock_gettime(0x7, &(0x7f00000009c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xa477d17605177959) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x1, 0xd, 0x3, 0xd}, {0x3, 0x5, 0x0, 0x2}, {0x3, 0x5, 0x1, 0x5}, {0x5, 0x32, 0x3, 0x2}]}) readv(r5, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004}, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000680)={{0x5, 0x2, 0x0, 0x0, 'syz1\x00', 0xff}, 0x4, 0x400, 0x3ff, 0x0, 0x4, 0x8, 'syz0\x00', &(0x7f0000000640)=['#)\x00', 'Y\x00', '/dev/sequencer\x00', '\x00'], 0x15}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="07ad0000000000000000010000000000000002410000000000137564703a73797a3000000000a7d75495954a23afeade4e9b655d78857fb3016f6de928de6a9b85e844a2f8c5b3dbc3f2f47c7e8c605e47748ab87f9c3db2a23eeddb502fbfbb01da88c45185"], 0x2c}}, 0x0) 10m19.139507341s ago: executing program 1 (id=4351): clock_gettime(0x7, &(0x7f00000009c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={r0, r1+60000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xa477d17605177959) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x1, 0xd, 0x3, 0xd}, {0x3, 0x5, 0x0, 0x2}, {0x3, 0x5, 0x1, 0x5}, {0x5, 0x32, 0x3, 0x2}]}) readv(r5, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004}, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000680)={{0x5, 0x2, 0x0, 0x0, 'syz1\x00', 0xff}, 0x4, 0x400, 0x3ff, 0x0, 0x4, 0x8, 'syz0\x00', &(0x7f0000000640)=['#)\x00', 'Y\x00', '/dev/sequencer\x00', '\x00'], 0x15}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8], 0x2c}}, 0x0) 10m16.451564691s ago: executing program 1 (id=4356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000600)={'syzkaller0\x00', @random="2b0100004ec6"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='sys:evt:mod:non', 0xf) write(r7, &(0x7f0000000140)='!sys:evt:mod:nonexistent_module', 0x1f) 10m16.126235557s ago: executing program 1 (id=4358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x24005800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace(0x10, r7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 10m13.207808413s ago: executing program 1 (id=4359): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0xe, &(0x7f0000000040)) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xb}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000000c0)="b46180230562", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 9m57.698051069s ago: executing program 34 (id=4359): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0xe, &(0x7f0000000040)) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xb}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000000c0)="b46180230562", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 6m43.015590276s ago: executing program 5 (id=4604): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r4, &(0x7f0000000780)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019780)=0x80000000000003) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "c18ab2c782fa073d"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f00000197c0), &(0x7f0000019840)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019880), 0x88b02, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f000001a300)={0x0, 0x0, &(0x7f000001a340)={&(0x7f000001a380)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x108800, 0x40) mount(0x0, &(0x7f000001a3c0)='./sys\x00', &(0x7f000001a400)='sysfs\x00', 0x0, 0x0) getsockname(r7, &(0x7f000001a440)=@l2={0x1f, 0x0, @fixed}, &(0x7f000001a4c0)=0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f000001a500), 0x30040, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000080)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) write$P9_RSTATu(r0, 0x0, 0x6e) 6m37.435845201s ago: executing program 5 (id=4613): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000500)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000197c0)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x2982, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000019840)="b73f0da6d05b38ca9cbbce709c72aa728fc8e537ff02cb691d", 0x19) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f00000198c0), 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000640)={0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) 6m25.609980923s ago: executing program 5 (id=4625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)={0x34, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x39db77225c63fa4c) 6m19.140218361s ago: executing program 5 (id=4631): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000500)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x2982, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000019840)="b73f0da6d05b38ca9cbbce709c72aa728fc8e537ff02cb691d35e2a5a0cad47127f2b5950b319ccd6509031e021bdf5585", 0x31) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f00000198c0), 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='source\x00', &(0x7f0000000580)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000640)={0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) 6m17.521695295s ago: executing program 5 (id=4632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101140, 0x0) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000019500), 0x84042, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000019580)=0xe) r4 = syz_open_dev$dvb_frontend(&(0x7f00000195c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000019600)={0x4, &(0x7f0000019640)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x46, '\x00', @data=0x2, 0x45}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048015}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000019740), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000019780)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r6 = dup(r5) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000198c0)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000019900)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r6, &(0x7f00000199c0)={&(0x7f0000019a00)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000019a40)}, 0x40054) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 6m9.93620767s ago: executing program 5 (id=4640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r3, 0x5) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 5m54.839054281s ago: executing program 35 (id=4640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r3, 0x5) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 2m38.684709896s ago: executing program 4 (id=5010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a40), 0x366, 0x10, &(0x7f0000000a80), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000b80), &(0x7f0000000bc0)=@udp=r0}, 0x20) close(r1) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000d40)=0x1, 0x4) 2m38.260497457s ago: executing program 4 (id=5013): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, 0x0, 0x0) 2m38.142990391s ago: executing program 4 (id=5015): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000140)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/fillfile\x00', 0x42, 0x9f) write(r0, &(0x7f0000000580)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b", 0x3c) 2m36.332506427s ago: executing program 4 (id=5016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000019500), 0x84042, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019540), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019580)=0xe) syz_open_dev$dvb_frontend(&(0x7f00000195c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048015}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000019740), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000019780)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000198c0)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000199c0)={&(0x7f0000019a00)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000019a40)}, 0x40054) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 2m36.280823104s ago: executing program 8 (id=5019): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64], 0x0) 2m36.059569438s ago: executing program 8 (id=5021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 2m34.21337706s ago: executing program 4 (id=5027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) 2m34.027223035s ago: executing program 4 (id=5030): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='3', 0x1) 2m33.27051234s ago: executing program 8 (id=5033): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 2m31.096190768s ago: executing program 8 (id=5038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000019500), 0x84042, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019540), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019580)=0xe) syz_open_dev$dvb_frontend(&(0x7f00000195c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048015}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000019740), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000019780)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000198c0)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000199c0)={&(0x7f0000019a00)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000019a40)}, 0x40054) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 2m27.518252004s ago: executing program 8 (id=5046): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='3', 0x1) 2m25.37593423s ago: executing program 8 (id=5050): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000500)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r3, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f00000197c0)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x2982, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f00000198c0), 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000640)={0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) 2m18.96589739s ago: executing program 36 (id=5030): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='3', 0x1) 2m10.053989164s ago: executing program 37 (id=5050): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000500)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r3, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f00000197c0)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x2982, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f00000198c0), 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000640)={0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) 1m34.647364767s ago: executing program 9 (id=5241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r2, &(0x7f00000025c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x6, 0x3) 1m29.288760245s ago: executing program 9 (id=5252): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1m28.320141361s ago: executing program 9 (id=5255): ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) 1m27.975752259s ago: executing program 9 (id=5257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4c004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket(0x1d, 0x2, 0x6) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xa010}, 0x4004) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket(0x80000000000000a, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000480)=[{0x0}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1m24.310746822s ago: executing program 9 (id=5266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4c004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket(0x1d, 0x2, 0x6) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xa010}, 0x4004) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000480)=[{0x0}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1m22.574600372s ago: executing program 9 (id=5270): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000180)=r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x0) 1m7.367238854s ago: executing program 38 (id=5270): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000180)=r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x0) 6.544812241s ago: executing program 7 (id=5573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000a40)=[@wr_crn={0x67, 0x20, {0x2, 0x4}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}], 0x90}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x4e61, 0x80, @ipv4={'\x00', '\xff\xff', @remote}, 0x81}, 0x1c, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x40084) 6.176945804s ago: executing program 7 (id=5576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e1", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 6.111857144s ago: executing program 7 (id=5577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}]}) 5.964458165s ago: executing program 7 (id=5579): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f00000002c0)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.707821803s ago: executing program 0 (id=5580): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) 5.607997638s ago: executing program 0 (id=5582): socket$inet6(0xa, 0x2, 0x0) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x2, 0x5, 0x300d}, &(0x7f00000000c0)=0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000138000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(0xffffffffffffffff, &(0x7f0000000200)=""/172, 0xdc) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='map_files\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) getdents(r1, &(0x7f0000000380)=""/218, 0xda) 5.225235558s ago: executing program 2 (id=5588): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x20000000) 5.105853047s ago: executing program 2 (id=5590): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0x1}]}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.638317829s ago: executing program 6 (id=5591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x80, 0x800000009, 0x5, 0xfffffffffffeffff, 0x0, 0xffffffffffffffff, 0x2000001, 0xffffffffffffffff, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.684640582s ago: executing program 2 (id=5593): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) 3.39584257s ago: executing program 2 (id=5594): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x8, 0x3a, 0x6, 0x5e157e35, 0x80}}}}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xb, 0x2) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000440)=""/228) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000025c0)={{0x0, 0x1}, 0x1, 0x5, 0x1, {0xff, 0x4}, 0x1, 0xc357}) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x54, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}, @in6={0xa, 0x4e20, 0x11, @remote, 0xf}, @in6={0xa, 0x4e20, 0x0, @local, 0x200}]}, &(0x7f0000000040)=0x10) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0x9d2, 0x5}) shutdown(r3, 0x2) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002b0007012da1dae41af2c4a8367c00090000000011000000e267a62430dfc0d543e92db55d82bb1dcedf03f6ccc34ac9358e43448e89a82f6733d547bd43cbd4cf1a15d4c228938c92433b44d3b85ea78e3640c33e85347377c2bb09ac138d47e7117710deecb1a110dbf0a2387c13502d56379e03024b4e6c2bb32c6626945a236024cec2545d24bd44906d8c9fde505856b9f1318297775ec8191b15bba0a20353"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b35, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd01"], 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000380)={r7, &(0x7f0000000280)='\xc2\xea\x00', 0x8000, 0x0, 0x800, &(0x7f0000000300), &(0x7f0000000340)=0x10000}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r7) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 3.097063771s ago: executing program 0 (id=5595): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fff8bb56e28b25670bf0e4b2911bb1d1b10bf7d2b0875e5fd6a782f8626b08066cdbd930e3c00d4d0d574623d24c744255", 0x31}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) io_setup(0x6, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/wakeup_count', 0x1a1081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100003801000000000000") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 ', 0x49) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000800000000000000a0010000380100000100"/42) 2.859899231s ago: executing program 7 (id=5596): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.814799101s ago: executing program 3 (id=5597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xc3b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0xffff1000, 0x0, 0x1, 0xdb, 0x9, 0x6, 0x10, 0xfc, 0x3, 0x6, 0xeb}, {0x3000, 0x80a0000, 0x10, 0xc, 0x5, 0x7, 0x5, 0x14, 0x4, 0x4, 0x0, 0x1}, {0x8000000, 0x102f8000, 0xd, 0x25, 0x6, 0x7, 0x81, 0x1, 0x80, 0x4, 0xe, 0xbe}, {0xeeef0000, 0x8080000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x40, 0x85, 0x4, 0x80, 0x10}, {0x2, 0x0, 0x9, 0xff, 0x8, 0x1, 0xe, 0x7, 0x8, 0x6, 0x4, 0xfd}, {0x10d000, 0x200000, 0xe, 0xb9, 0xe, 0x5, 0x42, 0x5, 0x5, 0x1, 0xd, 0xd}, {0xdddd1000, 0x9000, 0x0, 0x5, 0x2, 0x3, 0x4, 0x66, 0x1c, 0x0, 0x1, 0x45}, {0xdddd1000, 0x4000, 0x4, 0x24, 0x5, 0x3, 0x11, 0x4a, 0x9, 0x9, 0x46, 0xf6}, {0x60000, 0x5}, {0xb000}, 0x0, 0x0, 0x8080000, 0x150690, 0x0, 0x4000, 0xdddd1000, [0x1, 0x1004, 0x4, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.723112627s ago: executing program 0 (id=5598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}]}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}]}) 2.722107011s ago: executing program 6 (id=5599): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) listen(r4, 0x6) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000280)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a2810", @ANYBLOB], 0x34}}, 0x0) 2.481859282s ago: executing program 0 (id=5600): syz_open_dev$sndpcmp(0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "c18ab2c782fa073d"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000197c0), &(0x7f0000019840)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019880), 0x88b02, 0x0) 811.591921ms ago: executing program 6 (id=5601): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x40002, 0x20) ioctl(r0, 0xc138fd03, &(0x7f0000000000)) ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 686.344309ms ago: executing program 3 (id=5602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 564.014992ms ago: executing program 0 (id=5603): chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, &(0x7f0000000000)="2e0fa26636640f0966400f71e0b6c4c27d5a720066bad00466edc4a234a67e62c44109d098b95100003ef3420f1efa8fe0c462e9b6f4440f08", 0x39}], 0x1, 0xb, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 548.2709ms ago: executing program 6 (id=5604): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480"], 0x10c}}, 0x0) 482.704056ms ago: executing program 3 (id=5605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xc3b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 475.57066ms ago: executing program 7 (id=5606): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f00000002c0)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 389.380526ms ago: executing program 6 (id=5607): openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x28100, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x881, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 358.645957ms ago: executing program 3 (id=5608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2f, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010105, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1b, 0x0, @opaque="32843098a3d41088f2a77ef18f6ed050f45dbc"}}}, 0x3d) 309.78649ms ago: executing program 2 (id=5609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 153.871243ms ago: executing program 3 (id=5610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c000180080001", @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 76.971045ms ago: executing program 6 (id=5611): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) listen(r4, 0x6) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000280)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB], 0x34}}, 0x0) 16.085049ms ago: executing program 3 (id=5612): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fff8bb56e28b25670bf0e4b2911bb1d1b10bf7d2b0875e5fd6a782f8626b08066cdbd930e3c00d4d0d574623d24c744255", 0x31}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) io_setup(0x6, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100003801000000000000") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 ', 0x49) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000800000000000000a0010000380100000100"/42) 0s ago: executing program 2 (id=5613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): dv_slave_0 [ 1641.781432][T19546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.781456][T19546] usb 4-1: Product: syz [ 1641.781465][T19546] usb 4-1: Manufacturer: syz [ 1641.781473][T19546] usb 4-1: SerialNumber: syz [ 1641.861563][T23307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.861589][T23307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.891673][T23307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1641.930143][T19546] usb 4-1: 3:0 : does not exist [ 1641.930181][T19546] usb 4-1: 3:0 : does not exist [ 1641.952329][T23308] team0: Mode changed to "loadbalance" [ 1641.997799][T16965] tipc: Resetting bearer [ 1642.008494][T23309] vlan0: entered promiscuous mode [ 1642.209698][T21356] block nbd8: Receive control failed (result -32) [ 1642.234317][T23301] block nbd8: shutting down sockets [ 1642.314632][ T5757] usb 4-1: USB disconnect, device number 123 [ 1642.552685][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4960'. [ 1642.560464][ T30] audit: type=1400 audit(1792218345.069:2183): avc: denied { write } for pid=23320 comm="syz.7.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1643.084968][ T5757] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1643.237378][ T5757] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1643.239115][ T5757] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.239139][ T5757] usb 9-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 1643.246336][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.246358][ T5757] usb 9-1: Product: syz [ 1643.246372][ T5757] usb 9-1: Manufacturer: syz [ 1643.246385][ T5757] usb 9-1: SerialNumber: syz [ 1643.499860][T23343] caif0: tun_chr_ioctl cmd 2148553947 [ 1644.224949][T23323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.225434][T23323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.318256][ T5757] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1644.318835][ T5757] dvb_usb_af9015 9-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1644.319705][ T5757] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1644.319763][ T5757] dvb_usb_af9035 9-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1644.321407][ T5757] usb 9-1: USB disconnect, device number 5 [ 1644.578138][T23345] loop9: detected capacity change from 0 to 2640 [ 1644.578580][T23345] buffer_io_error: 11 callbacks suppressed [ 1644.578594][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578624][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578649][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578674][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578699][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578737][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578771][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578796][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578809][T23345] ldm_validate_partition_table(): Disk read failed. [ 1644.578831][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578855][T23345] Buffer I/O error on dev loop9, logical block 0, async page read [ 1644.578901][T23345] Dev loop9: unable to read RDB block 0 [ 1644.579012][T23345] loop9: unable to read partition table [ 1644.579166][T23345] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1645.404464][T23361] syzkaller0: entered promiscuous mode [ 1645.404499][T23361] syzkaller0: entered allmulticast mode [ 1645.509032][T23361] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1645.582831][T22261] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1645.738214][T22261] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1645.752084][T22261] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1645.752113][T22261] usb 4-1: config 1 has no interface number 0 [ 1645.780855][T22261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.780882][T22261] usb 4-1: Product: syz [ 1645.780896][T22261] usb 4-1: Manufacturer: syz [ 1645.780910][T22261] usb 4-1: SerialNumber: syz [ 1645.826934][T22261] usb 4-1: 3:0 : does not exist [ 1645.826957][T22261] usb 4-1: 3:0 : does not exist [ 1646.218710][T12125] usb 4-1: USB disconnect, device number 124 [ 1647.209660][T23379] ceph: No mds server is up or the cluster is laggy [ 1647.596115][T23383] tipc: Resetting bearer [ 1647.601095][T23383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1647.875196][T23383] team0: Unable to change to the same mode the team is in [ 1647.890150][ T30] audit: type=1400 audit(1792218350.409:2184): avc: denied { mount } for pid=23388 comm="syz.8.4980" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1647.890299][T23383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=23383 comm=syz.7.4977 [ 1647.905824][T23383] vlan0: entered promiscuous mode [ 1647.974153][T23383] team0: Port device vlan0 added [ 1647.990731][T23386] tipc: Enabling of bearer rejected, already enabled [ 1648.536751][ T30] audit: type=1400 audit(1792218351.059:2185): avc: denied { unmount } for pid=21931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1649.195752][T23413] jffs2: notice: (23413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1649.260510][ T30] audit: type=1400 audit(1792218351.779:2186): avc: denied { write } for pid=23412 comm="syz.3.4988" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1649.302258][ T30] audit: type=1400 audit(1792218351.819:2187): avc: denied { add_name } for pid=23412 comm="syz.3.4988" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1649.310083][T23411] syzkaller0: entered promiscuous mode [ 1649.310117][T23411] syzkaller0: entered allmulticast mode [ 1649.421590][ T30] audit: type=1400 audit(1792218351.819:2188): avc: denied { create } for pid=23412 comm="syz.3.4988" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1649.574378][ T30] audit: type=1400 audit(1792218352.099:2189): avc: denied { read write open } for pid=23412 comm="syz.3.4988" path="/370/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1650.894779][T12125] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1651.066535][T12125] usb 9-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1651.073123][T12125] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1651.073182][T12125] usb 9-1: can't read configurations, error -71 [ 1651.151556][T23433] syzkaller0: entered promiscuous mode [ 1651.151585][T23433] syzkaller0: entered allmulticast mode [ 1652.600666][T23435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1652.600752][T23435] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1652.610004][T23435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1652.610106][T23435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1652.635182][T23435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1652.635637][T23435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1652.635736][T23435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1652.637020][T23435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1652.769274][ T30] audit: type=1326 audit(1792218355.289:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.3.5002" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0e6f9e559 code=0x0 [ 1652.818724][T23462] Bluetooth: MGMT ver 1.23 [ 1652.874390][ T5757] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1652.881434][T23467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1653.033409][ T5757] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1653.046937][ T5757] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1653.046964][ T5757] usb 8-1: config 1 has no interface number 0 [ 1653.068259][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.068286][ T5757] usb 8-1: Product: syz [ 1653.068301][ T5757] usb 8-1: Manufacturer: syz [ 1653.068315][ T5757] usb 8-1: SerialNumber: syz [ 1653.113513][ T5757] usb 8-1: 3:0 : does not exist [ 1653.113537][ T5757] usb 8-1: 3:0 : does not exist [ 1653.353397][ T5757] usb 8-1: USB disconnect, device number 9 [ 1653.389607][T23479] loop9: detected capacity change from 0 to 2640 [ 1653.389965][T23479] buffer_io_error: 11 callbacks suppressed [ 1653.389977][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390014][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390040][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390064][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390088][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390122][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390160][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390186][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390200][T23479] ldm_validate_partition_table(): Disk read failed. [ 1653.390222][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390247][T23479] Buffer I/O error on dev loop9, logical block 0, async page read [ 1653.390283][T23479] Dev loop9: unable to read RDB block 0 [ 1653.390402][T23479] loop9: unable to read partition table [ 1653.390551][T23479] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1653.574751][T21356] Bluetooth: hci3: command 0x0406 tx timeout [ 1653.746469][T23485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1653.746794][T23485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1653.747031][T23485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1654.125320][T12125] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1654.775066][T12125] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1654.822511][T12125] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1654.834405][T12125] usb 4-1: can't read configurations, error -71 [ 1655.753941][T23504] jffs2: notice: (23504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1655.759699][ T30] audit: type=1400 audit(1792218358.279:2191): avc: denied { write } for pid=23503 comm="syz.4.5015" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1655.815636][T21356] Bluetooth: hci1: command 0x0406 tx timeout [ 1655.815670][T23458] Bluetooth: hci0: command 0x0406 tx timeout [ 1655.815699][T21356] Bluetooth: hci3: command 0x0406 tx timeout [ 1656.094518][T23519] caif0: tun_chr_ioctl cmd 2148553947 [ 1656.232693][T23520] loop9: detected capacity change from 0 to 2640 [ 1656.267099][T23520] ldm_validate_partition_table(): Disk read failed. [ 1656.267163][T23520] Dev loop9: unable to read RDB block 0 [ 1656.267289][T23520] loop9: unable to read partition table [ 1656.267455][T23520] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1656.304894][T23525] futex_wake_op: syz.7.5022 tries to shift op by 144; fix this program [ 1657.894751][T23458] Bluetooth: hci0: command 0x0406 tx timeout [ 1657.894788][T23458] Bluetooth: hci1: command 0x0406 tx timeout [ 1658.294575][ T5757] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1658.527832][ T5757] usb 8-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1658.528557][ T5757] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1658.528590][ T5757] usb 8-1: can't read configurations, error -71 [ 1658.901183][T23549] busy [ 1660.930978][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1660.931050][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1662.583100][T23568] loop9: detected capacity change from 0 to 2640 [ 1662.588646][T23568] buffer_io_error: 32 callbacks suppressed [ 1662.588666][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588696][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588723][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588749][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588774][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588812][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588848][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588873][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588887][T23568] ldm_validate_partition_table(): Disk read failed. [ 1662.588910][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588935][T23568] Buffer I/O error on dev loop9, logical block 0, async page read [ 1662.588973][T23568] Dev loop9: unable to read RDB block 0 [ 1662.589087][T23568] loop9: unable to read partition table [ 1662.589240][T23568] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1663.494476][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1664.184662][T23581] tipc: Resetting bearer [ 1664.192494][T23581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1664.397234][T23581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=23581 comm=syz.3.5039 [ 1664.406093][T23581] vlan0: entered promiscuous mode [ 1664.430773][T23581] team0: Port device vlan0 added [ 1664.474885][T23581] tipc: Enabling of bearer rejected, already enabled [ 1666.647505][T23595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1667.463009][T22234] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1667.623077][T22234] usb 7-1: Using ep0 maxpacket: 8 [ 1667.625413][T22234] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1667.626281][T22234] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1667.626322][T22234] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1667.626344][T22234] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1667.626366][T22234] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1667.626389][T22234] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1667.626425][T22234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.851983][T22234] usb 7-1: GET_CAPABILITIES returned 0 [ 1667.852026][T22234] usbtmc 7-1:16.0: can't read capabilities [ 1668.091197][T19546] usb 7-1: USB disconnect, device number 16 [ 1668.560050][T23621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1668.720813][T23627] CacheFiles: Failed to register: -95 [ 1669.781781][T23629] usb usb9: usbfs: process 23629 (syz.6.5060) did not claim interface 0 before use [ 1669.865329][ T30] audit: type=1400 audit(1792218372.389:2192): avc: denied { create_files_as } for pid=23633 comm="syz.3.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 1669.875233][T23634] netfs: Cache "CacheFiles" added (type cachefiles) [ 1669.875250][T23634] CacheFiles: File cache on CacheFiles registered [ 1669.877158][T23633] CacheFiles: File cache on CacheFiles unregistering [ 1669.877170][T23633] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 1670.269213][T23640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1670.269578][T23640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1670.269885][T23640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1670.293302][T19238] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1670.443691][T19238] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1670.445518][T19238] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.445579][T19238] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1670.448698][T19238] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.448733][T19238] usb 8-1: Product: syz [ 1670.448760][T19238] usb 8-1: Manufacturer: syz [ 1670.448788][T19238] usb 8-1: SerialNumber: syz [ 1670.452308][T19238] usb 8-1: config 0 descriptor?? [ 1671.878076][T19238] usb 8-1: USB disconnect, device number 12 [ 1672.084723][ T30] audit: type=1326 audit(1792218374.609:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23659 comm="syz.3.5071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0e6f9e559 code=0x0 [ 1672.159995][T23664] futex_wake_op: syz.6.5072 tries to shift op by 144; fix this program [ 1672.201904][T23665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1672.293241][T23458] Bluetooth: hci1: command 0x0406 tx timeout [ 1672.296020][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1672.296078][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 1673.100789][T23679] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5075'. [ 1673.309132][T16968] tipc: Resetting bearer [ 1673.369709][T21356] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1673.375552][T21356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1673.383444][T21356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1673.385774][T21356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1673.388215][T21356] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1673.463494][T22234] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1673.657856][ T5757] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1673.673433][T22234] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1673.674307][T22234] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.674346][T22234] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1673.674370][T22234] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1673.674405][T22234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.855627][ T5757] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1673.860013][ T5757] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.860345][ T5757] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1673.860508][ T5757] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1673.860763][ T5757] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.303999][T23697] ceph: No mds server is up or the cluster is laggy [ 1674.559085][T22234] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 1674.559141][T22234] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1674.559157][T22234] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1674.629534][T22234] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 1674.665678][ T30] audit: type=1400 audit(1792218377.189:2194): avc: denied { ioctl } for pid=23682 comm="syz.7.5079" path="socket:[88247]" dev="sockfs" ino=88247 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1674.668207][ T5757] cxacru 8-1:1.0: send of cm 0x90 failed (-71) [ 1674.669567][T22234] usb 7-1: USB disconnect, device number 17 [ 1674.682225][T23707] cxacru 8-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1674.682260][T23707] cxacru 8-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1674.780317][ T5757] usb 8-1: USB disconnect, device number 13 [ 1674.834819][ T30] audit: type=1326 audit(1792218377.359:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.3.5084" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0e6f9e559 code=0x0 [ 1674.902155][T23689] rxe_eth0 speed is unknown, defaulting to 1000 [ 1674.987864][T23712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1675.361453][T23717] futex_wake_op: syz.7.5086 tries to shift op by 144; fix this program [ 1675.492953][T21356] Bluetooth: hci2: command tx timeout [ 1676.385997][T23724] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5088'. [ 1676.433883][ T30] audit: type=1326 audit(1792218378.959:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.3.5087" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0e6f9e559 code=0x0 [ 1676.550380][T23734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1676.820562][T23689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.820689][T23689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.821498][T23689] bridge_slave_0: entered allmulticast mode [ 1676.823078][T23689] bridge_slave_0: entered promiscuous mode [ 1676.824903][T23689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.825016][T23689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.825107][T23689] bridge_slave_1: entered allmulticast mode [ 1676.826333][T23689] bridge_slave_1: entered promiscuous mode [ 1676.853242][T23689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.855519][T23689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.876141][T23689] team0: Port device team_slave_0 added [ 1676.878304][T23689] team0: Port device team_slave_1 added [ 1676.926105][T23689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.926121][T23689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.926136][T23689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.928349][T23689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.928361][T23689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.928382][T23689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.942832][T22234] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1676.965165][T23689] hsr_slave_0: entered promiscuous mode [ 1676.965920][T23689] hsr_slave_1: entered promiscuous mode [ 1676.966537][T23689] debugfs: 'hsr0' already exists in 'hsr' [ 1676.966553][T23689] Cannot create hsr debugfs directory [ 1677.096949][T22234] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1677.097828][T22234] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.097869][T22234] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1677.097894][T22234] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1677.097929][T22234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.582974][T21356] Bluetooth: hci2: command tx timeout [ 1678.650153][T22234] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 1678.650188][T22234] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1678.650201][T22234] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1678.657314][T22234] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 1678.668597][T22234] usb 7-1: USB disconnect, device number 18 [ 1678.795274][T23689] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1678.813993][T23689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1678.814712][T23689] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1678.821830][T23689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1678.826323][T23689] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1678.852153][T23689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1678.861873][T23689] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1678.871333][T23689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1679.160074][T23689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.197896][T23689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.210876][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.210958][ T9578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.230952][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.231032][ T9578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.441945][ T30] audit: type=1326 audit(1792218381.959:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23760 comm="syz.6.5098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff5119e559 code=0x0 [ 1679.543417][T22261] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1679.653113][T21356] Bluetooth: hci2: command tx timeout [ 1679.694305][T22261] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1679.695290][T22261] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.695329][T22261] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1679.695352][T22261] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1679.699331][T22261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1679.699354][T22261] usb 4-1: Product: syz [ 1679.699386][T22261] usb 4-1: Manufacturer: syz [ 1679.706967][T23757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1679.713375][T22261] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 1679.749837][T22261] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1680.021847][T22261] usb 4-1: USB disconnect, device number 127 [ 1680.039147][T22261] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1680.039483][T22261] garmin_gps 4-1:1.0: device disconnected [ 1680.512634][T23773] syzkaller1: entered promiscuous mode [ 1680.512658][T23773] syzkaller1: entered allmulticast mode [ 1680.763189][T23782] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5101'. [ 1680.770087][T21356] Bluetooth: hci3: connection err: -111 [ 1680.770235][T23778] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5100'. [ 1680.855082][T23689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.996264][T23775] block device autoloading is deprecated and will be removed. [ 1681.242443][T23775] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 1681.242690][T23775] device-mapper: block manager: superblock validator check failed for block 0 [ 1681.244945][T23775] device-mapper: thin metadata: couldn't read superblock [ 1681.502939][ T48] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1681.576307][T23775] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EILSEQ) [ 1681.576335][T23775] device-mapper: ioctl: error adding target to table [ 1681.633534][T23800] CacheFiles: No cache directory specified [ 1681.655397][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1681.656303][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.656341][ T48] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1681.658622][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.658759][ T48] usb 4-1: Product: syz [ 1681.658775][ T48] usb 4-1: Manufacturer: syz [ 1681.658789][ T48] usb 4-1: SerialNumber: syz [ 1681.718872][ T48] cdc_mbim 4-1:1.0: skipping garbage [ 1681.745044][T21356] Bluetooth: hci2: command tx timeout [ 1681.814925][T23689] veth0_vlan: entered promiscuous mode [ 1681.822460][T23689] veth1_vlan: entered promiscuous mode [ 1681.870325][T23689] veth0_macvtap: entered promiscuous mode [ 1681.886578][T23689] veth1_macvtap: entered promiscuous mode [ 1681.914235][T23689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.923999][T23689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.946250][T23794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1681.959356][T23054] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.960385][T23054] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.960439][T23054] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.960479][T23054] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.999534][ T5819] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1682.143443][ T5819] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1682.144731][ T5819] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1682.144773][ T5819] usb 7-1: config 1 has no interface number 0 [ 1682.162962][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.162990][ T5819] usb 7-1: Product: syz [ 1682.163005][ T5819] usb 7-1: Manufacturer: syz [ 1682.163020][ T5819] usb 7-1: SerialNumber: syz [ 1682.211807][ T5819] usb 7-1: 3:1 : does not exist [ 1682.211829][ T5819] usb 7-1: 3:2 : does not exist [ 1682.226467][ T9568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.226502][ T9568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.387884][T23458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1682.403600][T23458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1682.405058][T23458] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1682.406459][T23458] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1682.407239][T23458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1682.418529][ T9568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.418562][ T9568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.567424][T23794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1682.567875][ T48] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 1682.571034][ T48] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1682.597991][ T30] audit: type=1326 audit(1792218385.119:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23817 comm="syz.9.5078" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f796af9e559 code=0x0 [ 1682.643723][ T48] wwan wwan0: port wwan0mbim0 attached [ 1682.666184][ T48] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 7a:64:66:19:b6:0c [ 1682.741595][T23820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1682.849588][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.849615][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.849813][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.849831][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.850047][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.850065][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.850267][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.850285][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.850500][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.850518][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.850700][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.850718][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.850896][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.850913][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.851102][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.851120][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.851314][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.851332][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.851522][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 1682.851537][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 1682.898285][T12128] usb 4-1: USB disconnect, device number 2 [ 1682.908619][T12128] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1683.068136][T12128] wwan wwan0: port wwan0mbim0 disconnected [ 1683.071869][T23812] rxe_eth0 speed is unknown, defaulting to 1000 [ 1683.155811][T23830] syzkaller1: entered promiscuous mode [ 1683.155835][T23830] syzkaller1: entered allmulticast mode [ 1683.312218][T23837] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5112'. [ 1683.579533][T23846] fuse: Bad value for 'fd' [ 1683.691848][ T30] audit: type=1400 audit(1792218386.209:2199): avc: denied { write } for pid=23827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1684.143800][ T30] audit: type=1400 audit(1792218386.669:2200): avc: denied { write } for pid=23865 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1684.548996][T23458] Bluetooth: hci6: command tx timeout [ 1684.550510][T23855] netfs: Cache "CacheFiles" added (type cachefiles) [ 1684.550534][T23855] CacheFiles: File cache on CacheFiles registered [ 1684.583181][T23852] CacheFiles: File cache on CacheFiles unregistering [ 1684.583197][T23852] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 1684.659095][T23871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1684.799756][ T48] usb 7-1: USB disconnect, device number 19 [ 1685.134193][ T30] audit: type=1400 audit(1792218387.659:2201): avc: denied { write } for pid=23870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1685.377236][ T30] audit: type=1400 audit(1792218387.899:2202): avc: denied { write } for pid=23899 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1685.593483][T23812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.600231][T23812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.600534][T23812] bridge_slave_0: entered allmulticast mode [ 1685.602504][T23812] bridge_slave_0: entered promiscuous mode [ 1685.630796][T23812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.630888][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.630986][T23812] bridge_slave_1: entered allmulticast mode [ 1685.632273][T23812] bridge_slave_1: entered promiscuous mode [ 1685.999581][T23812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.020093][T23812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.185255][T23897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1686.212020][T23897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1686.251051][T23897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1686.379415][T23897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1686.380130][T23897] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1686.623996][T23458] Bluetooth: hci6: command tx timeout [ 1687.220579][T23897] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1687.230607][T23812] team0: Port device team_slave_0 added [ 1687.246170][T23812] team0: Port device team_slave_1 added [ 1687.282391][T23897] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1687.282507][T23897] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1687.303911][T23897] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1687.389681][T23812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.389698][T23812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.389718][T23812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.446005][T23812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.446022][T23812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.446044][T23812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.629552][T23812] hsr_slave_0: entered promiscuous mode [ 1687.640756][T23812] hsr_slave_1: entered promiscuous mode [ 1687.641197][T23812] debugfs: 'hsr0' already exists in 'hsr' [ 1687.641209][T23812] Cannot create hsr debugfs directory [ 1687.671682][T23916] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5133'. [ 1688.188214][T23926] loop9: detected capacity change from 0 to 2640 [ 1688.189825][T23926] buffer_io_error: 11 callbacks suppressed [ 1688.189855][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.189960][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190059][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190145][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190216][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190313][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190409][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190465][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190495][T23926] ldm_validate_partition_table(): Disk read failed. [ 1688.190585][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190669][T23926] Buffer I/O error on dev loop9, logical block 0, async page read [ 1688.190814][T23926] Dev loop9: unable to read RDB block 0 [ 1688.191220][T23926] loop9: unable to read partition table [ 1688.191883][T23926] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1688.282841][T23458] Bluetooth: hci0: command 0x0406 tx timeout [ 1688.282883][T23458] Bluetooth: hci3: command 0x0406 tx timeout [ 1688.292843][T23458] Bluetooth: hci1: command 0x0406 tx timeout [ 1688.453185][T21356] Bluetooth: hci2: command 0x0c1a tx timeout [ 1689.334299][T21356] Bluetooth: hci6: command 0x0419 tx timeout [ 1689.713100][T22234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1689.866578][T22234] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1689.867600][T22234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.867640][T22234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1689.867664][T22234] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1689.867698][T22234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.416537][T22234] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 1690.416564][T22234] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1690.416577][T22234] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1690.513412][T22234] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 1690.541681][T22234] usb 4-1: USB disconnect, device number 3 [ 1690.543993][T21356] Bluetooth: hci2: command 0x0c1a tx timeout [ 1690.556072][ T30] audit: type=1400 audit(1792218393.069:2203): avc: denied { write } for pid=23934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.898133][ T30] audit: type=1400 audit(1792218393.419:2204): avc: denied { write } for pid=23952 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.077536][T23949] rxe_eth0 speed is unknown, defaulting to 1000 [ 1691.414044][T21356] Bluetooth: hci6: command 0x0419 tx timeout [ 1692.612890][T21356] Bluetooth: hci2: command 0x0c1a tx timeout [ 1692.614290][ T30] audit: type=1400 audit(1792218395.139:2205): avc: denied { write } for pid=23966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.055345][ T30] audit: type=1400 audit(1792218395.569:2206): avc: denied { write } for pid=23994 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.502793][T21356] Bluetooth: hci6: command 0x0419 tx timeout [ 1694.140368][T23812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1694.260888][T23812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1694.275294][T23812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1694.314391][T23812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1694.318908][T23812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1694.391131][T23812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1694.391774][T23812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1694.459393][T23812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1694.742250][ T30] audit: type=1400 audit(1792218397.259:2207): avc: denied { write } for pid=23999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.822878][T22234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1694.985660][T22234] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1694.988403][T22234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.988447][T22234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1694.988472][T22234] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1694.988509][T22234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.179778][ T30] audit: type=1400 audit(1792218397.699:2208): avc: denied { write } for pid=24033 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1695.424733][T22234] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 1695.484132][T22234] usb 4-1: USB disconnect, device number 4 [ 1695.541467][T23812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.572648][T23812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.573078][T21356] Bluetooth: hci6: command 0x0419 tx timeout [ 1695.650304][T23052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.650439][T23052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1695.700371][T23054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.700442][T23054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.432320][T24058] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5161'. [ 1696.432370][T24058] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5161'. [ 1696.548372][T24065] overlayfs: failed to resolve './file1': -2 [ 1696.822212][ T30] audit: type=1400 audit(1792218399.339:2209): avc: denied { write } for pid=24038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1696.905388][T24076] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 1696.905431][T24076] device-mapper: block manager: superblock validator check failed for block 0 [ 1696.905460][T24076] device-mapper: thin metadata: couldn't read superblock [ 1696.946612][T21356] Bluetooth: hci2: connection err: -111 [ 1696.968045][T24070] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5164'. [ 1697.070857][ T30] audit: type=1400 audit(1792218399.589:2210): avc: denied { write } for pid=24085 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1697.321212][T24076] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EILSEQ) [ 1697.321239][T24076] device-mapper: ioctl: error adding target to table [ 1697.384698][ T4974] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1697.384715][ T4974] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1697.384732][ T4974] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1697.384768][ T4974] loop0: [ 1697.693143][T23812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.056494][T23812] veth0_vlan: entered promiscuous mode [ 1698.403339][T23812] veth1_vlan: entered promiscuous mode [ 1698.477260][T23812] veth0_macvtap: entered promiscuous mode [ 1698.497806][ T30] audit: type=1400 audit(1792218401.019:2211): avc: denied { write } for pid=24087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.502657][T23812] veth1_macvtap: entered promiscuous mode [ 1698.639418][T23812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.684859][T23812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.867977][ T9568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.870499][ T9574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.870533][ T9574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.870565][ T9574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.018287][ T30] audit: type=1400 audit(1792218401.539:2212): avc: denied { write } for pid=24116 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.212286][T23054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.212308][T23054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.286561][T24119] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 1699.286584][T24119] device-mapper: block manager: superblock validator check failed for block 0 [ 1699.286596][T24119] device-mapper: thin metadata: couldn't read superblock [ 1699.399105][ T9579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.399126][ T9579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.402112][T21356] Bluetooth: hci2: connection err: -111 [ 1699.414306][T24123] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5173'. [ 1699.679743][T24119] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EILSEQ) [ 1699.679770][T24119] device-mapper: ioctl: error adding target to table [ 1699.723517][ T4974] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1699.723540][ T4974] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1699.723552][ T4974] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1699.723602][ T4974] loop0: [ 1699.767722][T21356] Bluetooth: hci3: connection err: -111 [ 1699.769651][T24132] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5175'. [ 1700.167673][T24128] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 1700.167697][T24128] device-mapper: block manager: superblock validator check failed for block 0 [ 1700.167710][T24128] device-mapper: thin metadata: couldn't read superblock [ 1701.114848][T24128] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EILSEQ) [ 1701.114875][T24128] device-mapper: ioctl: error adding target to table [ 1701.790239][ T30] audit: type=1400 audit(1792218404.309:2213): avc: denied { write } for pid=24125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1702.281674][ T30] audit: type=1400 audit(1792218404.799:2214): avc: denied { write } for pid=24167 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1702.505789][T24175] loop0: detected capacity change from 0 to 32768 [ 1702.845160][T21356] Bluetooth: hci2: connection err: -111 [ 1702.845259][T24175] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5187'. [ 1703.448004][T24179] workqueue: Failed to create a rescuer kthread for wq "dm-thin": -EINTR [ 1703.744341][T24200] syzkaller0: entered promiscuous mode [ 1703.744382][T24200] syzkaller0: entered allmulticast mode [ 1704.036457][ T30] audit: type=1400 audit(1792218406.559:2215): avc: denied { write } for pid=24181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.065681][T24179] device-mapper: table: 248:1: thin-pool: Error creating pool's workqueue (-ENOMEM) [ 1704.065704][T24179] device-mapper: ioctl: error adding target to table [ 1705.652479][ T30] audit: type=1400 audit(1792218408.169:2216): avc: denied { write } for pid=24218 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.067948][T24255] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1708.741060][T21356] Bluetooth: hci0: connection err: -111 [ 1708.773855][T24260] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5209'. [ 1709.023475][T22243] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1709.071811][T24249] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 1709.071839][T24249] device-mapper: ioctl: error adding target to table [ 1709.210113][T22243] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1709.212409][T22243] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1709.236209][T22243] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1709.254457][T22243] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.254486][T22243] usb 10-1: Product: syz [ 1709.254495][T22243] usb 10-1: Manufacturer: syz [ 1709.254514][T22243] usb 10-1: SerialNumber: syz [ 1709.306900][ T30] audit: type=1400 audit(1792218411.829:2217): avc: denied { write } for pid=24237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.339817][T22243] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 1709.387136][T22243] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1709.454609][T22243] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1711.220242][ T30] audit: type=1400 audit(1792218413.739:2218): avc: denied { write } for pid=24277 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.401095][T24281] overlayfs: missing 'lowerdir' [ 1712.668171][T24264] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 1712.732660][T22243] usb 10-1: USB disconnect, device number 2 [ 1712.771719][T22243] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1712.828871][T22243] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1712.850585][T22243] ti_usb_3410_5052 10-1:2.0: device disconnected [ 1712.971385][ T30] audit: type=1400 audit(1792218415.489:2219): avc: denied { write } for pid=24282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1713.246318][ T30] audit: type=1400 audit(1792218415.769:2220): avc: denied { write } for pid=24307 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.264713][T19238] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1714.438646][T19238] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1714.457775][T19238] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.457868][T19238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1714.457910][T19238] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1714.457976][T19238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.591378][ T30] audit: type=1400 audit(1792218417.109:2221): avc: denied { write } for pid=24314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.737971][ T30] audit: type=1400 audit(1792218417.259:2222): avc: denied { write } for pid=24335 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.055951][T24286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1715.293328][T19238] cxacru 7-1:1.0: send of cm 0x90 failed (-71) [ 1715.319438][T19238] usb 7-1: USB disconnect, device number 20 [ 1715.466511][ T30] audit: type=1400 audit(1792218417.979:2223): avc: denied { unlink } for pid=24346 comm="syz.9.5225" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1715.599516][ T30] audit: type=1400 audit(1792218418.119:2224): avc: denied { write } for pid=24339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.818478][ T30] audit: type=1400 audit(1792218418.339:2225): avc: denied { write } for pid=24367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.970652][ T30] audit: type=1400 audit(1792218420.489:2226): avc: denied { write } for pid=24377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1719.195623][T24396] ceph: No mds server is up or the cluster is laggy [ 1719.254276][ T30] audit: type=1400 audit(1792218421.779:2227): avc: denied { write } for pid=24420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.713372][ T30] audit: type=1400 audit(1792218425.239:2228): avc: denied { write } for pid=24426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.114925][ T30] audit: type=1400 audit(1792218425.639:2229): avc: denied { write } for pid=24457 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1724.161747][T24475] FAULT_INJECTION: forcing a failure. [ 1724.161747][T24475] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.161785][T24475] CPU: 1 UID: 0 PID: 24475 Comm: syz.0.5256 Tainted: G L syzkaller #0 PREEMPT(full) [ 1724.161815][T24475] Tainted: [L]=SOFTLOCKUP [ 1724.161823][T24475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1724.161834][T24475] Call Trace: [ 1724.161842][T24475] [ 1724.161850][T24475] dump_stack_lvl+0x100/0x190 [ 1724.161884][T24475] should_fail_ex.cold+0x5/0xa [ 1724.161914][T24475] should_failslab+0xc2/0x120 [ 1724.161942][T24475] __kvmalloc_node_noprof+0x113/0x9b0 [ 1724.161967][T24475] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1724.161989][T24475] ? percpu_ref_init+0xec/0x3f0 [ 1724.162012][T24475] ? io_alloc_cache_init+0x38/0x170 [ 1724.162039][T24475] io_alloc_cache_init+0x38/0x170 [ 1724.162063][T24475] io_uring_setup.cold+0x450/0x1c7e [ 1724.162087][T24475] ? lock_acquire+0x1d1/0x380 [ 1724.162107][T24475] ? avc_has_perm_noaudit+0x56/0x470 [ 1724.162129][T24475] ? __pfx_io_uring_setup+0x10/0x10 [ 1724.162156][T24475] ? find_held_lock+0x2b/0x80 [ 1724.162185][T24475] ? avc_has_perm_noaudit+0x11e/0x470 [ 1724.162208][T24475] ? avc_has_perm_noaudit+0x11e/0x470 [ 1724.162247][T24475] ? xfd_validate_state+0x129/0x190 [ 1724.162279][T24475] __x64_sys_io_uring_setup+0xc2/0x170 [ 1724.162310][T24475] do_syscall_64+0x123/0x790 [ 1724.162341][T24475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.162361][T24475] RIP: 0033:0x7f6305b9e559 [ 1724.162379][T24475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.162397][T24475] RSP: 002b:00007f6306b36fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1724.162417][T24475] RAX: ffffffffffffffda RBX: 0000200000001b40 RCX: 00007f6305b9e559 [ 1724.162430][T24475] RDX: 0000200000001940 RSI: 0000200000001b40 RDI: 000000000000001f [ 1724.162442][T24475] RBP: 00007f6305c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1724.162454][T24475] R10: 0000200000001c40 R11: 0000000000000206 R12: 0000200000001940 [ 1724.162466][T24475] R13: 0000200000001c40 R14: 0000200000001bc0 R15: 00007ffc13d1a308 [ 1724.162492][T24475] [ 1724.662355][T24481] bridge_slave_0: left allmulticast mode [ 1724.662383][T24481] bridge_slave_0: left promiscuous mode [ 1724.662571][T24481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.771878][T24481] bridge_slave_1: left allmulticast mode [ 1724.771920][T24481] bridge_slave_1: left promiscuous mode [ 1724.772231][T24481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.895875][T24481] bond0: (slave bond_slave_0): Releasing backup interface [ 1724.937876][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.970830][T24481] bond0: (slave bond_slave_1): Releasing backup interface [ 1725.022107][T24481] team0: Port device team_slave_0 removed [ 1725.332872][T24481] team0: Port device team_slave_1 removed [ 1725.337670][T24481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.337949][T24481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.428230][T24481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.456381][T24481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.814643][T24481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1726.869903][ T30] audit: type=1400 audit(1792218429.389:2230): avc: denied { write } for pid=24470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.958892][T24490] vlan0: entered promiscuous mode [ 1726.997573][ T30] audit: type=1400 audit(1792218429.519:2231): avc: denied { write } for pid=24507 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.129584][T24490] team0: Port device vlan0 added [ 1727.129814][T24494] tipc: Started in network mode [ 1727.129868][T24494] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1727.130075][T24494] tipc: Enabled bearer , priority 0 [ 1727.131225][T24501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5259'. [ 1727.298667][T24492] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 1727.298706][T24492] device-mapper: ioctl: error adding target to table [ 1727.409673][ T30] audit: type=1400 audit(1792218429.929:2232): avc: denied { write } for pid=24509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.529066][ T30] audit: type=1400 audit(1792218430.049:2233): avc: denied { write } for pid=24523 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1728.236723][T24537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1728.236803][T12128] tipc: Node number set to 11578026 [ 1728.491213][ T9579] tipc: Resetting bearer [ 1728.535235][T24537] tipc: Enabling of bearer rejected, already enabled [ 1729.745725][ T30] audit: type=1400 audit(1792218432.269:2234): avc: denied { write } for pid=24528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.221577][ T30] audit: type=1400 audit(1792218432.739:2235): avc: denied { write } for pid=24560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.712362][T24567] bridge_slave_0: left allmulticast mode [ 1730.712382][T24567] bridge_slave_0: left promiscuous mode [ 1730.712548][T24567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.839080][T24567] bridge_slave_1: left allmulticast mode [ 1730.839099][T24567] bridge_slave_1: left promiscuous mode [ 1730.839242][T24567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.960231][T24567] bond0: (slave bond_slave_0): Releasing backup interface [ 1731.050726][T24567] bond0: (slave bond_slave_1): Releasing backup interface [ 1731.106596][T24567] team0: Port device team_slave_0 removed [ 1731.147211][T24567] team0: Port device team_slave_1 removed [ 1731.151099][T24567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1731.151124][T24567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1731.186866][T24567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1731.186889][T24567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.259915][T24567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1731.510286][T24557] infiniband syz0: set active [ 1731.510642][T24557] infiniband syz0: added veth0_vlan [ 1731.611211][T24577] tipc: Started in network mode [ 1731.611239][T24577] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1731.611348][T24577] tipc: Enabled bearer , priority 0 [ 1731.640091][T24557] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1731.642205][T24557] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1731.642247][T24557] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1731.827271][T24557] RDS/IB: syz0: added [ 1731.827318][T24557] smc: adding ib device syz0 with port count 1 [ 1731.827336][T24557] smc: ib device syz0 port 1 has no pnetid [ 1731.865671][T24573] vlan0: entered promiscuous mode [ 1731.891022][T24573] team0: Port device vlan0 added [ 1732.308003][T24590] loop0: detected capacity change from 0 to 32768 [ 1732.440865][T24597] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5269'. [ 1732.534125][T21356] Bluetooth: hci3: connection err: -111 [ 1732.539933][T24601] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5274'. [ 1732.722848][ T48] tipc: Node number set to 11578026 [ 1734.206394][T24590] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 1734.488343][ T30] audit: type=1400 audit(1792218437.009:2236): avc: denied { write } for pid=24591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.667356][ T30] audit: type=1400 audit(1792218437.189:2237): avc: denied { write } for pid=24621 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1735.097446][T21356] Bluetooth: hci3: connection err: -111 [ 1735.110893][T24626] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5281'. [ 1735.422576][T24037] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1735.442134][T24354] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1735.684940][T24630] ceph: No mds server is up or the cluster is laggy [ 1735.751170][T23707] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1736.802881][T24638] loop9: detected capacity change from 0 to 2640 [ 1736.803364][T24638] buffer_io_error: 11 callbacks suppressed [ 1736.803378][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803408][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803434][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803460][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803484][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803521][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803556][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803580][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803593][T24638] ldm_validate_partition_table(): Disk read failed. [ 1736.803615][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803647][T24638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1736.803682][T24638] Dev loop9: unable to read RDB block 0 [ 1736.803797][T24638] loop9: unable to read partition table [ 1736.803951][T24638] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1737.884698][ T30] audit: type=1400 audit(1792218440.409:2238): avc: denied { write } for pid=24641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.062918][T24656] tipc: Enabled bearer , priority 0 [ 1738.067762][T24656] syzkaller0: entered promiscuous mode [ 1738.067776][T24656] syzkaller0: entered allmulticast mode [ 1738.093000][T19238] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1738.115212][T24656] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1738.209336][ T30] audit: type=1400 audit(1792218440.729:2239): avc: denied { write } for pid=24658 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.274010][T19238] usb 4-1: Using ep0 maxpacket: 32 [ 1738.277989][T19238] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1738.279429][T19238] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1738.279483][T19238] usb 4-1: config 0 has no interface number 0 [ 1738.279547][T19238] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1738.282113][T19238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.282166][T19238] usb 4-1: Product: syz [ 1738.282182][T19238] usb 4-1: Manufacturer: syz [ 1738.282211][T19238] usb 4-1: SerialNumber: syz [ 1738.309942][T19238] usb 4-1: config 0 descriptor?? [ 1738.372255][T24656] tipc: Resetting bearer [ 1738.461026][T24653] tipc: Resetting bearer [ 1738.611534][T24653] tipc: Disabling bearer [ 1739.184829][T24670] netlink: 'syz.6.5289': attribute type 1 has an invalid length. [ 1739.339592][T24670] bond1: entered promiscuous mode [ 1739.341423][T24670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1739.463669][T24672] bond1: (slave bridge1): making interface the new active one [ 1739.463703][T24672] bridge1: entered promiscuous mode [ 1739.469917][T24672] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1740.294904][T19238] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1740.294979][T19238] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1740.295013][T19238] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1740.296115][T19238] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1740.344401][T19238] usb 4-1: USB disconnect, device number 5 [ 1740.666512][T24682] fuse: Unknown parameter 'grou00000000000000000000' [ 1740.861093][T24688] FAULT_INJECTION: forcing a failure. [ 1740.861093][T24688] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.861159][T24688] CPU: 0 UID: 0 PID: 24688 Comm: syz.6.5294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1740.861192][T24688] Tainted: [L]=SOFTLOCKUP [ 1740.861201][T24688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1740.861215][T24688] Call Trace: [ 1740.861222][T24688] [ 1740.861231][T24688] dump_stack_lvl+0x100/0x190 [ 1740.861267][T24688] should_fail_ex.cold+0x5/0xa [ 1740.861296][T24688] should_failslab+0xc2/0x120 [ 1740.861327][T24688] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1740.861356][T24688] ? __alloc_skb+0x140/0x710 [ 1740.861380][T24688] __alloc_skb+0x140/0x710 [ 1740.861398][T24688] ? __alloc_skb+0x5b7/0x710 [ 1740.861416][T24688] ? __pfx___alloc_skb+0x10/0x10 [ 1740.861433][T24688] ? __asan_memset+0x23/0x50 [ 1740.861456][T24688] ? __nla_reserve+0x9c/0xc0 [ 1740.861485][T24688] wireless_send_event+0x52e/0xc10 [ 1740.861518][T24688] ? __pfx_wireless_send_event+0x10/0x10 [ 1740.861543][T24688] ? cfg80211_ibss_wext_siwessid+0x238/0x3b0 [ 1740.861583][T24688] ioctl_standard_iw_point+0xa5d/0xc90 [ 1740.861611][T24688] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 1740.861637][T24688] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 1740.861668][T24688] ? dev_load+0x2a/0x240 [ 1740.861690][T24688] ? dev_load+0x8e/0x240 [ 1740.861711][T24688] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 1740.861735][T24688] ioctl_standard_call+0x167/0x1d0 [ 1740.861762][T24688] ? __pfx_ioctl_standard_call+0x10/0x10 [ 1740.861788][T24688] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 1740.861810][T24688] wext_ioctl_dispatch.constprop.0+0x30f/0x3d0 [ 1740.861843][T24688] wext_handle_ioctl+0x105/0x1b0 [ 1740.861871][T24688] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1740.861899][T24688] ? do_vfs_ioctl+0x226/0x13e0 [ 1740.861924][T24688] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1740.861946][T24688] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1740.861985][T24688] sock_ioctl+0x2d4/0x6b0 [ 1740.862013][T24688] ? __pfx_sock_ioctl+0x10/0x10 [ 1740.862051][T24688] ? __x64_sys_ioctl+0x130/0x210 [ 1740.862074][T24688] ? __pfx_sock_ioctl+0x10/0x10 [ 1740.862109][T24688] __x64_sys_ioctl+0x18e/0x210 [ 1740.862136][T24688] do_syscall_64+0x123/0x790 [ 1740.862169][T24688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.862190][T24688] RIP: 0033:0x7eff5119e559 [ 1740.862208][T24688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.862227][T24688] RSP: 002b:00007eff520d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.862247][T24688] RAX: ffffffffffffffda RBX: 00007eff51425fa0 RCX: 00007eff5119e559 [ 1740.862261][T24688] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 1740.862273][T24688] RBP: 00007eff51235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1740.862285][T24688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1740.862297][T24688] R13: 00007eff51426038 R14: 00007eff51425fa0 R15: 00007ffcee7ac848 [ 1740.862325][T24688] [ 1741.325606][T24694] CacheFiles: Failed to register: -95 [ 1741.378754][T24697] futex_wake_op: syz.0.5298 tries to shift op by 144; fix this program [ 1743.977972][T24716] input: syz1 as /devices/virtual/input/input116 [ 1744.642848][ T5757] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1744.794886][ T5757] usb 4-1: Using ep0 maxpacket: 32 [ 1744.796794][ T5757] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1744.803090][ T5757] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1744.803122][ T5757] usb 4-1: config 0 has no interface number 0 [ 1744.803154][ T5757] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1744.830537][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.830561][ T5757] usb 4-1: Product: syz [ 1744.830574][ T5757] usb 4-1: Manufacturer: syz [ 1744.830588][ T5757] usb 4-1: SerialNumber: syz [ 1744.833119][ T5757] usb 4-1: config 0 descriptor?? [ 1745.211775][T23458] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1745.212993][T23458] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1745.228604][T23458] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1745.244038][T23458] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1745.245082][T23458] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1745.839344][T24708] rxe_eth0 speed is unknown, defaulting to 1000 [ 1745.930924][ T5757] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1745.930972][ T5757] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1745.930988][ T5757] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1745.931052][ T5757] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1745.979966][ T5757] usb 4-1: USB disconnect, device number 6 [ 1746.206091][T24738] CacheFiles: Failed to register: -95 [ 1746.291608][T24684] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 1746.307131][T24726] rxe_eth0 speed is unknown, defaulting to 1000 [ 1746.419591][T24740] input: syz1 as /devices/virtual/input/input117 [ 1746.444388][T24743] futex_wake_op: syz.7.5311 tries to shift op by 144; fix this program [ 1747.333199][T21356] Bluetooth: hci7: command tx timeout [ 1749.417222][ T8900] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.442672][T21356] Bluetooth: hci7: command tx timeout [ 1749.446516][ T30] audit: type=1400 audit(1792218451.969:2240): avc: denied { write } for pid=24745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1749.608708][T16965] tipc: Resetting bearer [ 1749.681984][ T30] audit: type=1400 audit(1792218452.199:2241): avc: denied { write } for pid=24782 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1749.959485][ T8900] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.787868][T24793] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1751.327167][T24788] input: syz1 as /devices/virtual/input/input118 [ 1751.492871][T21356] Bluetooth: hci7: command tx timeout [ 1751.715790][ T8900] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.941197][ T8900] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.528565][T24806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1752.570357][T24809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1752.784410][ T5757] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1752.840963][T24825] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5333'. [ 1752.887255][T24726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.887413][T24726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.887605][T24726] bridge_slave_0: entered allmulticast mode [ 1752.890727][T24726] bridge_slave_0: entered promiscuous mode [ 1752.920910][T24726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.921025][T24726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.921124][T24726] bridge_slave_1: entered allmulticast mode [ 1752.922461][T24726] bridge_slave_1: entered promiscuous mode [ 1752.935369][ T5757] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1752.936934][ T5757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.937004][ T5757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1752.937030][ T5757] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1752.937070][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.358800][ T30] audit: type=1400 audit(1792218455.879:2242): avc: denied { write } for pid=24826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.433840][ T5757] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 1753.437771][T24851] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1753.437795][T24851] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1753.480441][ T5757] usb 4-1: USB disconnect, device number 7 [ 1753.526518][ T8900] bond0 (unregistering): Released all slaves [ 1753.554198][ T30] audit: type=1400 audit(1792218456.069:2243): avc: denied { write } for pid=24853 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.586563][T21356] Bluetooth: hci7: command tx timeout [ 1753.630024][T24833] tipc: Resetting bearer [ 1753.716114][T24833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1753.716306][T24835] team0: No ports can be present during mode change [ 1753.725952][T24845] tipc: Enabling of bearer rejected, already enabled [ 1753.741122][ T8900] tipc: Disabling bearer [ 1753.749908][ T8900] tipc: Left network mode [ 1753.802947][T24726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.806442][T24726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.865384][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1753.908149][T24861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1754.008739][T24726] team0: Port device team_slave_0 added [ 1754.022314][T24726] team0: Port device team_slave_1 added [ 1754.031472][T24863] device-mapper: table: 248:1: zero-length target [ 1754.031488][T24863] device-mapper: ioctl: error adding target to table [ 1754.078159][T21356] Bluetooth: hci0: connection err: -111 [ 1754.188124][T24863] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5340'. [ 1754.276097][T24726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.276129][T24726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.276166][T24726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.333214][T24726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.333243][T24726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.333280][T24726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.519729][T24885] tipc: Resetting bearer [ 1754.536181][T24885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1754.681943][T24726] hsr_slave_0: entered promiscuous mode [ 1754.688591][T24726] hsr_slave_1: entered promiscuous mode [ 1754.694386][T24726] debugfs: 'hsr0' already exists in 'hsr' [ 1754.694405][T24726] Cannot create hsr debugfs directory [ 1754.694585][T24885] team0: No ports can be present during mode change [ 1754.746858][T24894] FAULT_INJECTION: forcing a failure. [ 1754.746858][T24894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1754.746894][T24894] CPU: 0 UID: 0 PID: 24894 Comm: syz.0.5349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.746923][T24894] Tainted: [L]=SOFTLOCKUP [ 1754.746931][T24894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1754.746945][T24894] Call Trace: [ 1754.746953][T24894] [ 1754.746962][T24894] dump_stack_lvl+0x100/0x190 [ 1754.746997][T24894] should_fail_ex.cold+0x5/0xa [ 1754.747026][T24894] _copy_to_user+0x32/0xd0 [ 1754.747059][T24894] video_usercopy+0xece/0x1730 [ 1754.747085][T24894] ? __pfx___video_do_ioctl+0x10/0x10 [ 1754.747111][T24894] ? __pfx_video_usercopy+0x10/0x10 [ 1754.747155][T24894] v4l2_ioctl+0x1bd/0x250 [ 1754.747180][T24894] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1754.747206][T24894] __x64_sys_ioctl+0x18e/0x210 [ 1754.747233][T24894] do_syscall_64+0x123/0x790 [ 1754.747269][T24894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.747289][T24894] RIP: 0033:0x7f6305b9e559 [ 1754.747306][T24894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.747325][T24894] RSP: 002b:00007f6306b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.747347][T24894] RAX: ffffffffffffffda RBX: 00007f6305e25fa0 RCX: 00007f6305b9e559 [ 1754.747360][T24894] RDX: 0000200000000480 RSI: 00000000c0145608 RDI: 0000000000000004 [ 1754.747372][T24894] RBP: 00007f6305c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1754.747384][T24894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.747396][T24894] R13: 00007f6305e26038 R14: 00007f6305e25fa0 R15: 00007ffc13d1a308 [ 1754.747424][T24894] [ 1754.819186][T24887] tipc: Enabling of bearer rejected, already enabled [ 1755.249891][T24909] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 1755.336391][ T8900] hsr_slave_0: left promiscuous mode [ 1755.336999][ T8900] hsr_slave_1: left promiscuous mode [ 1755.342437][ T8900] veth1_macvtap: left promiscuous mode [ 1755.342477][ T8900] veth0_macvtap: left promiscuous mode [ 1755.342566][ T8900] veth1_vlan: left promiscuous mode [ 1755.399883][ T30] audit: type=1400 audit(1792218457.919:2244): avc: denied { write } for pid=24888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.432869][T22243] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1755.592858][T22243] usb 8-1: Using ep0 maxpacket: 32 [ 1755.593842][T22243] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1755.595243][T22243] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1755.595303][T22243] usb 8-1: config 0 has no interface number 0 [ 1755.595368][T22243] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1755.598023][T22243] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.598067][T22243] usb 8-1: Product: syz [ 1755.598098][T22243] usb 8-1: Manufacturer: syz [ 1755.598129][T22243] usb 8-1: SerialNumber: syz [ 1755.674087][T22243] usb 8-1: config 0 descriptor?? [ 1755.764982][ T30] audit: type=1400 audit(1792218458.289:2245): avc: denied { write } for pid=24925 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.939323][ T8900] team0 (unregistering): Port device vlan0 removed [ 1755.953948][ T9568] smc: removing ib device syz0 [ 1756.497349][ T9568] smbdirect: ib_dev[syz0] removed [ 1756.531163][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1756.553934][ T48] infiniband syz0: ib_query_port failed (-19) [ 1756.571023][T24909] syz.0.5354 (24909): drop_caches: 2 [ 1756.885289][T22243] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1756.885365][T22243] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1756.885396][T22243] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1756.885517][T22243] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 1757.016525][T22243] usb 8-1: USB disconnect, device number 14 [ 1757.429547][T21356] block nbd0: Receive control failed (result -32) [ 1758.342854][ T48] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1758.493388][ T48] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1758.494277][ T48] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.494315][ T48] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1758.496164][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.496189][ T48] usb 8-1: Product: syz [ 1758.496204][ T48] usb 8-1: Manufacturer: syz [ 1758.496219][ T48] usb 8-1: SerialNumber: syz [ 1758.498568][ T30] audit: type=1400 audit(1792218461.019:2246): avc: denied { write } for pid=24940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.615727][T24972] FAULT_INJECTION: forcing a failure. [ 1758.615727][T24972] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1758.615796][T24972] CPU: 0 UID: 0 PID: 24972 Comm: syz.3.5368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1758.615828][T24972] Tainted: [L]=SOFTLOCKUP [ 1758.615836][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1758.615849][T24972] Call Trace: [ 1758.615857][T24972] [ 1758.615868][T24972] dump_stack_lvl+0x100/0x190 [ 1758.615902][T24972] should_fail_ex.cold+0x5/0xa [ 1758.615933][T24972] get_futex_key+0x1d0/0x14f0 [ 1758.615963][T24972] ? __pfx_get_futex_key+0x10/0x10 [ 1758.615993][T24972] ? find_held_lock+0x2b/0x80 [ 1758.616025][T24972] ? __fget_files+0x215/0x3d0 [ 1758.616053][T24972] ? __fget_files+0x215/0x3d0 [ 1758.616084][T24972] futex_wake+0xf4/0x5e0 [ 1758.616106][T24972] ? __pfx_futex_wake+0x10/0x10 [ 1758.616124][T24972] ? fput+0x7c/0x100 [ 1758.616150][T24972] ? __sys_sendmmsg+0x371/0x440 [ 1758.616174][T24972] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1758.616203][T24972] do_futex+0x2b2/0x440 [ 1758.616234][T24972] ? __pfx_do_futex+0x10/0x10 [ 1758.616271][T24972] __x64_sys_futex+0x34f/0x4d0 [ 1758.616300][T24972] ? handle_softirqs+0x7ee/0x9d0 [ 1758.616321][T24972] ? __pfx___x64_sys_futex+0x10/0x10 [ 1758.616358][T24972] do_syscall_64+0x123/0x790 [ 1758.616388][T24972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.616408][T24972] RIP: 0033:0x7fc0e6f9e559 [ 1758.616424][T24972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.616441][T24972] RSP: 002b:00007fc0e7e120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1758.616461][T24972] RAX: ffffffffffffffda RBX: 00007fc0e7225fa8 RCX: 00007fc0e6f9e559 [ 1758.616474][T24972] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc0e7225fac [ 1758.616487][T24972] RBP: 00007fc0e7225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1758.616499][T24972] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1758.616511][T24972] R13: 00007fc0e7226038 R14: 00007ffd93ed9b80 R15: 00007ffd93ed9c68 [ 1758.616538][T24972] [ 1758.620262][ T48] cdc_mbim 8-1:1.0: skipping garbage [ 1758.860205][T24962] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1759.036213][ T30] audit: type=1400 audit(1792218461.559:2247): avc: denied { write } for pid=24979 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.479738][T24962] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1759.480220][ T48] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 1759.505336][ T48] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 1759.522188][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1759.638460][ T48] wwan wwan0: port wwan0mbim0 attached [ 1759.899946][T24993] device-mapper: table: 248:1: thi: unknown target type [ 1759.899985][T24993] device-mapper: ioctl: error adding target to table [ 1760.260146][ T48] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, fa:e9:30:af:f3:b5 [ 1760.337408][ T48] usb 8-1: USB disconnect, device number 15 [ 1760.342471][ T48] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 1761.673132][T25015] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1761.792963][ T48] wwan wwan0: port wwan0mbim0 disconnected [ 1761.841117][T25021] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1762.120768][T25001] syz.6.5375 (25001): drop_caches: 2 [ 1762.173594][T24633] udevd[24633]: setting mode of /dev/bus/usb/008/015 to 020664 failed: No such file or directory [ 1762.173757][T24633] udevd[24633]: setting owner of /dev/bus/usb/008/015 to uid=0, gid=0 failed: No such file or directory [ 1762.395188][T25029] FAULT_INJECTION: forcing a failure. [ 1762.395188][T25029] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.395230][T25029] CPU: 1 UID: 0 PID: 25029 Comm: syz.6.5382 Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.395264][T25029] Tainted: [L]=SOFTLOCKUP [ 1762.395272][T25029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1762.395285][T25029] Call Trace: [ 1762.395294][T25029] [ 1762.395304][T25029] dump_stack_lvl+0x100/0x190 [ 1762.395341][T25029] should_fail_ex.cold+0x5/0xa [ 1762.395370][T25029] should_failslab+0xc2/0x120 [ 1762.395403][T25029] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1762.395429][T25029] ? __send_signal_locked+0x1d1/0x1430 [ 1762.395466][T25029] __send_signal_locked+0x1d1/0x1430 [ 1762.395503][T25029] send_signal_locked+0x15e/0xa00 [ 1762.395524][T25029] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1762.395553][T25029] ? __pfx_send_signal_locked+0x10/0x10 [ 1762.395574][T25029] ? lock_task_sighand+0x13c/0x340 [ 1762.395611][T25029] ? lock_task_sighand+0x146/0x340 [ 1762.395651][T25029] group_send_sig_info+0x2a4/0x300 [ 1762.395677][T25029] ? __pfx_group_send_sig_info+0x10/0x10 [ 1762.395709][T25029] ? kill_pid_info_type+0x1a/0x290 [ 1762.395731][T25029] kill_pid_info_type+0x92/0x290 [ 1762.395759][T25029] kill_proc_info+0x6f/0x1b0 [ 1762.395786][T25029] __x64_sys_rt_sigqueueinfo+0x1a6/0x250 [ 1762.395815][T25029] ? __pfx___x64_sys_rt_sigqueueinfo+0x10/0x10 [ 1762.395856][T25029] do_syscall_64+0x123/0x790 [ 1762.395889][T25029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.395910][T25029] RIP: 0033:0x7eff5119e559 [ 1762.395927][T25029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.395946][T25029] RSP: 002b:00007eff520d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 1762.395967][T25029] RAX: ffffffffffffffda RBX: 00007eff51425fa0 RCX: 00007eff5119e559 [ 1762.395980][T25029] RDX: 0000200000000680 RSI: 0000000000000021 RDI: 00000000000003c1 [ 1762.395993][T25029] RBP: 00007eff51235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1762.396004][T25029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.396017][T25029] R13: 00007eff51426038 R14: 00007eff51425fa0 R15: 00007ffcee7ac848 [ 1762.396045][T25029] [ 1762.818599][ T30] audit: type=1400 audit(1792218465.339:2248): avc: denied { write } for pid=25012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.058035][ T30] audit: type=1400 audit(1792218465.579:2249): avc: denied { write } for pid=25049 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1764.828580][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1765.375669][ T30] audit: type=1400 audit(1792218467.899:2250): avc: denied { read } for pid=25066 comm="syz.6.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1765.848090][T25072] caif0: tun_chr_ioctl cmd 2148553947 [ 1766.181006][T24726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1766.224245][ T5663] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1766.228975][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1766.229718][T24726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1766.268192][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1766.268946][T24726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1766.294745][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1766.295765][T24726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1766.319254][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1766.353119][ T5663] usb 7-1: device descriptor read/64, error -71 [ 1766.468132][T24726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.524686][T25105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'. [ 1766.602808][ T5663] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1766.671358][ T30] audit: type=1400 audit(1792218469.189:2251): avc: denied { write } for pid=25088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.753228][ T5663] usb 7-1: device descriptor read/64, error -71 [ 1766.760493][T24726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.798598][T22665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.798732][T22665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.822171][ T30] audit: type=1400 audit(1792218469.349:2252): avc: denied { write } for pid=25115 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.829639][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.829763][ T9558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.864677][ T5663] usb usb7-port1: attempt power cycle [ 1767.156636][ T30] audit: type=1400 audit(1792218469.679:2253): avc: denied { write } for pid=25119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.204488][ T5663] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1767.223427][ T5663] usb 7-1: device descriptor read/8, error -71 [ 1767.464111][ T5663] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1767.484126][ T5663] usb 7-1: device descriptor read/8, error -71 [ 1767.523927][ T30] audit: type=1400 audit(1792218470.049:2254): avc: denied { write } for pid=25139 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.593094][ T5663] usb usb7-port1: unable to enumerate USB device [ 1767.904414][T25148] syzkaller0: entered promiscuous mode [ 1767.904454][T25148] syzkaller0: entered allmulticast mode [ 1768.170307][T25143] syz.0.5401 (25143): drop_caches: 2 [ 1768.324247][ T30] audit: type=1400 audit(1792218470.849:2255): avc: denied { write } for pid=25149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.526622][ T30] audit: type=1400 audit(1792218471.049:2256): avc: denied { write } for pid=25178 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.632875][T25181] netlink: 'syz.0.5406': attribute type 5 has an invalid length. [ 1768.632898][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1774.272763][T24726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1774.415483][T24726] veth0_vlan: entered promiscuous mode [ 1774.445396][T24726] veth1_vlan: entered promiscuous mode [ 1774.501563][T24726] veth0_macvtap: entered promiscuous mode [ 1774.513756][T24726] veth1_macvtap: entered promiscuous mode [ 1774.546772][T24726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1774.589008][T24726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1774.614798][T16965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.615052][T16965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.615151][T16965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.615222][T16965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.942990][T22261] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1775.007724][T16965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.007757][T16965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.075757][ T9578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.075777][ T9578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.100529][T22261] usb 8-1: Using ep0 maxpacket: 16 [ 1775.102421][T22261] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1775.123096][T22261] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1775.123121][T22261] usb 8-1: config 0 has no interface number 0 [ 1775.123153][T22261] usb 8-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.123176][T22261] usb 8-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.123195][T22261] usb 8-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1775.123220][T22261] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1775.123247][T22261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.127111][T22261] usb 8-1: config 0 descriptor?? [ 1775.205652][T22261] usbhid 8-1:0.1: fixing wrong optional hid class descriptors count [ 1775.345861][ T30] audit: type=1400 audit(1792218477.869:2257): avc: denied { write } for pid=25190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1775.579404][ T30] audit: type=1400 audit(1792218478.099:2258): avc: denied { write } for pid=25224 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1775.624241][T22261] elan 0003:04F3:074D.004E: failed to start in urb: -90 [ 1777.414304][T22261] elan 0003:04F3:074D.004E: Get report error for parm 6: 0 [ 1777.814927][T22261] elan 0003:04F3:074D.004E: Get report error for parm 7: 0 [ 1778.019341][ T30] audit: type=1400 audit(1792218480.539:2259): avc: denied { write } for pid=25229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.219977][T22261] elan 0003:04F3:074D.004E: Get report error for parm 8: 4 [ 1778.221708][T22261] elan 0003:04F3:074D.004E: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.7-1/input1 [ 1778.221737][T22261] elan 0003:04F3:074D.004E: Input device is not registered [ 1778.224360][T22261] elan 0003:04F3:074D.004E: probe with driver elan failed with error -119 [ 1778.341844][ T30] audit: type=1400 audit(1792218480.859:2260): avc: denied { write } for pid=25257 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.477248][T25251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5420'. [ 1778.876071][ T30] audit: type=1400 audit(1792218481.399:2261): avc: denied { write } for pid=25264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.007774][ T30] audit: type=1400 audit(1792218481.529:2262): avc: denied { write } for pid=25286 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.755308][ T5663] usb 8-1: USB disconnect, device number 16 [ 1780.174207][ T5663] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1780.328000][ T5663] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1780.329822][ T5663] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1780.362883][ T5663] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1780.367522][ T5663] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.367548][ T5663] usb 8-1: Product: syz [ 1780.367746][ T5663] usb 8-1: Manufacturer: syz [ 1780.367761][ T5663] usb 8-1: SerialNumber: syz [ 1780.423141][ T5663] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 1780.428318][ T5663] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1780.455622][ T5663] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1780.646781][T25324] FAULT_INJECTION: forcing a failure. [ 1780.646781][T25324] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.646820][T25324] CPU: 1 UID: 0 PID: 25324 Comm: syz.6.5438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1780.646850][T25324] Tainted: [L]=SOFTLOCKUP [ 1780.646859][T25324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1780.646872][T25324] Call Trace: [ 1780.646880][T25324] [ 1780.646889][T25324] dump_stack_lvl+0x100/0x190 [ 1780.646924][T25324] should_fail_ex.cold+0x5/0xa [ 1780.646954][T25324] should_failslab+0xc2/0x120 [ 1780.646984][T25324] __kmalloc_noprof+0xfc/0x840 [ 1780.647008][T25324] ? rcu_is_watching+0x13/0xc0 [ 1780.647034][T25324] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1780.647071][T25324] tomoyo_realpath_from_path+0xb6/0x690 [ 1780.647107][T25324] tomoyo_path_number_perm+0x23c/0x580 [ 1780.647133][T25324] ? tomoyo_path_number_perm+0x22e/0x580 [ 1780.647161][T25324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1780.647190][T25324] ? __pfx_futex_wait+0x10/0x10 [ 1780.647224][T25324] ? rcu_read_lock_any_held+0x6a/0x90 [ 1780.647260][T25324] ? hook_file_ioctl_common+0x140/0x440 [ 1780.647286][T25324] ? __x64_sys_futex+0x34f/0x4d0 [ 1780.647315][T25324] ? __x64_sys_futex+0x358/0x4d0 [ 1780.647354][T25324] security_file_ioctl+0xd3/0x230 [ 1780.647385][T25324] __x64_sys_ioctl+0xb7/0x210 [ 1780.647412][T25324] do_syscall_64+0x123/0x790 [ 1780.647452][T25324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.647474][T25324] RIP: 0033:0x7eff5119e559 [ 1780.647491][T25324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.647512][T25324] RSP: 002b:00007eff520d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1780.647534][T25324] RAX: ffffffffffffffda RBX: 00007eff51425fa0 RCX: 00007eff5119e559 [ 1780.647548][T25324] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000003 [ 1780.647561][T25324] RBP: 00007eff51235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1780.647573][T25324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1780.647584][T25324] R13: 00007eff51426038 R14: 00007eff51425fa0 R15: 00007ffcee7ac848 [ 1780.647613][T25324] [ 1780.647622][T25324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1781.262268][ T30] audit: type=1400 audit(1792218483.779:2263): avc: denied { write } for pid=25306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.739702][ T30] audit: type=1400 audit(1792218484.259:2264): avc: denied { write } for pid=25348 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1782.946684][T25386] futex_wake_op: syz.2.5454 tries to shift op by 144; fix this program [ 1783.133262][T12125] usb 8-1: USB disconnect, device number 17 [ 1783.183265][ T30] audit: type=1400 audit(1792218485.709:2265): avc: denied { write } for pid=25363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.217729][T12125] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1783.285361][T12125] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1783.297358][T12125] ti_usb_3410_5052 8-1:2.0: device disconnected [ 1783.365642][ T30] audit: type=1400 audit(1792218485.889:2266): avc: denied { write } for pid=25394 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1784.417655][T25428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5464'. [ 1784.658465][ T30] audit: type=1400 audit(1792218487.169:2267): avc: denied { write } for pid=25398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1784.924720][T25445] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1785.127000][ T30] audit: type=1400 audit(1792218487.649:2268): avc: denied { write } for pid=25447 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.246455][T25452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25452 comm=syz.6.5468 [ 1785.489794][T25455] netlink: 'syz.6.5469': attribute type 1 has an invalid length. [ 1785.540178][T25456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5469'. [ 1786.543299][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.758893][T25455] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1787.163700][T25468] FAULT_INJECTION: forcing a failure. [ 1787.163700][T25468] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.163757][T25468] CPU: 0 UID: 0 PID: 25468 Comm: syz.0.5474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1787.163788][T25468] Tainted: [L]=SOFTLOCKUP [ 1787.163796][T25468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1787.163809][T25468] Call Trace: [ 1787.163818][T25468] [ 1787.163828][T25468] dump_stack_lvl+0x100/0x190 [ 1787.163862][T25468] should_fail_ex.cold+0x5/0xa [ 1787.163890][T25468] should_failslab+0xc2/0x120 [ 1787.163920][T25468] __kmalloc_cache_noprof+0x91/0x6d0 [ 1787.163943][T25468] ? call_usermodehelper_setup+0xaf/0x360 [ 1787.163968][T25468] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1787.163996][T25468] call_usermodehelper_setup+0xaf/0x360 [ 1787.164020][T25468] __request_module+0x3c7/0x6a0 [ 1787.164049][T25468] ? __pfx___request_module+0x10/0x10 [ 1787.164075][T25468] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1787.164115][T25468] ? rcu_is_watching+0x13/0xc0 [ 1787.164144][T25468] ? cap_capable+0x107/0x430 [ 1787.164175][T25468] ? __pfx_ioctl_standard_call+0x10/0x10 [ 1787.164209][T25468] dev_load+0x22b/0x240 [ 1787.164231][T25468] wext_ioctl_dispatch.constprop.0+0x9e/0x3d0 [ 1787.164264][T25468] wext_handle_ioctl+0x105/0x1b0 [ 1787.164295][T25468] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1787.164325][T25468] ? do_vfs_ioctl+0x226/0x13e0 [ 1787.164351][T25468] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1787.164373][T25468] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1787.164406][T25468] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1787.164442][T25468] sock_ioctl+0x2d4/0x6b0 [ 1787.164467][T25468] ? __pfx_sock_ioctl+0x10/0x10 [ 1787.164501][T25468] ? selinux_file_ioctl+0x13b/0x290 [ 1787.164528][T25468] ? selinux_file_ioctl+0xb6/0x290 [ 1787.164559][T25468] ? __pfx_sock_ioctl+0x10/0x10 [ 1787.164587][T25468] __x64_sys_ioctl+0x18e/0x210 [ 1787.164613][T25468] do_syscall_64+0x123/0x790 [ 1787.164643][T25468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.164664][T25468] RIP: 0033:0x7f6305b9e559 [ 1787.164681][T25468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.164699][T25468] RSP: 002b:00007f6306b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.164721][T25468] RAX: ffffffffffffffda RBX: 00007f6305e25fa0 RCX: 00007f6305b9e559 [ 1787.164735][T25468] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 1787.164749][T25468] RBP: 00007f6305c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1787.164762][T25468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1787.164775][T25468] R13: 00007f6305e26038 R14: 00007f6305e25fa0 R15: 00007ffc13d1a308 [ 1787.164804][T25468] [ 1787.293468][T25464] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1788.236078][ T30] audit: type=1400 audit(1792218490.759:2269): avc: denied { write } for pid=25462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.427818][T25496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25496 comm=syz.6.5479 [ 1788.689795][T25501] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5482'. [ 1788.979145][ T30] audit: type=1400 audit(1792218491.499:2270): avc: denied { write } for pid=25502 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1789.625020][T25524] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1789.679752][T25524] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1789.691510][T25524] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1789.703499][T25524] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1789.703620][T25524] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1789.703660][T25524] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1789.703691][T25524] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1789.704591][T25524] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1789.706583][T25524] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1789.827802][ T30] audit: type=1400 audit(1792218492.349:2271): avc: denied { write } for pid=25514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1789.938665][ T30] audit: type=1400 audit(1792218492.459:2272): avc: denied { write } for pid=25534 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.545333][ T30] audit: type=1400 audit(1792218493.059:2273): avc: denied { write } for pid=25536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1790.619594][T21356] Bluetooth: hci3: unexpected event 0x04 length: 7 < 10 [ 1790.712328][T25551] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5488'. [ 1790.984535][ T30] audit: type=1400 audit(1792218493.509:2274): avc: denied { write } for pid=25559 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.138652][T25569] fuse: Unknown parameter 'use00000000000000000000' [ 1791.664236][T25581] device-mapper: table: 248:1: thi: unknown target type [ 1791.664257][T25581] device-mapper: ioctl: error adding target to table [ 1792.593751][T12125] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1792.691894][T25594] ceph: No mds server is up or the cluster is laggy [ 1793.560986][T25612] syz.2.5505 (25612): drop_caches: 2 [ 1794.139074][ T30] audit: type=1400 audit(1792218496.659:2275): avc: denied { write } for pid=25613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1794.451634][ T30] audit: type=1400 audit(1792218496.969:2276): avc: denied { write } for pid=25643 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1795.023380][T25652] device-mapper: table: 248:1: thi: unknown target type [ 1795.023400][T25652] device-mapper: ioctl: error adding target to table [ 1795.857412][T25684] loop9: detected capacity change from 0 to 2640 [ 1795.859246][T25684] buffer_io_error: 11 callbacks suppressed [ 1795.859277][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.859355][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.859441][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.859531][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.859620][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.859780][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.859924][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.860027][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.860057][T25684] ldm_validate_partition_table(): Disk read failed. [ 1795.860142][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.860232][T25684] Buffer I/O error on dev loop9, logical block 0, async page read [ 1795.860365][T25684] Dev loop9: unable to read RDB block 0 [ 1795.860762][T25684] loop9: unable to read partition table [ 1795.861473][T25684] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1797.668415][T25705] device-mapper: table: 248:1: thi: unknown target type [ 1797.668437][T25705] device-mapper: ioctl: error adding target to table [ 1797.909103][ T30] audit: type=1400 audit(1792218500.429:2277): avc: denied { write } for pid=25687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1798.331973][ T30] audit: type=1400 audit(1792218500.849:2278): avc: denied { write } for pid=25723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1798.438890][T25727] netlink: 'syz.6.5528': attribute type 1 has an invalid length. [ 1798.550116][T25727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1798.572109][T25735] veth0_virt_wifi: entered promiscuous mode [ 1798.609468][T25735] bond2: (slave veth0_virt_wifi): making interface the new active one [ 1798.636363][T25735] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1798.729251][T25727] bond2: (slave veth0_virt_wifi): Releasing active interface [ 1798.820001][T22243] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1798.896677][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5535'. [ 1798.919406][ T30] audit: type=1326 audit(1792218501.439:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.6.5533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff5119e559 code=0x0 [ 1798.976315][T22243] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1798.976381][T22243] usb 3-1: no configurations [ 1798.976409][T22243] usb 3-1: can't read configurations, error -22 [ 1799.038411][T25762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1799.102886][T22243] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1799.256601][T22243] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1799.256637][T22243] usb 3-1: no configurations [ 1799.256645][T22243] usb 3-1: can't read configurations, error -22 [ 1799.256916][T22243] usb usb3-port1: attempt power cycle [ 1799.355507][T25773] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5541'. [ 1800.418473][T22243] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1800.434337][T22243] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1800.434404][T22243] usb 3-1: no configurations [ 1800.434431][T22243] usb 3-1: can't read configurations, error -22 [ 1800.497697][T25782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5546'. [ 1800.579404][T22243] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1800.604632][T22243] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1800.604704][T22243] usb 3-1: no configurations [ 1800.604734][T22243] usb 3-1: can't read configurations, error -22 [ 1800.605055][T22243] usb usb3-port1: unable to enumerate USB device [ 1803.519742][T25839] overlayfs: failed to resolve './file0': -2 [ 1803.544722][T25839] overlayfs: overlapping lowerdir path [ 1803.601243][T25845] netlink: 'syz.7.5565': attribute type 1 has an invalid length. [ 1803.663811][T25845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1803.809505][T25845] veth0_virt_wifi: entered promiscuous mode [ 1803.839530][T25845] bond1: (slave veth0_virt_wifi): making interface the new active one [ 1803.852132][T25845] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1803.868666][T25851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5565'. [ 1803.892543][T25851] bond1: (slave veth0_virt_wifi): Releasing active interface [ 1803.946224][T12131] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1804.102591][T12131] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1804.102660][T12131] usb 3-1: no configurations [ 1804.102855][T12131] usb 3-1: can't read configurations, error -22 [ 1804.235273][T12131] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1804.443593][T12131] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1804.443948][T12131] usb 3-1: no configurations [ 1804.444014][T12131] usb 3-1: can't read configurations, error -22 [ 1804.445259][T12131] usb usb3-port1: attempt power cycle [ 1804.884986][T12131] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1804.985687][T12131] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1804.986174][T12131] usb 3-1: no configurations [ 1804.986238][T12131] usb 3-1: can't read configurations, error -22 [ 1805.202083][T12131] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1805.338795][T12131] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1805.338868][T12131] usb 3-1: no configurations [ 1805.338896][T12131] usb 3-1: can't read configurations, error -22 [ 1805.339250][T12131] usb usb3-port1: unable to enumerate USB device [ 1805.642633][ T30] audit: type=1400 audit(1792218508.159:2280): avc: denied { write } for pid=25840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1805.825873][ T30] audit: type=1400 audit(1792218508.349:2281): avc: denied { write } for pid=25887 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1805.911705][T25890] syzkaller1: entered promiscuous mode [ 1805.911725][T25890] syzkaller1: entered allmulticast mode [ 1806.133874][T25900] syz.7.5577 (25900): drop_caches: 2 [ 1806.503276][T12132] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1806.634351][T12132] usb 8-1: device descriptor read/64, error -71 [ 1806.873137][T12132] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1806.939211][T25926] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1807.013398][T12132] usb 8-1: device descriptor read/64, error -71 [ 1807.167864][T25932] loop9: detected capacity change from 0 to 2640 [ 1807.169618][T25932] buffer_io_error: 11 callbacks suppressed [ 1807.169648][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.169729][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.169800][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.169886][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.169958][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.170088][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.170215][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.170286][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.170316][T25932] ldm_validate_partition_table(): Disk read failed. [ 1807.170370][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.170457][T25932] Buffer I/O error on dev loop9, logical block 0, async page read [ 1807.170584][T25932] Dev loop9: unable to read RDB block 0 [ 1807.171010][T25932] loop9: unable to read partition table [ 1807.171714][T25932] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1808.027457][T12132] usb usb8-port1: attempt power cycle [ 1809.084352][ T30] audit: type=1400 audit(1792218511.609:2282): avc: denied { write } for pid=25940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1809.164472][T12132] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1809.172946][ T5663] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1809.190463][T12132] usb 8-1: device descriptor read/8, error -71 [ 1809.307954][ T30] audit: type=1400 audit(1792218511.829:2283): avc: denied { write } for pid=25966 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1809.350244][ T5663] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1809.350285][ T5663] usb 3-1: no configurations [ 1809.350299][ T5663] usb 3-1: can't read configurations, error -22 [ 1809.473042][ T5663] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1809.659546][ T5663] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1809.659630][ T5663] usb 3-1: no configurations [ 1809.659657][ T5663] usb 3-1: can't read configurations, error -22 [ 1809.660110][ T5663] usb usb3-port1: attempt power cycle [ 1810.003530][ T5663] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1810.024940][ T5663] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1810.025080][ T5663] usb 3-1: no configurations [ 1810.025264][ T5663] usb 3-1: can't read configurations, error -22 [ 1810.152843][ T5663] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1810.174907][ T5663] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1810.174980][ T5663] usb 3-1: no configurations [ 1810.175027][ T5663] usb 3-1: can't read configurations, error -22 [ 1810.175617][ T5663] usb usb3-port1: unable to enumerate USB device [ 1811.478765][T25988] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1811.479309][T25988] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1811.620401][T25990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1811.863879][T26001] syzkaller1: entered promiscuous mode [ 1811.863903][T26001] syzkaller1: entered allmulticast mode [ 1812.075937][T12132] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1812.204650][T12132] usb 8-1: device descriptor read/64, error -71 [ 1812.229565][T26012] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.5613'. [ 1812.457135][T26015] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 1812.615396][ T31] INFO: task syz-executor:21931 blocked for more than 142 seconds. [ 1812.615422][ T31] Tainted: G L syzkaller #0 [ 1812.615434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1812.615441][ T31] task:syz-executor state:D stack:23480 pid:21931 tgid:21931 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1812.615493][ T31] Call Trace: [ 1812.615517][ T31] [ 1812.615795][ T31] __schedule+0x1259/0x6920 [ 1812.615842][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 1812.615898][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1812.615972][ T31] ? __pfx___schedule+0x10/0x10 [ 1812.616009][ T31] ? find_held_lock+0x2b/0x80 [ 1812.616051][ T31] ? schedule+0x225/0x2c0 [ 1812.616094][ T31] schedule+0xdd/0x2c0 [ 1812.616133][ T31] schedule_preempt_disabled+0x13/0x30 [ 1812.616171][ T31] __mutex_lock+0xccb/0x1bd0 [ 1812.616212][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1812.616260][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1812.616327][ T31] ? net_generic+0x25/0x2a0 [ 1812.616425][ T31] ? net_generic+0xea/0x2a0 [ 1812.616464][ T31] ? net_generic+0xea/0x2a0 [ 1812.616523][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1812.616548][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1812.616574][ T31] nfsd_umount+0x3b/0x60 [ 1812.616617][ T31] deactivate_locked_super+0xbd/0x130 [ 1812.616656][ T31] deactivate_super+0xea/0x110 [ 1812.616708][ T31] cleanup_mnt+0xb7/0x160 [ 1812.616746][ T31] task_work_run+0x150/0x240 [ 1812.616808][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1812.616913][ T31] exit_to_user_mode_loop+0x1d8/0x700 [ 1812.616953][ T31] ? rcu_is_watching+0x13/0xc0 [ 1812.617009][ T31] do_syscall_64+0x661/0x790 [ 1812.617067][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.617106][ T31] RIP: 0033:0x7efe5299f797 [ 1812.617138][ T31] RSP: 002b:00007ffd70d575c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1812.617172][ T31] RAX: 0000000000000000 RBX: 00007efe52a34efb RCX: 00007efe5299f797 [ 1812.621589][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd70d57680 [ 1812.621622][ T31] RBP: 00007ffd70d57680 R08: 00007ffd70d58680 R09: 00000000ffffffff [ 1812.621649][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd70d58710 [ 1812.621675][ T31] R13: 00007efe52a34efb R14: 00000000001968fd R15: 00007ffd70d58750 [ 1812.621745][ T31] [ 1812.621874][ ** replaying previous printk message ** [ 1812.621874][ T31] [ 1812.621874][ T31] Showing all locks held in the system: [ 1812.621897][ T31] locks held by pool_workqueue_/3: 1, on CPU#1: [ 1812.621926][ T31] #0: ffffffff8fdf84e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1812.622028][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1812.622057][ T31] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1812.622247][ T31] locks held by getty/5360: 2, on CPU#1: [ 1812.622262][ T31] #0: ffff88802af950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1812.622332][ T31] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1812.622542][ T31] locks held by kworker/1:4/5757: 5, on CPU#1: [ 1812.622602][ T31] #0: ffff8880252d7940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1812.883820][ T31] #1: ffffc9000400fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1812.883947][ T31] #2: ffff88802bb541d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1812.884012][ T31] #3: ffff88807f0d21d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1812.884062][ T31] #4: ffff88803463e1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1812.884148][ T31] locks held by kworker/u8:60/9578: 2, on CPU#1: [ 1812.884161][ T31] #0: ffff888020f75940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1812.884244][ T31] #1: ffffc9000408fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1812.884318][ T31] locks held by kworker/0:17/12132: 6, on CPU#0: [ 1812.884342][ T31] #0: ffff8880252d7940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1812.884413][ T31] #1: ffffc90003667d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1812.884484][ T31] #2: ffff88802be0c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1812.884547][ T31] #3: ffff88802c02f568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 1812.884610][ T31] #4: ffff88802c031b60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 1812.884674][ T31] #5: ffffffff91284308 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 1812.884750][ T31] locks held by syz-executor/21931: 2, on CPU#1: [ 1812.884774][ T31] #0: ffff8880243200e8 (&type->s_umount_key#92){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1812.884848][ T31] #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1812.888767][ T31] locks held by syz.4.5030/23544: 3, on CPU#0: [ 1812.888783][ T31] #0: ffff88802d0d35f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1812.888875][ T31] #1: ffff888037a6c460 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1812.888968][ T31] #2: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1812.889106][ T31] locks held by syz-executor/24726: 1, last CPU#1: [ 1812.889133][ T31] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: path_init+0xac1/0x1ab0 [ 1812.889232][ T31] locks held by cxacru/24851: 1, on CPU#1: [ 1812.889259][ T31] #0: ffffffff8fc8fe28 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 1812.889335][ T31] locks held by udevd/25969: 3, last CPU#1: [ 1812.889362][ T31] #0: ffff88801ea80460 (sb_writers){.+.+}-{0:0}, at: filename_setxattr+0xbf/0x1d0 [ 1812.890717][ T31] #1: ffff88807ef48890 (&sb->s_type->i_mutex_key#4){+.+.}-{4:4}, at: vfs_setxattr+0x120/0x390 [ 1812.890830][ T31] #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1812.890911][ T31] locks held by syz.0.5603/26017: 1, last CPU#0: [ 1812.890939][ T31] #0: ffff88803ea553a8 (&kvm->lock){+.+.}-{4:4}, at: kvm_vm_ioctl+0x274/0x4170 [ 1812.892176][ T31] [ 1812.892182][ T31] ============================================= [ 1812.892182][ T31] [ 1812.892189][ T31] NMI backtrace for cpu 0 [ 1812.892205][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1812.892227][ T31] Tainted: [L]=SOFTLOCKUP [ 1812.892233][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1812.892243][ T31] Call Trace: [ 1812.892249][ T31] [ 1812.892256][ T31] dump_stack_lvl+0x100/0x190 [ 1812.892281][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1812.892308][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1812.892328][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1812.892351][ T31] sys_info+0x141/0x190 [ 1812.892368][ T31] watchdog+0xcb1/0x1030 [ 1812.892394][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1812.892415][ T31] ? __pfx_watchdog+0x10/0x10 [ 1812.892436][ T31] ? __kthread_parkme+0x18f/0x230 [ 1812.892459][ T31] ? kthread+0x13a/0x450 [ 1812.892479][ T31] ? __pfx_watchdog+0x10/0x10 [ 1812.892499][ T31] kthread+0x373/0x450 [ 1812.892520][ T31] ? __pfx_kthread+0x10/0x10 [ 1812.892544][ T31] ret_from_fork+0x730/0xd60 [ 1812.892564][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1812.892584][ T31] ? __switch_to+0x800/0x10f0 [ 1812.892607][ T31] ? __pfx_kthread+0x10/0x10 [ 1812.892631][ T31] ret_from_fork_asm+0x1a/0x30 [ 1812.892660][ T31] [ 1812.892777][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1812.892817][ C1] NMI backtrace for cpu 1 [ 1812.892831][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1812.892850][ C1] Tainted: [L]=SOFTLOCKUP [ 1812.892857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1812.892866][ C1] RIP: 0010:delay_tsc+0x8c/0xc0 [ 1812.892884][ C1] Code: 00 00 00 e8 d6 b5 03 f6 65 48 83 3d 55 94 ba 09 00 75 bb e8 56 91 a3 f5 eb b4 4c 01 ed 48 29 dd 49 89 ed eb 90 bf 01 00 00 00 af b5 03 f6 65 48 83 3d 2e 94 ba 09 00 74 0b 5b 5d 41 5c 41 5d [ 1812.892899][ C1] RSP: 0018:ffffc90000157950 EFLAGS: 00000002 [ 1812.892911][ C1] RAX: 0000000000000b1b RBX: 000004a3619e336a RCX: 0000000000000001 [ 1812.892921][ C1] RDX: 000004a300000000 RSI: ffffffff8c625600 RDI: 0000000000000001 [ 1812.892931][ C1] RBP: 000004a3619e284f R08: 0000000000000005 R09: 0000000000000000 [ 1812.892940][ C1] R10: 00000000000007f7 R11: 205d313354202020 R12: 0000000000000001 [ 1812.892949][ C1] R13: 0000000000000af1 R14: fffffbfff398fd21 R15: dffffc0000000000 [ 1812.892961][ C1] FS: 0000000000000000(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 1812.892975][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1812.892987][ C1] CR2: 000055558c9a3a48 CR3: 000000003ad14000 CR4: 00000000003526f0 [ 1812.892997][ C1] Call Trace: [ 1812.893001][ C1] [ 1812.893008][ C1] wait_for_lsr+0xf3/0x210 [ 1812.893027][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1812.893043][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1812.893059][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1812.893080][ C1] serial8250_console_write+0x1108/0x14f0 [ 1812.893101][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1812.893118][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1812.893136][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1812.893156][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1812.893175][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1812.893192][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1812.893206][ C1] ? do_raw_spin_lock+0xf0/0x260 [ 1812.893229][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1812.893249][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1812.893268][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1812.893283][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1812.893307][ C1] nbcon_kthread_func+0x613/0x7d0 [ 1812.893325][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1812.893343][ C1] ? __kthread_parkme+0x18f/0x230 [ 1812.893362][ C1] ? kthread+0x13a/0x450 [ 1812.893380][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1812.893395][ C1] kthread+0x373/0x450 [ 1812.893414][ C1] ? __pfx_kthread+0x10/0x10 [ 1812.893434][ C1] ret_from_fork+0x730/0xd60 [ 1812.893451][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1812.893467][ C1] ? __switch_to+0x800/0x10f0 [ 1812.893488][ C1] ? __pfx_kthread+0x10/0x10 [ 1812.893508][ C1] ret_from_fork_asm+0x1a/0x30 [ 1812.893529][ C1] [ 1812.896784][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1813.683541][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1813.694212][ T31] Tainted: [L]=SOFTLOCKUP [ 1813.698537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1813.708584][ T31] Call Trace: [ 1813.711847][ T31] [ 1813.714759][ T31] dump_stack_lvl+0x100/0x190 [ 1813.719427][ T31] vpanic+0x553/0x970 [ 1813.723389][ T31] ? __pfx_vpanic+0x10/0x10 [ 1813.727893][ T31] panic+0xd1/0xe0 [ 1813.731610][ T31] ? __pfx_panic+0x10/0x10 [ 1813.736011][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1813.742147][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1813.748282][ T31] ? watchdog.cold+0x1ec/0x234 [ 1813.753044][ T31] watchdog.cold+0x1fd/0x234 [ 1813.757629][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1813.763422][ T31] ? __pfx_watchdog+0x10/0x10 [ 1813.768091][ T31] ? __kthread_parkme+0x18f/0x230 [ 1813.773102][ T31] ? kthread+0x13a/0x450 [ 1813.777330][ T31] ? __pfx_watchdog+0x10/0x10 [ 1813.781998][ T31] kthread+0x373/0x450 [ 1813.786051][ T31] ? __pfx_kthread+0x10/0x10 [ 1813.790628][ T31] ret_from_fork+0x730/0xd60 [ 1813.795200][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1813.800292][ T31] ? __switch_to+0x800/0x10f0 [ 1813.804953][ T31] ? __pfx_kthread+0x10/0x10 [ 1813.809529][ T31] ret_from_fork_asm+0x1a/0x30 [ 1813.814281][ T31] [ 1813.817377][ T31] Kernel Offset: disabled [ 1813.821674][ T31] Rebooting in 86400 seconds..