last executing test programs: 8m24.227695279s ago: executing program 3 (id=14): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 8m23.945279654s ago: executing program 3 (id=15): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 8m22.815179363s ago: executing program 3 (id=22): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab26bd70000200060032"], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 8m22.533802112s ago: executing program 3 (id=25): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 8m22.196120428s ago: executing program 3 (id=29): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000005700)='.\x00', &(0x7f0000005740)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000500000000000400070000000000100002000000000020"], 0x24, 0x1) 8m22.078888207s ago: executing program 3 (id=31): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000087d1e242c000000000001090224000100001000090400000903000300092104000c0122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20a109"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8m6.871099027s ago: executing program 32 (id=31): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000087d1e242c000000000001090224000100001000090400000903000300092104000c0122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20a109"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m59.054760558s ago: executing program 4 (id=4235): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m58.748022689s ago: executing program 4 (id=4240): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) 2m58.628123695s ago: executing program 4 (id=4242): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m58.579787573s ago: executing program 4 (id=4245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(r0, &(0x7f0000000540)='./file7\x00', 0x21) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x5) 2m58.532942457s ago: executing program 4 (id=4246): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 2m58.095330982s ago: executing program 4 (id=4252): socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 2m57.909835643s ago: executing program 33 (id=4252): socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 1m51.709832847s ago: executing program 2 (id=5151): socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 1m51.50530909s ago: executing program 2 (id=5154): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x3ff, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1m51.312067196s ago: executing program 2 (id=5155): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1m51.094054888s ago: executing program 2 (id=5157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m50.927571233s ago: executing program 2 (id=5160): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 1m50.49992212s ago: executing program 2 (id=5162): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r1, &(0x7f0000000280)={'c', ' *:* ', 'rm\x00'}, 0x9) 1m50.174235137s ago: executing program 34 (id=5162): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r1, &(0x7f0000000280)={'c', ' *:* ', 'rm\x00'}, 0x9) 1m2.526847503s ago: executing program 5 (id=5660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x205) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 1m2.267557526s ago: executing program 5 (id=5662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 1m2.025137545s ago: executing program 5 (id=5665): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) 1m0.886242172s ago: executing program 5 (id=5678): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 1m0.697091079s ago: executing program 5 (id=5680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200030000001400000060000000030811"], 0xfdef) 56.684084333s ago: executing program 5 (id=5723): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 56.499694103s ago: executing program 35 (id=5723): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3.145184127s ago: executing program 8 (id=6337): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000040a000/0x3000)=nil, 0x3000, 0x9) 2.793425009s ago: executing program 8 (id=6342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x68, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @device_b, @broadcast, @random="2b16d3ff4150"}, 0x0, @random=0x4, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x68}}, 0x0) 2.672530733s ago: executing program 8 (id=6343): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 2.599791467s ago: executing program 0 (id=6344): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 2.591773214s ago: executing program 8 (id=6345): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) tkill(r0, 0x12) 2.476430448s ago: executing program 8 (id=6347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x701, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}}, 0x4000080) 2.457068459s ago: executing program 0 (id=6348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) 2.324529467s ago: executing program 8 (id=6349): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 2.029834127s ago: executing program 0 (id=6355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 1.886255636s ago: executing program 1 (id=6356): socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.772021948s ago: executing program 7 (id=6359): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) read$midi(r0, &(0x7f0000000480)=""/221, 0xdd) 1.105033676s ago: executing program 0 (id=6360): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x102) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) 1.02396816s ago: executing program 0 (id=6362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0xfd9b}, 0x1, 0x0, 0x0, 0x400088d4}, 0x60a30c9b14323f1f) 930.848715ms ago: executing program 1 (id=6363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 824.120803ms ago: executing program 7 (id=6364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 725.017496ms ago: executing program 1 (id=6365): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{0x0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x1a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x40}}) r0 = socket$qrtr(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0xb1) 648.722065ms ago: executing program 7 (id=6366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 602.224944ms ago: executing program 1 (id=6367): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 574.097742ms ago: executing program 6 (id=6368): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 493.796564ms ago: executing program 6 (id=6369): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 430.575486ms ago: executing program 7 (id=6370): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 424.901116ms ago: executing program 6 (id=6371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="370626bd7000fcdbdf252000000008000300", @ANYRES32=r1, @ANYBLOB="24002d80050001000300002008000300020000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) 272.964367ms ago: executing program 7 (id=6372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 242.18998ms ago: executing program 6 (id=6373): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15b30}}, 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 198.215525ms ago: executing program 1 (id=6374): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xfffffffc}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 95.903221ms ago: executing program 6 (id=6375): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$flags(r1, r2, 0x38, 0x1) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r3 = syz_io_uring_complete(r1, r2) close(r3) 90.56958ms ago: executing program 1 (id=6376): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x0) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 66.996495ms ago: executing program 7 (id=6377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad1", 0xab}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 670.407µs ago: executing program 0 (id=6378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 6 (id=6379): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ce number 55 using dummy_hcd [ 470.952281][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 470.966211][ T5721] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.004779][ T5721] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.027377][ T5721] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 471.046563][ T5721] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 471.056261][ T5721] usb 6-1: Product: syz [ 471.060474][ T5721] usb 6-1: Manufacturer: syz [ 471.103634][ T5721] hub 6-1:4.0: USB hub found [ 471.144143][ T48] bridge_slave_1: left allmulticast mode [ 471.150375][ T48] bridge_slave_1: left promiscuous mode [ 471.157665][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.198236][ T48] batman_adv: batadv0: Interface deactivated: gretap1 [ 471.308067][ T5721] hub 6-1:4.0: 2 ports detected [ 471.452674][ T48] batman_adv: batadv0: Removing interface: gretap1 [ 471.486527][ T30] audit: type=1400 audit(991.454:863): avc: denied { write } for pid=17956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.568202][ T30] audit: type=1400 audit(991.544:864): avc: denied { write } for pid=17970 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.600982][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.613665][ T48] bond0 (unregistering): Released all slaves [ 471.628017][ T48] bond1 (unregistering): Released all slaves [ 471.662506][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 471.679704][T17941] lo speed is unknown, defaulting to 1000 [ 471.758378][ T48] tipc: Left network mode [ 472.154940][ T5721] usb 6-1: USB disconnect, device number 55 [ 472.327959][ T48] IPVS: stopping master sync thread 11095 ... [ 472.454072][ T30] audit: type=1400 audit(992.434:865): avc: denied { write } for pid=17977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.564396][T15795] Bluetooth: hci3: command tx timeout [ 472.590787][ T30] audit: type=1400 audit(992.564:866): avc: denied { write } for pid=17997 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.644103][ T48] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 472.715293][T16317] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 472.783730][T18002] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5173'. [ 472.805375][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 473.139906][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.164614][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.195559][T17941] bridge_slave_0: entered allmulticast mode [ 473.222857][T17941] bridge_slave_0: entered promiscuous mode [ 473.246647][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.267073][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.308157][T17941] bridge_slave_1: entered allmulticast mode [ 473.355078][T17941] bridge_slave_1: entered promiscuous mode [ 473.406862][ T48] hsr_slave_0: left promiscuous mode [ 473.424902][ T48] hsr_slave_1: left promiscuous mode [ 473.438680][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.462631][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.494587][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.508153][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.527483][ T48] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 473.534771][ T48] batman_adv: batadv0: Removing interface: ipvlan2 [ 473.643860][ T48] veth1_macvtap: left promiscuous mode [ 473.669379][ T48] veth0_macvtap: left promiscuous mode [ 473.926912][ T30] audit: type=1400 audit(993.904:867): avc: denied { write } for pid=18019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.274772][ T30] audit: type=1400 audit(994.244:868): avc: denied { write } for pid=18041 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.458555][ T48] team0 (unregistering): Port device team_slave_1 removed [ 474.613921][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 474.633450][T16317] Bluetooth: hci3: command tx timeout [ 474.706641][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.722251][T18053] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 474.741603][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.887558][T17941] team0: Port device team_slave_0 added [ 474.898158][T17941] team0: Port device team_slave_1 added [ 475.020218][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.028388][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.057548][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.126856][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.140873][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.183906][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.294431][ T30] audit: type=1400 audit(995.274:869): avc: denied { write } for pid=18064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.302390][T17941] hsr_slave_0: entered promiscuous mode [ 475.328213][T17941] hsr_slave_1: entered promiscuous mode [ 475.423010][ T30] audit: type=1400 audit(995.394:870): avc: denied { write } for pid=18079 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.452042][T13914] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 475.532067][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 475.622473][T13914] usb 2-1: Using ep0 maxpacket: 8 [ 475.633790][T13914] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 475.650555][T13914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 475.676578][T13914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 475.699350][T13914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 475.752621][T13914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 475.778610][T18087] loop8: detected capacity change from 0 to 7 [ 475.783656][T13914] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.815376][T18087] Dev loop8: unable to read RDB block 7 [ 475.819506][T13914] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.829971][T18087] loop8: unable to read partition table [ 475.830141][T18087] loop8: partition table beyond EOD, truncated [ 475.830377][T18087] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 475.838930][T13914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.131770][T13914] usb 2-1: usb_control_msg returned -32 [ 476.158940][T17941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 476.160444][T13914] usbtmc 2-1:16.0: can't read capabilities [ 476.187158][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.209873][T17941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 476.252177][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.267506][T17941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 476.293056][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.301683][T17941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 476.313050][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.405436][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.428449][T17941] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.443373][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.450548][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.474751][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.481921][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.556546][T18109] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 476.711753][T16317] Bluetooth: hci3: command tx timeout [ 476.722790][ T30] audit: type=1326 audit(996.704:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18110 comm="syz.5.5199" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd46659ce59 code=0x0 [ 477.088859][T17941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.380047][T17941] veth0_vlan: entered promiscuous mode [ 477.392606][T17941] veth1_vlan: entered promiscuous mode [ 477.419561][T17941] veth0_macvtap: entered promiscuous mode [ 477.434654][T17941] veth1_macvtap: entered promiscuous mode [ 477.455987][T17941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.474713][T17941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.513337][ T65] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.522909][ T65] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.540518][ T65] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.562064][ T65] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.795926][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.796309][T18155] trusted_key: syz.5.5209 sent an empty control message without MSG_MORE. [ 477.824218][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.872371][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.881970][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.198099][T13917] usb 2-1: USB disconnect, device number 59 [ 478.629284][ T30] audit: type=1400 audit(998.604:872): avc: denied { mount } for pid=18183 comm="syz.1.5221" name="/" dev="autofs" ino=65073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 478.707088][ T30] audit: type=1400 audit(998.684:873): avc: denied { unmount } for pid=12841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 478.795952][T16317] Bluetooth: hci3: command tx timeout [ 479.185914][T18197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.852760][T18212] netlink: 'syz.5.5234': attribute type 11 has an invalid length. [ 479.942340][T13917] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 480.121142][T13917] usb 2-1: Using ep0 maxpacket: 16 [ 480.133377][T13917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.165936][T13917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.193463][T13917] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.204677][T13917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.217235][T13917] usb 2-1: Product: syz [ 480.223703][T13917] usb 2-1: Manufacturer: syz [ 480.228689][T13917] usb 2-1: SerialNumber: syz [ 480.240661][T13917] usb 2-1: config 0 descriptor?? [ 480.252624][T13917] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 480.269905][T13917] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 480.376460][T18231] netlink: 'syz.7.5242': attribute type 39 has an invalid length. [ 480.863449][T13917] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 480.870509][T13917] em28xx 2-1:0.0: Config register raw data: 0x56 [ 481.075231][T13917] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 481.090224][T13917] em28xx 2-1:0.0: No AC97 audio processor [ 481.105731][T13917] usb 2-1: USB disconnect, device number 60 [ 481.115593][T13917] em28xx 2-1:0.0: Disconnecting em28xx [ 481.134854][T13917] em28xx 2-1:0.0: Freeing device [ 481.199545][T18244] pim6reg1: entered promiscuous mode [ 481.205843][T18244] pim6reg1: entered allmulticast mode [ 481.535614][T18251] overlayfs: failed to clone lowerpath [ 481.830965][T18263] ªªªªªª: renamed from vlan0 [ 481.860965][T18264] can0: slcan on ptm0. [ 482.015780][T18264] can0 (unregistered): slcan off ptm0. [ 482.211173][ T5721] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 482.376461][ T5721] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 482.385519][ T30] audit: type=1400 audit(1002.354:874): avc: denied { write } for pid=18272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.453450][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.471262][ T5721] usb 2-1: Product: syz [ 482.477134][ T5721] usb 2-1: Manufacturer: syz [ 482.487353][ T5721] usb 2-1: SerialNumber: syz [ 482.507049][ T5721] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 482.546810][ T30] audit: type=1400 audit(1002.524:875): avc: denied { write } for pid=18290 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.763580][ T5720] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 483.190079][T18314] SELinux: failed to load policy [ 483.230077][ T30] audit: type=1400 audit(1003.204:876): avc: denied { unmount } for pid=15793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 483.310810][ T30] audit: type=1400 audit(1003.284:877): avc: denied { write } for pid=18305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.434649][ T30] audit: type=1400 audit(1003.414:878): avc: denied { write } for pid=18328 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.705184][ T5721] usb 2-1: USB disconnect, device number 61 [ 483.777398][T18337] lo speed is unknown, defaulting to 1000 [ 484.378782][ T30] audit: type=1326 audit(1004.354:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.1.5275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4739ce59 code=0x7ffc0000 [ 484.422642][ T30] audit: type=1326 audit(1004.354:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.1.5275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4739ce59 code=0x7ffc0000 [ 484.449088][ T30] audit: type=1326 audit(1004.364:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.1.5275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4739ce59 code=0x7ffc0000 [ 484.529128][ T30] audit: type=1326 audit(1004.364:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.1.5275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4739ce59 code=0x7ffc0000 [ 484.551220][ T5720] usb 2-1: Service connection timeout for: 258 [ 484.569396][ T30] audit: type=1326 audit(1004.364:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.1.5275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed4739ce59 code=0x7ffc0000 [ 484.578214][ T5720] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 484.625391][ T5720] ath9k_htc: Failed to initialize the device [ 484.634906][ T5721] usb 2-1: ath9k_htc: USB layer deinitialized [ 485.063343][T18368] loop1: detected capacity change from 0 to 16384 [ 485.172601][T18372] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5285'. [ 485.186421][T18372] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5285'. [ 485.874585][T18386] sctp: [Deprecated]: syz.5.5291 (pid 18386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.874585][T18386] Use struct sctp_sack_info instead [ 486.259368][T18399] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.266931][T18399] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.374408][T18401] 9pnet: p9_errstr2errno: server reported unknown error [ 486.426197][T18404] dummy0: entered promiscuous mode [ 486.454573][T18404] macvlan3: entered promiscuous mode [ 486.495280][T18404] dummy0: left promiscuous mode [ 486.939111][T18434] binder: 18432:18434 ioctl c0306201 200000000080 returned -14 [ 486.975362][T18435] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5312'. [ 487.061609][T18440] xt_hashlimit: size too large, truncated to 1048576 [ 487.570956][T18463] netlink: 'syz.7.5320': attribute type 12 has an invalid length. [ 487.589608][T18463] netlink: 'syz.7.5320': attribute type 29 has an invalid length. [ 487.608294][T18463] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5320'. [ 487.629426][T18463] netlink: 'syz.7.5320': attribute type 3 has an invalid length. [ 487.678971][T18463] netlink: 'syz.7.5320': attribute type 2 has an invalid length. [ 487.702316][T18467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5321'. [ 487.718057][T18463] netlink: 35 bytes leftover after parsing attributes in process `syz.7.5320'. [ 487.773182][T18467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5321'. [ 487.791520][T18467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5321'. [ 487.917423][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 487.917441][ T30] audit: type=1400 audit(1007.894:904): avc: denied { write } for pid=18453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.966541][T18477] netlink: 'syz.7.5324': attribute type 4 has an invalid length. [ 488.191440][ T30] audit: type=1400 audit(1008.164:905): avc: denied { write } for pid=18483 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.309366][T18495] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5327'. [ 488.718398][ T30] audit: type=1400 audit(1008.694:906): avc: denied { write } for pid=18498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.754859][T18513] lo speed is unknown, defaulting to 1000 [ 488.902776][ T30] audit: type=1400 audit(1008.884:907): avc: denied { write } for pid=18519 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.177163][ T30] audit: type=1400 audit(1009.034:908): avc: denied { mount } for pid=18521 comm="syz.1.5334" name="/" dev="hugetlbfs" ino=65715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 489.803692][T18516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.829046][ T30] audit: type=1400 audit(1009.804:909): avc: denied { write } for pid=18527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.882889][T18516] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.933816][T18516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.017802][ T30] audit: type=1400 audit(1009.994:910): avc: denied { write } for pid=18557 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.209343][T18516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.255317][T18516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.288703][T18516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.309405][T18516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.349419][T18516] veth0_vlan: left promiscuous mode [ 490.360729][T18516] veth0_vlan: entered promiscuous mode [ 490.424940][T18516] veth1_macvtap: left promiscuous mode [ 490.444281][T18516] veth0_macvtap: left promiscuous mode [ 490.459551][T18516] veth0_macvtap: entered promiscuous mode [ 490.501309][T18516] veth1_macvtap: entered promiscuous mode [ 490.544741][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.556641][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.569988][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.579041][T18516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.598313][T18516] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 490.633211][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.640344][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.722238][ T3313] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.742756][ T3313] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.775677][ T3313] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.803800][ T3313] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.842980][ T3313] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.862729][ T3313] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.924135][ T3313] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.957440][ T3313] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.193950][T18585] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5350'. [ 491.235300][ T30] audit: type=1326 audit(1011.214:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.0.5349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329f99ce59 code=0x7fc00000 [ 491.559207][ T30] audit: type=1400 audit(1011.534:912): avc: denied { write } for pid=18575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.697891][ T30] audit: type=1400 audit(1011.674:913): avc: denied { write } for pid=18600 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.191183][ T5721] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 492.363045][ T5721] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 492.376306][ T5721] usb 6-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 492.387748][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.399573][ T5721] usb 6-1: config 0 descriptor?? [ 492.830623][ T5721] hid_parser_main: 6 callbacks suppressed [ 492.830645][ T5721] lenovo 0003:04B3:3108.0047: unknown main item tag 0x0 [ 492.847434][ T5721] lenovo 0003:04B3:3108.0047: unknown main item tag 0x0 [ 492.855184][ T5721] lenovo 0003:04B3:3108.0047: unknown main item tag 0x0 [ 492.862884][ T5721] lenovo 0003:04B3:3108.0047: unknown main item tag 0x0 [ 492.869970][ T5721] lenovo 0003:04B3:3108.0047: unknown main item tag 0x0 [ 492.878052][ T5721] lenovo 0003:04B3:3108.0047: unknown main item tag 0x0 [ 492.892886][ T5721] lenovo 0003:04B3:3108.0047: unexpected long global item [ 492.908666][ T5721] lenovo 0003:04B3:3108.0047: hid_parse failed [ 492.936654][ T5721] lenovo 0003:04B3:3108.0047: probe with driver lenovo failed with error -22 [ 493.005444][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 493.005462][ T30] audit: type=1400 audit(1012.984:926): avc: denied { watch } for pid=18620 comm="syz.6.5360" path="/179/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 493.041652][ T30] audit: type=1400 audit(1012.984:927): avc: denied { watch_sb watch_reads } for pid=18620 comm="syz.6.5360" path="/179/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 493.075684][T13915] usb 6-1: USB disconnect, device number 56 [ 493.248568][T18630] lo speed is unknown, defaulting to 1000 [ 493.762956][T18641] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5368'. [ 493.777483][T18642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=18642 comm=syz.5.5367 [ 494.072945][T13917] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 494.242791][T13917] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 494.251204][T13917] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 494.260090][T13917] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 494.270493][T13917] usb 2-1: config 220 has no interface number 2 [ 494.276847][T13917] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 494.290296][T13917] usb 2-1: config 220 interface 0 has no altsetting 0 [ 494.298781][T13917] usb 2-1: config 220 interface 76 has no altsetting 0 [ 494.305750][T13917] usb 2-1: config 220 interface 1 has no altsetting 0 [ 494.314479][T13917] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 494.323595][T13917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.331618][T13917] usb 2-1: Product: syz [ 494.335761][T13917] usb 2-1: Manufacturer: syz [ 494.340332][T13917] usb 2-1: SerialNumber: syz [ 494.569774][T13917] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 494.589838][T13917] uvcvideo 2-1:220.0: No valid video chain found. [ 494.610055][T13917] usb 2-1: selecting invalid altsetting 0 [ 494.652896][T13917] usb 2-1: selecting invalid altsetting 0 [ 494.663137][T13917] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 494.677392][T13917] usb 2-1: USB disconnect, device number 62 [ 494.947193][T18663] Bluetooth: hci0: load_link_keys: too big key_count value 3840 [ 495.302740][T18676] SELinux: failed to load policy [ 495.619814][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5390'. [ 496.190955][T18717] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5611] was attempted by "#! ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 496.403201][ T5720] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 496.555223][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5407'. [ 496.665507][ T5720] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 496.674914][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.685124][ T5720] usb 6-1: Product: syz [ 496.689334][ T5720] usb 6-1: Manufacturer: syz [ 496.694324][ T5720] usb 6-1: SerialNumber: syz [ 497.346592][ T5720] rtl8150 6-1:1.0: eth9: rtl8150 is detected [ 497.609637][T13915] usb 6-1: USB disconnect, device number 57 [ 498.036310][ T30] audit: type=1400 audit(1018.014:928): avc: denied { write } for pid=18759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.167915][ T30] audit: type=1400 audit(1018.144:929): avc: denied { write } for pid=18780 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.466085][ T30] audit: type=1400 audit(1018.444:930): avc: denied { mounton } for pid=18788 comm="syz.7.5426" path=2F34312FE91F7189591E9233614B dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 498.709572][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5429'. [ 498.748571][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5429'. [ 498.777989][T18804] lo speed is unknown, defaulting to 1000 [ 498.805174][T18801] geneve2: entered promiscuous mode [ 498.828294][ T30] audit: type=1400 audit(1018.804:931): avc: denied { write } for pid=18784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.861191][T18801] geneve2: entered allmulticast mode [ 498.914185][T18812] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5431'. [ 499.070801][ T30] audit: type=1400 audit(1019.044:932): avc: denied { write } for pid=18813 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.120115][T18815] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5432'. [ 499.468737][ T30] audit: type=1400 audit(1019.444:933): avc: denied { lock } for pid=18822 comm="syz.0.5445" path="socket:[66292]" dev="sockfs" ino=66292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 500.808544][T18868] gfs2: path_lookup on syz8 returned error -2 [ 501.196720][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.390499][T18893] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5462'. [ 501.633430][ T30] audit: type=1400 audit(1021.614:934): avc: denied { read } for pid=18905 comm="syz.0.5466" path="socket:[67377]" dev="sockfs" ino=67377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 501.724622][T13917] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 501.881394][T13917] usb 6-1: Using ep0 maxpacket: 8 [ 501.894620][T13917] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 501.903579][T13917] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.918922][T13917] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.929231][T13917] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.939713][T13917] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.953676][T13917] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 501.963168][T13917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.187002][T13917] usb 6-1: usb_control_msg returned -32 [ 502.192922][T13917] usbtmc 6-1:16.0: can't read capabilities [ 503.258140][T18960] loop2: detected capacity change from 0 to 7 [ 503.274521][T18960] Dev loop2: unable to read RDB block 7 [ 503.280289][T18960] loop2: AHDI p1 p2 p3 [ 503.284817][T18960] loop2: partition table partially beyond EOD, truncated [ 503.292732][T18960] loop2: p1 start 1818582900 is beyond EOD, truncated [ 503.299885][T18960] loop2: p3 start 335544320 is beyond EOD, truncated [ 503.883666][T18985] loop8: detected capacity change from 0 to 128 [ 503.895759][T18985] loop8: AHDI p4 [ 504.227918][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5505'. [ 504.489467][T13917] usb 6-1: USB disconnect, device number 58 [ 504.491209][ T5713] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 504.604568][ T30] audit: type=1326 audit(1024.584:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19000 comm="syz.0.5518" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f329f99ce59 code=0x0 [ 504.682980][ T5713] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.696063][ T5713] usb 2-1: config 1 interface 0 has no altsetting 0 [ 504.706210][ T5713] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.40 [ 504.716741][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.725066][ T5713] usb 2-1: Product: syz [ 504.729803][ T5713] usb 2-1: Manufacturer: syz [ 504.734916][ T5713] usb 2-1: SerialNumber: syz [ 504.976410][ T30] audit: type=1326 audit(1024.954:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19013 comm="syz.5.5512" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46659ce59 code=0x7ffc0000 [ 505.004177][ T30] audit: type=1326 audit(1024.954:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19013 comm="syz.5.5512" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46659ce59 code=0x7ffc0000 [ 505.043745][ T30] audit: type=1326 audit(1024.954:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19013 comm="syz.5.5512" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd46659ce59 code=0x7ffc0000 [ 505.070764][ T30] audit: type=1326 audit(1024.954:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19013 comm="syz.5.5512" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46659ce59 code=0x7ffc0000 [ 505.098279][ T30] audit: type=1326 audit(1024.954:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19013 comm="syz.5.5512" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd46659ce59 code=0x7ffc0000 [ 505.124704][ T30] audit: type=1326 audit(1024.954:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19013 comm="syz.5.5512" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46659ce59 code=0x7ffc0000 [ 505.386021][T19024] ªªªªªª: renamed from vlan0 (while UP) [ 505.567027][ T5713] usbhid 2-1:1.0: can't add hid device: -71 [ 505.573928][ T5713] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 505.585161][ T5713] usb 2-1: USB disconnect, device number 63 [ 505.901192][T13915] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 506.054466][T13915] usb 6-1: config 0 has no interfaces? [ 506.063050][T13915] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.073041][T13915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.083041][T13915] usb 6-1: Product: syz [ 506.089836][T13915] usb 6-1: Manufacturer: syz [ 506.094516][T13915] usb 6-1: SerialNumber: syz [ 506.103014][T13915] usb 6-1: config 0 descriptor?? [ 506.335904][ T5713] usb 6-1: USB disconnect, device number 59 [ 506.451184][ T5720] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 506.603739][ T5720] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.612494][ T5720] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 506.622942][ T5720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.632411][ T5720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 506.643535][ T5720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 506.656083][ T5720] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.665214][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.673245][ T5720] usb 2-1: Product: syz [ 506.677633][ T5720] usb 2-1: Manufacturer: syz [ 506.687002][ T5720] cdc_wdm 2-1:1.0: skipping garbage [ 506.692305][ T5720] cdc_wdm 2-1:1.0: skipping garbage [ 506.698751][ T5720] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 506.704818][ T5720] cdc_wdm 2-1:1.0: Unknown control protocol [ 507.375443][T13915] usb 2-1: USB disconnect, device number 64 [ 507.460180][T19044] syzkaller1: entered promiscuous mode [ 507.471898][T19044] syzkaller1: entered allmulticast mode [ 507.951952][T19059] loop8: detected capacity change from 0 to 7 [ 508.008368][T19059] Dev loop8: unable to read RDB block 7 [ 508.036404][T19059] loop8: unable to read partition table [ 508.042703][T19059] loop8: partition table beyond EOD, truncated [ 508.048912][T19059] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 508.249391][T19072] loop8: detected capacity change from 0 to 7 [ 508.258712][T19072] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 508.266206][T19072] loop8: partition table partially beyond EOD, truncated [ 508.275038][T19072] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 508.283993][T19072] loop8: p2 start 516240762 is beyond EOD, truncated [ 508.380414][ T9644] udevd[9644]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 508.792959][T19093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.069842][T19103] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 509.448707][ T30] audit: type=1326 audit(1029.424:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.5.5556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd46659ce59 code=0x0 [ 510.116188][T19148] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5571'. [ 510.665950][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5582'. [ 510.931268][T13915] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 511.101287][T13915] usb 6-1: Using ep0 maxpacket: 32 [ 511.124086][T13915] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 511.142884][T13915] usb 6-1: config 0 has no interface number 0 [ 511.156764][T13915] usb 6-1: config 0 interface 184 has no altsetting 0 [ 511.197527][T13915] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 511.224669][T13915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.236163][T13915] usb 6-1: Product: syz [ 511.241340][T13915] usb 6-1: Manufacturer: syz [ 511.252859][ T30] audit: type=1400 audit(1031.234:943): avc: denied { ioctl } for pid=19195 comm="syz.1.5594" path="pid:[4026532783]" dev="nsfs" ino=4026532783 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.277354][T13915] usb 6-1: SerialNumber: syz [ 511.307744][T13915] usb 6-1: config 0 descriptor?? [ 511.791198][ T5720] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 511.948467][T13915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 511.960012][T13915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 511.970675][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.984518][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.996359][ T5720] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 512.011942][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.023819][ T5720] usb 2-1: config 0 descriptor?? [ 512.127084][T19228] tun0: tun_chr_ioctl cmd 1074025675 [ 512.132484][T19228] tun0: persist enabled [ 512.137179][T19228] tun0: tun_chr_ioctl cmd 1074025675 [ 512.142996][T19228] tun0: persist enabled [ 512.171418][T13915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 512.194844][T13915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 512.205416][T13915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 512.218948][T13915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 512.229607][T13915] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 512.244613][T13915] usb 6-1: USB disconnect, device number 60 [ 512.260290][ T5720] usbhid 2-1:0.0: can't add hid device: -71 [ 512.283825][ T5720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 512.312669][ T5720] usb 2-1: USB disconnect, device number 65 [ 512.831336][ T5720] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 513.002661][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.013899][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.024153][ T5720] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 513.033910][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.044394][ T5720] usb 2-1: config 0 descriptor?? [ 513.464621][T19246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'. [ 513.474059][ T5720] steelseries 0003:1038:12B6.0048: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 513.488330][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5616'. [ 513.599629][T19250] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5617'. [ 513.657382][ T5720] steelseries 0003:1038:12B6.0048: hid_hw_raw_request() failed with -71 [ 513.680561][ T5720] usb 2-1: USB disconnect, device number 66 [ 514.500896][T19258] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 515.165883][ T30] audit: type=1400 audit(1035.144:944): avc: denied { map } for pid=19278 comm="syz.1.5629" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 515.409762][T19289] Invalid argument reading file caps for ./file0 [ 515.557539][T19295] input: syz0 as /devices/virtual/input/input70 [ 516.277309][ T30] audit: type=1400 audit(1036.244:945): avc: denied { write } for pid=19298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.496683][ T30] audit: type=1400 audit(1036.474:946): avc: denied { write } for pid=19327 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.546196][T19324] lo speed is unknown, defaulting to 1000 [ 516.791999][T19339] netlink: 'syz.1.5649': attribute type 29 has an invalid length. [ 516.833661][T19339] netlink: 'syz.1.5649': attribute type 29 has an invalid length. [ 516.860034][T19339] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5649'. [ 516.879533][T19339] unsupported nla_type 58 [ 517.065717][ T30] audit: type=1400 audit(1037.044:947): avc: denied { create } for pid=19347 comm="syz.5.5652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 517.090938][T19346] xt_hashlimit: size too large, truncated to 1048576 [ 517.124392][ T30] audit: type=1400 audit(1037.084:948): avc: denied { getopt } for pid=19347 comm="syz.5.5652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 517.299485][ T30] audit: type=1400 audit(1037.274:949): avc: denied { write } for pid=19332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.555953][ T30] audit: type=1400 audit(1037.534:950): avc: denied { write } for pid=19363 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.653968][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5658'. [ 518.219996][ T30] audit: type=1400 audit(1038.194:951): avc: denied { write } for pid=19371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.403331][T16317] Bluetooth: hci0: command 0x0c1a tx timeout [ 518.414420][ T5720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 518.443565][ T5720] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 518.481032][ T30] audit: type=1400 audit(1038.454:952): avc: denied { write } for pid=19399 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.536209][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5668'. [ 518.587769][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5668'. [ 519.295002][ T30] audit: type=1400 audit(1039.274:953): avc: denied { write } for pid=19406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.436231][ T30] audit: type=1400 audit(1039.414:954): avc: denied { write } for pid=19438 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.284453][T19467] SELinux: ebitmap start bit (992) is not a multiple of the map unit size (64) [ 520.303553][T19467] SELinux: failed to load policy [ 520.459583][T19477] netlink: 'syz.1.5686': attribute type 13 has an invalid length. [ 520.484302][T19477] netlink: 'syz.1.5686': attribute type 17 has an invalid length. [ 520.594790][T19477] sit0: left promiscuous mode [ 520.641711][T16317] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.648193][ T5720] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 520.655111][ T5720] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 521.119557][T19477] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 521.155064][ T5713] lo speed is unknown, defaulting to 1000 [ 521.492447][T19507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.507130][T19507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.589373][ T1111] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.614577][ T1111] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.635199][ T1111] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.652177][ T1111] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.798342][T19520] overlayfs: failed to resolve './file2': -2 [ 522.180959][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 522.180976][ T30] audit: type=1400 audit(1042.154:959): avc: denied { view } for pid=19527 comm="syz.7.5706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 522.234151][ T30] audit: type=1400 audit(1042.214:960): avc: denied { bpf } for pid=19529 comm="syz.7.5707" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.257278][ T30] audit: type=1400 audit(1042.234:961): avc: denied { perfmon } for pid=19529 comm="syz.7.5707" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.315927][ T30] audit: type=1400 audit(1042.294:962): avc: denied { read } for pid=19531 comm="syz.7.5708" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 522.340893][ T30] audit: type=1400 audit(1042.294:963): avc: denied { open } for pid=19531 comm="syz.7.5708" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 522.365492][ T30] audit: type=1400 audit(1042.324:964): avc: denied { ioctl } for pid=19531 comm="syz.7.5708" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 523.091318][ T1234] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 523.216525][T19555] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 523.261388][ T1234] usb 2-1: Using ep0 maxpacket: 8 [ 523.272941][ T1234] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 523.282691][T16317] Bluetooth: hci3: command 0x0c1a tx timeout [ 523.293058][ T5720] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 523.304633][ T1234] usb 2-1: config 0 has no interface number 0 [ 523.310767][ T5720] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 523.319579][ T1234] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.341877][ T1234] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 523.363469][ T1234] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 523.381499][ T1234] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.394964][ T1234] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 523.442743][ T1234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.499253][ T1234] usb 2-1: config 0 descriptor?? [ 523.517901][ T1234] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 523.620255][ T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.636090][ T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.647282][ T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56236 - 0 [ 523.821129][ T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.832437][ T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.872232][ T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56236 - 0 [ 523.923681][T15795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.946356][T15795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.955411][T15795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.973916][T15795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.985930][T15795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.039558][T16317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.047226][T16317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.055343][T16317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.081935][T16317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.092687][T16317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.121428][ T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.132039][ T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.143180][ T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56236 - 0 [ 524.236738][ T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.247240][ T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.257753][ T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56236 - 0 [ 524.533943][T19580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5727'. [ 524.544416][T19580] netlink: 'syz.0.5727': attribute type 7 has an invalid length. [ 524.553446][T19580] netlink: 'syz.0.5727': attribute type 8 has an invalid length. [ 524.559836][T19567] lo speed is unknown, defaulting to 1000 [ 524.563700][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5727'. [ 524.625482][T19580] erspan0: entered promiscuous mode [ 524.651234][T19580] gretap0: entered promiscuous mode [ 524.662848][T19580] erspan0: left promiscuous mode [ 524.682240][T19580] gretap0: left promiscuous mode [ 524.780495][ T65] bridge_slave_1: left allmulticast mode [ 524.798668][ T65] bridge_slave_1: left promiscuous mode [ 524.831350][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.166146][ T30] audit: type=1400 audit(1045.144:965): avc: denied { write } for pid=19582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.325973][ T30] audit: type=1400 audit(1045.304:966): avc: denied { write } for pid=19601 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.515108][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.526151][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.540200][ T65] bond0 (unregistering): Released all slaves [ 525.557507][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 525.848088][ T5720] usb 2-1: USB disconnect, device number 67 [ 525.870437][ T5720] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 526.091240][ T65] IPVS: stopping master sync thread 7423 ... [ 526.151972][T15795] Bluetooth: hci4: command tx timeout [ 526.220291][ T30] audit: type=1400 audit(1046.174:967): avc: denied { write } for pid=19610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.385726][ T30] audit: type=1400 audit(1046.344:968): avc: denied { write } for pid=19631 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.505638][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 526.520949][T19567] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.532030][T19567] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.539374][T19567] bridge_slave_0: entered allmulticast mode [ 526.562741][T19567] bridge_slave_0: entered promiscuous mode [ 526.612555][T19567] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.620218][T19567] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.644055][T19567] bridge_slave_1: entered allmulticast mode [ 526.660844][T19567] bridge_slave_1: entered promiscuous mode [ 526.836688][T19567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.882839][T19567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.120455][ T65] hsr_slave_0: left promiscuous mode [ 527.148613][ T65] hsr_slave_1: left promiscuous mode [ 527.164125][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.174030][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.192999][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.200512][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.250030][ T65] veth1_vlan: left allmulticast mode [ 527.261432][ T65] veth1_macvtap: left promiscuous mode [ 527.271249][ T65] veth0_macvtap: left promiscuous mode [ 527.285783][ T65] veth1_vlan: left promiscuous mode [ 527.293602][ T65] veth0_vlan: left promiscuous mode [ 527.319891][ T30] audit: type=1400 audit(1047.294:969): avc: denied { write } for pid=19642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.479402][ T30] audit: type=1400 audit(1047.454:970): avc: denied { write } for pid=19671 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.637350][ T30] audit: type=1400 audit(1047.614:971): avc: denied { create } for pid=19674 comm="syz.1.5747" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 527.705041][T19677] SELinux: failed to load policy [ 527.943871][ T65] team0 (unregistering): Port device team_slave_1 removed [ 527.962992][ T65] team0 (unregistering): Port device team_slave_0 removed [ 528.190189][T19567] team0: Port device team_slave_0 added [ 528.199073][T19567] team0: Port device team_slave_1 added [ 528.206525][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 528.238756][T15795] Bluetooth: hci4: command tx timeout [ 528.316031][T19690] lo speed is unknown, defaulting to 1000 [ 528.330022][T19567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.352588][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.400694][T19567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.419833][T19567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.431226][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.473003][T19567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.674986][T19567] hsr_slave_0: entered promiscuous mode [ 528.692688][T19567] hsr_slave_1: entered promiscuous mode [ 528.717521][T19567] debugfs: 'hsr0' already exists in 'hsr' [ 528.740973][T19567] Cannot create hsr debugfs directory [ 529.279549][ T30] audit: type=1400 audit(1049.254:972): avc: denied { write } for pid=19696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.458381][ T30] audit: type=1400 audit(1049.434:973): avc: denied { write } for pid=19724 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.597358][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 530.054723][T19567] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 530.093383][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.108078][T19567] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 530.146037][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.163879][T19567] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 530.179012][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.194107][T19567] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 530.234676][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.311613][T15795] Bluetooth: hci4: command tx timeout [ 530.525709][T19755] lo speed is unknown, defaulting to 1000 [ 530.539148][T19567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.605753][T19567] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.630657][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.637862][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.676782][ T30] audit: type=1400 audit(1050.654:974): avc: denied { write } for pid=19759 comm="syz.1.5772" lport=38601 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 530.724326][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.731544][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.768154][T19789] netlink: 'syz.7.5781': attribute type 29 has an invalid length. [ 531.817610][T19791] netlink: 'syz.7.5781': attribute type 29 has an invalid length. [ 531.859849][T19789] netlink: 500 bytes leftover after parsing attributes in process `syz.7.5781'. [ 531.883913][T19567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.392697][T15795] Bluetooth: hci4: command tx timeout [ 532.468190][T19813] xt_hashlimit: size too large, truncated to 1048576 [ 532.610352][T19817] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.695810][T19817] bridge_slave_0 (unregistering): left allmulticast mode [ 532.711157][T19817] bridge_slave_0 (unregistering): left promiscuous mode [ 532.734050][T19817] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.928151][T19810] lo speed is unknown, defaulting to 1000 [ 532.988347][T19567] veth0_vlan: entered promiscuous mode [ 533.028268][T19567] veth1_vlan: entered promiscuous mode [ 533.131169][T19567] veth0_macvtap: entered promiscuous mode [ 533.163834][T19567] veth1_macvtap: entered promiscuous mode [ 533.200226][T19567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.226828][T19567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.257674][ T3313] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.283029][ T3313] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.307249][ T3313] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.346128][ T3313] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.406335][T19832] netlink: 'syz.6.5792': attribute type 11 has an invalid length. [ 533.442766][T19832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5792'. [ 533.633131][ T3313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.667766][ T3313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.746854][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.766792][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.045763][T19843] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 534.062400][ T30] audit: type=1400 audit(1054.014:975): avc: denied { mac_admin } for pid=19842 comm="syz.6.5796" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 534.289649][ T30] audit: type=1400 audit(1054.024:976): avc: denied { create } for pid=19842 comm="syz.6.5796" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 534.290064][ T30] audit: type=1400 audit(1054.024:977): avc: denied { associate } for pid=19842 comm="syz.6.5796" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 534.523820][ T30] audit: type=1400 audit(1054.034:978): avc: denied { mounton } for pid=19842 comm="syz.6.5796" path="/251/bus" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 534.702237][ T30] audit: type=1400 audit(1054.034:979): avc: denied { write } for pid=19842 comm="syz.6.5796" name="bus" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 534.814570][ T30] audit: type=1400 audit(1054.034:980): avc: denied { add_name } for pid=19842 comm="syz.6.5796" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 534.916452][ T30] audit: type=1400 audit(1054.164:981): avc: denied { setattr } for pid=19842 comm="syz.6.5796" name="work" dev="tmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 535.117865][ T30] audit: type=1400 audit(1054.164:982): avc: denied { write } for pid=19842 comm="syz.6.5796" name="work" dev="tmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 535.137519][T19859] netlink: 'syz.8.5802': attribute type 13 has an invalid length. [ 535.268997][ T30] audit: type=1400 audit(1054.164:983): avc: denied { write open } for pid=19842 comm="syz.6.5796" path=2F202864656C6574656429 dev="tmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 535.321663][T19859] netlink: 'syz.8.5802': attribute type 17 has an invalid length. [ 535.418061][ T30] audit: type=1400 audit(1054.164:984): avc: denied { write } for pid=19842 comm="syz.6.5796" name="work" dev="tmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 535.490376][T19863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.125060][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5807'. [ 537.322601][T13915] kernel write not supported for file /input/event2 (pid: 13915 comm: kworker/0:11) [ 537.472972][T13916] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 537.631952][T13916] usb 2-1: Using ep0 maxpacket: 32 [ 537.646380][T13916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 537.668001][T13916] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 537.682522][T13916] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 537.698353][T13916] usb 2-1: Product: syz [ 537.711259][T13916] usb 2-1: Manufacturer: syz [ 537.720963][T13916] usb 2-1: SerialNumber: syz [ 537.738005][T13916] usb 2-1: config 0 descriptor?? [ 537.752332][T19923] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 537.773199][T13916] hub 2-1:0.0: bad descriptor, ignoring hub [ 537.790657][T13916] hub 2-1:0.0: probe with driver hub failed with error -5 [ 538.141415][ T1234] usb 2-1: USB disconnect, device number 68 [ 538.711719][ T1234] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 538.881637][ T1234] usb 9-1: Using ep0 maxpacket: 16 [ 538.894381][ T1234] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 538.904215][ T1234] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.912661][ T1234] usb 9-1: Product: syz [ 538.916890][ T1234] usb 9-1: Manufacturer: syz [ 538.923819][ T1234] usb 9-1: SerialNumber: syz [ 538.931895][ T1234] usb 9-1: config 0 descriptor?? [ 539.348003][ T1234] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 539.364288][ T1234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.378661][ T1234] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 539.386932][ T1234] usb 9-1: media controller created [ 539.406506][ T1234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.890619][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 539.890638][ T30] audit: type=1400 audit(1059.864:999): avc: denied { write } for pid=19977 comm="syz.1.5851" name="bus" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 539.903435][ T30] audit: type=1400 audit(1059.884:1000): avc: denied { write } for pid=19977 comm="syz.1.5851" name="work" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 539.962695][T19959] dtv5100: wlen = f, aborting. [ 540.095128][ T1234] zl10353_read_register: readreg error (reg=127, ret==0) [ 540.113227][ T1234] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 540.155336][ T1234] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 540.159866][ T30] audit: type=1400 audit(1059.974:1001): avc: denied { write } for pid=19977 comm="syz.1.5851" name="work" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 540.170995][ T30] audit: type=1400 audit(1059.974:1002): avc: denied { write } for pid=19977 comm="syz.1.5851" name="work" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 540.273569][ T30] audit: type=1400 audit(1059.974:1003): avc: denied { write } for pid=19977 comm="syz.1.5851" name="work" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 540.368488][ T30] audit: type=1400 audit(1059.974:1004): avc: denied { write } for pid=19977 comm="syz.1.5851" name="work" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 540.576185][ T1234] usb 9-1: USB disconnect, device number 2 [ 540.751764][ T30] audit: type=1400 audit(1059.984:1005): avc: denied { write } for pid=19977 comm="syz.1.5851" name="work" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 540.752174][ T30] audit: type=1400 audit(1059.984:1006): avc: denied { write } for pid=19977 comm="syz.1.5851" name="bus" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 540.873204][ T30] audit: type=1400 audit(1060.114:1007): avc: denied { write } for pid=12841 comm="syz-executor" name="bus" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 540.982158][ T30] audit: type=1400 audit(1060.114:1008): avc: denied { write } for pid=12841 comm="syz-executor" name="bus" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 541.079129][ T1234] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 541.320889][T20009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5864'. [ 542.531033][T20071] netlink: 'syz.1.5880': attribute type 1 has an invalid length. [ 542.541689][T20071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5880'. [ 542.543471][T20068] netem: change failed [ 542.869744][T20086] syzkaller1: entered promiscuous mode [ 542.880687][T20086] syzkaller1: entered allmulticast mode [ 542.900352][T20083] block nbd7: Device being setup by another task [ 542.941389][ T1234] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 543.101949][ T1234] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 543.116806][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.133713][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.156193][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.164831][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.175521][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.187096][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.197426][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.206869][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.218246][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.239275][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.248711][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.267220][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.276050][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.287388][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.298747][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.307789][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.317430][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.328929][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.337994][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.347546][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.359390][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.367594][ T1234] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.377130][ T1234] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 543.399637][ T1234] usb 9-1: config 0 interface 0 has no altsetting 0 [ 543.416666][ T1234] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 543.426955][ T1234] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 543.442669][ T1234] usb 9-1: Product: syz [ 543.447025][ T1234] usb 9-1: Manufacturer: syz [ 543.454551][ T1234] usb 9-1: SerialNumber: syz [ 543.464263][ T1234] usb 9-1: config 0 descriptor?? [ 543.482991][ T1234] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 543.558504][T15795] block nbd7: Receive control failed (result -32) [ 543.583059][T20080] block nbd7: shutting down sockets [ 543.780160][T13917] usb 9-1: USB disconnect, device number 3 [ 543.796319][T13917] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 544.118636][T20137] PID 20137 killed due to inadequate hugepage pool [ 544.152558][T20141] xt_hashlimit: size too large, truncated to 1048576 [ 544.216219][T20143] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.251692][T20143] bridge_slave_0 (unregistering): left allmulticast mode [ 544.272584][T20143] bridge_slave_0 (unregistering): left promiscuous mode [ 544.280847][T20143] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.843052][T20166] comedi comedi1: aio_iiro_16: I/O port conflict (0x100,8) [ 544.911413][T13915] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 544.961218][T13917] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 545.027140][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 545.027157][ T30] audit: type=1400 audit(1065.004:1030): avc: denied { module_load } for pid=20173 comm="syz.0.5914" path="/1072/bus" dev="tmpfs" ino=5465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 545.084091][T13915] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 545.096314][T13915] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 545.106427][T13915] usb 2-1: config 1 interface 0 has no altsetting 0 [ 545.115420][T13915] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 545.124784][T13915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.140782][T13915] usb 2-1: Product: syz [ 545.145744][T13915] usb 2-1: Manufacturer: syz [ 545.151407][T13917] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.161595][T13917] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.174821][T13915] usb 2-1: SerialNumber: syz [ 545.183526][T20158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 545.201026][T13917] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.210405][T20158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 545.221401][T13917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.238403][ T30] audit: type=1400 audit(1065.214:1031): avc: denied { map_create } for pid=20177 comm="syz.6.5916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.262760][ T30] audit: type=1400 audit(1065.244:1032): avc: denied { map_read map_write } for pid=20177 comm="syz.6.5916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.285625][ T30] audit: type=1400 audit(1065.264:1033): avc: denied { prog_load } for pid=20177 comm="syz.6.5916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.307806][ T30] audit: type=1400 audit(1065.264:1034): avc: denied { prog_run } for pid=20177 comm="syz.6.5916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.490529][T13917] usb 9-1: usb_control_msg returned -32 [ 545.496323][T13917] usbtmc 9-1:16.0: can't read capabilities [ 546.282860][T13915] (unnamed net_device) (uninitialized): Assigned a random MAC address: 22:8a:06:88:b5:56 [ 546.301573][T13915] rtl8150 2-1:1.0: eth13: rtl8150 is detected [ 546.312475][T13915] usb 2-1: USB disconnect, device number 69 [ 546.664935][T20201] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5926'. [ 547.187844][ T30] audit: type=1400 audit(1067.164:1035): avc: denied { mounton } for pid=20218 comm="syz.7.5934" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 547.756139][ T5720] usb 9-1: USB disconnect, device number 4 [ 548.170333][ T30] audit: type=1400 audit(1068.144:1036): avc: denied { getopt } for pid=20234 comm="syz.7.5941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 548.235239][ T30] audit: type=1400 audit(1068.194:1037): avc: denied { create } for pid=20236 comm="syz.7.5942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 548.293214][ T30] audit: type=1400 audit(1068.194:1038): avc: denied { write } for pid=20236 comm="syz.7.5942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 548.635219][T20248] netlink: 'syz.1.5947': attribute type 3 has an invalid length. [ 548.941886][T20262] nft_compat: unsupported protocol 5 [ 549.132763][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5956'. [ 549.319838][ T30] audit: type=1400 audit(1069.294:1039): avc: denied { mounton } for pid=20279 comm="syz.7.5962" path="/162/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 549.343018][T20280] Invalid source name [ 549.353115][T20280] UBIFS error (pid: 20280): cannot open "./file0", error -22 [ 549.665694][T20303] netlink: 'syz.1.5972': attribute type 1 has an invalid length. [ 549.682520][T20303] netlink: 'syz.1.5972': attribute type 1 has an invalid length. [ 549.887794][T20311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5975'. [ 550.682285][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 550.682309][ T30] audit: type=1800 audit(1070.654:1041): pid=20343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5990" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 550.814061][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5993'. [ 551.130199][ T30] audit: type=1400 audit(1071.104:1042): avc: denied { bind } for pid=20364 comm="syz.1.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 551.151994][T13917] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 551.321257][T13917] usb 9-1: Using ep0 maxpacket: 8 [ 551.327804][T13917] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 551.336284][T13917] usb 9-1: config 0 has no interface number 0 [ 551.342420][T13917] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 551.353796][T13917] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 551.364880][T13917] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 551.376909][T13917] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 551.388107][T13917] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.404986][T13917] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 551.414123][T13915] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 551.421713][T13917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.430326][T13917] usb 9-1: Product: syz [ 551.435136][T13917] usb 9-1: Manufacturer: syz [ 551.439753][T13917] usb 9-1: SerialNumber: syz [ 551.446329][T13917] usb 9-1: config 0 descriptor?? [ 551.599922][T13915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 551.609013][T13915] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 551.616827][T13915] usb 2-1: can't read configurations, error -71 [ 551.659368][T13917] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 551.881257][ T5720] usb 9-1: USB disconnect, device number 5 [ 552.531510][ T30] audit: type=1400 audit(1072.504:1043): avc: denied { block_suspend } for pid=20381 comm="syz.1.6009" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.834668][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6016'. [ 552.846495][T20400] netlink: 'syz.8.6016': attribute type 20 has an invalid length. [ 552.861151][T20400] netlink: 'syz.8.6016': attribute type 21 has an invalid length. [ 553.571700][T13915] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 553.752688][T13915] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 553.763547][T13915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.792492][T13915] usb 9-1: config 0 descriptor?? [ 553.803188][T13915] cp210x 9-1:0.0: cp210x converter detected [ 554.229249][T13915] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 554.249509][T20436] hub 7-0:1.0: USB hub found [ 554.268379][T20436] hub 7-0:1.0: 1 port detected [ 554.449113][T20425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.485130][T13915] usb 9-1: cp210x converter now attached to ttyUSB0 [ 554.551733][T20425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.708938][T13915] usb 9-1: USB disconnect, device number 6 [ 554.728215][T13915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 554.887114][T13915] cp210x 9-1:0.0: device disconnected [ 555.082309][T20425] geneve2: left promiscuous mode [ 555.092136][T20425] geneve2: left allmulticast mode [ 555.115427][ T3313] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.218339][T20426] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.329099][ T3313] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.346497][ T3313] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.371731][T20453] lo speed is unknown, defaulting to 1000 [ 555.589362][ T30] audit: type=1400 audit(1075.564:1044): avc: denied { ioctl } for pid=20465 comm="syz.1.6043" path="socket:[75967]" dev="sockfs" ino=75967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 555.939795][T20476] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6048'. [ 556.783686][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6058'. [ 557.042343][ T29] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 557.108593][ T29] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 559.083114][T20589] input: syz0 as /devices/virtual/input/input72 [ 559.582912][ T30] audit: type=1400 audit(1079.554:1045): avc: denied { read } for pid=20593 comm="syz.6.6098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 559.685502][ T30] audit: type=1400 audit(1079.664:1046): avc: denied { append } for pid=20610 comm="syz.8.6105" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 559.868016][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6108'. [ 559.930473][T20621] lo speed is unknown, defaulting to 1000 [ 561.019065][ T30] audit: type=1400 audit(1080.994:1047): avc: denied { mounton } for pid=20653 comm="syz.7.6122" path="/182/file0" dev="configfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.181207][T13917] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 561.204006][ T30] audit: type=1400 audit(1081.184:1048): avc: denied { wake_alarm } for pid=20660 comm="syz.7.6125" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 561.356731][T13917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 561.382839][T13917] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 561.411427][T13917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.434864][T13917] usb 7-1: config 0 descriptor?? [ 561.457351][T20649] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 561.498779][T20671] team0 (unregistering): Port device team_slave_0 removed [ 561.530050][T20671] team0 (unregistering): Port device team_slave_1 removed [ 561.683192][T20649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.718721][T20649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.852052][T20685] netlink: 'syz.1.6137': attribute type 1 has an invalid length. [ 561.881650][T20685] netlink: 'syz.1.6137': attribute type 6 has an invalid length. [ 561.890850][T20685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6137'. [ 561.988566][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.029750][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.037266][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.045486][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.054707][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.063845][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.080665][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.095934][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.112617][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.120390][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.130602][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.140287][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.148462][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.156128][T13917] uclogic 0003:5543:0064.004A: unknown main item tag 0x0 [ 562.179184][T13917] uclogic 0003:5543:0064.004A: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.6-1/input0 [ 562.201711][T13917] usb 7-1: USB disconnect, device number 2 [ 562.292180][T20697] fido_id[20697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 562.311884][ T29] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 562.472686][ T29] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 562.480846][ T29] usb 9-1: config 0 has no interface number 0 [ 562.490950][ T29] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 562.503352][ T29] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 562.515422][ T29] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 562.525025][ T29] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 562.533578][ T29] usb 9-1: Product: syz [ 562.537922][ T29] usb 9-1: SerialNumber: syz [ 562.545838][ T29] usb 9-1: config 0 descriptor?? [ 562.549466][T20710] serio: Serial port ptm0 [ 562.557943][ T29] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 562.567829][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input75 [ 562.636810][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.819223][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 562.869662][ T30] audit: type=1400 audit(1082.834:1049): avc: denied { remount } for pid=20716 comm="syz.6.6151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 562.910280][ T30] audit: type=1400 audit(1082.884:1050): avc: denied { ioctl } for pid=20722 comm="syz.7.6153" path="socket:[76703]" dev="sockfs" ino=76703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 563.073942][ C1] cm109_urb_ctl_callback: 4 callbacks suppressed [ 563.073970][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 563.088112][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 563.095303][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 563.095448][T13915] usb 9-1: USB disconnect, device number 7 [ 563.102268][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 563.135684][T13915] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 563.358827][T20741] [U] [ 563.361551][T20741] [U] [ 563.364250][T20741] [U] [ 563.366918][T20741] [U] [ 563.369869][T20741] [U] [ 563.372587][T20741] [U] [ 563.375266][T20741] [U] [ 563.377955][T20741] [U] [ 563.381272][T20741] [U] [ 563.383968][T20741] [U] [ 563.386662][T20741] [U] [ 563.400193][T20740] [U] [ 563.651626][T20749] tmpfs: Invalid gid '0x00000000ffffffff' [ 563.833902][T20755] lo speed is unknown, defaulting to 1000 [ 563.971177][ T5618] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 564.048567][T20759] lo speed is unknown, defaulting to 1000 [ 564.154661][ T5618] usb 9-1: unable to get BOS descriptor or descriptor too short [ 564.172537][ T5618] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 564.215213][ T5618] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 564.222393][ T30] audit: type=1400 audit(1084.194:1051): avc: denied { setopt } for pid=20762 comm="syz.0.6171" lport=43228 faddr=::ffff:172.30.1.1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 564.237352][ T5618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.320467][ T5618] usb 9-1: Product: syz [ 564.340637][ T5618] usb 9-1: Manufacturer: syz [ 564.360243][ T5618] usb 9-1: SerialNumber: syz [ 564.624510][ T5618] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 564.803054][ T5618] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 564.828020][ T5618] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 564.848871][ T5618] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 564.867413][ T5618] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 564.876702][ T5618] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 564.887057][ T5618] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 565.151269][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 565.305167][ T29] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 565.323031][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.350619][ T29] usb 7-1: config 0 descriptor?? [ 565.455378][ T5618] usb 9-1: USB disconnect, device number 8 [ 565.561816][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.803800][ T29] ath6kl: Unsupported hardware version: 0x0 [ 565.849108][ T29] ath6kl: Failed to init ath6kl core: -22 [ 565.858252][ T29] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 566.014474][T13915] usb 7-1: USB disconnect, device number 3 [ 566.192370][ T29] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 566.361334][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 566.368019][ T29] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 566.378582][ T29] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 566.390335][ T29] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.401743][ T29] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 566.416656][ T29] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 566.425887][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.434106][ T29] usb 2-1: Product: syz [ 566.438354][ T29] usb 2-1: Manufacturer: syz [ 566.441203][T13915] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 566.443025][ T29] usb 2-1: SerialNumber: syz [ 566.460476][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 566.469260][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input76 [ 566.593038][T13915] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 566.613815][T13915] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 566.629763][T13915] usb 9-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 566.639547][T13915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.648139][T13915] usb 9-1: Product: syz [ 566.652503][T13915] usb 9-1: Manufacturer: syz [ 566.657142][T13915] usb 9-1: SerialNumber: syz [ 566.691180][ T29] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 566.699610][ T29] (id 0x00) [ 566.771402][ T29] rc_core: IR keymap rc-imon-pad not found [ 566.779686][ T29] Registered IR keymap rc-empty [ 566.784746][ T29] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 566.795371][ T29] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 566.896366][T13915] usb 9-1: unit 5 not found! [ 566.898778][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 566.919055][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input77 [ 566.950982][ T29] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:72> initialized [ 567.059743][T13915] usb 9-1: USB disconnect, device number 9 [ 567.199056][T20805] imon:vfd_write: invalid payload size [ 567.228365][ T29] usb 2-1: USB disconnect, device number 72 [ 567.250180][ T9219] udevd[9219]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.555356][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6199'. [ 567.705639][T20838] gre0: entered promiscuous mode [ 567.712308][T20838] gre0: entered allmulticast mode [ 568.267740][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6208'. [ 568.605501][T20867] bridge1: entered promiscuous mode [ 568.615105][T20867] bridge1: entered allmulticast mode [ 568.640901][T20867] team0: Port device bridge1 added [ 568.694258][T20871] bridge0: port 1(team0) entered blocking state [ 568.723398][T20871] bridge0: port 1(team0) entered disabled state [ 568.744244][T20871] team0: entered allmulticast mode [ 568.753255][T20871] team_slave_0: entered allmulticast mode [ 568.759441][T20871] team_slave_1: entered allmulticast mode [ 568.778065][T20871] team0: entered promiscuous mode [ 568.783351][T20871] team_slave_0: entered promiscuous mode [ 568.800880][T20871] team_slave_1: entered promiscuous mode [ 568.863774][T20871] bridge0: port 1(team0) entered blocking state [ 568.873929][T20871] bridge0: port 1(team0) entered forwarding state [ 568.970154][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6218'. [ 569.020989][T20880] hsr_slave_0: left promiscuous mode [ 569.042177][T20880] hsr_slave_1: left promiscuous mode [ 569.258297][T20891] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6226'. [ 569.268905][T20891] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6226'. [ 569.285747][T20891] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6226'. [ 569.300437][T20893] loop6: detected capacity change from 0 to 8 [ 569.314919][T20896] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6226'. [ 569.342943][T20896] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6226'. [ 569.362802][T20893] loop6: detected capacity change from 8 to 0 [ 569.377029][T20896] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6226'. [ 569.571468][T13916] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 569.693105][ T30] audit: type=1400 audit(1089.674:1052): avc: denied { map } for pid=20901 comm="syz.1.6228" path="socket:[78197]" dev="sockfs" ino=78197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 569.750582][T13916] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 569.774290][T13916] usb 9-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 569.801454][T13916] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 569.821545][T13916] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.833096][ T5618] page_pool_release_retry() stalled pool shutdown: id 121, 1 inflight 60 sec [ 569.847579][T13916] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 569.882737][T13916] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 569.915456][T13916] usb 9-1: Product: syz [ 569.927329][T13916] usb 9-1: Manufacturer: syz [ 569.951828][T13916] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 570.168676][T13916] usb 9-1: USB disconnect, device number 10 [ 570.797037][T20937] blkio.reset_stats is deprecated [ 571.412884][T13917] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 571.440179][ T30] audit: type=1326 audit(1091.414:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.468736][ T30] audit: type=1326 audit(1091.414:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.498317][ T30] audit: type=1326 audit(1091.444:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.531214][ T30] audit: type=1326 audit(1091.454:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.558543][ T30] audit: type=1326 audit(1091.454:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.585182][T13917] usb 2-1: Using ep0 maxpacket: 8 [ 571.592672][ T30] audit: type=1326 audit(1091.484:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.630828][T13917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 571.650613][T13917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 571.664010][T13917] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 571.677522][T13917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.686238][ T30] audit: type=1326 audit(1091.484:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.719194][T13917] usb 2-1: config 0 descriptor?? [ 571.750636][ T30] audit: type=1326 audit(1091.484:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e5f9ce59 code=0x7ffc0000 [ 571.778429][ T30] audit: type=1326 audit(1091.514:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20970 comm="syz.6.6257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47e5f5d68e code=0x7ffc0000 [ 572.089074][T20993] syzkaller1: entered promiscuous mode [ 572.095919][T20993] syzkaller1: entered allmulticast mode [ 572.134406][T13917] hid_parser_main: 434 callbacks suppressed [ 572.134429][T13917] apple 0003:05AC:0273.004B: unknown main item tag 0x0 [ 572.147760][T13917] apple 0003:05AC:0273.004B: unknown main item tag 0x0 [ 572.158666][T13917] apple 0003:05AC:0273.004B: unknown main item tag 0x0 [ 572.171588][T13917] apple 0003:05AC:0273.004B: unknown main item tag 0x0 [ 572.180235][T13917] apple 0003:05AC:0273.004B: unknown main item tag 0x0 [ 572.193894][T13917] apple 0003:05AC:0273.004B: hidraw0: USB HID vff.fe Device [HID 05ac:0273] on usb-dummy_hcd.1-1/input0 [ 572.360494][ T29] usb 2-1: USB disconnect, device number 73 [ 573.461198][T21034] syzkaller1: entered promiscuous mode [ 573.483719][T21034] syzkaller1: entered allmulticast mode [ 573.647169][T21053] faux_driver vgem: [drm] Unknown color mode 135163; guessing buffer size. [ 573.657000][T21054] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6289'. [ 573.964892][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6296'. [ 574.038406][T21066] bridge2: entered promiscuous mode [ 574.053021][T21066] bridge2: entered allmulticast mode [ 574.079823][T21066] team0: Port device bridge2 added [ 574.761335][T13915] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 574.935498][T13915] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 574.950638][T13915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.972857][T13915] usb 7-1: config 0 descriptor?? [ 574.991919][T13915] cp210x 7-1:0.0: cp210x converter detected [ 575.379934][T21118] netlink: 'syz.1.6316': attribute type 29 has an invalid length. [ 575.394142][T21118] netlink: 'syz.1.6316': attribute type 29 has an invalid length. [ 575.405436][T13915] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 575.407949][T21118] netlink: 508 bytes leftover after parsing attributes in process `syz.1.6316'. [ 575.631984][T13915] usb 7-1: cp210x converter now attached to ttyUSB0 [ 575.711616][T13917] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 575.753558][T21122] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 575.771826][T21122] overlayfs: failed to clone lowerpath [ 575.852296][ T29] usb 7-1: USB disconnect, device number 4 [ 575.869551][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 575.885184][T13917] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 575.902519][ T29] cp210x 7-1:0.0: device disconnected [ 575.906279][T13917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.939127][T13917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.961122][T13917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 575.977765][T13917] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 575.996408][T13917] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 576.012688][T13917] usb 2-1: Manufacturer: syz [ 576.025821][T13917] usb 2-1: config 0 descriptor?? [ 576.083418][T21128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6321'. [ 576.092761][T21128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6321'. [ 576.104146][T21128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6321'. [ 576.166639][T21130] overlayfs: failed to clone upperpath [ 576.335122][T21136] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6325'. [ 576.463946][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 576.463963][ T30] audit: type=1400 audit(1096.444:1076): avc: denied { read } for pid=21135 comm="syz.8.6325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 576.497384][T13917] appleir 0003:05AC:8243.004C: unknown main item tag 0x0 [ 576.526569][T13917] appleir 0003:05AC:8243.004C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 576.819064][ T29] usb 2-1: USB disconnect, device number 74 [ 576.912093][ T1234] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 577.021440][T21158] block nbd1: server does not support multiple connections per device. [ 577.043722][T21158] block nbd1: shutting down sockets [ 577.073213][ T1234] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 577.091550][ T1234] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 577.120812][ T1234] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 577.139865][ T1234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.153114][T21150] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 577.174269][ T1234] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.438654][T13916] usb 7-1: USB disconnect, device number 5 [ 577.523719][T21171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.894707][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 577.923824][T21188] bridge_slave_1: left allmulticast mode [ 577.949019][T21188] bridge_slave_1: left promiscuous mode [ 577.955030][T21188] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.965578][T21188] bridge_slave_0: left allmulticast mode [ 577.983773][T21188] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.206137][T21197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6352'. [ 578.215905][T21197] netlink: 'syz.1.6352': attribute type 7 has an invalid length. [ 578.224955][T21197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6352'. [ 578.261609][T21197] gretap0: entered promiscuous mode [ 578.289184][T21197] gretap0: left promiscuous mode [ 579.600403][ T30] audit: type=1400 audit(1099.574:1077): avc: denied { create } for pid=21228 comm="syz.1.6365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 579.725493][T21231] siw: device registration error -23 [ 579.948471][T21242] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6370'. [ 580.128422][T21246] netlink: 'syz.6.6373': attribute type 1 has an invalid length. [ 580.144795][T21246] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6373'. [ 580.332107][T21255] [ 580.334466][T21255] ====================================================== [ 580.341483][T21255] WARNING: possible circular locking dependency detected [ 580.348502][T21255] syzkaller #0 Tainted: G L [ 580.354479][T21255] ------------------------------------------------------ [ 580.361485][T21255] syz.1.6376/21255 is trying to acquire lock: [ 580.367537][T21255] ffffffff8e9b18c0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 580.377290][T21255] [ 580.377290][T21255] but task is already holding lock: [ 580.384635][T21255] ffffffff8e849810 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x49da/0x7ed0 [ 580.394549][T21255] [ 580.394549][T21255] which lock already depends on the new lock. [ 580.394549][T21255] [ 580.404944][T21255] [ 580.404944][T21255] the existing dependency chain (in reverse order) is: [ 580.413942][T21255] [ 580.413942][T21255] -> #8 (cgroup_threadgroup_rwsem){++++}-{0:0}: [ 580.422374][T21255] percpu_down_write+0x53/0x3e0 [ 580.427750][T21255] cgroup_procs_write_start+0x568/0x890 [ 580.433804][T21255] __cgroup_procs_write+0xd7/0x730 [ 580.439430][T21255] cgroup_procs_write+0x26/0x60 [ 580.444786][T21255] cgroup_file_write+0x1e6/0x8a0 [ 580.450241][T21255] kernfs_fop_write_iter+0x3e0/0x5f0 [ 580.456040][T21255] vfs_write+0x6ac/0x1070 [ 580.460884][T21255] ksys_write+0x12a/0x250 [ 580.465719][T21255] do_syscall_64+0x10b/0xf80 [ 580.470825][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.477225][T21255] [ 580.477225][T21255] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 580.484943][T21255] cpus_read_lock+0x42/0x170 [ 580.490053][T21255] static_key_slow_inc+0x12/0x30 [ 580.495504][T21255] fl_create+0x7fb/0xd10 [ 580.500255][T21255] ipv6_flowlabel_opt+0x519/0x2d40 [ 580.505871][T21255] do_ipv6_setsockopt+0x1b80/0x44b0 [ 580.511593][T21255] ipv6_setsockopt+0xcb/0x170 [ 580.516781][T21255] udpv6_setsockopt+0x64/0xb0 [ 580.521960][T21255] do_sock_setsockopt+0xf3/0x1d0 [ 580.527407][T21255] __sys_setsockopt+0x195/0x220 [ 580.532769][T21255] __x64_sys_setsockopt+0xbd/0x160 [ 580.538394][T21255] do_syscall_64+0x10b/0xf80 [ 580.543492][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.549891][T21255] [ 580.549891][T21255] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 580.557605][T21255] lock_sock_nested+0x41/0xf0 [ 580.562794][T21255] inet_shutdown+0x67/0x410 [ 580.567811][T21255] nbd_mark_nsock_dead+0xae/0x5c0 [ 580.573437][T21255] sock_shutdown+0x16b/0x200 [ 580.578541][T21255] nbd_config_put+0x1eb/0x750 [ 580.583720][T21255] nbd_genl_connect+0xaf8/0x1a40 [ 580.589167][T21255] genl_family_rcv_msg_doit+0x214/0x300 [ 580.595227][T21255] genl_rcv_msg+0x560/0x800 [ 580.600242][T21255] netlink_rcv_skb+0x159/0x420 [ 580.605516][T21255] genl_rcv+0x28/0x40 [ 580.610008][T21255] netlink_unicast+0x585/0x850 [ 580.615290][T21255] netlink_sendmsg+0x8b0/0xda0 [ 580.620581][T21255] ____sys_sendmsg+0x9e1/0xb70 [ 580.625875][T21255] ___sys_sendmsg+0x190/0x1e0 [ 580.631068][T21255] __sys_sendmsg+0x170/0x220 [ 580.636166][T21255] do_syscall_64+0x10b/0xf80 [ 580.641278][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.647681][T21255] [ 580.647681][T21255] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 580.655315][T21255] __mutex_lock+0x1a4/0x1b10 [ 580.660423][T21255] nbd_queue_rq+0x428/0x1080 [ 580.665523][T21255] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 580.671577][T21255] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 580.678423][T21255] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 580.684924][T21255] blk_mq_run_hw_queue+0x23c/0x670 [ 580.690552][T21255] blk_mq_dispatch_list+0x51d/0x1360 [ 580.696345][T21255] blk_mq_flush_plug_list+0x130/0x600 [ 580.702232][T21255] __blk_flush_plug+0x2c4/0x4b0 [ 580.707598][T21255] __submit_bio+0x584/0x6c0 [ 580.712638][T21255] submit_bio_noacct_nocheck+0x543/0xbf0 [ 580.718803][T21255] submit_bio_noacct+0xd18/0x2000 [ 580.724341][T21255] submit_bh_wbc+0x681/0x890 [ 580.729465][T21255] block_read_full_folio+0x264/0x8e0 [ 580.735257][T21255] filemap_read_folio+0xfc/0x3b0 [ 580.740708][T21255] do_read_cache_folio+0x2d7/0x6b0 [ 580.746335][T21255] read_part_sector+0xd1/0x370 [ 580.751622][T21255] adfspart_check_ICS+0x91/0x7d0 [ 580.757092][T21255] bdev_disk_changed+0x7a3/0x1250 [ 580.762734][T21255] blkdev_get_whole+0x187/0x290 [ 580.768105][T21255] bdev_open+0x2c7/0xe40 [ 580.772873][T21255] blkdev_open+0x34e/0x4f0 [ 580.777795][T21255] do_dentry_open+0x6d8/0x1660 [ 580.783067][T21255] vfs_open+0x82/0x3f0 [ 580.787648][T21255] path_openat+0x208c/0x31a0 [ 580.792748][T21255] do_file_open+0x20e/0x430 [ 580.797764][T21255] do_sys_openat2+0x10d/0x1e0 [ 580.802955][T21255] __x64_sys_openat+0x12d/0x210 [ 580.808320][T21255] do_syscall_64+0x10b/0xf80 [ 580.813864][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.820273][T21255] [ 580.820273][T21255] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 580.827473][T21255] __mutex_lock+0x1a4/0x1b10 [ 580.832579][T21255] nbd_queue_rq+0xba/0x1080 [ 580.837590][T21255] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 580.843648][T21255] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 580.850494][T21255] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 580.856991][T21255] blk_mq_run_hw_queue+0x23c/0x670 [ 580.862619][T21255] blk_mq_dispatch_list+0x51d/0x1360 [ 580.868412][T21255] blk_mq_flush_plug_list+0x130/0x600 [ 580.874291][T21255] __blk_flush_plug+0x2c4/0x4b0 [ 580.879664][T21255] __submit_bio+0x584/0x6c0 [ 580.884688][T21255] submit_bio_noacct_nocheck+0x543/0xbf0 [ 580.890868][T21255] submit_bio_noacct+0xd18/0x2000 [ 580.896399][T21255] submit_bh_wbc+0x681/0x890 [ 580.901495][T21255] block_read_full_folio+0x264/0x8e0 [ 580.907292][T21255] filemap_read_folio+0xfc/0x3b0 [ 580.912750][T21255] do_read_cache_folio+0x2d7/0x6b0 [ 580.918378][T21255] read_part_sector+0xd1/0x370 [ 580.923659][T21255] adfspart_check_ICS+0x91/0x7d0 [ 580.929118][T21255] bdev_disk_changed+0x7a3/0x1250 [ 580.934661][T21255] blkdev_get_whole+0x187/0x290 [ 580.940028][T21255] bdev_open+0x2c7/0xe40 [ 580.944786][T21255] blkdev_open+0x34e/0x4f0 [ 580.949712][T21255] do_dentry_open+0x6d8/0x1660 [ 580.954987][T21255] vfs_open+0x82/0x3f0 [ 580.959571][T21255] path_openat+0x208c/0x31a0 [ 580.964676][T21255] do_file_open+0x20e/0x430 [ 580.969690][T21255] do_sys_openat2+0x10d/0x1e0 [ 580.974884][T21255] __x64_sys_openat+0x12d/0x210 [ 580.980247][T21255] do_syscall_64+0x10b/0xf80 [ 580.985347][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.991748][T21255] [ 580.991748][T21255] -> #3 (set->srcu){.+.+}-{0:0}: [ 580.998859][T21255] __synchronize_srcu+0xa2/0x300 [ 581.004313][T21255] blk_mq_quiesce_queue+0x149/0x1c0 [ 581.010027][T21255] elevator_switch+0x17b/0x7e0 [ 581.015304][T21255] elevator_change+0x352/0x530 [ 581.020584][T21255] elevator_set_default+0x29e/0x360 [ 581.026295][T21255] blk_register_queue+0x48e/0x630 [ 581.031835][T21255] __add_disk+0x73f/0xe40 [ 581.036681][T21255] add_disk_fwnode+0x118/0x5c0 [ 581.041954][T21255] nbd_dev_add+0x77a/0xb10 [ 581.046876][T21255] nbd_init+0x291/0x2b0 [ 581.051542][T21255] do_one_initcall+0x121/0x750 [ 581.056824][T21255] kernel_init_freeable+0x6ea/0x7b0 [ 581.062545][T21255] kernel_init+0x1f/0x1e0 [ 581.067382][T21255] ret_from_fork+0x72b/0xd50 [ 581.072482][T21255] ret_from_fork_asm+0x1a/0x30 [ 581.077764][T21255] [ 581.077764][T21255] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 581.085571][T21255] __mutex_lock+0x1a4/0x1b10 [ 581.090681][T21255] elevator_change+0x1bc/0x530 [ 581.095962][T21255] elevator_set_none+0x92/0xf0 [ 581.101238][T21255] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 581.107555][T21255] nbd_start_device+0x1a6/0xbd0 [ 581.112925][T21255] nbd_genl_connect+0xff2/0x1a40 [ 581.118370][T21255] genl_family_rcv_msg_doit+0x214/0x300 [ 581.124434][T21255] genl_rcv_msg+0x560/0x800 [ 581.129451][T21255] netlink_rcv_skb+0x159/0x420 [ 581.134725][T21255] genl_rcv+0x28/0x40 [ 581.139218][T21255] netlink_unicast+0x585/0x850 [ 581.144490][T21255] netlink_sendmsg+0x8b0/0xda0 [ 581.149774][T21255] ____sys_sendmsg+0x9e1/0xb70 [ 581.155048][T21255] ___sys_sendmsg+0x190/0x1e0 [ 581.160321][T21255] __sys_sendmsg+0x170/0x220 [ 581.165414][T21255] do_syscall_64+0x10b/0xf80 [ 581.170516][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.176914][T21255] [ 581.176914][T21255] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 581.185504][T21255] blk_alloc_queue+0x610/0x790 [ 581.190781][T21255] blk_mq_alloc_queue+0x174/0x290 [ 581.196316][T21255] __blk_mq_alloc_disk+0x29/0x120 [ 581.201850][T21255] nbd_dev_add+0x492/0xb10 [ 581.206781][T21255] nbd_init+0x291/0x2b0 [ 581.211450][T21255] do_one_initcall+0x121/0x750 [ 581.216728][T21255] kernel_init_freeable+0x6ea/0x7b0 [ 581.222438][T21255] kernel_init+0x1f/0x1e0 [ 581.227276][T21255] ret_from_fork+0x72b/0xd50 [ 581.232378][T21255] ret_from_fork_asm+0x1a/0x30 [ 581.237667][T21255] [ 581.237667][T21255] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 581.244879][T21255] __lock_acquire+0x14b8/0x2630 [ 581.250251][T21255] lock_acquire+0x1b1/0x370 [ 581.255264][T21255] fs_reclaim_acquire+0xc4/0x100 [ 581.260712][T21255] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 581.266948][T21255] alloc_inode+0x183/0x250 [ 581.271870][T21255] iget_locked+0x1d9/0x6d0 [ 581.276796][T21255] kernfs_get_inode+0x46/0x470 [ 581.282070][T21255] cgroup_may_write+0x89/0x120 [ 581.287339][T21255] cgroup_can_fork+0xb89/0x1390 [ 581.292709][T21255] copy_process+0x49da/0x7ed0 [ 581.297894][T21255] kernel_clone+0x12e/0x9c0 [ 581.302901][T21255] __do_sys_clone3+0x214/0x290 [ 581.308167][T21255] do_syscall_64+0x10b/0xf80 [ 581.313269][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.319669][T21255] [ 581.319669][T21255] other info that might help us debug this: [ 581.319669][T21255] [ 581.329873][T21255] Chain exists of: [ 581.329873][T21255] fs_reclaim --> cpu_hotplug_lock --> cgroup_threadgroup_rwsem [ 581.329873][T21255] [ 581.343328][T21255] Possible unsafe locking scenario: [ 581.343328][T21255] [ 581.350759][T21255] CPU0 CPU1 [ 581.356105][T21255] ---- ---- [ 581.361451][T21255] rlock(cgroup_threadgroup_rwsem); [ 581.366723][T21255] lock(cpu_hotplug_lock); [ 581.373729][T21255] lock(cgroup_threadgroup_rwsem); [ 581.381431][T21255] lock(fs_reclaim); [ 581.385398][T21255] [ 581.385398][T21255] *** DEADLOCK *** [ 581.385398][T21255] [ 581.393521][T21255] 2 locks held by syz.1.6376/21255: [ 581.398699][T21255] #0: ffffffff8e849aa0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_can_fork+0x88f/0x1390 [ 581.408182][T21255] #1: ffffffff8e849810 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x49da/0x7ed0 [ 581.418525][T21255] [ 581.418525][T21255] stack backtrace: [ 581.424416][T21255] CPU: 0 UID: 60928 PID: 21255 Comm: syz.1.6376 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.424444][T21255] Tainted: [L]=SOFTLOCKUP [ 581.424451][T21255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.424462][T21255] Call Trace: [ 581.424471][T21255] [ 581.424479][T21255] dump_stack_lvl+0x100/0x190 [ 581.424504][T21255] print_circular_bug.cold+0x178/0x1c7 [ 581.424534][T21255] check_noncircular+0x146/0x160 [ 581.424560][T21255] __lock_acquire+0x14b8/0x2630 [ 581.424584][T21255] ? ktime_get+0x9f/0x320 [ 581.424606][T21255] ? ktime_get+0x1a4/0x320 [ 581.424627][T21255] lock_acquire+0x1b1/0x370 [ 581.424649][T21255] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 581.424681][T21255] fs_reclaim_acquire+0xc4/0x100 [ 581.424702][T21255] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 581.424729][T21255] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 581.424755][T21255] ? alloc_inode+0x183/0x250 [ 581.424773][T21255] ? find_inode_fast+0x1fa/0x910 [ 581.424792][T21255] alloc_inode+0x183/0x250 [ 581.424809][T21255] iget_locked+0x1d9/0x6d0 [ 581.424826][T21255] ? __pfx_iget_locked+0x10/0x10 [ 581.424848][T21255] ? find_held_lock+0x2b/0x80 [ 581.424865][T21255] ? css_tryget_online_from_dir+0x279/0x8e0 [ 581.424889][T21255] ? css_tryget_online_from_dir+0x279/0x8e0 [ 581.424913][T21255] kernfs_get_inode+0x46/0x470 [ 581.424936][T21255] cgroup_may_write+0x89/0x120 [ 581.424953][T21255] cgroup_can_fork+0xb89/0x1390 [ 581.424977][T21255] copy_process+0x49da/0x7ed0 [ 581.424993][T21255] ? futex_unqueue+0x133/0x2c0 [ 581.425025][T21255] ? __pfx_copy_process+0x10/0x10 [ 581.425044][T21255] ? _copy_from_user+0x59/0xd0 [ 581.425072][T21255] kernel_clone+0x12e/0x9c0 [ 581.425089][T21255] ? __pfx_kernel_clone+0x10/0x10 [ 581.425107][T21255] ? __pfx_futex_wait+0x10/0x10 [ 581.425128][T21255] __do_sys_clone3+0x214/0x290 [ 581.425144][T21255] ? __pfx___do_sys_clone3+0x10/0x10 [ 581.425161][T21255] ? proc_id_connector+0x2ed/0x650 [ 581.425196][T21255] ? rcu_is_watching+0x12/0xc0 [ 581.425225][T21255] do_syscall_64+0x10b/0xf80 [ 581.425251][T21255] ? clear_bhb_loop+0x40/0x90 [ 581.425271][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.425290][T21255] RIP: 0033:0x7fed4739ce59 [ 581.425306][T21255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.425324][T21255] RSP: 002b:00007fed481c7ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 581.425343][T21255] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fed4739ce59 [ 581.425355][T21255] RDX: 00007fed481c7f10 RSI: 0000000000000058 RDI: 00007fed481c7f10 [ 581.425367][T21255] RBP: 00007fed47432d6f R08: 0000000000000000 R09: 0000000000000058 [ 581.425378][T21255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.425389][T21255] R13: 00007fed47616038 R14: 00007fed47615fa0 R15: 00007ffee38bf4e8 [ 581.425408][T21255]