last executing test programs: 10.990741663s ago: executing program 2 (id=1031): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) chdir(0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) 10.833756881s ago: executing program 2 (id=1032): r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x268, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1b633403eb653ce6, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xffffff, 0xffffff00, 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x6, 0x1, 0x43}, 0x0, 0xf0, 0x118, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2}}, @common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xd, @rand_addr, @local}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 10.549288441s ago: executing program 2 (id=1035): socket$inet6(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$ax25(0x3, 0x2, 0xce) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x8, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1106000, 0x1000, 0xe9, 0x6}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x7a, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80800, 0x193) r8 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x4, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7ff, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x4, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10]}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x32bb90}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ee222}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) 9.204123685s ago: executing program 1 (id=1041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x98, 0x9, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffff89c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff7fff}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'nr0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x41}, 0x40000) 8.440674093s ago: executing program 0 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000004180)=""/4096, 0x1000}], 0x1, 0x1002, 0xabd3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="021800000b00000000000000df570000030005000000000002000200e00000010000080000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000300000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000e8ffffff0100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000000e08000240000000120400058008000640000000010900010073797a30000000001400000011000100"/266], 0x10c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@hyper}, @host, 0x0, 0x100000001, 0x244b, 0xfffffffffffffffd, 0x0, 0x100000, 0x4}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) 8.356862296s ago: executing program 1 (id=1045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x3c, 0x66, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xffff, 0xfff1}, {0x1, 0xfff1}}, [{0x8, 0xb, 0xd0}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f0000000180)=[{&(0x7f0000000b00)=""/252, 0xfc}], 0x1, &(0x7f00000004c0)=""/63, 0x3f}, 0x9}, {{&(0x7f0000000a80)=@alg, 0x80, &(0x7f0000000980)}, 0x1}], 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, r1, 0x0, 0x30, 0x0}, 0x30) 8.356393787s ago: executing program 3 (id=1046): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0xeeef0000, 0x1000}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffcbf) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000080000000c0099"], 0x20}}, 0x94) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) setsockopt$inet_int(r10, 0x0, 0x16, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000080)=0x3, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "adaf3ff225364f93c66ec088dde52afd95ca60ee2c9483198bc9182f69b3dbb5146139f500e3d0a535e97031fd94a717a040393a11f58300ec154d84ca9ddc49174619c51a4d6aae528f26deb8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x408080, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x40810) 7.668692443s ago: executing program 1 (id=1047): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) pipe2(&(0x7f00000000c0), 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYBLOB]) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6.236162818s ago: executing program 3 (id=1049): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad00ffe3fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r0], 0x68}, 0x0) 6.210230261s ago: executing program 4 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5e}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.969435001s ago: executing program 3 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007"], 0x20}}, 0x0) (fail_nth: 2) 5.924467302s ago: executing program 4 (id=1052): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') preadv(r4, 0x0, 0x0, 0x409f, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0xc000000, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0x7}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 5.693529993s ago: executing program 0 (id=1053): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.527735385s ago: executing program 3 (id=1054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x10001, 0x0, 0x9, 0x2, 0xfffffffb, 0x8}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000084"], 0x20}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000300)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x906}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 4.939619641s ago: executing program 4 (id=1055): socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/58, 0x3a}], 0x1, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3ff, 0x3ff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x87}, 0x0, &(0x7f0000000440)=0x8, 0x10001, 0x1000, 0x1, 0x7ff, 0x0, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/190, 0xbe}, 0x0, 0x34}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x4}, {&(0x7f0000000680)=""/208, 0xd0}, &(0x7f0000000880)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/150, 0x96}], 0x2, 0x50, 0xc7cf}}], 0xe8, 0x80}, 0x80) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x2}, 0x0) recvmmsg(r6, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x68335ec9}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r8, 0x9, 0x0, 0x25dfdbfc, {0x7}}, 0x14}}, 0x0) 4.865411405s ago: executing program 2 (id=1056): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) 3.750268388s ago: executing program 2 (id=1057): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000000000181207000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.162250808s ago: executing program 0 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r1, @ANYBLOB="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"], 0x154}}, 0x0) 2.959029764s ago: executing program 4 (id=1059): socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') fspick(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x36, 0x1, 0x3, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x30364d54}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 2.913339315s ago: executing program 1 (id=1060): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0xeb, &(0x7f00000004c0)="3ce02515665bfb4b66c11be3589c660375dbbd1151172ff71d1e05968494ac4df1eb2a4bdcaf5967e41168392343addce34ac3a80ece8e0098e26c0feabac2516d008e49405a33b8ea3262086f26b5250d1aec52899183d5df70c65ecda8104f74fc7523e60e4b823198ff4233f39c945943727f9328fd2dbb071ba11edb8b8bef0c2ce5997febf8ab262dee4a26b3d96ee5ce15cf19c09c1cc42994aa3e7fcfcd1eeca45ea9690a387d1a972d18960b2c66c025c3840ed526c6cf269ef16c27a64d6d2683b5e6283023eaf270e64a020eee8e36cb6c797c62f0185466de72063940207278378121f8f256"}) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00') (async) r3 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xf84c, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1, 0x47d45a9778fdcc21}) (async, rerun: 32) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) (rerun: 32) setns(r2, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x0, 0xfffffffe}, 0xc) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x4f}, 0xfffffdef) (async) setsockopt(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) (async) read$FUSE(r8, &(0x7f0000002000)={0x2020}, 0x2020) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001c40), 0x0, 0x400c0) 2.688976349s ago: executing program 2 (id=1061): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1803, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x2000c850) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 2.575201719s ago: executing program 3 (id=1062): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000f3000003d74b4f3d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01ef50619551f14dc961ac00", "90be8b1c559265406c09306003d80020000000000000001200", [0x0, 0x2]}}) 2.442819815s ago: executing program 1 (id=1063): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0xf) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000080)={0x1, {0x6, 0xfffffff6, 0x96, 0x1}, {0x0, 0x1b7, 0xfffffff9, 0x8}, {0x1, 0x3}}) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0xfffffffd}, 0x8) 2.225405593s ago: executing program 0 (id=1064): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="d9536b9e4ec1457e4831f9b20e8701", 0xf}}, 0x0) 2.189184486s ago: executing program 3 (id=1065): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) creat(0x0, 0xd931d3864d39dc0c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="be3762c23edab7243dbef6da668e0bcd7406576afe072eaed62bc77f2704615f4aae71f42fc18766e8ab1f75bc7fce1a359c89d9d71e935ef35c5c624e35fd5feb699fbdafbccebe152d16f635c29ef0c6da9d3e8c0c6472f87abf3e3b1fc3abffc3773af8a807e927a073954d0a95102f2588b347e0f280a8fadef5a95c8de2b821dda541eee4d73b69c2e443a6ce6fcbd22780bdf9cf153583aca350c962454b1367e4141709d7c198edac0cccacf72896def2cfd3500b7e1505a05d6de37a411c8810ff91758faa7ad42f64ee81514d75cfd3087aee1c801099075341d75ef19ef7c8da2d7f6fdb00fb84314dfba582eae0b7775ff17ea4d8824e67e4aa9b522c39669be7f9fcc0e00af4cda7d20fed67a555f279f9614362", 0x11a) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x80, 0x20, 0x6, 0x5, {{0x5, 0x4, 0x0, 0x3b, 0xffffffffffffff9c, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) unlink(&(0x7f0000000400)='./file0\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') 2.188424932s ago: executing program 4 (id=1066): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(r1, &(0x7f0000000a80)={&(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/58, 0x3a}], 0x1, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3ff, 0x3ff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x87}, 0x0, &(0x7f0000000440)=0x8, 0x10001, 0x1000, 0x1, 0x7ff, 0x0, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/190, 0xbe}, 0x0, 0x34}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x4}, {&(0x7f0000000680)=""/208, 0xd0}, &(0x7f0000000880)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/150, 0x96}], 0x2, 0x50, 0xc7cf}}], 0xe8, 0x80}, 0x80) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x2}, 0x0) recvmmsg(r7, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x68335ec9}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r9, 0x9, 0x0, 0x25dfdbfc, {0x7}}, 0x14}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x40000, 0xfffffffd, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x800000]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7}}]}}]}, 0x45c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="db00251b", @ANYRES16=r9, @ANYRES32=r12, @ANYRES32, @ANYBLOB="0400068004000680"], 0xc0}}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000008400000008000000180000000000000084000000000000006200000000000000a04833ce23bfc3964a53266dbd3ac75d425921a2d57ac12d8f8622160e340f7475285a9e1dde5b90b96316c95c06a7bdcd0aa2601d188cd2f59c560ff8e8013203d90a4b7fb7bf88f7ea88c4dad37d1b6962576ea3"], 0x28}, 0x41) 1.917319998s ago: executing program 0 (id=1067): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) 81.415031ms ago: executing program 0 (id=1068): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 78.968788ms ago: executing program 4 (id=1069): socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/58, 0x3a}], 0x1, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3ff, 0x3ff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x87}, 0x0, &(0x7f0000000440)=0x8, 0x10001, 0x1000, 0x1, 0x7ff, 0x0, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/190, 0xbe}, 0x0, 0x34}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x4}, {&(0x7f0000000680)=""/208, 0xd0}, &(0x7f0000000880)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/150, 0x96}], 0x2, 0x50, 0xc7cf}}], 0xe8, 0x80}, 0x80) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x2}, 0x0) recvmmsg(r6, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x68335ec9}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r8, 0x9, 0x0, 0x25dfdbfc, {0x7}}, 0x14}}, 0x0) 0s ago: executing program 1 (id=1070): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) pipe2(&(0x7f00000000c0), 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYBLOB]) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kernel console output (not intermixed with test programs): 1 [ 172.127076][ T29] audit: type=1400 audit(172.072:354): avc: denied { open } for pid=7316 comm="syz.2.412" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.032673][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 173.645747][ T7342] netlink: 96 bytes leftover after parsing attributes in process `syz.2.419'. [ 174.375836][ T7363] vivid-002: disconnect [ 174.604946][ T29] audit: type=1400 audit(174.572:355): avc: denied { nlmsg_read } for pid=7337 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.668269][ T7370] tty tty24: ldisc open failed (-12), clearing slot 23 [ 176.072678][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 176.239544][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 176.778839][ T7393] binder: 7392:7393 ioctl c0306201 0 returned -14 [ 176.806118][ T29] audit: type=1400 audit(176.772:356): avc: denied { read } for pid=7392 comm="syz.4.433" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.835213][ T29] audit: type=1400 audit(176.802:357): avc: denied { open } for pid=7392 comm="syz.4.433" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.887491][ T29] audit: type=1400 audit(176.822:358): avc: denied { ioctl } for pid=7392 comm="syz.4.433" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.975245][ T7400] netlink: 68 bytes leftover after parsing attributes in process `syz.0.435'. [ 177.015763][ T970] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 177.069958][ T7402] binder: 7392:7402 ioctl c0306201 20000480 returned -14 [ 177.614160][ T7363] vivid-002: reconnect [ 178.171634][ T7412] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=7412 comm=syz.0.438 [ 178.280958][ T7417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7417 comm=syz.1.439 [ 178.302591][ T7401] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 178.302591][ T7401] The task syz.4.433 (7401) triggered the difference, watch for misbehavior. [ 178.308238][ T29] audit: type=1400 audit(178.262:359): avc: denied { name_bind } for pid=7392 comm="syz.4.433" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 178.369755][ T29] audit: type=1400 audit(178.262:360): avc: denied { node_bind } for pid=7392 comm="syz.4.433" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 178.628651][ T7428] netlink: 84 bytes leftover after parsing attributes in process `syz.1.443'. [ 178.942468][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.981501][ T29] audit: type=1400 audit(179.482:361): avc: denied { write } for pid=7436 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 180.170398][ T7426] Bluetooth: MGMT ver 1.23 [ 180.656005][ T29] audit: type=1400 audit(180.622:362): avc: denied { connect } for pid=7438 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.675036][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.029382][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 181.030168][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 181.037381][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 181.041501][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 181.047584][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 181.429794][ T7452] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=7452 comm=syz.2.449 [ 182.805880][ T7468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.453'. [ 182.820427][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 182.943124][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 183.136168][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 183.161565][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 183.238914][ T7476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.451'. [ 183.531164][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 183.550392][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 183.561493][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 183.816291][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.452'. [ 184.062927][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.074306][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.970147][ T7494] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 185.535456][ T7498] netlink: 96 bytes leftover after parsing attributes in process `syz.1.460'. [ 185.766054][ T7505] loop9: detected capacity change from 0 to 7 [ 185.783962][ T7505] Dev loop9: unable to read RDB block 7 [ 185.803015][ T7505] loop9: unable to read partition table [ 185.933772][ T7505] loop9: partition table beyond EOD, truncated [ 186.088577][ T7505] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 187.341479][ T7520] FAULT_INJECTION: forcing a failure. [ 187.341479][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 187.354405][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.2.466 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 187.365023][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.375095][ T7520] Call Trace: [ 187.378382][ T7520] [ 187.381316][ T7520] dump_stack_lvl+0x16c/0x1f0 [ 187.385993][ T7520] should_fail_ex+0x497/0x5b0 [ 187.390671][ T7520] ? fs_reclaim_acquire+0xae/0x150 [ 187.395775][ T7520] should_failslab+0xc2/0x120 [ 187.400446][ T7520] __kmalloc_noprof+0xcb/0x510 [ 187.405204][ T7520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 187.410833][ T7520] tomoyo_realpath_from_path+0xb9/0x720 [ 187.416394][ T7520] ? tomoyo_path_number_perm+0x235/0x590 [ 187.422035][ T7520] ? tomoyo_path_number_perm+0x235/0x590 [ 187.427675][ T7520] tomoyo_path_number_perm+0x248/0x590 [ 187.433134][ T7520] ? tomoyo_path_number_perm+0x235/0x590 [ 187.438765][ T7520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.444754][ T7520] ? __pfx_lock_release+0x10/0x10 [ 187.449769][ T7520] ? trace_lock_acquire+0x14e/0x1f0 [ 187.454966][ T7520] ? lock_acquire+0x2f/0xb0 [ 187.459460][ T7520] ? __fget_files+0x40/0x3a0 [ 187.464046][ T7520] ? __fget_files+0x206/0x3a0 [ 187.469065][ T7520] security_file_ioctl+0x9b/0x240 [ 187.474086][ T7520] __x64_sys_ioctl+0xb7/0x200 [ 187.478767][ T7520] do_syscall_64+0xcd/0x250 [ 187.483270][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.489157][ T7520] RIP: 0033:0x7f76a3f85d29 [ 187.493561][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.513158][ T7520] RSP: 002b:00007f76a1dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.521561][ T7520] RAX: ffffffffffffffda RBX: 00007f76a4176160 RCX: 00007f76a3f85d29 [ 187.529524][ T7520] RDX: 0000000000000000 RSI: 000000004028af11 RDI: 0000000000000007 [ 187.537482][ T7520] RBP: 00007f76a1dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 187.545444][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.553403][ T7520] R13: 0000000000000000 R14: 00007f76a4176160 R15: 00007ffc85911688 [ 187.561372][ T7520] [ 187.608157][ T7520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.991993][ T48] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 188.162023][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 188.173070][ T48] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.184321][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.195326][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.205300][ T5868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.212962][ T48] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.226024][ T48] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.235187][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.272004][ T7539] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 188.372048][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 188.382249][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 188.397941][ T5868] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 188.416397][ T5868] usb 5-1: config 0 has no interface number 0 [ 188.431953][ T5868] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 188.445960][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.454090][ T5868] usb 5-1: Product: syz [ 188.458287][ T5868] usb 5-1: Manufacturer: syz [ 188.463116][ T5868] usb 5-1: SerialNumber: syz [ 188.473420][ T5868] usb 5-1: config 0 descriptor?? [ 188.482521][ T5868] smsc95xx v2.0.0 [ 189.289113][ T48] usb 1-1: GET_CAPABILITIES returned 0 [ 189.294714][ T48] usbtmc 1-1:16.0: can't read capabilities [ 189.354653][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 189.361568][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.429997][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.440158][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 189.449503][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.482270][ T25] usb 4-1: config 0 descriptor?? [ 189.612805][ T5868] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 189.626193][ T5868] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 189.943303][ T25] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 189.980470][ T25] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 190.009089][ T25] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 190.112344][ T25] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 190.179613][ T7535] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 190.221961][ T25] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 190.262136][ T29] audit: type=1400 audit(190.212:363): avc: denied { ioctl } for pid=7527 comm="syz.4.470" path="socket:[15512]" dev="sockfs" ino=15512 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 190.280899][ T25] lenovo 0003:17EF:6009.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 190.323978][ T29] audit: type=1400 audit(190.232:364): avc: denied { bind } for pid=7527 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.357013][ T7546] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.390199][ T5868] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 190.391248][ T25] usb 4-1: USB disconnect, device number 9 [ 190.424571][ T5868] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 190.510085][ T5868] usb 5-1: USB disconnect, device number 13 [ 190.547476][ T5863] usb 1-1: USB disconnect, device number 15 [ 193.679577][ T5868] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 193.892290][ T5868] usb 5-1: device descriptor read/64, error -71 [ 194.295501][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.378967][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.385553][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.912300][ T5868] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 195.103265][ T5868] usb 5-1: device descriptor read/64, error -71 [ 195.194914][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.215082][ T5868] usb usb5-port1: attempt power cycle [ 195.373491][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 195.444372][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.465971][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.476882][ T9] usb 4-1: config 1 has no interface number 1 [ 195.486184][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.500368][ T9] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.712953][ T5868] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 195.733337][ T29] audit: type=1800 audit(195.672:365): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.486" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 195.757403][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.809402][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.856570][ T9] usb 4-1: Product: syz [ 195.868045][ T5868] usb 5-1: device descriptor read/8, error -71 [ 195.895825][ T9] usb 4-1: Manufacturer: syz [ 195.900540][ T9] usb 4-1: SerialNumber: syz [ 200.146889][ T9] usb 4-1: can't set config #1, error -71 [ 200.154083][ T9] usb 4-1: USB disconnect, device number 10 [ 200.202085][ T5868] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 200.411990][ T5868] usb 5-1: device not accepting address 17, error -71 [ 200.422505][ T5868] usb usb5-port1: unable to enumerate USB device [ 200.702456][ T7611] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 201.749378][ T29] audit: type=1400 audit(201.712:366): avc: denied { bind } for pid=7618 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.792079][ T29] audit: type=1400 audit(201.732:367): avc: denied { node_bind } for pid=7618 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 201.845567][ T7620] xt_CT: No such helper "snmp" [ 203.891612][ T29] audit: type=1326 audit(203.592:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7fc00000 [ 203.931443][ T29] audit: type=1326 audit(203.592:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ead585d29 code=0x7fc00000 [ 204.143283][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 204.385587][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 204.533449][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 204.554651][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 205.089099][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.504'. [ 205.128133][ T7650] xt_bpf: check failed: parse error [ 205.163567][ T5830] block nbd2: Receive control failed (result -107) [ 205.173740][ T29] audit: type=1326 audit(205.082:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7fc00000 [ 205.217858][ T7645] nbd2: detected capacity change from 0 to 256 [ 205.281569][ T7599] block nbd2: Dead connection, failed to find a fallback [ 205.758916][ T970] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 205.994902][ T29] audit: type=1400 audit(205.962:371): avc: denied { connect } for pid=7669 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.066845][ T29] audit: type=1400 audit(205.992:372): avc: denied { read } for pid=7669 comm="syz.2.510" path="socket:[15804]" dev="sockfs" ino=15804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.146548][ T970] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 206.157708][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.182944][ T970] usb 1-1: Product: syz [ 206.187131][ T970] usb 1-1: Manufacturer: syz [ 206.191727][ T970] usb 1-1: SerialNumber: syz [ 206.373051][ T970] usb 1-1: config 0 descriptor?? [ 206.394526][ T7685] ======================================================= [ 206.394526][ T7685] WARNING: The mand mount option has been deprecated and [ 206.394526][ T7685] and is ignored by this kernel. Remove the mand [ 206.394526][ T7685] option from the mount to silence this warning. [ 206.394526][ T7685] ======================================================= [ 206.436461][ T970] ch341 1-1:0.0: ch341-uart converter detected [ 206.644338][ T970] usb 1-1: failed to receive control message: -71 [ 206.681568][ T970] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 206.737471][ T7696] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 206.745191][ T970] usb 1-1: USB disconnect, device number 16 [ 206.766060][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.015983][ T970] ch341 1-1:0.0: device disconnected [ 207.242083][ T29] audit: type=1400 audit(207.182:373): avc: denied { ioctl } for pid=7697 comm="syz.4.518" path="socket:[15843]" dev="sockfs" ino=15843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.265978][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.812105][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 208.087219][ T29] audit: type=1400 audit(208.052:374): avc: denied { accept } for pid=7709 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 208.504377][ T7717] loop9: detected capacity change from 0 to 7 [ 208.535307][ T7717] Dev loop9: unable to read RDB block 7 [ 208.550393][ T7717] loop9: unable to read partition table [ 208.568120][ T7717] loop9: partition table beyond EOD, truncated [ 208.589669][ T7717] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 208.812135][ T970] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.984799][ T970] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 208.999744][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.031206][ T970] ums-cypress 4-1:1.0: USB Mass Storage device detected [ 209.571933][ T7744] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 209.708812][ T5866] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 209.733239][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.745490][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.756237][ T29] audit: type=1400 audit(209.722:375): avc: denied { read write } for pid=7718 comm="syz.3.525" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 209.798340][ T970] usb 4-1: USB disconnect, device number 11 [ 209.829975][ T29] audit: type=1400 audit(209.762:376): avc: denied { open } for pid=7718 comm="syz.3.525" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 210.183504][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.197050][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 210.240243][ T7752] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 210.255360][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 210.292459][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 210.304552][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.319337][ T5866] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 210.328582][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.338852][ T5866] usb 1-1: Product: syz [ 210.368947][ T5866] usb 1-1: Manufacturer: syz [ 210.436903][ T5866] usb 1-1: SerialNumber: syz [ 210.533524][ T5866] usb 1-1: config 0 descriptor?? [ 210.560681][ T7735] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 210.700776][ T29] audit: type=1400 audit(210.662:377): avc: denied { create } for pid=7757 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.892265][ T5866] rc_core: IR keymap rc-xbox-dvd not found [ 210.898192][ T5866] Registered IR keymap rc-empty [ 210.914197][ T5866] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 210.924316][ T5866] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 210.980156][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 212.710691][ T5865] usb 1-1: USB disconnect, device number 17 [ 212.716701][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 212.962069][ T5866] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.102954][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 213.140695][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.235126][ T5866] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 213.363795][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.417269][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.442022][ T29] audit: type=1400 audit(213.402:378): avc: denied { bind } for pid=7782 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 213.493177][ T5866] usb 3-1: Product: syz [ 213.493204][ T5866] usb 3-1: Manufacturer: syz [ 213.493221][ T5866] usb 3-1: SerialNumber: syz [ 213.721375][ T7770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.755512][ T7791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.547'. [ 214.430345][ T7770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.521799][ T29] audit: type=1400 audit(214.482:379): avc: denied { create } for pid=7800 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.563962][ T7801] syz.0.548 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 214.594467][ T29] audit: type=1400 audit(214.512:380): avc: denied { write } for pid=7800 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.719334][ T5866] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 214.726323][ T5866] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 215.308558][ T29] audit: type=1400 audit(214.532:381): avc: denied { connect } for pid=7800 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.334942][ T29] audit: type=1400 audit(214.562:382): avc: denied { listen } for pid=7800 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.568236][ T5866] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 215.577519][ T5866] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 215.653579][ T5866] wwan wwan0: port wwan0mbim0 attached [ 215.667470][ T5866] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 215.709773][ T7811] omfs: Invalid superblock (0) [ 215.729210][ T7809] ip6tnl1: entered promiscuous mode [ 215.735477][ T7811] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 215.768063][ T29] audit: type=1326 audit(215.632:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a3f85d29 code=0x7ffc0000 [ 215.773127][ T7811] netlink: 216 bytes leftover after parsing attributes in process `syz.0.551'. [ 215.831994][ T29] audit: type=1326 audit(215.642:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a3f85d29 code=0x7ffc0000 [ 215.866731][ T29] audit: type=1326 audit(215.642:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76a3f85d29 code=0x7ffc0000 [ 215.889345][ T29] audit: type=1326 audit(215.642:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a3f85d29 code=0x7ffc0000 [ 215.917577][ T29] audit: type=1326 audit(215.652:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f76a3f85d29 code=0x7ffc0000 [ 216.098321][ T5866] usb 3-1: USB disconnect, device number 12 [ 216.104721][ T5866] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 216.784302][ T5866] wwan wwan0: port wwan0mbim0 disconnected [ 217.095280][ T7840] afs: Unknown parameter 'dyMH۲n' [ 218.615509][ T7855] loop9: detected capacity change from 0 to 7 [ 218.734110][ T7855] Dev loop9: unable to read RDB block 7 [ 218.761116][ T7855] loop9: unable to read partition table [ 218.768735][ T7855] loop9: partition table beyond EOD, truncated [ 218.803881][ T7855] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 218.897475][ T7865] netlink: 'syz.4.564': attribute type 3 has an invalid length. [ 218.908726][ T7865] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.564'. [ 218.980341][ T7865] NILFS (loop4): device size too small [ 219.042219][ T5866] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 219.364022][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.421998][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 219.422017][ T29] audit: type=1400 audit(219.362:426): avc: denied { write } for pid=7871 comm="syz.1.567" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.476919][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 219.491030][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.508636][ T7880] syz.1.567 (7880): /proc/7880/oom_adj is deprecated, please use /proc/7880/oom_score_adj instead. [ 219.536779][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 219.731225][ T5866] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.893603][ T48] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 219.992506][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.001804][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.010144][ T5866] usb 1-1: Product: Ⰹ [ 220.014530][ T5866] usb 1-1: Manufacturer: 뺦䖾᳦ꢼ⠑㱽䷟Ṝ䭏멬⎫鰮ꥁ䭕ꡇ廠䶙ᜳ⫧ꐁ逡䴎窢躠俘ᛸ￉䤺㲠罼뗅斌연嬄遏쏡⍯苕쮃㑉ﰵ袴ῂࣝ㎎㼚﵀充䛼䱚怯譔幧箯掄栶⚓⧌൚ꎖ겑綑抷ᢺ［탉鲶拻纟㗾㶿퇦읮ㅞᖓ霑䂉궂 [ 220.040924][ T5866] usb 1-1: SerialNumber: 龋疟ᨖ今壨걃쳯キ俴Ⲍ厮ҿ깂엇䜃뗸 [ 220.052150][ T970] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.132116][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 220.140212][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.150576][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.192034][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.228125][ T48] usb 3-1: config 0 interface 0 has no altsetting 1 [ 220.267104][ T48] usb 3-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=8e.57 [ 220.279541][ T5866] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 220.286753][ T5866] cdc_ncm 1-1:1.0: bind() failure [ 220.333221][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.341840][ T48] usb 3-1: Product: syz [ 220.402707][ T48] usb 3-1: Manufacturer: syz [ 220.407355][ T48] usb 3-1: SerialNumber: syz [ 221.143580][ T29] audit: type=1400 audit(220.892:427): avc: denied { write } for pid=7856 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.163332][ T48] usb 3-1: config 0 descriptor?? [ 221.165280][ T48] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 221.165602][ T48] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.199508][ T48] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 221.512809][ T9] usb 3-1: USB disconnect, device number 13 [ 221.606420][ T7901] netlink: 'syz.3.575': attribute type 4 has an invalid length. [ 221.780847][ T7900] udevd[7900]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.580863][ T7917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.601102][ T7917] xt_l2tp: v2 tid > 0xffff: 262144 [ 223.143720][ T7918] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 223.172291][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.282688][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.498904][ T48] usb 1-1: USB disconnect, device number 18 [ 225.170488][ T7945] blk_print_req_error: 27 callbacks suppressed [ 225.170508][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.323119][ T7945] buffer_io_error: 27 callbacks suppressed [ 225.323137][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.360116][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.972419][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.084409][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.102537][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.110452][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.164757][ T7924] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 226.177813][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.232246][ T7953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7953 comm=syz.2.589 [ 226.282267][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.292110][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.302223][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.311323][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.319332][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.342041][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.351098][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.379347][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.392147][ T7945] ldm_validate_partition_table(): Disk read failed. [ 226.399623][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.409204][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.502507][ T7945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.511630][ T7945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.522773][ T7945] Dev nbd0: unable to read RDB block 0 [ 226.528970][ T7945] nbd0: unable to read partition table [ 226.862921][ T7970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.892632][ T7970] xt_l2tp: v2 tid > 0xffff: 262144 [ 227.612069][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 227.799683][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 227.809036][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.848273][ T9] usb 2-1: Product: syz [ 227.872039][ T9] usb 2-1: Manufacturer: syz [ 227.881970][ T9] usb 2-1: SerialNumber: syz [ 227.990725][ T9] usb 2-1: config 0 descriptor?? [ 228.803205][ T29] audit: type=1400 audit(228.772:428): avc: denied { audit_write } for pid=7995 comm="syz.4.603" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 229.344647][ T7999] FAULT_INJECTION: forcing a failure. [ 229.344647][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.352772][ T29] audit: type=1400 audit(229.312:429): avc: denied { mount } for pid=7988 comm="syz.0.600" name="/" dev="autofs" ino=17109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.358605][ T7999] CPU: 1 UID: 0 PID: 7999 Comm: syz.3.602 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 229.388380][ T9] hso 2-1:0.0: Failed to find BULK IN ep [ 229.390305][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.406035][ T7999] Call Trace: [ 229.409317][ T7999] [ 229.412296][ T7999] dump_stack_lvl+0x16c/0x1f0 [ 229.416999][ T7999] should_fail_ex+0x497/0x5b0 [ 229.421690][ T7999] _copy_from_user+0x2e/0xd0 [ 229.426284][ T7999] kstrtouint_from_user+0xd7/0x1c0 [ 229.431398][ T7999] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 229.437119][ T7999] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 229.442754][ T7999] proc_fail_nth_write+0x84/0x250 [ 229.447777][ T7999] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.453410][ T7999] ? ksys_write+0x12b/0x250 [ 229.457928][ T7999] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.463555][ T7999] vfs_write+0x24c/0x1150 [ 229.467886][ T7999] ? __fget_files+0x1fc/0x3a0 [ 229.472569][ T7999] ? __pfx___mutex_lock+0x10/0x10 [ 229.477614][ T7999] ? __pfx_vfs_write+0x10/0x10 [ 229.482388][ T7999] ? __fget_files+0x206/0x3a0 [ 229.487066][ T7999] ksys_write+0x12b/0x250 [ 229.491384][ T7999] ? __pfx_ksys_write+0x10/0x10 [ 229.496231][ T7999] do_syscall_64+0xcd/0x250 [ 229.500754][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.506657][ T7999] RIP: 0033:0x7f124d5847df [ 229.511069][ T7999] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 229.530691][ T7999] RSP: 002b:00007f124e441030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.539187][ T7999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f124d5847df [ 229.547169][ T7999] RDX: 0000000000000001 RSI: 00007f124e4410a0 RDI: 0000000000000004 [ 229.555130][ T7999] RBP: 00007f124e441090 R08: 0000000000000000 R09: 0000000000000000 [ 229.563092][ T7999] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 229.571050][ T7999] R13: 0000000000000000 R14: 00007f124d775fa0 R15: 00007fffb664dd58 [ 229.579024][ T7999] [ 229.582097][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.583252][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 229.605402][ T7966] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 229.799521][ T29] audit: type=1400 audit(229.762:430): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 230.392483][ T8017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.433905][ T8017] xt_l2tp: v2 tid > 0xffff: 262144 [ 231.180847][ T8019] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=8019 comm=syz.0.609 [ 231.260991][ T7962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.332665][ T5863] usb 2-1: USB disconnect, device number 15 [ 231.371438][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 231.411019][ T29] audit: type=1400 audit(231.372:431): avc: denied { bind } for pid=8023 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 231.483586][ T8022] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=8022 comm=syz.0.610 [ 232.405846][ T8044] netlink: 'syz.0.614': attribute type 4 has an invalid length. [ 232.834494][ T8051] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 232.871064][ T5866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.281043][ T5866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.308024][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 234.315929][ T29] audit: type=1400 audit(234.282:432): avc: denied { getopt } for pid=8068 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.559145][ T29] audit: type=1326 audit(234.522:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 234.614009][ T8077] loop9: detected capacity change from 0 to 7 [ 234.652579][ T8077] Dev loop9: unable to read RDB block 7 [ 234.658307][ T29] audit: type=1326 audit(234.592:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 234.695141][ T8077] loop9: unable to read partition table [ 234.735047][ T8077] loop9: partition table beyond EOD, truncated [ 234.778140][ T8077] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 234.814030][ T29] audit: type=1326 audit(234.592:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 234.910720][ T29] audit: type=1326 audit(234.592:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 234.969727][ T29] audit: type=1400 audit(234.832:437): avc: denied { listen } for pid=8068 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.989618][ T29] audit: type=1400 audit(234.832:438): avc: denied { accept } for pid=8068 comm="syz.3.626" lport=42369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.120654][ T8083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.630'. [ 235.350143][ T8085] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 236.739076][ T8100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.864521][ T5868] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 239.045726][ T5868] usb 4-1: config 3 has an invalid interface number: 40 but max is 1 [ 239.054983][ T5868] usb 4-1: config 3 has an invalid interface number: 233 but max is 1 [ 239.065105][ T5868] usb 4-1: config 3 has an invalid interface number: 234 but max is 1 [ 239.088491][ T5868] usb 4-1: config 3 has 4 interfaces, different from the descriptor's value: 2 [ 239.099389][ T5868] usb 4-1: config 3 has no interface number 0 [ 239.107744][ T5868] usb 4-1: config 3 has no interface number 2 [ 239.115284][ T5868] usb 4-1: config 3 has no interface number 3 [ 239.121397][ T5868] usb 4-1: config 3 interface 40 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 239.145136][ T5868] usb 4-1: too many endpoints for config 3 interface 1 altsetting 4: 231, using maximum allowed: 30 [ 239.162984][ T5868] usb 4-1: config 3 interface 1 altsetting 4 endpoint 0xF has invalid maxpacket 999, setting to 64 [ 239.177453][ T5868] usb 4-1: config 3 interface 1 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 239.192654][ T5868] usb 4-1: config 3 interface 1 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 239.211987][ T5868] usb 4-1: config 3 interface 1 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 239.225428][ T5863] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 239.236710][ T5868] usb 4-1: config 3 interface 233 altsetting 85 has a duplicate endpoint with address 0xD, skipping [ 239.253616][ T5868] usb 4-1: config 3 interface 233 altsetting 85 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 239.267161][ T5868] usb 4-1: config 3 interface 233 altsetting 85 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 239.281993][ T5868] usb 4-1: config 3 interface 233 altsetting 85 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 239.298910][ T5868] usb 4-1: too many endpoints for config 3 interface 234 altsetting 213: 242, using maximum allowed: 30 [ 239.310824][ T5868] usb 4-1: config 3 interface 234 altsetting 213 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 239.324455][ T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 239.332895][ T5868] usb 4-1: config 3 interface 234 altsetting 213 has a duplicate endpoint with address 0xC, skipping [ 239.349383][ T5868] usb 4-1: config 3 interface 234 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 239.362240][ T5868] usb 4-1: config 3 interface 234 altsetting 213 has a duplicate endpoint with address 0x3, skipping [ 239.374572][ T5868] usb 4-1: config 3 interface 234 altsetting 213 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 239.387433][ T5868] usb 4-1: config 3 interface 234 altsetting 213 has a duplicate endpoint with address 0x6, skipping [ 239.399357][ T5868] usb 4-1: config 3 interface 234 altsetting 213 has a duplicate endpoint with address 0xC, skipping [ 239.414797][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.425408][ T5863] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.434504][ T5868] usb 4-1: config 3 interface 234 altsetting 213 endpoint 0xB has invalid maxpacket 2128, setting to 64 [ 239.447003][ T5863] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 239.456925][ T5868] usb 4-1: config 3 interface 234 altsetting 213 has a duplicate endpoint with address 0x6, skipping [ 239.468414][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.479106][ T5868] usb 4-1: config 3 interface 234 altsetting 213 has 11 endpoint descriptors, different from the interface descriptor's value: 242 [ 239.496361][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 239.504177][ T5863] usb 3-1: config 0 descriptor?? [ 239.519848][ T5868] usb 4-1: config 3 interface 40 has no altsetting 0 [ 239.528190][ T5868] usb 4-1: config 3 interface 1 has no altsetting 0 [ 239.536082][ T5868] usb 4-1: config 3 interface 233 has no altsetting 0 [ 239.544235][ T5868] usb 4-1: config 3 interface 234 has no altsetting 0 [ 239.553955][ T5868] usb 4-1: Dual-Role OTG device on HNP port [ 239.560231][ T5868] usb 4-1: New USB device found, idVendor=0609, idProduct=031d, bcdDevice=13.e4 [ 239.583146][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.605344][ T5868] usb 4-1: Product: syz [ 239.609661][ T5868] usb 4-1: Manufacturer: syz [ 239.624847][ T5868] usb 4-1: SerialNumber: syz [ 239.634968][ T9] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 239.718865][ T5863] usb 3-1: USB disconnect, device number 14 [ 239.719383][ T8123] netlink: 96 bytes leftover after parsing attributes in process `syz.0.644'. [ 239.792037][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 239.802852][ T9] usb usb2-port1: attempt power cycle [ 240.041234][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.049933][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.792009][ T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 240.835432][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 240.945584][ T29] audit: type=1400 audit(240.912:439): avc: denied { setopt } for pid=8114 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.946553][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.974389][ T9] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 240.992222][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.022236][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 241.028981][ T9] usb usb2-port1: unable to enumerate USB device [ 241.033071][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.065027][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.736206][ T8151] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 241.762323][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 242.108681][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 242.493142][ T5868] usb 4-1: USB disconnect, device number 12 [ 242.916550][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.061975][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 243.202014][ T29] audit: type=1400 audit(243.152:440): avc: denied { name_bind } for pid=8182 comm="syz.4.656" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 243.222903][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.269280][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 243.269298][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.269310][ T25] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 243.269323][ T25] usb 3-1: config 1 has no interface number 1 [ 243.269342][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 243.269361][ T25] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.280074][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.280095][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.280108][ T25] usb 3-1: Product: syz [ 243.280117][ T25] usb 3-1: Manufacturer: syz [ 243.280127][ T25] usb 3-1: SerialNumber: syz [ 243.398588][ T8186] netlink: 'syz.0.657': attribute type 5 has an invalid length. [ 243.398605][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 243.500936][ T25] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 243.500977][ T25] usb 3-1: MIDIStreaming interface descriptor not found [ 243.542509][ T25] usb 3-1: USB disconnect, device number 15 [ 243.648145][ T29] audit: type=1400 audit(243.612:441): avc: denied { setopt } for pid=8176 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.928985][ T7591] udevd[7591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.991979][ T5863] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 244.142897][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 244.176030][ T5863] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 244.191483][ T8204] netlink: 68 bytes leftover after parsing attributes in process `syz.3.659'. [ 244.211306][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.228079][ T8178] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 244.238555][ T5863] usb 1-1: config 0 descriptor?? [ 246.326390][ T29] audit: type=1400 audit(246.292:442): avc: denied { setcurrent } for pid=8225 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 246.382726][ T5866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.421052][ T29] audit: type=1401 audit(246.312:443): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 246.722432][ T5863] usb 1-1: string descriptor 0 read error: -71 [ 246.782304][ T8232] i2c i2c-0: Invalid block write size 34 [ 246.820591][ T5863] usb 1-1: USB disconnect, device number 19 [ 246.842032][ T29] audit: type=1400 audit(246.802:444): avc: denied { execute } for pid=8231 comm="syz.4.670" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 247.022648][ T5866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.147185][ T8241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.169187][ T8241] xt_l2tp: v2 tid > 0xffff: 262144 [ 247.306752][ T48] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 247.501642][ T48] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 247.512331][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.637009][ T48] usb 3-1: config 0 descriptor?? [ 247.912195][ T48] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 247.921324][ T48] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 247.934596][ T8244] sp0: Synchronizing with TNC [ 247.942840][ T8244] sp0: Found TNC [ 248.169827][ T8239] syzkaller0: entered allmulticast mode [ 248.312654][ T29] audit: type=1400 audit(248.282:445): avc: denied { bind } for pid=8245 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 248.463195][ T8251] blk_print_req_error: 6 callbacks suppressed [ 248.463216][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.479075][ T8251] buffer_io_error: 6 callbacks suppressed [ 248.479160][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.493425][ T8242] [U] ` [ 248.505948][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.515796][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.525091][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.531512][ T48] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 248.535764][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.541481][ T48] [drm] Initialized udl on minor 2 [ 248.556901][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.566448][ T29] audit: type=1400 audit(248.392:446): avc: denied { ioctl } for pid=8249 comm="syz.0.677" path="socket:[18615]" dev="sockfs" ino=18615 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.573940][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.600438][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.655679][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.667487][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.676895][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.688167][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.697782][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.710890][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.720501][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.730133][ T8251] ldm_validate_partition_table(): Disk read failed. [ 248.739361][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.748855][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.761413][ T8251] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.771620][ T8251] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.778319][ T8245] delete_channel: no stack [ 248.779742][ T8251] Dev nbd0: unable to read RDB block 0 [ 248.802900][ T8251] nbd0: unable to read partition table [ 248.876318][ T48] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 249.109096][ T48] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 249.680669][ T8262] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=8262 comm=syz.3.680 [ 249.975687][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 250.003655][ T48] usb 3-1: USB disconnect, device number 16 [ 250.052700][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 250.192997][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 250.694395][ T8278] loop9: detected capacity change from 0 to 7 [ 250.722123][ T8278] Dev loop9: unable to read RDB block 7 [ 250.727739][ T8278] loop9: unable to read partition table [ 250.745337][ T8278] loop9: partition table beyond EOD, truncated [ 250.784303][ T8278] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 251.682863][ T5863] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 251.989637][ T29] audit: type=1400 audit(251.952:447): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 252.031308][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 252.062784][ T5863] usb 1-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 252.074779][ T5863] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.085024][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 252.110253][ T5863] usb 1-1: SerialNumber: syz [ 252.653277][ T5863] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 252.676760][ T5863] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 252.762808][ T5863] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 252.840617][ T8305] netlink: 84 bytes leftover after parsing attributes in process `syz.3.696'. [ 252.878066][ T29] audit: type=1400 audit(252.842:448): avc: denied { shutdown } for pid=8286 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 252.953510][ T25] usb 1-1: USB disconnect, device number 20 [ 252.961576][ T8310] netlink: 84 bytes leftover after parsing attributes in process `syz.4.697'. [ 254.242587][ T8326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.122848][ T8326] xt_l2tp: v2 tid > 0xffff: 262144 [ 255.542559][ T8328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.182123][ T8328] xt_l2tp: v2 tid > 0xffff: 262144 [ 256.302760][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.309129][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.890494][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 258.362003][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 258.371286][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.709'. [ 258.380755][ T8349] netlink: 'syz.4.712': attribute type 12 has an invalid length. [ 258.388569][ T8349] netlink: 'syz.4.712': attribute type 29 has an invalid length. [ 258.396334][ T8349] netlink: 148 bytes leftover after parsing attributes in process `syz.4.712'. [ 258.405349][ T8349] netlink: 59 bytes leftover after parsing attributes in process `syz.4.712'. [ 258.555637][ T8336] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 259.199866][ T5830] block nbd3: Receive control failed (result -107) [ 259.232318][ T8343] nbd3: detected capacity change from 0 to 256 [ 259.262734][ T7900] block nbd3: Dead connection, failed to find a fallback [ 259.269796][ T7900] block nbd3: shutting down sockets [ 259.350169][ T7900] blk_print_req_error: 6 callbacks suppressed [ 259.350189][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.417688][ T8355] xt_CT: No such helper "pptp" [ 259.456996][ T7900] buffer_io_error: 6 callbacks suppressed [ 259.457012][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.497120][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.663784][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.681001][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.724539][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.732902][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.742037][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.850206][ T8374] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 260.294704][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.317947][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 260.503696][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.512817][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 260.520714][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.529818][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 260.537851][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.546977][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 260.554823][ T7900] ldm_validate_partition_table(): Disk read failed. [ 260.561497][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.598086][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 260.612189][ T7900] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.621550][ T7900] Buffer I/O error on dev nbd3, logical block 0, async page read [ 260.627540][ T8384] netlink: 84 bytes leftover after parsing attributes in process `syz.4.722'. [ 260.629741][ T7900] Dev nbd3: unable to read RDB block 0 [ 260.644305][ T7900] nbd3: unable to read partition table [ 260.816153][ T7900] ldm_validate_partition_table(): Disk read failed. [ 261.218745][ T7900] Dev nbd3: unable to read RDB block 0 [ 261.311213][ T7900] nbd3: unable to read partition table [ 263.233740][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 263.946088][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 264.610321][ T8419] netlink: 'syz.2.727': attribute type 4 has an invalid length. [ 264.697413][ T8425] team0: Device ipvlan2 failed to register rx_handler [ 264.715552][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 264.982368][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 265.234079][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 265.260029][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.277681][ T9] usb 2-1: Product: syz [ 265.285435][ T9] usb 2-1: Manufacturer: syz [ 265.290267][ T9] usb 2-1: SerialNumber: syz [ 265.299407][ T9] usb 2-1: config 0 descriptor?? [ 265.324568][ T9] usb 2-1: selecting invalid altsetting 3 [ 265.345830][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 265.347932][ T8433] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 265.353957][ T9] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 265.380767][ T9] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 265.382555][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.581029][ T9] usb 2-1: USB disconnect, device number 20 [ 266.082526][ T8443] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 266.415368][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 266.709819][ T8447] loop9: detected capacity change from 0 to 7 [ 266.727813][ T8447] Dev loop9: unable to read RDB block 7 [ 266.745020][ T8447] loop9: unable to read partition table [ 266.840187][ T8447] loop9: partition table beyond EOD, truncated [ 266.858275][ T8447] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 266.905644][ T8453] netlink: 68 bytes leftover after parsing attributes in process `syz.4.739'. [ 266.959607][ T8437] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=8437 comm=syz.0.737 [ 267.043909][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 267.213657][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 267.228780][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 267.262340][ T29] audit: type=1400 audit(267.222:449): avc: denied { read } for pid=8458 comm="syz.2.745" lport=52331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.300540][ T5830] block nbd4: Receive control failed (result -107) [ 267.347351][ T8461] nbd4: detected capacity change from 0 to 256 [ 267.394938][ T7900] block nbd4: Dead connection, failed to find a fallback [ 267.412121][ T5866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 267.443230][ T7900] block nbd4: shutting down sockets [ 267.488694][ T7900] blk_print_req_error: 27 callbacks suppressed [ 267.501564][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.618969][ T7900] buffer_io_error: 27 callbacks suppressed [ 267.618985][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 267.730900][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.950861][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 267.972532][ T5863] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 267.993695][ T29] audit: type=1400 audit(267.932:450): avc: denied { ioctl } for pid=8474 comm="syz.3.748" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 268.027414][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.127381][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 268.234598][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.263366][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 268.294904][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.339122][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 268.382183][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.391250][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 268.452148][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.562102][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 268.570958][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.292990][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 269.300908][ T7900] ldm_validate_partition_table(): Disk read failed. [ 269.318077][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.331483][ T5863] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.341926][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.349950][ T5863] usb 1-1: Product: syz [ 269.357520][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 269.372253][ T7900] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.392043][ T5863] usb 1-1: Manufacturer: syz [ 269.417164][ T5863] usb 1-1: SerialNumber: syz [ 269.423703][ T8475] netlink: 'syz.3.748': attribute type 10 has an invalid length. [ 269.431593][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.748'. [ 269.441013][ T8475] ipvlan1: entered promiscuous mode [ 269.446231][ T8475] ipvlan1: entered allmulticast mode [ 269.451495][ T8475] veth0_vlan: entered allmulticast mode [ 269.458865][ T8475] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 269.483937][ T29] audit: type=1400 audit(269.452:451): avc: denied { getopt } for pid=8483 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.511971][ T7900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 269.548693][ T5863] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.566108][ T7900] Dev nbd4: unable to read RDB block 0 [ 269.604332][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 269.624220][ T7900] nbd4: unable to read partition table [ 269.657244][ T7900] ldm_validate_partition_table(): Disk read failed. [ 269.698178][ T7900] Dev nbd4: unable to read RDB block 0 [ 269.715059][ T7900] nbd4: unable to read partition table [ 269.776385][ T7900] ldm_validate_partition_table(): Disk read failed. [ 269.797163][ T7900] Dev nbd4: unable to read RDB block 0 [ 269.817412][ T7900] nbd4: unable to read partition table [ 269.975082][ T7900] ldm_validate_partition_table(): Disk read failed. [ 270.020285][ T7900] Dev nbd4: unable to read RDB block 0 [ 270.156117][ T8492] loop9: detected capacity change from 0 to 7 [ 270.165703][ T8472] netlink: 44 bytes leftover after parsing attributes in process `syz.0.747'. [ 270.239683][ T7900] nbd4: unable to read partition table [ 270.249296][ T8492] Dev loop9: unable to read RDB block 7 [ 270.342343][ T25] usb 1-1: USB disconnect, device number 21 [ 270.370401][ T8492] loop9: unable to read partition table [ 270.525360][ T8492] loop9: partition table beyond EOD, truncated [ 270.683287][ T8492] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 270.738064][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 270.745176][ T9] ath9k_htc: Failed to initialize the device [ 270.754316][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 271.002219][ T29] audit: type=1400 audit(270.942:452): avc: denied { ioctl } for pid=8495 comm="syz.4.756" path="socket:[19062]" dev="sockfs" ino=19062 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 271.172211][ T29] audit: type=1400 audit(271.052:453): avc: denied { name_bind } for pid=8506 comm="syz.0.758" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 272.972783][ T8513] netlink: 'syz.1.752': attribute type 2 has an invalid length. [ 273.554874][ T8521] netlink: 'syz.2.751': attribute type 2 has an invalid length. [ 274.295693][ T8533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.733997][ T29] audit: type=1400 audit(275.702:454): avc: denied { accept } for pid=8540 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 275.752801][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.290832][ T29] audit: type=1400 audit(276.252:455): avc: denied { remount } for pid=8552 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 278.313423][ T8572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.774'. [ 278.565432][ T5863] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 278.687910][ T8581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.722843][ T5863] usb 1-1: device descriptor read/64, error -71 [ 279.454005][ T8589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 279.459771][ T29] audit: type=1400 audit(279.412:456): avc: denied { connect } for pid=8584 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.472001][ T5863] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 279.572148][ T8583] xt_CT: No such helper "pptp" [ 279.612222][ T5863] usb 1-1: device descriptor read/64, error -71 [ 279.722252][ T5863] usb usb1-port1: attempt power cycle [ 279.732126][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 279.732354][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.756045][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.912074][ T9] usb 2-1: device descriptor read/64, error -71 [ 280.122220][ T5863] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 280.148687][ T5863] usb 1-1: device descriptor read/8, error -71 [ 280.155463][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 280.252994][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.311967][ T9] usb 2-1: device descriptor read/64, error -71 [ 280.454697][ T9] usb usb2-port1: attempt power cycle [ 280.612184][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.810236][ T8618] netlink: 'syz.0.786': attribute type 4 has an invalid length. [ 280.839211][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 281.715746][ T9] usb 2-1: device descriptor read/8, error -71 [ 282.058711][ T8630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.701253][ T8632] netlink: 51 bytes leftover after parsing attributes in process `syz.1.790'. [ 282.780365][ T8634] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 282.805141][ T8634] syz.2.791 (8634) used greatest stack depth: 21168 bytes left [ 283.042617][ T29] audit: type=1400 audit(283.002:457): avc: denied { nlmsg_read } for pid=8631 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.867783][ T29] audit: type=1400 audit(283.832:458): avc: denied { map } for pid=8647 comm="syz.0.795" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 283.941983][ T29] audit: type=1400 audit(283.862:459): avc: denied { execute } for pid=8647 comm="syz.0.795" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.261234][ T8660] netlink: 84 bytes leftover after parsing attributes in process `syz.3.800'. [ 284.444409][ T8665] netlink: 'syz.1.799': attribute type 5 has an invalid length. [ 284.452226][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 287.365703][ T8690] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 287.376292][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.620433][ T8691] sit0: entered promiscuous mode [ 287.628148][ T8691] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 287.711941][ T8691] netlink: 1 bytes leftover after parsing attributes in process `syz.0.812'. [ 287.841451][ T25] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice= 4.b7 [ 287.859102][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.049117][ T25] usb 4-1: Product: syz [ 288.053854][ T25] usb 4-1: Manufacturer: syz [ 288.058492][ T25] usb 4-1: SerialNumber: syz [ 288.163405][ T25] usb 4-1: config 0 descriptor?? [ 288.221715][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 288.392183][ T25] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 288.398608][ T25] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 288.407999][ T25] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 288.448223][ T25] usb 4-1: USB disconnect, device number 13 [ 288.460550][ T8702] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=8702 comm=syz.4.815 [ 288.502650][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 288.562164][ T5863] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.662012][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 288.756678][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 288.768693][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 288.776983][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 288.788899][ T9] usb 2-1: Product: syz [ 288.794026][ T9] usb 2-1: Manufacturer: syz [ 288.859474][ T8711] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 289.468080][ T9] usb 2-1: SerialNumber: syz [ 289.479913][ T9] usb 2-1: config 0 descriptor?? [ 289.525496][ T5863] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 289.601808][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 289.658003][ T5863] usb 3-1: Product: syz [ 289.667301][ T5863] usb 3-1: Manufacturer: syz [ 289.677091][ T5863] usb 3-1: SerialNumber: syz [ 289.694587][ T5863] usb 3-1: config 0 descriptor?? [ 289.721083][ T9] usb 2-1: USB disconnect, device number 25 [ 290.008804][ T9] usb 3-1: USB disconnect, device number 17 [ 290.532444][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.820577][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 291.196121][ T8751] loop9: detected capacity change from 0 to 7 [ 291.214709][ T8751] Dev loop9: unable to read RDB block 7 [ 291.220767][ T8751] loop9: unable to read partition table [ 291.233771][ T8751] loop9: partition table beyond EOD, truncated [ 291.240434][ T8751] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 291.358484][ T8750] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.418836][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'. [ 291.573083][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.581050][ T48] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 292.959463][ T48] usb 3-1: device descriptor read/64, error -71 [ 293.042886][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.198741][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 293.207820][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 293.222964][ T48] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 293.224926][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 293.242349][ T9] usb 4-1: Product: syz [ 293.246544][ T9] usb 4-1: Manufacturer: syz [ 293.254377][ T9] usb 4-1: SerialNumber: syz [ 293.274680][ T9] usb 4-1: config 0 descriptor?? [ 293.332002][ T970] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 293.352464][ T48] usb 3-1: device descriptor read/64, error -71 [ 293.464176][ T48] usb usb3-port1: attempt power cycle [ 293.489939][ T9] usb 4-1: USB disconnect, device number 14 [ 293.497586][ T970] usb 2-1: Using ep0 maxpacket: 32 [ 293.525200][ T970] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 293.553796][ T970] usb 2-1: config 0 has no interface number 0 [ 293.560361][ T970] usb 2-1: config 0 interface 244 has no altsetting 0 [ 293.607206][ T970] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 293.630114][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.651382][ T970] usb 2-1: Product: syz [ 293.796287][ T970] usb 2-1: Manufacturer: syz [ 293.824231][ T48] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 293.833518][ T970] usb 2-1: SerialNumber: syz [ 293.855888][ T48] usb 3-1: device descriptor read/8, error -71 [ 293.958413][ T970] usb 2-1: config 0 descriptor?? [ 294.061698][ T970] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found [ 294.138699][ T48] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 294.195809][ T48] usb 3-1: device descriptor read/8, error -71 [ 294.247186][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.255884][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.322208][ T48] usb usb3-port1: unable to enumerate USB device [ 294.799673][ T29] audit: type=1400 audit(294.762:460): avc: denied { bind } for pid=8792 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 294.800524][ T8793] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 294.943140][ T8801] xt_CT: No such helper "pptp" [ 294.989225][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.038616][ T8793] bond0: (slave team0): Enslaving as an active interface with an up link [ 295.110365][ T8793] syz.0.846 (8793) used greatest stack depth: 21104 bytes left [ 295.312258][ T48] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 295.476503][ T48] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 295.487906][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.501632][ T48] usb 3-1: config 0 descriptor?? [ 295.542078][ T5863] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 295.692001][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 295.712161][ T5863] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 295.730751][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 295.731759][ T48] kaweth 3-1:0.0: Firmware present in device. [ 295.747536][ T5863] usb 4-1: Product: syz [ 295.757021][ T5863] usb 4-1: Manufacturer: syz [ 295.765923][ T5863] usb 4-1: SerialNumber: syz [ 295.777816][ T5863] usb 4-1: config 0 descriptor?? [ 295.922336][ T48] kaweth 3-1:0.0: Statistics collection: 0 [ 295.928219][ T48] kaweth 3-1:0.0: Multicast filter limit: 0 [ 295.934346][ T48] kaweth 3-1:0.0: MTU: 0 [ 295.938640][ T48] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 295.995739][ T5863] usb 4-1: USB disconnect, device number 15 [ 296.091459][ T970] snd_usb_toneport 2-1:0.244: set_interface failed [ 296.098428][ T970] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected [ 296.116676][ T970] snd_usb_toneport 2-1:0.244: probe with driver snd_usb_toneport failed with error -71 [ 296.158681][ T970] usb 2-1: USB disconnect, device number 26 [ 296.375916][ T8820] ebtables: ebtables: counters copy to user failed while replacing table [ 296.693504][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.700082][ T48] kaweth 3-1:0.0: kaweth interface created at eth1 [ 296.936192][ T48] usb 3-1: USB disconnect, device number 22 [ 296.980781][ T29] audit: type=1400 audit(296.942:461): avc: denied { bind } for pid=8825 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.167692][ T8836] loop9: detected capacity change from 0 to 7 [ 297.195998][ T8836] Dev loop9: unable to read RDB block 7 [ 297.216641][ T8836] loop9: unable to read partition table [ 297.233611][ T8836] loop9: partition table beyond EOD, truncated [ 297.268826][ T8836] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 297.775266][ T8849] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 298.734777][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 299.830731][ T29] audit: type=1400 audit(299.732:462): avc: denied { create } for pid=8855 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 299.991656][ T8863] Bluetooth: MGMT ver 1.23 [ 300.029570][ T29] audit: type=1400 audit(299.742:463): avc: denied { ioctl } for pid=8855 comm="syz.3.867" path="socket:[20157]" dev="sockfs" ino=20157 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 300.453085][ T29] audit: type=1400 audit(299.792:464): avc: denied { read } for pid=8862 comm="syz.2.869" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.733213][ T29] audit: type=1400 audit(299.792:465): avc: denied { open } for pid=8862 comm="syz.2.869" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.975438][ T29] audit: type=1400 audit(299.822:466): avc: denied { ioctl } for pid=8862 comm="syz.2.869" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 301.011970][ T5863] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 301.387745][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 301.402153][ T29] audit: type=1400 audit(301.072:467): avc: denied { read } for pid=8870 comm="syz.0.872" path="socket:[20182]" dev="sockfs" ino=20182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 301.405363][ T5863] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 301.500468][ T8879] loop7: detected capacity change from 0 to 16384 [ 301.542002][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 301.552280][ T5863] usb 2-1: Product: syz [ 301.556486][ T5863] usb 2-1: Manufacturer: syz [ 301.559349][ T8886] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 301.561079][ T5863] usb 2-1: SerialNumber: syz [ 301.565750][ T5863] usb 2-1: config 0 descriptor?? [ 301.599950][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.622498][ T8879] blk_print_req_error: 64 callbacks suppressed [ 301.622516][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.680289][ T8879] buffer_io_error: 64 callbacks suppressed [ 301.680309][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.699586][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.747216][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.787978][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 301.798718][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.880050][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.908278][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.916456][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.921414][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 301.925998][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.942959][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.947130][ T8895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.879'. [ 301.961047][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 302.026833][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.106112][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 302.217374][ T5830] block nbd5: Receive control failed (result -107) [ 302.474413][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 302.482695][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.491846][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 302.500054][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.512691][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 302.531809][ T8879] ldm_validate_partition_table(): Disk read failed. [ 302.546647][ T8895] nbd5: detected capacity change from 0 to 256 [ 302.570361][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.592988][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 302.612661][ T7900] block nbd5: Dead connection, failed to find a fallback [ 302.634040][ T5863] usb 2-1: USB disconnect, device number 27 [ 302.747043][ T8879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.777732][ T8879] Buffer I/O error on dev loop7, logical block 0, async page read [ 302.824555][ T8879] Dev loop7: unable to read RDB block 0 [ 302.833868][ T8879] loop7: unable to read partition table [ 302.840348][ T8879] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 303.024542][ T8911] loop9: detected capacity change from 0 to 7 [ 303.031571][ T29] audit: type=1400 audit(302.992:468): avc: denied { setopt } for pid=8908 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.033195][ T8911] Dev loop9: unable to read RDB block 7 [ 303.056028][ T8911] loop9: unable to read partition table [ 303.061796][ T8911] loop9: partition table beyond EOD, truncated [ 303.068060][ T8911] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 303.140492][ T8916] netlink: 84 bytes leftover after parsing attributes in process `syz.4.886'. [ 303.834101][ T8934] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 304.025096][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 304.381954][ T48] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 305.073379][ T48] usb 2-1: device descriptor read/64, error -71 [ 305.200213][ T8950] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 305.842157][ T48] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 306.102854][ T48] usb 2-1: device descriptor read/64, error -71 [ 306.202012][ T5863] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 306.214801][ T8955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=8955 comm=syz.2.896 [ 306.242265][ T48] usb usb2-port1: attempt power cycle [ 306.399182][ T5863] usb 4-1: config 128 has an invalid interface number: 217 but max is 1 [ 306.428796][ T5863] usb 4-1: config 128 has an invalid interface number: 217 but max is 1 [ 306.933207][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.231295][ T5863] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 307.240504][ T5863] usb 4-1: config 128 has no interface number 0 [ 307.247727][ T5863] usb 4-1: config 128 interface 217 has no altsetting 0 [ 307.256866][ T5863] usb 4-1: config 128 interface 217 has no altsetting 1 [ 307.276957][ T5863] usb 4-1: New USB device found, idVendor=1199, idProduct=6833, bcdDevice=c3.60 [ 307.286155][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.297149][ T5863] usb 4-1: Product: syz [ 307.302061][ T5863] usb 4-1: Manufacturer: syz [ 307.306710][ T5863] usb 4-1: SerialNumber: syz [ 307.392084][ T970] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 307.533074][ T5863] usb 4-1: selecting invalid altsetting 1 [ 307.539147][ T5863] sierra 4-1:128.217: Sierra USB modem converter detected [ 307.548248][ T970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.573138][ T970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 307.585764][ T5863] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 307.595418][ T5863] usb 4-1: USB disconnect, device number 16 [ 307.616355][ T5863] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 307.626687][ T970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.645865][ T29] audit: type=1400 audit(307.612:469): avc: denied { ioctl } for pid=8968 comm="syz.1.902" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 307.649404][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.649422][ T970] usb 1-1: Product: syz [ 307.649432][ T970] usb 1-1: Manufacturer: syz [ 307.649442][ T970] usb 1-1: SerialNumber: syz [ 307.650280][ T5863] sierra 4-1:128.217: device disconnected [ 307.721648][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.264104][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 310.247033][ T970] cdc_ncm 1-1:1.0: bind() failure [ 310.318186][ T8996] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 310.720929][ T970] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 310.748517][ T970] usb 1-1: USB disconnect, device number 26 [ 310.772279][ T8996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.901163][ T9004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.932104][ T5866] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 310.946370][ T9004] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 310.946881][ T9004] bond1: (slave vti0): Error -95 calling set_mac_address [ 311.102083][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 311.106831][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 311.108504][ T5866] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 311.108537][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.108560][ T5866] usb 4-1: Product: syz [ 311.108577][ T5866] usb 4-1: Manufacturer: syz [ 311.108593][ T5866] usb 4-1: SerialNumber: syz [ 311.140995][ T5866] usb 4-1: config 0 descriptor?? [ 311.141642][ T9000] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.142771][ T5866] hub 4-1:0.0: bad descriptor, ignoring hub [ 311.142797][ T5866] hub 4-1:0.0: probe with driver hub failed with error -5 [ 311.145027][ T5866] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 311.149769][ T29] audit: type=1400 audit(311.112:470): avc: denied { read } for pid=5176 comm="acpid" name="mouse1" dev="devtmpfs" ino=2963 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.149807][ T29] audit: type=1400 audit(311.112:471): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2963 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.149840][ T29] audit: type=1400 audit(311.112:472): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2963 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.190060][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 311.194610][ T8996] bond1: (slave batadv1): making interface the new active one [ 311.196222][ T8996] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 311.270760][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'. [ 311.312188][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 311.312217][ T9008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.911'. [ 311.344659][ T5830] block nbd6: Receive control failed (result -107) [ 311.392355][ T9008] nbd6: detected capacity change from 0 to 256 [ 311.414202][ T7598] block nbd6: Dead connection, failed to find a fallback [ 311.574786][ T9010] bridge1: entered promiscuous mode [ 311.574813][ T9010] bridge1: entered allmulticast mode [ 311.643122][ T9010] team0: Port device bridge1 added [ 312.054667][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 312.181800][ T29] audit: type=1400 audit(312.142:473): avc: denied { mount } for pid=9009 comm="syz.1.912" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 312.332715][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 313.072554][ T5865] usb 4-1: USB disconnect, device number 17 [ 313.089264][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 313.115651][ T9014] tty tty1: ldisc open failed (-12), clearing slot 0 [ 313.443162][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 313.504321][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 314.052591][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 314.292011][ T9000] netlink: 'syz.3.907': attribute type 6 has an invalid length. [ 314.482067][ T5865] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 314.689153][ T9046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.920976][ T9049] loop9: detected capacity change from 0 to 7 [ 316.025923][ T9055] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=9055 comm=syz.4.923 [ 316.297438][ T9049] Dev loop9: unable to read RDB block 7 [ 316.354882][ T5865] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 316.364115][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.377088][ T9049] loop9: unable to read partition table [ 316.385034][ T5865] usb 3-1: config 0 descriptor?? [ 316.427062][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 316.469659][ T9049] loop9: partition table beyond EOD, truncated [ 316.476812][ T9049] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 316.477375][ T9060] netlink: 64 bytes leftover after parsing attributes in process `syz.0.924'. [ 316.495603][ T9060] tipc: Invalid UDP bearer configuration [ 316.495638][ T9060] tipc: Enabling of bearer rejected, failed to enable media [ 317.077349][ T9039] binder: 9037:9039 ioctl c0306201 0 returned -14 [ 317.282184][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288668][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.322637][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.829946][ T5863] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 317.854549][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.913068][ T5865] usb 3-1: Cannot set autoneg [ 317.918052][ T5865] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 317.962111][ T5863] usb 1-1: device descriptor read/64, error -71 [ 317.965682][ T5865] usb 3-1: USB disconnect, device number 23 [ 317.968478][ T970] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 318.307050][ T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 319.142240][ T5863] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 319.151660][ T970] usb 2-1: config 0 has no interface number 0 [ 319.151703][ T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.151720][ T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.151742][ T970] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 319.151756][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.735096][ T970] usb 2-1: config 0 descriptor?? [ 319.816606][ T9090] tty tty26: ldisc open failed (-12), clearing slot 25 [ 319.982020][ T5863] usb 1-1: device descriptor read/64, error -71 [ 320.136236][ T5863] usb usb1-port1: attempt power cycle [ 320.191133][ T970] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x0 [ 320.198770][ T970] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x2 [ 320.221974][ T970] hid-retrode 0003:0403:97C1.0007: item fetching failed at offset 2/5 [ 320.241194][ T970] hid-retrode 0003:0403:97C1.0007: probe with driver hid-retrode failed with error -22 [ 320.509560][ T9105] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 321.492194][ T9103] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 322.092525][ T5866] usb 2-1: USB disconnect, device number 31 [ 322.279413][ T9120] blk_print_req_error: 7 callbacks suppressed [ 322.279432][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.311050][ T9120] buffer_io_error: 7 callbacks suppressed [ 322.311070][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 322.331529][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.341381][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 322.358052][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.468583][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 322.548385][ T29] audit: type=1400 audit(322.512:474): avc: denied { ioctl } for pid=9119 comm="syz.1.942" path="socket:[21749]" dev="sockfs" ino=21749 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.590745][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.706163][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 322.710435][ T9127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.938'. [ 322.793188][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.878889][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 323.408165][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.417502][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 323.425582][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.435199][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 323.443162][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.452357][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 323.460811][ T9120] ldm_validate_partition_table(): Disk read failed. [ 323.468268][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.477737][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 323.485756][ T9120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.495280][ T9120] Buffer I/O error on dev nbd1, logical block 0, async page read [ 323.503424][ T9120] Dev nbd1: unable to read RDB block 0 [ 323.509615][ T9120] nbd1: unable to read partition table [ 323.550607][ T9133] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 323.579439][ T9133] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 323.588275][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 323.596761][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 323.602074][ T5863] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 323.605033][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 323.620401][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 323.628676][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 323.636900][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 323.645150][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 323.653408][ T9133] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 324.029056][ T5863] usb 4-1: device descriptor read/64, error -71 [ 324.332157][ T5863] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 324.534405][ T5863] usb 4-1: device descriptor read/64, error -71 [ 324.540751][ T29] audit: type=1326 audit(324.502:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.2.946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a3f85d29 code=0x0 [ 324.642441][ T5863] usb usb4-port1: attempt power cycle [ 324.789669][ T29] audit: type=1400 audit(324.752:476): avc: denied { create } for pid=9132 comm="syz.4.945" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 324.873271][ T9158] netlink: 68 bytes leftover after parsing attributes in process `syz.1.951'. [ 325.042430][ T5863] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 325.062863][ T5863] usb 4-1: device descriptor read/8, error -71 [ 325.310935][ T9165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.371662][ T9162] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 325.448588][ T9167] netlink: 96 bytes leftover after parsing attributes in process `syz.3.955'. [ 325.836730][ T29] audit: type=1400 audit(325.762:477): avc: denied { getopt } for pid=9155 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.708932][ T29] audit: type=1400 audit(326.642:478): avc: denied { unlink } for pid=5822 comm="syz-executor" name="file0" dev="tmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.730911][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.790532][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 326.987433][ T29] audit: type=1400 audit(326.952:479): avc: denied { write } for pid=9190 comm="syz.4.963" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 327.224261][ T29] audit: type=1400 audit(327.182:480): avc: denied { read } for pid=9190 comm="syz.4.963" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 327.352114][ T29] audit: type=1400 audit(327.182:481): avc: denied { open } for pid=9190 comm="syz.4.963" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 327.410453][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 327.413093][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 327.978519][ T29] audit: type=1326 audit(327.932:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.2.966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a3f85d29 code=0x0 [ 328.001421][ T9207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.010488][ T9207] bond0: (slave bond1): Enslaving as an active interface with an up link [ 328.364425][ T9213] QAT: failed to copy from user. [ 328.727345][ T9195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 330.729331][ T9242] blk_print_req_error: 6 callbacks suppressed [ 330.729351][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 330.744746][ T9242] buffer_io_error: 6 callbacks suppressed [ 330.744762][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 330.758501][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 330.767605][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 330.775875][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 330.797036][ T5865] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 330.822469][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 330.861525][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 330.902095][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 330.917755][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 330.983045][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.041755][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.109562][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.117558][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.126824][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.136127][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.147239][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.157844][ T5865] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 331.167007][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.175446][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.206004][ T5865] usb 3-1: config 0 descriptor?? [ 331.710082][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.812011][ T9242] ldm_validate_partition_table(): Disk read failed. [ 331.830196][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.930695][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.992085][ T9242] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.092059][ T9242] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.100189][ T9242] Dev nbd4: unable to read RDB block 0 [ 332.193229][ T9242] nbd4: unable to read partition table [ 333.562415][ T9242] overlayfs: missing 'lowerdir' [ 334.561115][ T5865] usbhid 3-1:0.0: can't add hid device: -71 [ 334.567481][ T5865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 334.655914][ T5865] usb 3-1: USB disconnect, device number 24 [ 338.282581][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.293928][ T9287] syz.4.989 (9287): drop_caches: 2 [ 338.397119][ T9312] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 339.352081][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.505992][ T29] audit: type=1400 audit(340.462:483): avc: denied { map } for pid=9331 comm="syz.3.1003" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 340.579918][ T9314] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=9314 comm=syz.0.1001 [ 340.753380][ T29] audit: type=1400 audit(340.722:484): avc: denied { accept } for pid=9321 comm="syz.4.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 340.778356][ T29] audit: type=1400 audit(340.742:485): avc: denied { setopt } for pid=9321 comm="syz.4.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 340.941693][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 341.370419][ T5863] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 341.679471][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 341.701348][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 341.709477][ T9345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1005'. [ 341.729574][ T5863] usb 4-1: config 30 has an invalid interface number: 68 but max is 0 [ 341.749031][ T5863] usb 4-1: config 30 has no interface number 0 [ 341.755985][ T5863] usb 4-1: config 30 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 341.787681][ T5863] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 341.807136][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.835945][ T5863] usb 4-1: Product: syz [ 341.842438][ T5863] usb 4-1: Manufacturer: syz [ 341.857279][ T5863] usb 4-1: SerialNumber: syz [ 341.906930][ T5863] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 341.932623][ T29] audit: type=1400 audit(341.892:486): avc: denied { mount } for pid=9350 comm="syz.0.1008" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 341.969070][ T29] audit: type=1400 audit(341.902:487): avc: denied { module_request } for pid=9350 comm="syz.0.1008" kmod="netdev-wpan3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 342.037405][ T5830] Bluetooth: hci2: unexpected event 0x30 length: 9 > 3 [ 342.037603][ T5830] Bluetooth: hci2: unexpected event 0x30 length: 9 > 3 [ 342.115979][ T9367] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1011'. [ 342.132436][ T9367] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1011'. [ 342.250599][ T29] audit: type=1400 audit(342.212:488): avc: denied { write } for pid=9365 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 342.946387][ T36] usb 4-1: Failed to submit usb control message: -110 [ 342.997520][ T36] usb 4-1: unable to send the bmi data to the device: -110 [ 343.031957][ T36] usb 4-1: unable to get target info from device [ 343.038326][ T36] usb 4-1: could not get target info (-110) [ 343.049685][ T36] usb 4-1: could not probe fw (-110) [ 343.307044][ T48] usb 4-1: USB disconnect, device number 22 [ 344.689318][ T9389] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 344.714103][ T9389] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 344.738204][ T9389] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 344.748419][ T9389] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 344.758613][ T9389] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 344.768612][ T9389] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 344.778590][ T9389] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 344.948738][ T9389] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 345.669473][ T29] audit: type=1400 audit(344.492:489): avc: denied { getopt } for pid=9383 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.538476][ T29] audit: type=1400 audit(346.502:490): avc: denied { mount } for pid=9399 comm="syz.4.1021" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 346.688069][ T9404] sctp: [Deprecated]: syz.0.1022 (pid 9404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.688069][ T9404] Use struct sctp_sack_info instead [ 346.708019][ T5863] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 347.411518][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 347.424670][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 347.435891][ T5863] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 347.445013][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 347.457438][ T5863] usb 4-1: Product: syz [ 347.462189][ T5863] usb 4-1: Manufacturer: syz [ 347.467302][ T5863] usb 4-1: SerialNumber: syz [ 347.485055][ T5863] usb 4-1: config 0 descriptor?? [ 347.612071][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 347.621007][ T9415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1026'. [ 347.745373][ T5830] block nbd7: Receive control failed (result -107) [ 348.232555][ T9415] nbd7: detected capacity change from 0 to 256 [ 348.303469][ T9108] block nbd7: Dead connection, failed to find a fallback [ 348.310507][ T9108] block nbd7: shutting down sockets [ 348.316792][ T9108] blk_print_req_error: 6 callbacks suppressed [ 348.316806][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.318887][ T970] usb 4-1: USB disconnect, device number 23 [ 348.323409][ T9108] buffer_io_error: 6 callbacks suppressed [ 348.323422][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.352027][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.361215][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.398812][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.428112][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.608951][ T9425] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 348.609355][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.627415][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.629306][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 348.637862][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.665511][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.678151][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.687857][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.694848][ T9425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.709170][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.722575][ T9425] batadv_slave_0: entered promiscuous mode [ 348.732587][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 348.741693][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.751305][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.770768][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.789239][ T9108] ldm_validate_partition_table(): Disk read failed. [ 348.803968][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.818891][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.835970][ T9108] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 348.861974][ T9108] Buffer I/O error on dev nbd7, logical block 0, async page read [ 348.889562][ T9108] Dev nbd7: unable to read RDB block 0 [ 348.910999][ T9108] nbd7: unable to read partition table [ 348.927171][ T9108] ldm_validate_partition_table(): Disk read failed. [ 349.032361][ T9108] Dev nbd7: unable to read RDB block 0 [ 349.038226][ T9108] nbd7: unable to read partition table [ 349.161248][ T9436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.180936][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 349.193991][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 349.416895][ T9438] xt_l2tp: v2 tid > 0xffff: 262144 [ 350.368916][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 350.479459][ T970] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 351.242888][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 351.356823][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.530645][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.602681][ T9470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.718825][ T970] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 351.781983][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.818034][ T970] usb 3-1: config 0 descriptor?? [ 352.653225][ T9477] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26644 sclass=netlink_xfrm_socket pid=9477 comm=syz.3.1046 [ 352.857270][ T970] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0008/input/input13 [ 353.022094][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.153752][ T970] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 353.397523][ T970] usb 3-1: USB disconnect, device number 25 [ 353.745014][ T9494] FAULT_INJECTION: forcing a failure. [ 353.745014][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 353.764567][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.3.1051 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 353.775284][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.785374][ T9494] Call Trace: [ 353.788668][ T9494] [ 353.791609][ T9494] dump_stack_lvl+0x16c/0x1f0 [ 353.796313][ T9494] should_fail_ex+0x497/0x5b0 [ 353.801027][ T9494] ? fs_reclaim_acquire+0xae/0x150 [ 353.806160][ T9494] should_failslab+0xc2/0x120 [ 353.810857][ T9494] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 353.816686][ T9494] ? __alloc_skb+0x2b1/0x380 [ 353.821306][ T9494] __alloc_skb+0x2b1/0x380 [ 353.825745][ T9494] ? __pfx___alloc_skb+0x10/0x10 [ 353.830669][ T9494] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 353.836654][ T9494] netlink_alloc_large_skb+0x69/0x130 [ 353.842036][ T9494] netlink_sendmsg+0x689/0xd70 [ 353.846796][ T9494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.852086][ T9494] ____sys_sendmsg+0xaaf/0xc90 [ 353.856847][ T9494] ? copy_msghdr_from_user+0x10b/0x160 [ 353.862284][ T9494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.867555][ T9494] ___sys_sendmsg+0x135/0x1e0 [ 353.872213][ T9494] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.877398][ T9494] ? __pfx_lock_release+0x10/0x10 [ 353.882402][ T9494] ? trace_lock_acquire+0x14e/0x1f0 [ 353.887589][ T9494] ? __fget_files+0x206/0x3a0 [ 353.892269][ T9494] __sys_sendmsg+0x16e/0x220 [ 353.896839][ T9494] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.901942][ T9494] do_syscall_64+0xcd/0x250 [ 353.906430][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.912310][ T9494] RIP: 0033:0x7f124d585d29 [ 353.916718][ T9494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.936327][ T9494] RSP: 002b:00007f124e441038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.944719][ T9494] RAX: ffffffffffffffda RBX: 00007f124d775fa0 RCX: 00007f124d585d29 [ 353.952669][ T9494] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 353.960619][ T9494] RBP: 00007f124e441090 R08: 0000000000000000 R09: 0000000000000000 [ 353.968567][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.976520][ T9494] R13: 0000000000000000 R14: 00007f124d775fa0 R15: 00007fffb664dd58 [ 353.984486][ T9494] [ 354.207234][ T9500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.239605][ T9500] xt_l2tp: v2 tid > 0xffff: 262144 [ 355.356490][ T9513] netlink: 'syz.4.1055': attribute type 29 has an invalid length. [ 355.389887][ T9513] netlink: 'syz.4.1055': attribute type 29 has an invalid length. [ 355.422568][ T9513] netlink: 'syz.4.1055': attribute type 29 has an invalid length. [ 355.435313][ T9513] netlink: 'syz.4.1055': attribute type 29 has an invalid length. [ 355.447636][ T9513] netlink: 'syz.4.1055': attribute type 29 has an invalid length. [ 355.460300][ T9513] netlink: 'syz.4.1055': attribute type 29 has an invalid length. [ 355.472973][ T9513] netlink: 'syz.4.1055': attribute type 29 has an invalid length. [ 356.856004][ T29] audit: type=1326 audit(356.812:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 356.940793][ T9517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1058'. [ 356.951986][ T29] audit: type=1326 audit(356.812:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.080174][ T29] audit: type=1326 audit(356.812:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.211414][ T29] audit: type=1326 audit(356.812:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.271843][ T29] audit: type=1326 audit(356.812:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.292073][ T970] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 357.421814][ T29] audit: type=1326 audit(356.812:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.500928][ T29] audit: type=1326 audit(356.812:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.532006][ T970] usb 3-1: device descriptor read/64, error -71 [ 357.552806][ T9539] netlink: 'syz.1.1063': attribute type 10 has an invalid length. [ 357.635061][ T29] audit: type=1326 audit(356.812:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.653427][ T9544] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 357.782088][ T970] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 357.866590][ T29] audit: type=1326 audit(356.812:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.890009][ T29] audit: type=1326 audit(356.822:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9ead585d29 code=0x7ffc0000 [ 357.932369][ T970] usb 3-1: device descriptor read/64, error -71 [ 359.015710][ T970] usb usb3-port1: attempt power cycle [ 359.309880][ T9539] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 359.393748][ T9549] netlink: 'syz.4.1066': attribute type 29 has an invalid length. [ 359.403673][ T9552] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 359.482109][ T970] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 359.633923][ T970] usb 3-1: device descriptor read/8, error -71 [ 359.916764][ T970] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 359.948760][ T970] usb 3-1: device descriptor read/8, error -71 [ 360.063178][ T30] INFO: task udevd:7599 blocked for more than 144 seconds. [ 360.070683][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 360.220498][ T9568] netlink: 'syz.4.1069': attribute type 29 has an invalid length. [ 361.009506][ T970] usb usb3-port1: unable to enumerate USB device [ 361.232919][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.242203][ T30] task:udevd state:D stack:24736 pid:7599 tgid:7599 ppid:5191 flags:0x00004002 [ 361.252578][ T30] Call Trace: [ 361.257049][ T30] [ 361.262129][ T30] __schedule+0xe58/0x5ad0 [ 361.266605][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 361.271825][ T30] ? mark_held_locks+0x71/0xe0 [ 361.276756][ T30] ? __pfx___schedule+0x10/0x10 [ 361.281657][ T30] ? schedule+0x298/0x350 [ 361.286344][ T30] ? __pfx_lock_release+0x10/0x10 [ 361.291713][ T30] ? lock_acquire+0x2f/0xb0 [ 361.301054][ T30] ? schedule+0x1fd/0x350 [ 361.305857][ T30] schedule+0xe7/0x350 [ 361.309963][ T30] schedule_timeout+0x124/0x280 [ 361.318923][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 361.324444][ T30] ? __pfx_process_timeout+0x10/0x10 [ 361.329831][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 361.336570][ T30] ? prepare_to_wait_event+0xce/0x6a0 [ 361.342037][ T30] nbd_queue_rq+0xcbc/0x1220 [ 361.347006][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 361.352141][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 361.358224][ T30] ? __pfx_mark_lock+0x10/0x10 [ 361.363015][ T30] ? hlock_class+0x4e/0x130 [ 361.367536][ T30] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 361.373593][ T30] ? sbitmap_get+0x1e5/0x360 [ 361.378204][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 361.384247][ T30] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 361.390098][ T30] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 361.396838][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 361.403672][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 361.409321][ T30] ? rcu_is_watching+0x12/0xc0 [ 361.415497][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 361.420742][ T30] ? blk_mq_run_hw_queue+0x22b/0x670 [ 361.426163][ T30] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 361.432336][ T30] blk_mq_run_hw_queue+0x239/0x670 [ 361.437481][ T30] ? blk_mq_run_hw_queue+0x22b/0x670 [ 361.442990][ T30] blk_mq_flush_plug_list+0x673/0x1c60 [ 361.448715][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 361.454835][ T30] ? blk_mq_submit_bio+0x13a9/0x24c0 [ 361.460143][ T30] __blk_flush_plug+0x2c5/0x4b0 [ 361.465033][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 361.470423][ T30] __submit_bio+0x439/0x540 [ 361.475052][ T30] ? __pfx___submit_bio+0x10/0x10 [ 361.480091][ T30] ? ktime_get+0x206/0x300 [ 361.484576][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.489820][ T30] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 361.496035][ T30] submit_bio_noacct_nocheck+0x698/0xd70 [ 361.501716][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 361.507914][ T30] ? __pfx___might_resched+0x10/0x10 [ 361.513322][ T30] submit_bio_noacct+0x93a/0x1e20 [ 361.518367][ T30] block_read_full_folio+0x812/0xa50 [ 361.524850][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 361.530247][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 361.536176][ T30] ? __folio_batch_add_and_move+0x612/0xc60 [ 361.542129][ T30] ? __pfx_lru_add+0x10/0x10 [ 361.546733][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 361.552719][ T30] filemap_read_folio+0xc6/0x2a0 [ 361.557673][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 361.563441][ T30] ? __filemap_get_folio+0x2a5/0xaf0 [ 361.568925][ T30] do_read_cache_folio+0x263/0x5c0 [ 361.574193][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 361.579668][ T30] read_part_sector+0xd4/0x310 [ 361.584472][ T30] adfspart_check_ICS+0x94/0x940 [ 361.589426][ T30] ? snprintf+0xc8/0x100 [ 361.593779][ T30] ? __pfx_snprintf+0x10/0x10 [ 361.598621][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 361.604244][ T30] ? bdev_disk_changed+0x48c/0x1520 [ 361.609458][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 361.615163][ T30] bdev_disk_changed+0x71f/0x1520 [ 361.620215][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 361.625727][ T30] ? __pfx_ilookup+0x10/0x10 [ 361.630333][ T30] blkdev_get_whole+0x187/0x290 [ 361.636024][ T30] bdev_open+0x2c7/0xe20 [ 361.640286][ T30] blkdev_open+0x329/0x400 [ 361.644741][ T30] do_dentry_open+0xf59/0x1ea0 [ 361.649519][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 361.654893][ T30] vfs_open+0x82/0x3f0 [ 361.658987][ T30] ? may_open+0x1f2/0x400 [ 361.663477][ T30] path_openat+0x1e6a/0x2d60 [ 361.668100][ T30] ? __pfx_path_openat+0x10/0x10 [ 361.673592][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 361.678818][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 361.684138][ T30] ? find_held_lock+0x2d/0x110 [ 361.688926][ T30] do_filp_open+0x20c/0x470 [ 361.693557][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 361.698602][ T30] ? find_held_lock+0x2d/0x110 [ 361.703740][ T30] ? alloc_fd+0x41f/0x760 [ 361.708111][ T30] do_sys_openat2+0x17a/0x1e0 [ 361.712891][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.718109][ T30] ? __sys_recvmsg+0x197/0x220 [ 361.722926][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 361.728048][ T30] __x64_sys_openat+0x175/0x210 [ 361.733130][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 361.738567][ T30] do_syscall_64+0xcd/0x250 [ 361.744941][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.750885][ T30] RIP: 0033:0x7f378fb169a4 [ 361.755700][ T30] RSP: 002b:00007ffe7f91c4d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.764201][ T30] RAX: ffffffffffffffda RBX: 0000562eeea90890 RCX: 00007f378fb169a4 [ 361.772388][ T30] RDX: 00000000000a0800 RSI: 0000562eeea68650 RDI: 00000000ffffff9c [ 361.780389][ T30] RBP: 0000562eeea68650 R08: 0000000000000001 R09: 00007f37900a0000 [ 361.788434][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 361.798509][ T30] R13: 0000562eeea87800 R14: 0000000000000001 R15: 0000562eeea5b2c0 [ 361.807901][ T30] [ 361.811017][ T30] [ 361.811017][ T30] Showing all locks held in the system: [ 361.821467][ T30] 2 locks held by kworker/u8:0/11: [ 361.826747][ T30] 1 lock held by khungtaskd/30: [ 361.831608][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 361.843854][ T30] 1 lock held by klogd/5180: [ 361.848474][ T30] 2 locks held by getty/5571: [ 361.854379][ T30] #0: ffff88814e5800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 361.864661][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 361.874929][ T30] 3 locks held by udevd/7598: [ 361.879622][ T30] #0: ffff88802627f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 361.889096][ T30] #1: ffff888143358d10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 361.898812][ T30] #2: ffff8880263951f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbe/0x1220 [ 361.908136][ T30] 3 locks held by udevd/7599: [ 361.912918][ T30] #0: ffff8880261bb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 361.922436][ T30] #1: ffff888140538290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 361.932220][ T30] #2: ffff88802625e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbe/0x1220 [ 361.941214][ T30] 3 locks held by udevd/7900: [ 361.946108][ T30] #0: ffff8880261bf4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 361.955588][ T30] #1: ffff888140538810 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 361.969323][ T30] #2: ffff88802635e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbe/0x1220 [ 361.978511][ T30] [ 361.980843][ T30] ============================================= [ 361.980843][ T30] [ 361.989511][ T30] NMI backtrace for cpu 1 [ 361.993845][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 362.004326][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.014386][ T30] Call Trace: [ 362.017647][ T30] [ 362.020558][ T30] dump_stack_lvl+0x116/0x1f0 [ 362.025223][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 362.030157][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 362.036116][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 362.042077][ T30] watchdog+0xf14/0x1240 [ 362.046307][ T30] ? __pfx_watchdog+0x10/0x10 [ 362.050974][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 362.056157][ T30] ? __kthread_parkme+0x148/0x220 [ 362.061171][ T30] ? __pfx_watchdog+0x10/0x10 [ 362.065835][ T30] kthread+0x2c1/0x3a0 [ 362.069884][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.075063][ T30] ? __pfx_kthread+0x10/0x10 [ 362.079634][ T30] ret_from_fork+0x45/0x80 [ 362.084029][ T30] ? __pfx_kthread+0x10/0x10 [ 362.088602][ T30] ret_from_fork_asm+0x1a/0x30 [ 362.093356][ T30] [ 362.096722][ T30] Sending NMI from CPU 1 to CPUs 0: [ 362.102134][ C0] NMI backtrace for cpu 0 [ 362.102145][ C0] CPU: 0 UID: 0 PID: 8882 Comm: kworker/u8:13 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 362.102169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.102182][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 362.102208][ C0] RIP: 0010:__lock_acquire+0xcb4/0x3c40 [ 362.102232][ C0] Code: 14 02 48 c7 c0 b0 7c 5f 90 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b0 28 00 00 8b 1d 55 e6 e8 0e 85 db 75 40 44 8b 5c 24 08 <45> 85 db 0f 85 e0 06 00 00 4c 89 ff e8 6b 4c ff ff 48 ba 00 00 00 [ 362.102250][ C0] RSP: 0018:ffffc90004f0f5d0 EFLAGS: 00000046 [ 362.102265][ C0] RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffffff817698e2 [ 362.102279][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000009e615e41 [ 362.102291][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dca798 [ 362.102303][ C0] R10: ffffffff96e53cc7 R11: 0000000000000004 R12: ffffed100619e5e3 [ 362.102317][ C0] R13: ffff888030cf2440 R14: 0000000000000002 R15: ffff888030cf2fc0 [ 362.102330][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 362.102350][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.102364][ C0] CR2: 00007f76a4147ab8 CR3: 000000002a294000 CR4: 00000000003526f0 [ 362.102377][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.102389][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.102401][ C0] Call Trace: [ 362.102407][ C0] [ 362.102414][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 362.102437][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 362.102456][ C0] ? nmi_handle+0x1ac/0x5d0 [ 362.102478][ C0] ? __lock_acquire+0xcb4/0x3c40 [ 362.102499][ C0] ? default_do_nmi+0x6a/0x160 [ 362.102530][ C0] ? exc_nmi+0x170/0x1e0 [ 362.102548][ C0] ? end_repeat_nmi+0xf/0x53 [ 362.102578][ C0] ? __lock_acquire+0xf32/0x3c40 [ 362.102599][ C0] ? __lock_acquire+0xcb4/0x3c40 [ 362.102620][ C0] ? __lock_acquire+0xcb4/0x3c40 [ 362.102642][ C0] ? __lock_acquire+0xcb4/0x3c40 [ 362.102662][ C0] [ 362.102668][ C0] [ 362.102678][ C0] ? hlock_class+0x4e/0x130 [ 362.102705][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 362.102729][ C0] lock_acquire.part.0+0x11b/0x380 [ 362.102750][ C0] ? debug_object_activate+0x149/0x4a0 [ 362.102774][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 362.102796][ C0] ? rcu_is_watching+0x12/0xc0 [ 362.102822][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 362.102849][ C0] ? lock_acquire+0x2f/0xb0 [ 362.102869][ C0] ? debug_object_deactivate+0x13b/0x370 [ 362.102890][ C0] ? debug_object_activate+0x149/0x4a0 [ 362.102911][ C0] ? lock_acquire+0x2f/0xb0 [ 362.102931][ C0] ? debug_object_activate+0x149/0x4a0 [ 362.102954][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 362.102977][ C0] ? debug_object_activate+0x149/0x4a0 [ 362.102998][ C0] debug_object_activate+0x149/0x4a0 [ 362.103021][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 362.103042][ C0] ? rcu_is_watching+0x12/0xc0 [ 362.103069][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 362.103094][ C0] ? lock_acquire+0x2f/0xb0 [ 362.103113][ C0] ? __mod_timer+0x6c1/0xdc0 [ 362.103137][ C0] __mod_timer+0x81d/0xdc0 [ 362.103159][ C0] ? __pfx___mod_timer+0x10/0x10 [ 362.103182][ C0] ? round_jiffies+0xfb/0x140 [ 362.103200][ C0] ? __pfx_round_jiffies+0x10/0x10 [ 362.103220][ C0] ieee80211_ibss_work+0x481/0x14c0 [ 362.103243][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 362.103264][ C0] ? __pfx_mark_lock+0x10/0x10 [ 362.103284][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 362.103307][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 362.103328][ C0] ? find_held_lock+0x2d/0x110 [ 362.103356][ C0] ? skb_dequeue+0x126/0x180 [ 362.103381][ C0] ? __pfx_lock_release+0x10/0x10 [ 362.103403][ C0] ? mark_held_locks+0x9f/0xe0 [ 362.103423][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 362.103446][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 362.103471][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 362.103496][ C0] ieee80211_iface_work+0xd01/0xf00 [ 362.103527][ C0] cfg80211_wiphy_work+0x3de/0x560 [ 362.103550][ C0] process_one_work+0x9c5/0x1ba0 [ 362.103575][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 362.103597][ C0] ? __pfx_process_one_work+0x10/0x10 [ 362.103617][ C0] ? rcu_is_watching+0x12/0xc0 [ 362.103646][ C0] ? assign_work+0x1a0/0x250 [ 362.103666][ C0] worker_thread+0x6c8/0xf00 [ 362.103691][ C0] ? __pfx_worker_thread+0x10/0x10 [ 362.103712][ C0] kthread+0x2c1/0x3a0 [ 362.103736][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.103757][ C0] ? __pfx_kthread+0x10/0x10 [ 362.103783][ C0] ret_from_fork+0x45/0x80 [ 362.103801][ C0] ? __pfx_kthread+0x10/0x10 [ 362.103826][ C0] ret_from_fork_asm+0x1a/0x30 [ 362.103859][ C0] [ 362.112177][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 362.112191][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 362.112214][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.112226][ T30] Call Trace: [ 362.112232][ T30] [ 362.112240][ T30] dump_stack_lvl+0x3d/0x1f0 [ 362.112270][ T30] panic+0x71d/0x800 [ 362.112289][ T30] ? __pfx_panic+0x10/0x10 [ 362.112315][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 362.112339][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 362.112359][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 362.112380][ T30] ? watchdog+0xd7e/0x1240 [ 362.112402][ T30] ? watchdog+0xd71/0x1240 [ 362.112427][ T30] watchdog+0xd8f/0x1240 [ 362.112453][ T30] ? __pfx_watchdog+0x10/0x10 [ 362.112474][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 362.112501][ T30] ? __kthread_parkme+0x148/0x220 [ 362.112528][ T30] ? __pfx_watchdog+0x10/0x10 [ 362.112550][ T30] kthread+0x2c1/0x3a0 [ 362.112572][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.112594][ T30] ? __pfx_kthread+0x10/0x10 [ 362.112619][ T30] ret_from_fork+0x45/0x80 [ 362.112637][ T30] ? __pfx_kthread+0x10/0x10 [ 362.112661][ T30] ret_from_fork_asm+0x1a/0x30 [ 362.112698][ T30] [ 362.694965][ T30] Kernel Offset: disabled [ 362.699267][ T30] Rebooting in 86400 seconds..