last executing test programs: 14m16.377849071s ago: executing program 1 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000180)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000380)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x2, 0xffbffffe, 0x257}, 0x0, 0x1, &(0x7f0000019980)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 14m14.070237929s ago: executing program 1 (id=31): r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xa6c3, 0x2, 0x0, 0x3ac}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@gettclass={0x24, 0x2a, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {0x5, 0x5}, {0xb, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 14m11.672855204s ago: executing program 1 (id=36): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e0335d1583aaa5d4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x229) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 14m7.366844729s ago: executing program 1 (id=42): pipe(&(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="cfe9ef6d6ee1d433ba73a5ddf753c74ac91bc34a934afacb0751028db60a", 0x1e}], 0x1) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b00"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000960)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 14m3.224998174s ago: executing program 1 (id=46): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000500)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000197c0)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x2982, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000019840)="b73f0da6d05b38ca9cbbce709c72aa728fc8e537ff02cb691d35e2a5a0cad47127f2b5950b319ccd6509031e021bdf5585", 0x31) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f00000198c0), 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000580)='127.0.0.1:6789:/\x00', 0x0) nanosleep(&(0x7f0000000640)={0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) 14m1.272377767s ago: executing program 1 (id=49): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001", @ANYRES8=r3], 0x84}, 0x1, 0x0, 0x0, 0x2000c895}, 0x20008000) 13m45.613313154s ago: executing program 32 (id=49): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001", @ANYRES8=r3], 0x84}, 0x1, 0x0, 0x0, 0x2000c895}, 0x20008000) 44.227191822s ago: executing program 4 (id=3293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32, @ANYRES32, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44.16011923s ago: executing program 4 (id=3296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000cc0)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000d40)=@vmx={0x109, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.896829276s ago: executing program 4 (id=3303): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) 43.203082052s ago: executing program 4 (id=3316): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400000004"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) read$char_usb(r1, &(0x7f0000001e80)=""/130, 0x82) 41.851045786s ago: executing program 5 (id=3343): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04000000"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1720}], 0x1) 41.240005129s ago: executing program 5 (id=3349): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x4}]}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0x0, 0x89, 0x0, 0x81, 0xffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 41.146247826s ago: executing program 2 (id=3353): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) 41.068206609s ago: executing program 2 (id=3355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) 41.04137102s ago: executing program 2 (id=3356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 41.002290314s ago: executing program 2 (id=3358): prlimit64(0x0, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 40.736216255s ago: executing program 0 (id=3362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.689486934s ago: executing program 0 (id=3364): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) 40.67307515s ago: executing program 3 (id=3365): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000100000080"], 0x4a0d82) 40.600134618s ago: executing program 0 (id=3366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) 40.599900036s ago: executing program 3 (id=3367): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 40.581233404s ago: executing program 0 (id=3368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) 40.464661503s ago: executing program 0 (id=3369): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f00000007c0)='./file0/file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x40, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0) 40.416922663s ago: executing program 5 (id=3370): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.408923875s ago: executing program 3 (id=3371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x6, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f0000000680)="0e0412b60f0c0df0f2747782bb714a7661", 0xfdef) 40.346299968s ago: executing program 3 (id=3372): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)=@caif=@dbg={0x25, 0x8, 0x8}, 0x80, 0x0}}], 0x1, 0x40000) 40.313806342s ago: executing program 3 (id=3373): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x5d}, 0x40004) 40.287210893s ago: executing program 3 (id=3374): mkdirat(0xffffffffffffff9c, &(0x7f0000002640)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000002680)='./trace\x00', &(0x7f00000026c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002700)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000002740)='*:', 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x9, &(0x7f0000000240)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_format(r0, &(0x7f0000000200)='-1\x00', 0x3) 40.262049894s ago: executing program 5 (id=3375): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fcntl$notify(r0, 0x402, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x64) 40.165485549s ago: executing program 5 (id=3376): socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="bf00"}) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', 0x1}) 40.110788838s ago: executing program 4 (id=3377): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x800) ioctl$FE_GET_FRONTEND(r0, 0x80246f4d, &(0x7f00000000c0)) 40.107944617s ago: executing program 2 (id=3378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000009c0)={0x0, &(0x7f0000000a00)=[@wrmsr={0x65, 0x20, {0x40000082, 0xfffffffffffffffe}}], 0x20}) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000ac0)={0x1, 0x0, [{0x40000001, 0x3, 0x0, 0x31237648, 0x100000}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35.955191273s ago: executing program 4 (id=3379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) 34.408627067s ago: executing program 0 (id=3380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000001280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2000, &(0x7f0000003280)={&(0x7f0000003340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x5c, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004980)="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", 0x2000, &(0x7f0000006980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000006ac0)='./file0\x00', 0x0, 0x100) fchownat(0xffffffffffffff9c, &(0x7f0000006b00)='./file0\x00', 0x0, 0x0, 0x1000) 32.93329706s ago: executing program 5 (id=3381): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x4}]}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0x0, 0x89, 0x0, 0x81, 0xffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 26.707386562s ago: executing program 2 (id=3382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c000180", @ANYRES32, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.194417909s ago: executing program 33 (id=3374): mkdirat(0xffffffffffffff9c, &(0x7f0000002640)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000002680)='./trace\x00', &(0x7f00000026c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002700)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000002740)='*:', 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x9, &(0x7f0000000240)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_format(r0, &(0x7f0000000200)='-1\x00', 0x3) 15.029579379s ago: executing program 34 (id=3379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) 8.985539962s ago: executing program 35 (id=3380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000001280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2000, &(0x7f0000003280)={&(0x7f0000003340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x5c, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004980)="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", 0x2000, &(0x7f0000006980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000006ac0)='./file0\x00', 0x0, 0x100) fchownat(0xffffffffffffff9c, &(0x7f0000006b00)='./file0\x00', 0x0, 0x0, 0x1000) 4.782706482s ago: executing program 36 (id=3381): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x4}]}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0x0, 0x89, 0x0, 0x81, 0xffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=3382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c000180", @ANYRES32, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ][T15252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 841.931460][T15259] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 841.931507][T15259] SELinux: failed to load policy [ 842.034675][T15262] tipc: Enabled bearer , priority 0 [ 842.037531][T15262] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 842.107264][T15261] tipc: Disabling bearer [ 842.128192][T15271] fuse: Unknown parameter 'group_id00000000000000000000' [ 842.157379][T15273] fuse: Unknown parameter 'grou00000000000000000000' [ 842.181207][T15269] block nbd2: shutting down sockets [ 842.562211][ T31] audit: type=1400 audit(1792214869.907:763): avc: denied { bind } for pid=15297 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 842.583022][ T31] audit: type=1400 audit(1792214869.917:764): avc: denied { listen } for pid=15297 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 842.607405][T15301] fuse: Unknown parameter 'grou00000000000000000000' [ 842.707064][T15309] tipc: Enabled bearer , priority 0 [ 842.722768][T15306] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 842.794416][T15304] tipc: Disabling bearer [ 842.900634][T15319] FAULT_INJECTION: forcing a failure. [ 842.900634][T15319] name fail_futex, interval 1, probability 0, space 0, times 0 [ 842.900686][T15319] CPU: 1 UID: 0 PID: 15319 Comm: syz.3.2577 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.900727][T15319] Tainted: [L]=SOFTLOCKUP [ 842.900734][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 842.900748][T15319] Call Trace: [ 842.900757][T15319] [ 842.900767][T15319] dump_stack_lvl+0x100/0x190 [ 842.900815][T15319] should_fail_ex.cold+0x5/0xa [ 842.900852][T15319] get_futex_key+0x1d0/0x14f0 [ 842.900884][T15319] ? __pfx_get_futex_key+0x10/0x10 [ 842.900908][T15319] ? find_held_lock+0x2b/0x80 [ 842.900941][T15319] ? futex_wake+0x4ea/0x5e0 [ 842.900968][T15319] futex_wake+0xf4/0x5e0 [ 842.900991][T15319] ? __pfx_futex_wake+0x10/0x10 [ 842.901015][T15319] ? rcu_read_lock_any_held+0x6a/0x90 [ 842.901034][T15319] ? find_held_lock+0x2b/0x80 [ 842.901061][T15319] ? ksys_write+0x190/0x250 [ 842.901085][T15319] ? ksys_write+0x190/0x250 [ 842.901110][T15319] do_futex+0x2b2/0x440 [ 842.901139][T15319] ? __pfx_do_futex+0x10/0x10 [ 842.901174][T15319] __x64_sys_futex+0x34f/0x4d0 [ 842.901205][T15319] ? __pfx___x64_sys_futex+0x10/0x10 [ 842.901242][T15319] do_syscall_64+0x123/0x790 [ 842.901275][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.901297][T15319] RIP: 0033:0x7ff365f9e559 [ 842.901317][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.901335][T15319] RSP: 002b:00007ff366eda0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 842.901356][T15319] RAX: ffffffffffffffda RBX: 00007ff366225fa8 RCX: 00007ff365f9e559 [ 842.901369][T15319] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff366225fac [ 842.901381][T15319] RBP: 00007ff366225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 842.901394][T15319] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 842.901406][T15319] R13: 00007ff366226038 R14: 00007ffc433a9880 R15: 00007ffc433a9968 [ 842.901432][T15319] [ 842.972732][ T5808] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 843.126268][ T5808] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 843.127429][ T5808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.127465][ T5808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 843.127488][ T5808] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 843.127521][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.222579][T12811] Bluetooth: hci2: command 0x0406 tx timeout [ 843.304553][T12811] Bluetooth: hci4: command 0x0406 tx timeout [ 843.332021][ T31] audit: type=1400 audit(1792214870.677:765): avc: denied { write } for pid=15308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.361071][ T31] audit: type=1400 audit(1792214870.707:766): avc: denied { create } for pid=15310 comm="syz.4.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 843.410242][T15345] fuse: Unknown parameter 'group_i00000000000000000000' [ 843.566782][ T31] audit: type=1400 audit(1792214870.917:767): avc: denied { write } for pid=15352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.572321][ T31] audit: type=1400 audit(1792214870.917:768): avc: denied { ioctl } for pid=15310 comm="syz.4.2575" path="socket:[43539]" dev="sockfs" ino=43539 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 843.577547][ T5808] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 843.577565][ T5808] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 843.607698][ T5808] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 843.624462][ T5808] usb 5-1: USB disconnect, device number 13 [ 844.088537][T15387] tipc: Enabling of bearer rejected, failed to enable media [ 844.185643][T15369] netlink: 'syz.3.2589': attribute type 10 has an invalid length. [ 844.407864][T15407] fuse: Unknown parameter 'group_i00000000000000000000' [ 844.462251][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 844.462268][ T31] audit: type=1400 audit(1792214871.807:769): avc: denied { write } for pid=15379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.518251][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 844.651425][ T31] audit: type=1400 audit(1792214871.997:770): avc: denied { write } for pid=15420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.694812][ T31] audit: type=1400 audit(1792214872.047:771): avc: denied { create } for pid=15424 comm="syz.5.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 844.729327][ T31] audit: type=1400 audit(1792214872.077:772): avc: denied { write } for pid=15424 comm="syz.5.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 844.729359][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 844.981875][T15443] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2605'. [ 845.214367][ T31] audit: type=1400 audit(1792214872.567:773): avc: denied { write } for pid=15434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.224222][T15462] fuse: Unknown parameter 'group_i00000000000000000000' [ 845.302624][T12811] Bluetooth: hci2: command 0x0406 tx timeout [ 845.304498][T15467] tipc: Enabling of bearer rejected, failed to enable media [ 845.412306][ T31] audit: type=1400 audit(1792214872.757:774): avc: denied { mount } for pid=15474 comm="syz.2.2613" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 845.455489][ T31] audit: type=1400 audit(1792214872.807:775): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 845.484018][ T31] audit: type=1400 audit(1792214872.837:776): avc: denied { read } for pid=15478 comm="syz.0.2614" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 845.512921][ T31] audit: type=1400 audit(1792214872.867:777): avc: denied { write } for pid=15473 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.720222][T15494] xt_hashlimit: size too large, truncated to 1048576 [ 845.835349][T15496] block nbd5: shutting down sockets [ 846.026479][T15513] fuse: Unknown parameter 'group_id00000000000000000000' [ 846.327235][ T31] audit: type=1400 audit(1792214873.677:778): avc: denied { write } for pid=15492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.473382][ T5808] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 846.477789][T15537] SELinux: policydb magic number 0x7cff8c does not match expected magic number 0xf97cff8c [ 846.477836][T15537] SELinux: failed to load policy [ 846.529047][T15539] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2631'. [ 846.605464][ T5808] usb 3-1: device descriptor read/64, error -71 [ 846.756168][T15556] xt_hashlimit: size too large, truncated to 1048576 [ 846.837785][T12811] Bluetooth: hci4: unexpected event for opcode 0x080d [ 846.852759][ T5808] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 846.983191][ T5808] usb 3-1: device descriptor read/64, error -71 [ 846.990854][T15576] tipc: Enabling of bearer rejected, failed to enable media [ 847.095092][ T5808] usb usb3-port1: attempt power cycle [ 847.370960][T15602] bridge_slave_0: left allmulticast mode [ 847.370978][T15602] bridge_slave_0: left promiscuous mode [ 847.372824][T15602] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.397754][T15602] bridge_slave_1: left allmulticast mode [ 847.397773][T15602] bridge_slave_1: left promiscuous mode [ 847.397858][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.419874][T15602] bond0: (slave bond_slave_0): Releasing backup interface [ 847.430615][T15602] bond0: (slave bond_slave_1): Releasing backup interface [ 847.444078][ T5808] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 847.444824][T15602] team0: Port device team_slave_0 removed [ 847.449888][T15602] team0: Port device team_slave_1 removed [ 847.454656][T15602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.454675][T15602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.463985][ T5808] usb 3-1: device descriptor read/8, error -71 [ 847.500429][T15602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.500457][T15602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.508997][T15602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 847.548391][T15604] team0: Mode changed to "loadbalance" [ 847.550911][T15605] vlan0: entered promiscuous mode [ 847.578113][T15605] team0: Port device vlan0 added [ 847.683741][T15615] tipc: Enabling of bearer rejected, failed to enable media [ 847.712625][ T5808] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 847.735032][ T5808] usb 3-1: device descriptor read/8, error -71 [ 847.843582][ T5808] usb usb3-port1: unable to enumerate USB device [ 848.225920][T15655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 848.259682][T15655] team0: No ports can be present during mode change [ 848.260408][T15655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=15655 comm=syz.5.2673 [ 848.284571][T15655] tipc: Started in network mode [ 848.284602][T15655] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 848.284725][T15655] tipc: Enabled bearer , priority 0 [ 848.357063][T15667] tipc: Enabling of bearer rejected, failed to enable media [ 848.651996][T12811] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 848.777213][T15699] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 848.798338][T15699] team0: No ports can be present during mode change [ 848.801161][T15699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=15699 comm=syz.3.2689 [ 848.819307][T15699] tipc: Started in network mode [ 848.819325][T15699] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 848.819402][T15699] tipc: Enabled bearer , priority 0 [ 848.861573][T15702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2690'. [ 849.117412][T12811] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 849.407269][ T5786] tipc: Node number set to 11578026 [ 849.449928][T12811] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 849.479119][T15741] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2702'. [ 849.480543][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 849.480556][ T31] audit: type=1400 audit(1792214876.827:786): avc: denied { write } for pid=15739 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.585949][T15746] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2704'. [ 849.714039][ T31] audit: type=1326 audit(1792214877.067:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15753 comm="syz.5.2706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f259e559 code=0x0 [ 849.720452][T12811] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 849.814699][ T2311] tipc: Node number set to 11578026 [ 849.835425][T15763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.943549][ T31] audit: type=1400 audit(1792214877.297:788): avc: denied { write } for pid=15750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.056331][ T31] audit: type=1400 audit(1792214877.407:789): avc: denied { write } for pid=15775 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.078229][T15779] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2713'. [ 850.224610][T12811] Bluetooth: hci1: unexpected event for opcode 0x080d [ 850.406188][ T31] audit: type=1400 audit(1792214877.757:790): avc: denied { write } for pid=15781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.445952][T12811] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 850.502861][ T31] audit: type=1400 audit(1792214877.857:791): avc: denied { write } for pid=15804 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.802527][T15824] jffs2: notice: (15824) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 3 orphan) and 6 of xref (0 dead, 6 orphan) found. [ 850.835727][ T31] audit: type=1400 audit(1792214878.177:792): avc: denied { write } for pid=15823 comm="syz.2.2727" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 850.936852][ T31] audit: type=1400 audit(1792214878.287:793): avc: denied { write } for pid=15830 comm="syz.2.2730" name="usb_gadget" dev="configfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 850.939393][ T31] audit: type=1400 audit(1792214878.287:794): avc: denied { remove_name } for pid=15830 comm="syz.2.2730" name="g1" dev="configfs" ino=9668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 850.940922][ T31] audit: type=1400 audit(1792214878.287:795): avc: denied { rmdir } for pid=15830 comm="syz.2.2730" name="g1" dev="configfs" ino=9668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.273445][T15856] jffs2: notice: (15856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 851.452595][ T2311] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 851.695534][ T2311] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 851.699433][ T2311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.699459][ T2311] usb 3-1: Product: syz [ 851.699473][ T2311] usb 3-1: Manufacturer: syz [ 851.699487][ T2311] usb 3-1: SerialNumber: syz [ 851.740937][T15876] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 851.897450][T15888] tipc: Enabling of bearer rejected, failed to enable media [ 851.965585][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 851.989409][ T2311] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 851.992344][ T2311] usb 3-1: USB disconnect, device number 12 [ 852.017098][ T2311] usblp0: removed [ 852.237566][T12811] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 852.422672][ T5710] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 852.583616][ T5710] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 852.585494][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.585524][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 852.585541][ T5710] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 852.585564][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.858944][T15926] bridge_slave_0: left allmulticast mode [ 852.858973][T15926] bridge_slave_0: left promiscuous mode [ 852.859190][T15926] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.887456][T15926] bridge_slave_1: left allmulticast mode [ 852.887475][T15926] bridge_slave_1: left promiscuous mode [ 852.887609][T15926] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.916833][T15926] bond0: (slave bond_slave_0): Releasing backup interface [ 852.919622][T15926] bond0: (slave bond_slave_1): Releasing backup interface [ 852.945587][T15926] team0: Port device team_slave_0 removed [ 852.949013][T15935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=15935 comm=syz.4.2766 [ 852.949821][T15926] team0: Port device team_slave_1 removed [ 852.950478][T15926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.950496][T15926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.952240][T15926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.952257][T15926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.981467][T15926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 852.999049][T15931] team0: Mode changed to "loadbalance" [ 853.015938][T15935] vlan0: entered promiscuous mode [ 853.035277][ T5710] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 853.035296][ T5710] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 853.062275][T15935] team0: Port device vlan0 added [ 853.065077][ T5710] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 853.068622][T15926] tipc: Enabled bearer , priority 0 [ 853.083864][ T5710] usb 6-1: USB disconnect, device number 9 [ 853.216955][ T5709] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 853.372565][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 853.373171][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 853.374205][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.374224][ T5709] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 853.374255][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.377096][ T5709] usb 4-1: config 0 descriptor?? [ 853.463661][ T2311] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 853.483329][T12811] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 853.627651][ T2311] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 853.627827][T15964] fuse: Bad value for 'rootmode' [ 853.631956][ T2311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.631998][ T2311] usb 5-1: Product: syz [ 853.632013][ T2311] usb 5-1: Manufacturer: syz [ 853.632027][ T2311] usb 5-1: SerialNumber: syz [ 853.866892][ T2311] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 853.872889][ T2311] usb 5-1: USB disconnect, device number 14 [ 853.891991][ T2311] usblp0: removed [ 854.064270][ T2311] tipc: Node number set to 1337487394 [ 854.338913][T15991] tipc: Resetting bearer [ 854.342952][T15991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 854.348911][T15991] team0: Unable to change to the same mode the team is in [ 854.553434][ T2311] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 854.601461][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 854.602863][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 854.619386][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 854.629033][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 854.631922][T15998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 854.637709][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 854.663708][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 854.663727][ T31] audit: type=1400 audit(1792214882.007:800): avc: denied { mounton } for pid=16000 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 854.704478][ T2311] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 854.705322][ T2311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.705360][ T2311] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 854.705382][ T2311] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 854.705402][ T2311] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 854.705434][ T2311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.718752][T15998] team0: No ports can be present during mode change [ 854.722808][T15998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=15998 comm=syz.0.2792 [ 854.727462][T15989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 854.727563][T15989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 854.728986][ T2311] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 854.740931][ T2311] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 854.740993][ T2311] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 854.751103][ T6786] tipc: Resetting bearer [ 854.755677][T15998] tipc: Enabling of bearer rejected, already enabled [ 854.770896][ T2311] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 854.824643][ T2311] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 854.824708][ T2311] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 854.833742][ T5786] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 854.839098][ T2311] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 854.992908][ T5786] usb 5-1: device descriptor read/64, error -71 [ 855.229211][ T2311] usb 6-1: USB disconnect, device number 10 [ 855.239511][ T5786] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 855.257616][T16000] rxe_eth0 speed is unknown, defaulting to 1000 [ 855.294849][ T2311] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 855.339865][ T2311] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 855.351466][ T2311] keyspan 6-1:1.0: device disconnected [ 855.392602][ T5786] usb 5-1: device descriptor read/64, error -71 [ 855.502755][ T5786] usb usb5-port1: attempt power cycle [ 855.694487][T16027] tipc: Resetting bearer [ 855.705160][T16027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 855.852792][ T5786] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 855.873692][ T5786] usb 5-1: device descriptor read/8, error -71 [ 855.988886][ T2311] usb 4-1: USB disconnect, device number 5 [ 856.122669][ T5786] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 856.122951][ T5710] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 856.126857][T16000] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.127317][T16000] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.127450][T16000] bridge_slave_0: entered allmulticast mode [ 856.130765][T16000] bridge_slave_0: entered promiscuous mode [ 856.140013][T16000] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.140132][T16000] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.140229][T16000] bridge_slave_1: entered allmulticast mode [ 856.141542][T16000] bridge_slave_1: entered promiscuous mode [ 856.178126][ T5786] usb 5-1: device descriptor read/8, error -71 [ 856.205204][T16000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.211118][T16000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.249302][T16000] team0: Port device team_slave_0 added [ 856.250836][T16000] team0: Port device team_slave_1 added [ 856.271741][T16000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.271772][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.271794][T16000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.273186][ T5710] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 856.274098][ T5710] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 856.274894][ T5710] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 856.276818][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.276845][ T5710] usb 6-1: Product: syz [ 856.276861][ T5710] usb 6-1: Manufacturer: syz [ 856.276875][ T5710] usb 6-1: SerialNumber: syz [ 856.278540][T16000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.278552][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.278570][T16000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.284636][ T5710] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 856.319180][ T5710] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 856.335373][T16000] hsr_slave_0: entered promiscuous mode [ 856.336125][T16000] hsr_slave_1: entered promiscuous mode [ 856.336599][T16000] debugfs: 'hsr0' already exists in 'hsr' [ 856.336613][T16000] Cannot create hsr debugfs directory [ 856.337899][ T5786] usb usb5-port1: unable to enumerate USB device [ 856.338563][ T5710] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 856.663676][T12811] Bluetooth: hci0: command tx timeout [ 856.671607][T16000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.689371][ T5616] block nbd0: Receive control failed (result -32) [ 856.694819][T16031] block nbd0: shutting down sockets [ 856.840460][T16000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.978528][T16000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.074049][T16000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.142355][T16053] syzkaller1: entered promiscuous mode [ 857.142396][T16053] syzkaller1: entered allmulticast mode [ 857.257861][T16055] fuse: Invalid rootmode [ 857.329574][T16000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 857.344589][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 857.345298][T16000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 857.351130][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 857.351908][T16000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 857.365728][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 857.376635][T16000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 857.405297][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 857.443895][ T31] audit: type=1400 audit(1792214884.787:801): avc: denied { node_bind } for pid=16068 comm="syz.0.2812" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 857.458981][T16067] syzkaller0: entered promiscuous mode [ 857.459007][T16067] syzkaller0: entered allmulticast mode [ 857.536059][T16071] fuse: Unknown parameter 'grou00000000000000000000' [ 857.572978][T16000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.605429][T16000] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.641292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.641373][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.666534][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.666638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.842365][T16084] syzkaller1: entered promiscuous mode [ 857.842388][T16084] syzkaller1: entered allmulticast mode [ 857.875589][T16087] fuse: Invalid rootmode [ 858.039757][T16098] netlink: 'syz.3.2822': attribute type 5 has an invalid length. [ 858.039779][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'. [ 858.148851][T16000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.195033][T16000] veth0_vlan: entered promiscuous mode [ 858.211608][T16000] veth1_vlan: entered promiscuous mode [ 858.243116][T16000] veth0_macvtap: entered promiscuous mode [ 858.247282][T16000] veth1_macvtap: entered promiscuous mode [ 858.274756][T16000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.285128][T16000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.368529][T16108] tipc: Resetting bearer [ 858.376048][T16108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 858.404952][ T5616] block nbd0: Receive control failed (result -32) [ 858.409606][T16073] block nbd0: shutting down sockets [ 858.424785][T16030] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 858.424914][T16108] team0: No ports can be present during mode change [ 858.427168][T16108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16108 comm=syz.3.2825 [ 858.441797][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.441819][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.450510][ T5786] usb 6-1: USB disconnect, device number 11 [ 858.481862][T16108] tipc: Enabling of bearer rejected, already enabled [ 858.484238][ T6786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.484551][ T6786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.484584][ T6786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.484609][ T6786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.504794][ T5786] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 858.508498][ T5786] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 858.521084][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.521101][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.522834][ T5786] ti_usb_3410_5052 6-1:2.0: device disconnected [ 858.644408][ T31] audit: type=1400 audit(1792214885.987:802): avc: denied { mounton } for pid=16000 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 858.688203][T16114] fuse: Bad value for 'rootmode' [ 858.723539][T16115] jffs2: notice: (16115) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 858.756769][ T5616] Bluetooth: hci0: command tx timeout [ 858.804075][T16120] syzkaller1: entered promiscuous mode [ 858.804113][T16120] syzkaller1: entered allmulticast mode [ 859.011848][T16133] tipc: Resetting bearer [ 859.029782][T16133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 859.062125][T16133] team0: No ports can be present during mode change [ 859.070607][T16133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16133 comm=syz.3.2835 [ 859.073908][T16133] tipc: Enabling of bearer rejected, already enabled [ 859.202334][T16144] fuse: Bad value for 'rootmode' [ 859.259812][T16148] netlink: 'syz.4.2841': attribute type 5 has an invalid length. [ 859.259832][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 859.314600][T16152] syzkaller0: left promiscuous mode [ 859.314624][T16152] syzkaller0: left allmulticast mode [ 859.411218][ T31] audit: type=1326 audit(1792214886.757:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16160 comm="syz.3.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff365f9e559 code=0x0 [ 859.452276][T16163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 859.461977][T16163] team0: No ports can be present during mode change [ 859.468397][T16163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16163 comm=syz.4.2849 [ 859.472291][ T6040] tipc: Resetting bearer [ 859.478876][T16163] tipc: Enabling of bearer rejected, already enabled [ 859.526986][T16164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.599205][T16159] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 859.609103][T16169] xt_hashlimit: size too large, truncated to 1048576 [ 859.662561][ T5710] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 859.776065][T16177] fuse: Bad value for 'rootmode' [ 859.813082][ T5710] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 859.815504][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.815545][ T5710] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 859.815566][ T5710] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.817154][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 859.817176][ T5710] usb 3-1: Product: syz [ 859.817190][ T5710] usb 3-1: Manufacturer: syz [ 859.821637][T16154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 859.842810][ T5710] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 859.871713][T16180] fuse: Unknown parameter 'user_i00000000000000000000' [ 859.915690][ T5710] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 859.917751][T16182] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 859.917774][T16182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 859.927846][T16182] vhci_hcd vhci_hcd.0: Device attached [ 859.949192][T16182] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 859.949217][T16182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 859.949248][T16182] vhci_hcd vhci_hcd.0: Device attached [ 859.961569][T16183] vhci_hcd: connection closed [ 859.965664][T16185] vhci_hcd: connection closed [ 859.973873][ T6040] vhci_hcd vhci_hcd.4: stop threads [ 859.974738][ T6040] vhci_hcd vhci_hcd.4: release socket [ 859.974773][ T6040] vhci_hcd vhci_hcd.4: disconnect device [ 859.986830][ T6040] vhci_hcd vhci_hcd.4: stop threads [ 859.986851][ T6040] vhci_hcd vhci_hcd.4: release socket [ 859.986868][ T6040] vhci_hcd vhci_hcd.4: disconnect device [ 860.040913][ T5710] usb 3-1: USB disconnect, device number 13 [ 860.083234][ T5710] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 860.085264][ T5710] garmin_gps 3-1:1.0: device disconnected [ 860.168948][T16193] bridge1: entered allmulticast mode [ 860.239098][T16197] tipc: Resetting bearer [ 860.252908][T16197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 860.290428][T16197] team0: No ports can be present during mode change [ 860.291194][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16197 comm=syz.5.2860 [ 860.315890][T16197] team0: Port device vlan0 removed [ 860.317078][T16197] tipc: Enabling of bearer rejected, already enabled [ 860.379652][T16207] fuse: Unknown parameter 'use00000000000000000000' [ 860.381320][T16205] tipc: Resetting bearer [ 860.407220][T16205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 860.439242][T16205] team0: Port device vlan0 added [ 860.517940][T16213] fuse: Unknown parameter 'user_i00000000000000000000' [ 860.638566][T16224] jffs2: notice: (16224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 860.827571][ T5616] Bluetooth: hci0: command tx timeout [ 861.085543][T16251] netlink: 'syz.4.2883': attribute type 2 has an invalid length. [ 861.085566][T16251] netlink: 'syz.4.2883': attribute type 2 has an invalid length. [ 861.122742][T16109] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 861.293084][T16109] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 861.295229][T16109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.295246][T16109] usb 6-1: Product: syz [ 861.295254][T16109] usb 6-1: Manufacturer: syz [ 861.295264][T16109] usb 6-1: SerialNumber: syz [ 861.466748][T16270] fuse: Unknown parameter 'group_id00000000000000000000' [ 861.484790][T16272] syzkaller0: entered promiscuous mode [ 861.484811][T16272] syzkaller0: entered allmulticast mode [ 861.562085][T16271] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 861.598062][T16274] tipc: Enabled bearer , priority 10 [ 861.651384][T16278] i2c i2c-0: delete_device: Can't parse I2C address [ 861.706577][T16283] fuse: Unknown parameter 'user_i00000000000000000000' [ 861.725730][T16109] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 861.868437][T16296] fuse: Unknown parameter 'group_id00000000000000000000' [ 862.044824][T16298] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 862.123036][T16309] jffs2: notice: (16309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 862.210178][T16316] fuse: Unknown parameter 'user_i00000000000000000000' [ 862.572739][ T5710] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 862.594389][ T5616] block nbd2: Receive control failed (result -32) [ 862.599039][T16287] block nbd2: shutting down sockets [ 862.723491][ T5710] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 862.724451][ T5710] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.724480][ T5710] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 862.724501][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 862.727673][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 862.727698][ T5710] usb 4-1: Product: syz [ 862.727712][ T5710] usb 4-1: Manufacturer: syz [ 862.727726][ T5710] usb 4-1: SerialNumber: syz [ 862.733660][ T5710] usb 4-1: config 0 descriptor?? [ 862.765606][ T5710] usb 4-1: selecting invalid altsetting 0 [ 862.893393][T16337] bridge_slave_0: left allmulticast mode [ 862.893422][T16337] bridge_slave_0: left promiscuous mode [ 862.893584][T16337] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.903652][ T5616] Bluetooth: hci0: command tx timeout [ 862.930040][T16337] bridge_slave_1: left allmulticast mode [ 862.930068][T16337] bridge_slave_1: left promiscuous mode [ 862.930227][T16337] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.982088][T16337] bond0: (slave bond_slave_0): Releasing backup interface [ 863.005450][T16337] bond0: (slave bond_slave_1): Releasing backup interface [ 863.008191][ T5710] usb 4-1: USB disconnect, device number 6 [ 863.054146][T16337] team0: Port device team_slave_0 removed [ 863.054702][T16340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16340 comm=syz.2.2920 [ 863.058936][T16337] team0: Port device team_slave_1 removed [ 863.060579][T16337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.060600][T16337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.106661][T16337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.106716][T16337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.124494][T16337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 863.157031][T16338] team0: Mode changed to "loadbalance" [ 863.171467][T16340] vlan0: entered promiscuous mode [ 863.189650][T16337] tipc: Started in network mode [ 863.189680][T16337] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 863.189828][T16337] tipc: Enabled bearer , priority 0 [ 863.520081][T16348] fuse: Unknown parameter 'user_i00000000000000000000' [ 863.580024][ T5616] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 864.302638][ T2311] tipc: Node number set to 11578026 [ 864.327626][T16372] syzkaller0: entered promiscuous mode [ 864.327650][T16372] syzkaller0: entered allmulticast mode [ 864.330686][T16372] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 864.505592][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.505661][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.704260][ T2311] usb 6-1: USB disconnect, device number 12 [ 864.707570][ T2311] usblp0: removed [ 864.780494][T16384] fuse: Bad value for 'user_id' [ 864.780515][T16384] fuse: Bad value for 'user_id' [ 864.839067][T12602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 864.844352][T12602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 864.845006][T12602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 864.845602][T12602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 864.845987][T12602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 864.854554][ T5616] block nbd3: Receive control failed (result -32) [ 864.897085][T16359] block nbd3: shutting down sockets [ 865.018298][T16395] fuse: Unknown parameter 'user_id00000000000000000000' [ 865.199354][T16407] jffs2: notice: (16407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 865.204830][ T31] audit: type=1400 audit(1792214892.557:804): avc: denied { write } for pid=16405 comm="syz.3.2946" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 865.375208][T16413] fuse: Bad value for 'fd' [ 865.604306][ T2311] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 865.658402][T16386] rxe_eth0 speed is unknown, defaulting to 1000 [ 865.753022][ T2311] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 865.755700][ T2311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.755725][ T2311] usb 4-1: Product: syz [ 865.755739][ T2311] usb 4-1: Manufacturer: syz [ 865.755753][ T2311] usb 4-1: SerialNumber: syz [ 866.115216][ T5710] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 866.174851][ T2311] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 866.268232][ T5710] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 866.272572][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.272601][ T5710] usb 3-1: Product: syz [ 866.272615][ T5710] usb 3-1: Manufacturer: syz [ 866.272628][ T5710] usb 3-1: SerialNumber: syz [ 866.737080][ T5710] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 866.757211][T16437] syzkaller0: entered promiscuous mode [ 866.757232][T16437] syzkaller0: entered allmulticast mode [ 866.806968][ T31] audit: type=1400 audit(1792214894.157:805): avc: denied { shutdown } for pid=16450 comm="syz.0.2958" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 866.881207][T16455] fuse: Bad value for 'fd' [ 866.902580][ T5616] Bluetooth: hci1: command tx timeout [ 867.052779][T16386] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.054482][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.054802][T16386] bridge_slave_0: entered allmulticast mode [ 867.056747][T16386] bridge_slave_0: entered promiscuous mode [ 867.059088][T16386] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.059206][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.059290][T16386] bridge_slave_1: entered allmulticast mode [ 867.060703][T16386] bridge_slave_1: entered promiscuous mode [ 867.091410][T16386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.094031][T16386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.118325][T16386] team0: Port device team_slave_0 added [ 867.120949][T16386] team0: Port device team_slave_1 added [ 867.169015][T16386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.173267][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.173293][T16386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.177636][T16386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.177651][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.177693][T16386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.281003][T16386] hsr_slave_0: entered promiscuous mode [ 867.281895][T16386] hsr_slave_1: entered promiscuous mode [ 867.282250][T16386] debugfs: 'hsr0' already exists in 'hsr' [ 867.282284][T16386] Cannot create hsr debugfs directory [ 867.489951][T16386] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.562636][ T2311] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 867.595599][T16386] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.646371][T16386] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.690785][T16386] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.722534][ T2311] usb 6-1: Using ep0 maxpacket: 8 [ 867.723292][ T2311] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 867.724159][ T2311] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 867.724276][ T2311] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 867.724297][ T2311] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 867.724317][ T2311] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 867.724336][ T2311] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.724369][ T2311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.728516][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2967'. [ 867.728533][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2967'. [ 867.728549][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2967'. [ 867.911481][T16386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 867.915963][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.917277][T16386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 867.921700][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.922418][T16386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 867.935737][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 867.939251][T16386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 867.955797][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.970457][ T2311] usb 6-1: GET_CAPABILITIES returned 0 [ 867.970498][ T2311] usbtmc 6-1:16.0: can't read capabilities [ 868.048095][T16386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.059366][T16386] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.070475][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.070556][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.071752][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.071807][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.160689][ T5786] usb 6-1: USB disconnect, device number 13 [ 868.457294][T16386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.534413][T16499] Bluetooth: MGMT ver 1.23 [ 868.660860][T16505] fuse: Bad value for 'fd' [ 868.748569][T16386] veth0_vlan: entered promiscuous mode [ 868.759200][ T5616] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 868.768462][T16386] veth1_vlan: entered promiscuous mode [ 868.808038][T16386] veth0_macvtap: entered promiscuous mode [ 868.827883][T16510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 868.832289][T16386] veth1_macvtap: entered promiscuous mode [ 868.851450][T16386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.862233][T16386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.875132][T16510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16510 comm=syz.5.2971 [ 868.900339][ T12] tipc: Resetting bearer [ 868.901401][T16510] tipc: Enabling of bearer rejected, already enabled [ 868.906312][ T5786] usb 3-1: USB disconnect, device number 14 [ 868.916893][ T1043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.917277][ T1043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.917557][ T1043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.917738][ T1043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.923956][ T5786] usblp1: removed [ 868.984230][ T5616] Bluetooth: hci1: command tx timeout [ 869.081598][ T31] audit: type=1400 audit(1792214896.427:806): avc: denied { getopt } for pid=16513 comm="syz.2.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 869.090215][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.090254][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.153255][ T31] audit: type=1326 audit(1792214896.507:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.5.2974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f259e559 code=0x0 [ 869.192394][ T5786] usb 4-1: USB disconnect, device number 7 [ 869.221204][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.221227][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.280228][ T5786] usblp0: removed [ 869.652318][T16536] svc: failed to register nfsdv3 RPC service (errno 97). [ 869.652345][T16536] svc: failed to register nfsaclv3 RPC service (errno 97). [ 869.685074][T16540] tipc: Resetting bearer [ 869.715061][T16540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 869.747773][T16540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16540 comm=syz.0.2982 [ 869.753864][T16540] tipc: Enabling of bearer rejected, already enabled [ 869.800777][T16544] syzkaller0: entered promiscuous mode [ 869.800799][T16544] syzkaller0: entered allmulticast mode [ 869.898906][T16550] program syz.0.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.900501][ T31] audit: type=1400 audit(1792214897.247:808): avc: denied { read write } for pid=16549 comm="syz.0.2987" name="sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 869.900544][ T31] audit: type=1400 audit(1792214897.247:809): avc: denied { open } for pid=16549 comm="syz.0.2987" path="/dev/sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 869.939277][ T5616] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 870.063698][ T5786] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 870.214114][ T5786] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 870.216690][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.216716][ T5786] usb 3-1: Product: syz [ 870.216729][ T5786] usb 3-1: Manufacturer: syz [ 870.216742][ T5786] usb 3-1: SerialNumber: syz [ 870.449310][T16578] syzkaller0: entered promiscuous mode [ 870.449331][T16578] syzkaller0: entered allmulticast mode [ 870.509664][T16581] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3000'. [ 870.642014][ T5786] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 870.690684][T16594] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3005'. [ 870.711370][T16596] fuse: Unknown parameter '0x0000000000000003' [ 870.857722][T16607] syzkaller0: left promiscuous mode [ 870.857745][T16607] syzkaller0: left allmulticast mode [ 870.935893][T16613] syzkaller0: entered promiscuous mode [ 870.935908][T16613] syzkaller0: entered allmulticast mode [ 870.937699][T16613] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 871.062810][ T5616] Bluetooth: hci1: command tx timeout [ 871.132541][ T5786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 871.292926][ T5786] usb 4-1: Using ep0 maxpacket: 8 [ 871.296809][ T5786] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 871.299416][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.299456][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.340898][ T5786] usb 4-1: config 0 descriptor?? [ 871.399468][ T31] audit: type=1400 audit(1792214898.747:810): avc: denied { write } for pid=16619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.493609][ T31] audit: type=1400 audit(1792214898.847:811): avc: denied { write } for pid=16630 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.558685][ T5786] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 871.754949][ T31] audit: type=1400 audit(1792214899.097:812): avc: denied { write } for pid=16632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.880184][ T31] audit: type=1400 audit(1792214899.227:813): avc: denied { write } for pid=16643 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.089466][T16654] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3018'. [ 872.117686][ T31] audit: type=1400 audit(1792214899.467:814): avc: denied { name_bind } for pid=16653 comm="syz.4.3018" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 872.119832][T16654] syzkaller1: entered promiscuous mode [ 872.119851][T16654] syzkaller1: entered allmulticast mode [ 872.294578][ T31] audit: type=1400 audit(1792214899.647:815): avc: denied { write } for pid=16652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.373569][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3020'. [ 872.406883][ T31] audit: type=1400 audit(1792214899.757:816): avc: denied { write } for pid=16669 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.752142][T16685] syzkaller0: entered promiscuous mode [ 872.752164][T16685] syzkaller0: entered allmulticast mode [ 872.814361][ T31] audit: type=1400 audit(1792214900.167:817): avc: denied { write } for pid=16688 comm="syz.5.3028" name="ip_mr_vif" dev="proc" ino=4026533941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 872.910304][T16693] TC_ACT_REPEAT abuse ? [ 873.016464][ T31] audit: type=1326 audit(1792214900.367:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16695 comm="syz.5.3031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f259e559 code=0x0 [ 873.142767][ T5616] Bluetooth: hci1: command tx timeout [ 873.196900][ T31] audit: type=1400 audit(1792214900.547:819): avc: denied { write } for pid=16702 comm="syz.4.3034" name="subsystems" dev="configfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 873.343348][T16711] random: crng reseeded on system resumption [ 873.531133][T16109] usb 3-1: USB disconnect, device number 15 [ 873.540001][T16719] TC_ACT_REPEAT abuse ? [ 873.541367][T16109] usblp0: removed [ 873.884563][T12811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 873.890549][T12811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 873.892429][T12811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 873.918673][T12811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 873.921230][T12811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 874.004938][T16737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.026516][T16737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 874.026663][T16737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.026713][T16737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 874.037066][T15939] usb 4-1: USB disconnect, device number 8 [ 874.159773][T16737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 874.245792][T16737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.245889][T16737] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 874.287423][T16737] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 874.298850][T16737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 874.298923][T16737] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 874.318812][T16758] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 874.319306][T16737] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 874.497293][T16733] rxe_eth0 speed is unknown, defaulting to 1000 [ 874.612732][T16109] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 874.738627][T16780] tipc: Resetting bearer [ 874.752299][T16780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 874.770481][T16109] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 874.771385][T16109] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.771426][T16109] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 874.771454][T16109] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 874.771488][T16109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.222687][T15329] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 875.338060][T16109] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 875.338089][T16109] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 875.339705][T16109] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 875.386134][T16109] usb 5-1: USB disconnect, device number 19 [ 875.413988][T15329] usb 3-1: Using ep0 maxpacket: 16 [ 875.414504][T15329] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 875.415548][T15329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.415590][T15329] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 875.415614][T15329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 875.415643][T15329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.419646][T15329] usb 3-1: config 0 descriptor?? [ 875.488031][T15329] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 875.510758][T16733] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.510889][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.511002][T16733] bridge_slave_0: entered allmulticast mode [ 875.513592][T16733] bridge_slave_0: entered promiscuous mode [ 875.515799][T16733] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.515904][T16733] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.515987][T16733] bridge_slave_1: entered allmulticast mode [ 875.517233][T16733] bridge_slave_1: entered promiscuous mode [ 875.544721][T16733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.550540][T16733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.575686][T16733] team0: Port device team_slave_0 added [ 875.577750][T16733] team0: Port device team_slave_1 added [ 875.597857][T16733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.597872][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.597893][T16733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.598910][T16733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.598922][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.598941][T16733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.632613][T16733] hsr_slave_0: entered promiscuous mode [ 875.633274][T16733] hsr_slave_1: entered promiscuous mode [ 875.633705][T16733] debugfs: 'hsr0' already exists in 'hsr' [ 875.633719][T16733] Cannot create hsr debugfs directory [ 875.740752][T16790] FAULT_INJECTION: forcing a failure. [ 875.740752][T16790] name fail_futex, interval 1, probability 0, space 0, times 0 [ 875.740786][T16790] CPU: 0 UID: 0 PID: 16790 Comm: syz.5.3068 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.740808][T16790] Tainted: [L]=SOFTLOCKUP [ 875.740813][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 875.740823][T16790] Call Trace: [ 875.740828][T16790] [ 875.740835][T16790] dump_stack_lvl+0x100/0x190 [ 875.740862][T16790] should_fail_ex.cold+0x5/0xa [ 875.740883][T16790] get_futex_key+0x1d0/0x14f0 [ 875.740907][T16790] ? __pfx_get_futex_key+0x10/0x10 [ 875.740929][T16790] ? __mutex_unlock_slowpath+0x35d/0x930 [ 875.740959][T16790] futex_wake+0xf4/0x5e0 [ 875.740980][T16790] ? __pfx_futex_wake+0x10/0x10 [ 875.741000][T16790] ? lock_acquire+0x1d1/0x380 [ 875.741016][T16790] ? detach_task_ctx_data+0x83/0x490 [ 875.741039][T16790] do_futex+0x2b2/0x440 [ 875.741061][T16790] ? __pfx_do_futex+0x10/0x10 [ 875.741080][T16790] ? __might_fault+0xc5/0x140 [ 875.741106][T16790] mm_exit_exec_release+0x256/0x2f0 [ 875.741130][T16790] do_exit+0x707/0x2a60 [ 875.741159][T16790] ? __pfx_do_exit+0x10/0x10 [ 875.741182][T16790] ? do_raw_spin_lock+0x128/0x260 [ 875.741207][T16790] ? find_held_lock+0x2b/0x80 [ 875.741232][T16790] ? get_signal+0x7e0/0x21e0 [ 875.741255][T16790] do_group_exit+0xd5/0x2a0 [ 875.741282][T16790] get_signal+0x1ec7/0x21e0 [ 875.741312][T16790] ? __pfx_get_signal+0x10/0x10 [ 875.741335][T16790] ? do_futex+0x190/0x440 [ 875.741363][T16790] arch_do_signal_or_restart+0x91/0x7e0 [ 875.741391][T16790] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 875.741428][T16790] ? fdget_pos+0x2c0/0x380 [ 875.741451][T16790] exit_to_user_mode_loop+0x139/0x700 [ 875.741475][T16790] ? rcu_is_watching+0x13/0xc0 [ 875.741503][T16790] do_syscall_64+0x661/0x790 [ 875.741532][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.741550][T16790] RIP: 0033:0x7f78f259e559 [ 875.741566][T16790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.741584][T16790] RSP: 002b:00007f78f33f20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 875.741600][T16790] RAX: fffffffffffffe00 RBX: 00007f78f2826098 RCX: 00007f78f259e559 [ 875.741609][T16790] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f78f2826098 [ 875.741618][T16790] RBP: 00007f78f2826090 R08: 0000000000000000 R09: 0000000000000000 [ 875.741627][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.741636][T16790] R13: 00007f78f2826128 R14: 00007ffd36d803a0 R15: 00007ffd36d80488 [ 875.741656][T16790] [ 876.012134][T16733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.088411][T16815] fuse: Unknown parameter 'fd0x0000000000000003' [ 876.102544][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 876.140080][T12811] block nbd3: Receive control failed (result -32) [ 876.141873][T16798] block nbd3: shutting down sockets [ 876.191043][T16733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.194035][T12811] Bluetooth: hci0: command 0x0c1a tx timeout [ 876.278516][T12811] Bluetooth: hci1: command 0x0c1a tx timeout [ 876.290946][T16733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.343340][T12811] Bluetooth: hci3: command 0x041b tx timeout [ 876.414653][T16733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.604516][T16733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 876.607943][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 876.608672][T16733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 876.622672][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.623343][T16733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 876.630701][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 876.635546][T16733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 876.646586][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 876.715567][T16109] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 876.743608][T16733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.762759][T16733] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.770498][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.770546][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.801434][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.801505][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.864385][T16109] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 876.865859][T16109] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.865891][T16109] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 876.865919][T16109] usb 5-1: config 0 interface 0 has no altsetting 0 [ 876.869245][T16109] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 876.869270][T16109] usb 5-1: Product: syz [ 876.869284][T16109] usb 5-1: Manufacturer: syz [ 876.869298][T16109] usb 5-1: SerialNumber: syz [ 876.880056][T16109] usb 5-1: config 0 descriptor?? [ 876.889797][T16109] usb 5-1: selecting invalid altsetting 0 [ 876.966633][T16857] tipc: Resetting bearer [ 876.978805][T16857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 876.996241][T16857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16857 comm=syz.3.3091 [ 877.003377][T16857] tipc: Enabling of bearer rejected, already enabled [ 877.151710][T16109] usb 5-1: USB disconnect, device number 20 [ 877.270648][T13784] udevd[13784]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.328353][T16868] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3095'. [ 877.328375][T16868] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3095'. [ 877.328391][T16868] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3095'. [ 877.548040][T16733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.609895][T16733] veth0_vlan: entered promiscuous mode [ 877.632171][T16733] veth1_vlan: entered promiscuous mode [ 877.690138][T16733] veth0_macvtap: entered promiscuous mode [ 877.712956][T16733] veth1_macvtap: entered promiscuous mode [ 877.761405][T16733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.776015][T16733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.884342][ T7749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.884493][ T7749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.884527][ T7749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.884560][ T7749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.054146][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 878.054164][ T31] audit: type=1400 audit(1792214905.407:822): avc: denied { write } for pid=16882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.057174][ T5709] usb 3-1: USB disconnect, device number 16 [ 878.106048][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.106068][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.231989][T16908] tipc: Resetting bearer [ 878.238555][T16908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.241723][ T31] audit: type=1400 audit(1792214905.587:823): avc: denied { write } for pid=16907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.277854][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.277872][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.282852][T12811] Bluetooth: hci0: command 0x0c1a tx timeout [ 878.330812][T16902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16902 comm=syz.3.3101 [ 878.352976][T12811] Bluetooth: hci1: command 0x0c1a tx timeout [ 878.377978][T16902] tipc: Enabling of bearer rejected, already enabled [ 878.397891][T16911] team0: Port device vlan0 added [ 878.423406][T12811] Bluetooth: hci3: command 0x041b tx timeout [ 878.599658][T12811] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 878.869286][T16938] syzkaller0: entered promiscuous mode [ 878.869308][T16938] syzkaller0: entered allmulticast mode [ 878.900459][T16938] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 879.139774][ T31] audit: type=1400 audit(1792214906.487:824): avc: denied { write } for pid=16928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.218771][ T31] audit: type=1400 audit(1792214906.567:825): avc: denied { map } for pid=16949 comm="syz.4.3116" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 879.282643][ T31] audit: type=1400 audit(1792214906.637:826): avc: denied { call } for pid=16949 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 879.282896][ T31] audit: type=1400 audit(1792214906.637:827): avc: denied { transfer } for pid=16949 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 879.282976][T16951] binder: 16949:16951 ioctl c0306201 200000000500 returned -14 [ 879.510274][ T31] audit: type=1400 audit(1792214906.857:828): avc: denied { write } for pid=16958 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.740497][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 879.757219][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 879.760446][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 879.762997][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 879.787437][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 880.139595][T16985] syzkaller0: entered promiscuous mode [ 880.139618][T16985] syzkaller0: entered allmulticast mode [ 880.172165][T16985] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 880.343170][T12811] Bluetooth: hci0: command 0x0c1a tx timeout [ 880.363005][ T31] audit: type=1400 audit(1792214907.717:829): avc: denied { read } for pid=16995 comm="syz.0.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 880.417299][ T31] audit: type=1400 audit(1792214907.767:830): avc: denied { write } for pid=16995 comm="syz.0.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 880.424026][T12811] Bluetooth: hci1: command 0x0c1a tx timeout [ 880.503444][T12811] Bluetooth: hci3: command 0x041b tx timeout [ 880.591315][T17004] jffs2: notice: (17004) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 880.630723][ T31] audit: type=1400 audit(1792214907.977:831): avc: denied { write } for pid=17003 comm="syz.5.3129" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 880.749301][T16966] rxe_eth0 speed is unknown, defaulting to 1000 [ 880.887363][T17011] FAULT_INJECTION: forcing a failure. [ 880.887363][T17011] name failslab, interval 1, probability 0, space 0, times 0 [ 880.887398][T17011] CPU: 1 UID: 0 PID: 17011 Comm: syz.0.3131 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.887429][T17011] Tainted: [L]=SOFTLOCKUP [ 880.887436][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 880.887448][T17011] Call Trace: [ 880.887459][T17011] [ 880.887467][T17011] dump_stack_lvl+0x100/0x190 [ 880.887501][T17011] should_fail_ex.cold+0x5/0xa [ 880.887529][T17011] should_failslab+0xc2/0x120 [ 880.887560][T17011] __kmalloc_noprof+0xfc/0x840 [ 880.887583][T17011] ? __seq_open_private+0x22/0xd0 [ 880.887613][T17011] __seq_open_private+0x22/0xd0 [ 880.887634][T17011] prepare_seq_file+0x1d5/0x510 [ 880.887655][T17011] bpf_iter_new_fd+0xb5/0x140 [ 880.887675][T17011] __sys_bpf+0x200a/0x4a30 [ 880.887701][T17011] ? __pfx___sys_bpf+0x10/0x10 [ 880.887718][T17011] ? find_held_lock+0x2b/0x80 [ 880.887758][T17011] ? futex_wake+0x4ea/0x5e0 [ 880.887798][T17011] ? vm_mmap_pgoff+0x103/0x470 [ 880.887843][T17011] ? __x64_sys_futex+0x34f/0x4d0 [ 880.887869][T17011] ? __x64_sys_futex+0x358/0x4d0 [ 880.887897][T17011] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 880.887923][T17011] ? xfd_validate_state+0x129/0x190 [ 880.887946][T17011] ? __x64_sys_bpf+0xce/0x140 [ 880.887969][T17011] __x64_sys_bpf+0xce/0x140 [ 880.887992][T17011] ? do_syscall_64+0xae/0x790 [ 880.888025][T17011] do_syscall_64+0x123/0x790 [ 880.888058][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.888078][T17011] RIP: 0033:0x7f51af19e559 [ 880.888094][T17011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.888115][T17011] RSP: 002b:00007f51b00cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.888136][T17011] RAX: ffffffffffffffda RBX: 00007f51af425fa0 RCX: 00007f51af19e559 [ 880.888148][T17011] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000021 [ 880.888163][T17011] RBP: 00007f51af235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 880.888173][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.888183][T17011] R13: 00007f51af426038 R14: 00007f51af425fa0 R15: 00007ffdc9b420d8 [ 880.888212][T17011] [ 881.305347][T17031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 881.305524][T17031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 881.305679][T17031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 881.305828][T17031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 881.305885][T17031] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 881.355115][T17031] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 881.712906][T17054] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 881.766974][T17059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.956844][T17064] syzkaller0: entered promiscuous mode [ 881.956867][T17064] syzkaller0: entered allmulticast mode [ 881.973820][T17064] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 882.078053][T17080] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 882.199631][T16966] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.199762][T16966] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.199854][T16966] bridge_slave_0: entered allmulticast mode [ 882.201175][T16966] bridge_slave_0: entered promiscuous mode [ 882.230823][T16966] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.230977][T16966] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.231072][T16966] bridge_slave_1: entered allmulticast mode [ 882.232424][T16966] bridge_slave_1: entered promiscuous mode [ 882.282597][T16966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.284824][T16966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.334293][T16966] team0: Port device team_slave_0 added [ 882.338340][T16966] team0: Port device team_slave_1 added [ 882.349251][T17092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 882.403573][T16966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.403589][T16966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.403609][T16966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.406219][T16966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.406234][T16966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.406253][T16966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.434170][T17098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.547447][T16966] hsr_slave_0: entered promiscuous mode [ 882.548832][T16966] hsr_slave_1: entered promiscuous mode [ 882.549348][T16966] debugfs: 'hsr0' already exists in 'hsr' [ 882.549364][T16966] Cannot create hsr debugfs directory [ 882.694637][T17110] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 882.863899][T17119] CacheFiles: mkdir cache failed with error -1 [ 882.863951][T17119] CacheFiles: Failed to register: -1 [ 882.905570][T16898] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 882.919755][T16966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.919787][T16966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.979745][T17124] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 883.055305][T16898] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 883.056572][T16898] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.056612][T16898] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 883.056634][T16898] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 883.056654][T16898] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 883.056688][T16898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.060860][T17105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 883.060961][T17105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 883.073894][T16898] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 883.077901][T16898] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 883.077962][T16898] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 883.081416][T16898] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 883.086459][T16898] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 883.086518][T16898] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 883.090853][T16898] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 883.196782][T16966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.196815][T16966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.224755][T17131] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 883.268871][T16898] usb 5-1: USB disconnect, device number 21 [ 883.281574][T16966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.281605][T16898] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 883.281607][T16966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.288272][T16898] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 883.297250][T16898] keyspan 5-1:1.0: device disconnected [ 883.312985][T12811] Bluetooth: hci0: command 0x0c1a tx timeout [ 883.353190][T17135] syzkaller1: entered promiscuous mode [ 883.353212][T17135] syzkaller1: entered allmulticast mode [ 883.382900][ T5616] Bluetooth: hci3: command 0x041b tx timeout [ 883.382933][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 883.383029][T12811] Bluetooth: hci2: command 0x041b tx timeout [ 883.436012][T16966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.436043][T16966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.469623][T17139] syzkaller0: entered promiscuous mode [ 883.469646][T17139] syzkaller0: entered allmulticast mode [ 883.478800][T17139] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 883.748133][T16966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 883.754358][T16966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 883.755177][T16966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 883.772389][T16966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.773801][T16966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 883.787922][T16966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 883.795704][T16966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 883.801652][T16966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.826577][T17153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 883.826723][T17153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 883.826843][T17153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 883.826962][T17153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 883.894268][T16966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.918733][T16966] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.926856][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.926930][ T7749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.948835][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.948893][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.955926][T16898] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 884.101146][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 884.101164][ T31] audit: type=1400 audit(1792214911.447:839): avc: denied { create } for pid=17171 comm="syz.4.3187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 884.104246][T16898] usb 3-1: Using ep0 maxpacket: 8 [ 884.105377][T16898] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 884.106201][T16898] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 884.106221][T16898] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 884.106237][T16898] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 884.106253][T16898] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 884.106270][T16898] usb 3-1: config 250 has no interface number 0 [ 884.106299][T16898] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 884.106321][T16898] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 884.106342][T16898] usb 3-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 884.106366][T16898] usb 3-1: config 250 interface 228 has no altsetting 0 [ 884.107603][T16898] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 884.107624][T16898] usb 3-1: Product: syz [ 884.107637][T16898] usb 3-1: SerialNumber: syz [ 884.124163][T16898] hub 3-1:250.228: bad descriptor, ignoring hub [ 884.124186][T16898] hub 3-1:250.228: probe with driver hub failed with error -5 [ 884.278410][ T31] audit: type=1400 audit(1792214911.627:840): avc: denied { mounton } for pid=17171 comm="syz.4.3187" path="/58/file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 884.402281][T16966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.452414][T16966] veth0_vlan: entered promiscuous mode [ 884.467808][T16966] veth1_vlan: entered promiscuous mode [ 884.512420][T16966] veth0_macvtap: entered promiscuous mode [ 884.524909][T16966] veth1_macvtap: entered promiscuous mode [ 884.541350][T16966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.556508][T16966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.608377][ T6786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.610356][ T1043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.610395][ T1043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.610421][ T1043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.655584][T15939] usb 3-1: USB disconnect, device number 17 [ 884.736685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.736707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.814430][ T7749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.814452][ T7749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.925266][T17200] vlan0: entered promiscuous mode [ 884.945313][T17200] team0: Port device vlan0 added [ 885.007540][T17202] TC_ACT_REPEAT abuse ? [ 885.433359][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 885.439308][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 885.440390][ T31] audit: type=1400 audit(1792214912.787:841): avc: denied { write } for pid=17205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.442724][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 885.483812][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 885.484945][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 885.733286][ T31] audit: type=1400 audit(1792214913.087:842): avc: denied { write } for pid=17234 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.865008][T12602] Bluetooth: hci3: command 0x041b tx timeout [ 885.865051][T12602] Bluetooth: hci1: command 0x0c1a tx timeout [ 885.866057][ T5616] Bluetooth: hci2: command 0x041b tx timeout [ 885.866154][T12811] Bluetooth: hci0: command 0x0c1a tx timeout [ 886.184675][T15939] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 886.194593][T17259] jffs2: notice: (17259) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 886.205249][ T31] audit: type=1400 audit(1792214913.547:843): avc: denied { write } for pid=17258 comm="syz.4.3209" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 886.299009][T17259] FAULT_INJECTION: forcing a failure. [ 886.299009][T17259] name failslab, interval 1, probability 0, space 0, times 0 [ 886.299044][T17259] CPU: 1 UID: 0 PID: 17259 Comm: syz.4.3209 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.299072][T17259] Tainted: [L]=SOFTLOCKUP [ 886.299080][T17259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.299093][T17259] Call Trace: [ 886.299101][T17259] [ 886.299109][T17259] dump_stack_lvl+0x100/0x190 [ 886.299144][T17259] should_fail_ex.cold+0x5/0xa [ 886.299174][T17259] should_failslab+0xc2/0x120 [ 886.299211][T17259] __kmalloc_noprof+0xfc/0x840 [ 886.299238][T17259] ? jffs2_write_dirent+0x15f/0x9c0 [ 886.299270][T17259] jffs2_write_dirent+0x15f/0x9c0 [ 886.299304][T17259] ? __pfx_jffs2_write_dirent+0x10/0x10 [ 886.299328][T17259] ? irq_fpu_usable+0x83/0xb0 [ 886.299361][T17259] ? lockdep_hardirqs_on+0x7d/0x110 [ 886.299389][T17259] ? kernel_fpu_end+0x5f/0x80 [ 886.299413][T17259] ? __local_bh_enable_ip+0xa5/0x120 [ 886.299442][T17259] jffs2_do_create+0xa73/0xd00 [ 886.299470][T17259] ? __pfx_jffs2_do_create+0x10/0x10 [ 886.299491][T17259] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 886.299517][T17259] ? jffs2_create+0x27/0x390 [ 886.299552][T17259] jffs2_create+0x1bd/0x390 [ 886.299586][T17259] ? __pfx_jffs2_create+0x10/0x10 [ 886.299615][T17259] lookup_open+0x1255/0x1990 [ 886.299652][T17259] path_openat+0x10a0/0x2450 [ 886.299686][T17259] ? __pfx_path_openat+0x10/0x10 [ 886.299723][T17259] do_file_open+0x20e/0x430 [ 886.299755][T17259] ? __pfx_do_file_open+0x10/0x10 [ 886.299805][T17259] ? _raw_spin_unlock+0x28/0x50 [ 886.299829][T17259] ? alloc_fd+0x471/0x7a0 [ 886.299866][T17259] do_sys_openat2+0x10f/0x1e0 [ 886.299885][T17259] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.299902][T17259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 886.299937][T17259] __x64_sys_openat+0x12d/0x210 [ 886.299959][T17259] ? __pfx___x64_sys_openat+0x10/0x10 [ 886.299988][T17259] do_syscall_64+0x123/0x790 [ 886.300020][T17259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.300039][T17259] RIP: 0033:0x7f8b71b9e559 [ 886.300056][T17259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.300073][T17259] RSP: 002b:00007f8b72ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.300093][T17259] RAX: ffffffffffffffda RBX: 00007f8b71e25fa0 RCX: 00007f8b71b9e559 [ 886.300105][T17259] RDX: 0000000000101042 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 886.300116][T17259] RBP: 00007f8b71c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 886.300127][T17259] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 886.300139][T17259] R13: 00007f8b71e26038 R14: 00007f8b71e25fa0 R15: 00007ffcacd9bce8 [ 886.300166][T17259] [ 886.301367][ T31] audit: type=1400 audit(1792214913.647:844): avc: denied { write } for pid=17258 comm="syz.4.3209" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 886.347214][ T31] audit: type=1400 audit(1792214913.687:845): avc: denied { write } for pid=17258 comm="syz.4.3209" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 886.394367][T15939] usb 4-1: Using ep0 maxpacket: 8 [ 886.404204][T17222] rxe_eth0 speed is unknown, defaulting to 1000 [ 886.404820][T15939] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 886.416749][T15939] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 886.416775][T15939] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 886.416793][T15939] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 886.416809][T15939] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 886.416826][T15939] usb 4-1: config 250 has no interface number 0 [ 886.416856][T15939] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 886.416879][T15939] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 886.416904][T15939] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 886.416927][T15939] usb 4-1: config 250 interface 228 has no altsetting 0 [ 886.440607][ T31] audit: type=1400 audit(1792214913.787:846): avc: denied { write } for pid=17258 comm="syz.4.3209" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 886.452662][T15939] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 886.452705][T15939] usb 4-1: Product: syz [ 886.452718][T15939] usb 4-1: SerialNumber: syz [ 886.466809][T17259] fuse: Unknown parameter 'use00000000000000000000' [ 886.466885][ T31] audit: type=1400 audit(1792214913.817:847): avc: denied { mounton } for pid=17258 comm="syz.4.3209" path="/64/file0/file0" dev="jffs2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 886.550761][T17259] loop7: detected capacity change from 0 to 8 [ 886.671572][ T31] audit: type=1400 audit(1792214914.017:848): avc: denied { write } for pid=17276 comm="syz.2.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 886.814088][ T6786] IPVS: starting estimator thread 0... [ 886.826313][T15939] hub 4-1:250.228: bad descriptor, ignoring hub [ 886.826339][T15939] hub 4-1:250.228: probe with driver hub failed with error -5 [ 886.898357][T17280] IPVS: using max 49 ests per chain, 117600 per kthread [ 886.916347][T17283] TC_ACT_REPEAT abuse ? [ 887.151295][T17259] Dev loop7: unable to read RDB block 8 [ 887.151354][T17259] loop7: unable to read partition table [ 887.151515][T17259] loop7: partition table beyond EOD, truncated [ 887.154035][T17259] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 887.312945][T16512] usb 4-1: USB disconnect, device number 9 [ 887.553495][T12811] Bluetooth: hci4: command tx timeout [ 887.582843][T15939] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 887.714309][T15939] usb 5-1: device descriptor read/64, error -71 [ 887.814812][T17321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 887.872985][ T2311] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 887.943068][T12477] Bluetooth: hci3: command 0x041b tx timeout [ 887.943117][T12811] Bluetooth: hci2: command 0x041b tx timeout [ 887.952832][T15939] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 888.024001][ T2311] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 888.024923][ T2311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.024964][ T2311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 888.024991][ T2311] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 888.025027][ T2311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.034572][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.034688][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.034774][T17222] bridge_slave_0: entered allmulticast mode [ 888.035927][T17222] bridge_slave_0: entered promiscuous mode [ 888.037947][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.038056][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.038136][T17222] bridge_slave_1: entered allmulticast mode [ 888.040119][T17222] bridge_slave_1: entered promiscuous mode [ 888.072639][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.076838][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.131788][T17222] team0: Port device team_slave_0 added [ 888.139203][T17222] team0: Port device team_slave_1 added [ 888.168827][T15939] usb 5-1: device descriptor read/64, error -71 [ 888.175905][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.175920][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.175939][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.183006][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.183022][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.183042][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.226953][T17222] hsr_slave_0: entered promiscuous mode [ 888.227740][T17222] hsr_slave_1: entered promiscuous mode [ 888.228295][T17222] debugfs: 'hsr0' already exists in 'hsr' [ 888.228312][T17222] Cannot create hsr debugfs directory [ 888.274892][T15939] usb usb5-port1: attempt power cycle [ 888.403388][T17222] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.491649][T17222] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.562389][T17222] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.612564][T15939] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 888.630671][ T2311] usb 3-1: USB disconnect, device number 18 [ 888.633425][T15939] usb 5-1: device descriptor read/8, error -71 [ 888.656998][T17343] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 888.657218][T17343] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 888.713445][T17222] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.855201][T17345] rxe_eth0 speed is unknown, defaulting to 1000 [ 888.858224][T17222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 888.873419][T15939] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 888.887590][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.888842][T17222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 888.891903][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.893382][T15939] usb 5-1: device descriptor read/8, error -71 [ 888.922087][T17222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 888.936134][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.937784][T17222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 888.940747][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.004528][T15939] usb usb5-port1: unable to enumerate USB device [ 889.054081][T17222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.076673][T17222] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.081399][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.081485][ T7749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.112036][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.112082][ T6786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.511242][T17363] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 889.622950][T12811] Bluetooth: hci4: command tx timeout [ 889.756222][T17222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.832622][T15939] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 889.988605][T15939] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 889.989548][T15939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.989593][T15939] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 889.989619][T15939] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 889.989641][T15939] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 889.989675][T15939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.024599][T12811] Bluetooth: hci2: command 0x041b tx timeout [ 890.067907][T17368] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 890.068021][T17368] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 890.080544][T15939] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 890.082958][T15939] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 890.083016][T15939] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 890.101082][T15939] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 890.117786][T15939] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 890.117858][T15939] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 890.157203][T15939] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 890.227303][T17222] veth0_vlan: entered promiscuous mode [ 890.242636][T17222] veth1_vlan: entered promiscuous mode [ 890.296658][T17222] veth0_macvtap: entered promiscuous mode [ 890.322960][T17222] veth1_macvtap: entered promiscuous mode [ 890.355918][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.378970][T17222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.455187][ T6040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.455232][ T6040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.455262][ T6040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.455290][ T6040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.571727][T15329] usb 4-1: USB disconnect, device number 10 [ 890.610841][T15329] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 890.629286][T15329] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 890.629966][T15329] keyspan 4-1:1.0: device disconnected [ 890.677288][ T7749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.677309][ T7749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.768021][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.768041][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.984452][T15939] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 891.134807][T15939] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 891.135669][T15939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.135709][T15939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 891.135735][T15939] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 891.135768][T15939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.283287][T17405] fuse: Bad value for 'group_id' [ 891.283300][T17405] fuse: Bad value for 'group_id' [ 891.409834][T17411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 891.484242][T17415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.520128][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 891.520147][ T31] audit: type=1400 audit(1792214918.867:857): avc: denied { write } for pid=17416 comm="syz.3.3253" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 891.536270][T17417] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 891.565802][T15939] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 891.584949][T15939] usb 5-1: USB disconnect, device number 26 [ 891.703372][T12811] Bluetooth: hci4: command tx timeout [ 891.843384][T17424] FAULT_INJECTION: forcing a failure. [ 891.843384][T17424] name fail_futex, interval 1, probability 0, space 0, times 0 [ 891.843408][T17424] CPU: 0 UID: 0 PID: 17424 Comm: syz.5.3256 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.843426][T17424] Tainted: [L]=SOFTLOCKUP [ 891.843430][T17424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 891.843438][T17424] Call Trace: [ 891.843443][T17424] [ 891.843449][T17424] dump_stack_lvl+0x100/0x190 [ 891.843471][T17424] should_fail_ex.cold+0x5/0xa [ 891.843488][T17424] get_futex_key+0x1d0/0x14f0 [ 891.843508][T17424] ? __pfx_get_futex_key+0x10/0x10 [ 891.843530][T17424] futex_wake+0xf4/0x5e0 [ 891.843543][T17424] ? kasan_quarantine_put+0x104/0x240 [ 891.843561][T17424] ? __pfx_futex_wake+0x10/0x10 [ 891.843575][T17424] ? video_usercopy+0x734/0x1730 [ 891.843593][T17424] ? video_usercopy+0x739/0x1730 [ 891.843608][T17424] do_futex+0x2b2/0x440 [ 891.843625][T17424] ? __pfx_do_futex+0x10/0x10 [ 891.843646][T17424] __x64_sys_futex+0x34f/0x4d0 [ 891.843664][T17424] ? __pfx___x64_sys_futex+0x10/0x10 [ 891.843682][T17424] ? v4l2_ioctl+0x1c5/0x250 [ 891.843700][T17424] do_syscall_64+0x123/0x790 [ 891.843719][T17424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.843731][T17424] RIP: 0033:0x7f4eb399e559 [ 891.843742][T17424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.843753][T17424] RSP: 002b:00007f4eb48d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 891.843765][T17424] RAX: ffffffffffffffda RBX: 00007f4eb3c25fa8 RCX: 00007f4eb399e559 [ 891.843773][T17424] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4eb3c25fac [ 891.843781][T17424] RBP: 00007f4eb3c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 891.843788][T17424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.843796][T17424] R13: 00007f4eb3c26038 R14: 00007ffd32e8b600 R15: 00007ffd32e8b6e8 [ 891.843813][T17424] [ 892.089675][T17429] fuse: Bad value for 'group_id' [ 892.089695][T17429] fuse: Bad value for 'group_id' [ 892.103578][T12811] Bluetooth: hci2: command 0x041b tx timeout [ 892.189101][ T31] audit: type=1400 audit(1792214919.537:858): avc: denied { read write } for pid=17435 comm="syz.4.3261" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 892.190808][ T31] audit: type=1400 audit(1792214919.537:859): avc: denied { open } for pid=17435 comm="syz.4.3261" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 892.486586][T17456] fuse: Bad value for 'group_id' [ 892.486613][T17456] fuse: Bad value for 'group_id' [ 892.577604][T17460] overlayfs: failed to resolve './file1/file0': -2 [ 892.734726][ T31] audit: type=1400 audit(1792214920.087:860): avc: denied { allowed } for pid=17469 comm="syz.2.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 892.779298][T12811] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 892.963052][ T5710] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 893.112705][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 893.115112][ T5710] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 893.122878][ T5710] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 893.122902][ T5710] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 893.122920][ T5710] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 893.122938][ T5710] usb 4-1: config 250 has no interface number 0 [ 893.122968][ T5710] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 893.122989][ T5710] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 893.123008][ T5710] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 893.123028][ T5710] usb 4-1: config 250 interface 228 has no altsetting 0 [ 893.125633][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 893.125656][ T5710] usb 4-1: Product: syz [ 893.125670][ T5710] usb 4-1: SerialNumber: syz [ 893.129696][ T5710] hub 4-1:250.228: bad descriptor, ignoring hub [ 893.129718][ T5710] hub 4-1:250.228: probe with driver hub failed with error -5 [ 893.270551][T17501] team0: No ports can be present during mode change [ 893.275961][T17501] vlan0: entered promiscuous mode [ 893.283871][T17501] team0: Port device vlan0 added [ 893.286245][T17501] tipc: Started in network mode [ 893.286281][T17501] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 893.286386][T17501] tipc: Enabled bearer , priority 0 [ 893.360524][T17506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 893.666085][ T5710] usb 4-1: USB disconnect, device number 11 [ 893.719401][T12811] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 893.792785][T12811] Bluetooth: hci4: command tx timeout [ 893.799902][T17534] CacheFiles: Failed to register: -95 [ 893.821304][T17536] team0: No ports can be present during mode change [ 893.837397][T17536] vlan0: entered promiscuous mode [ 893.851490][T17536] team0: Port device vlan0 added [ 893.856926][T17536] tipc: Started in network mode [ 893.856952][T17536] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 893.857048][T17536] tipc: Enabled bearer , priority 0 [ 894.098102][ T31] audit: type=1400 audit(1792214921.447:861): avc: denied { ioctl } for pid=17542 comm="syz.5.3308" path="/dev/sg0" dev="devtmpfs" ino=902 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 894.161669][ T31] audit: type=1400 audit(1792214921.507:862): avc: denied { append } for pid=17544 comm="syz.3.3309" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 894.187582][T12811] Bluetooth: hci2: command 0x041b tx timeout [ 894.376479][T17555] jffs2: notice: (17555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 5 orphan) and 10 of xref (0 dead, 10 orphan) found. [ 894.405044][T17551] overlayfs: failed to resolve './file1/file0': -2 [ 894.434644][ T10] tipc: Node number set to 11578026 [ 894.735483][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 894.750992][ T31] audit: type=1400 audit(1792214922.097:863): avc: denied { create } for pid=17581 comm="syz.2.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 894.751038][ T31] audit: type=1400 audit(1792214922.097:864): avc: denied { connect } for pid=17581 comm="syz.2.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 894.824049][T12811] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 894.836639][T17587] bridge_slave_0: left allmulticast mode [ 894.836662][T17587] bridge_slave_0: left promiscuous mode [ 894.838361][T17587] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.846730][T17587] bridge_slave_1: left allmulticast mode [ 894.846751][T17587] bridge_slave_1: left promiscuous mode [ 894.846888][T17587] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.871309][T17587] bond0: (slave bond_slave_0): Releasing backup interface [ 894.883397][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 894.888094][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.888132][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 894.888155][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 894.888185][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.939559][T17587] bond0: (slave bond_slave_1): Releasing backup interface [ 894.951291][T17587] team0: Port device team_slave_0 removed [ 894.961569][T17587] team0: Port device team_slave_1 removed [ 894.962103][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.962115][T17587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.974527][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.974545][T17587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.979328][T17587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 894.982131][T17589] team0: No ports can be present during mode change [ 894.982289][ T5710] tipc: Node number set to 11578026 [ 894.995376][ T6040] tipc: Resetting bearer [ 895.165928][ T31] audit: type=1400 audit(1792214922.517:865): avc: denied { read } for pid=17597 comm="syz.5.3332" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 895.324019][ T10] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 895.324041][ T10] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 895.337671][ T10] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 895.347274][ T10] usb 4-1: USB disconnect, device number 12 [ 895.635000][T17615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 895.646408][T17615] team0: No ports can be present during mode change [ 895.650359][ T12] tipc: Resetting bearer [ 895.717887][T17621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.741211][T12811] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 895.787435][T12811] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 896.028838][T17633] fuse: Unknown parameter 'fd0x0000000000000003' [ 896.398535][T17644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.494838][T17649] netfs: Cache "CacheFiles" added (type cachefiles) [ 896.494859][T17649] CacheFiles: File cache on CacheFiles registered [ 896.495290][T17648] CacheFiles: File cache on CacheFiles unregistering [ 896.495298][T17648] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 897.298674][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 897.298693][ T31] audit: type=1400 audit(1792214924.647:868): avc: denied { read } for pid=17697 comm="syz.3.3374" name="set_event" dev="tracefs" ino=3014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 897.352015][T17701] capability: warning: `syz.3.3374' uses deprecated v2 capabilities in a way that may be insecure [ 897.352200][ T31] audit: type=1400 audit(1792214924.697:869): avc: denied { watch watch_reads } for pid=17699 comm="syz.5.3375" path="/proc/98/fd" dev="proc" ino=60015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 897.504139][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 914.336036][ T31] audit: type=1326 audit(1792214941.647:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.5.3381" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eb399e559 code=0x0 [ 926.035613][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.072821][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 950.688423][T12477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 950.710226][T12477] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 950.778364][T12477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.083751][T12477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.195777][T12477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 951.773958][T17418] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 953.236594][T17343] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 954.586600][T12477] Bluetooth: hci5: command tx timeout [ 956.698279][T12477] Bluetooth: hci5: command tx timeout [ 957.910574][T12811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 957.947330][T12811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 957.980692][T12811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 958.155360][T12811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 958.240562][T12811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 958.747241][ T5616] Bluetooth: hci5: command tx timeout [ 960.585752][ T5616] Bluetooth: hci6: command tx timeout [ 960.829740][ T5616] Bluetooth: hci5: command tx timeout [ 962.668249][ T5616] Bluetooth: hci6: command tx timeout [ 964.751200][ T5616] Bluetooth: hci6: command tx timeout [ 965.943592][T12811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 966.124633][T12811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 966.134654][T12811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 966.257562][T12811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 966.369336][T12811] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 966.839213][T12811] Bluetooth: hci6: command tx timeout [ 968.673041][T12811] Bluetooth: hci7: command tx timeout [ 970.747028][T12811] Bluetooth: hci7: command tx timeout [ 971.646561][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 971.678914][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 971.700330][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 971.760628][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 971.779001][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 972.824261][ T5616] Bluetooth: hci7: command tx timeout [ 974.033559][ T5616] Bluetooth: hci8: command tx timeout [ 974.923435][ T5616] Bluetooth: hci7: command tx timeout [ 976.103887][ T5616] Bluetooth: hci8: command tx timeout [ 977.589465][T12811] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 977.622103][T12811] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 977.641914][T12811] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 977.689526][T12811] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 977.764325][T12811] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 978.203600][ T5616] Bluetooth: hci8: command tx timeout [ 980.263432][T12811] Bluetooth: hci8: command tx timeout [ 980.523282][T12811] Bluetooth: hci9: command tx timeout [ 982.595707][T12811] Bluetooth: hci9: command tx timeout [ 984.663673][T12811] Bluetooth: hci9: command tx timeout [ 986.754788][T12811] Bluetooth: hci9: command tx timeout [ 987.519902][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.520465][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1010.146843][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 1033.733937][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.749396][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.805734][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1034.149477][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1034.327590][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1037.161606][T12811] Bluetooth: hci1: command tx timeout [ 1039.229618][T12811] Bluetooth: hci1: command tx timeout [ 1041.360342][ T5616] Bluetooth: hci1: command tx timeout [ 1042.164362][T12811] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1042.208124][T12811] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1042.243570][T12811] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1042.431659][T12811] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1042.555284][T12811] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1043.113431][ T32] INFO: task syz.3.3374:17701 blocked for more than 143 seconds. [ 1043.113482][ T32] Tainted: G L syzkaller #0 [ 1043.113513][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1043.113542][ T32] task:syz.3.3374 state:D stack:26296 pid:17701 tgid:17697 ppid:16966 task_flags:0x400140 flags:0x00080002 [ 1043.113660][ T32] Call Trace: [ 1043.113694][ T32] [ 1043.113897][ T32] __schedule+0x1259/0x6920 [ 1043.114020][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1043.114216][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1043.114515][ T32] ? lock_acquire+0x1d1/0x380 [ 1043.114604][ T32] ? __pfx___schedule+0x10/0x10 [ 1043.114660][ T32] ? find_held_lock+0x2b/0x80 [ 1043.114785][ T32] ? schedule+0x225/0x2c0 [ 1043.115084][ T32] schedule+0xdd/0x2c0 [ 1043.115176][ T32] schedule_preempt_disabled+0x13/0x30 [ 1043.115245][ T32] __mutex_lock+0xccb/0x1bd0 [ 1043.427585][T12811] Bluetooth: hci1: command tx timeout [ 1043.486680][ T32] ? fdget_pos+0x2aa/0x380 [ 1043.486815][ T32] ? rcu_is_watching+0x13/0xc0 [ 1043.487040][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1043.487132][ T32] ? lock_acquire+0x1d1/0x380 [ 1043.487195][ T32] ? __fget_files+0x34/0x3d0 [ 1043.487283][ T32] ? find_held_lock+0x2b/0x80 [ 1043.487401][ T32] ? __fget_files+0x215/0x3d0 [ 1043.487720][ T32] ? __fget_files+0x21f/0x3d0 [ 1043.487921][ T32] ? fdget_pos+0x2aa/0x380 [ 1043.487982][ T32] fdget_pos+0x2aa/0x380 [ 1043.488164][ T32] ksys_write+0x71/0x250 [ 1043.488234][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1043.619358][ T32] do_syscall_64+0x123/0x790 [ 1043.619551][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.619655][ T32] RIP: 0033:0x7eff3599e559 [ 1043.619791][ T32] RSP: 002b:00007eff36882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1043.619881][ T32] RAX: ffffffffffffffda RBX: 00007eff35c26090 RCX: 00007eff3599e559 [ 1043.619910][ T32] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000003 [ 1043.619937][ T32] RBP: 00007eff35a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1043.619960][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.619984][ T32] R13: 00007eff35c26128 R14: 00007eff35c26090 R15: 00007ffca9924978 [ 1043.620443][ T32] [ 1043.620508][ T32] [ 1043.620508][ T32] Showing all locks held in the system: [ 1043.620616][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 1043.620657][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1043.782635][ T32] #1: ffff8880b8324568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 1043.782892][ T32] #2: ffff8880b8326398 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0 [ 1043.783275][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1043.783301][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1043.783481][ T32] locks held by kworker/u8:2/43: 5, on CPU#0: [ 1043.783518][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1043.783780][ T32] #1: ffffc90000b37d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1043.784082][ T32] #2: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1043.784227][ T32] #3: ffff88802debd128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 1043.784457][ T32] #4: ffff88802debb258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 1043.964638][ T32] locks held by kworker/u8:3/50: 3, last CPU#1: [ 1043.964682][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1043.964980][ T32] #1: ffffc90000ba7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1043.965193][ T32] #2: ffff88805beb0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1043.965373][ T32] locks held by kworker/u8:4/64: 3, last CPU#1: [ 1043.965411][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1043.965681][ T32] #1: ffffc9000205fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1043.965961][ T32] #2: ffff88807ba4a258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1043.966143][ T32] locks held by kworker/u8:5/87: 3, last CPU#1: [ 1043.966180][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1043.966439][ T32] #1: ffffc9000253fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.078433][ T32] #2: ffff8880678f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1044.078647][ T32] locks held by kworker/u8:6/204: 3, last CPU#1: [ 1044.078670][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.078822][ T32] #1: ffffc9000314fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.079036][ T32] #2: ffff88803ece0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1044.079294][ T32] locks held by kworker/u8:7/1043: 2, on CPU#1: [ 1044.079313][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.079448][ T32] #1: ffffc90005407d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.079660][ T32] locks held by syslogd/4949: 1, last CPU#1: [ 1044.079698][ T32] #0: ffff88807de43070 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 1044.079961][ T32] locks held by klogd/4956: 1, last CPU#1: [ 1044.080011][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: avc_has_perm_noaudit+0x56/0x470 [ 1044.080127][ T32] locks held by udevd/4967: 4, last CPU#1: SYZFAIL: failed to recv rpc [ 1044.080154][ T32] #0: ffffffff8ff3de50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x5079/0x8430 [ 1044.270458][ T32] #1: ffff88807cff1bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1044.270679][ T32] #2: ffff88807cff0f80 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1044.271009][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1044.271162][ T32] locks held by getty/5355: 2, on CPU#1: [ 1044.271188][ T32] #0: ffff8880376180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1044.271365][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1044.271600][ T32] locks held by sshd-session/5584: 3, last CPU#1: [ 1044.271645][ T32] #0: ffff888036094360 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x20/0x50 [ 1044.271842][ T32] #1: ffffffff8fffd658 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1044.271997][ T32] #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 1044.272209][ T32] locks held by syz-executor/5585: 2, last CPU#1: [ 1044.272251][ T32] #0: ffff88807ac88f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1044.377032][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1044.377275][ T32] locks held by kworker/0:4/5709: 3, last CPU#0: [ 1044.377321][ T32] #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.377459][ T32] #1: ffffc9000450fd08 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.377639][ T32] #2: ffffffff8ffc2ae0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 1044.377880][ T32] locks held by kworker/u8:10/5883: 3, last CPU#1: [ 1044.377929][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.378122][ T32] #1: ffffc90004cdfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.378276][ T32] #2: ffff888066c50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1044.378481][ T32] locks held by kworker/u8:11/6040: 4, last CPU#1: [ 1044.511378][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.511564][ T32] #1: ffffc900050dfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.511797][ T32] #2: ffff888056150800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1044.512013][ T32] #3: ffff8880b833bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 1044.512155][ T32] locks held by kworker/u8:12/6161: 3, last CPU#1: [ 1044.512186][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.589772][ T32] #1: ffffc90005b97d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.589999][ T32] #2: ffff888037cec258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1044.590267][ T32] locks held by kworker/u8:13/6555: 3, last CPU#1: [ 1044.590288][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.590430][ T32] #1: ffffc900051dfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.590633][ T32] #2: ffff88807ba4a258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1044.590930][ T32] locks held by kworker/u8:15/6786: 3, last CPU#1: [ 1044.590949][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.591082][ T32] #1: ffffc90004a77d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.694694][ T32] #2: ffff888066d40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1044.694866][ T32] locks held by kworker/u8:18/8161: 3, last CPU#1: [ 1044.694903][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.695155][ T32] #1: ffffc90004e8fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.695320][ T32] #2: ffff88805bea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1044.695478][ T32] locks held by kworker/u8:19/8162: 2, last CPU#1: [ 1044.695512][ T32] #0: ffff88807b1a3940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.695748][ T32] #1: ffffc90004a57d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.695981][ T32] locks held by kworker/u8:20/8239: 2, last CPU#1: [ 1044.696003][ T32] #0: ffff88807d149940 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.696253][ T32] #1: ffffc9000359fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.862791][ T32] locks held by kworker/0:0/15939: 2, last CPU#0: [ 1044.862812][ T32] #0: ffff888056d4d140 ((wq_completion)wg-crypt-wg0#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.862974][ T32] #1: ffffc900030dfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.863196][ T32] locks held by kworker/1:2/16109: 2, last CPU#1: [ 1044.863235][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.863451][ T32] #1: ffffc90006e87d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.863592][ T32] locks held by syz-executor/16733: 1, last CPU#1: [ 1044.863622][ T32] #0: ffff88807f0220e8 (&type->s_umount_key#35){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1044.863867][ T32] locks held by kworker/0:2/17189: 2, last CPU#0: [ 1044.863909][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1044.864150][ T32] #1: ffffc900036cfd08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1044.864298][ T32] locks held by syz-executor/17222: 1, last CPU#1: [ 1044.864328][ T32] #0: ffffffff92278920 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0 [ 1044.864530][ T32] locks held by syz.3.3374/17698: 7, last CPU#1: [ 1044.864570][ T32] #0: ffff8880374907f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1044.864817][ T32] #1: ffff88801d7c0460 (sb_writers#21){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1044.864967][ T32] #2: ffffffff8fe956c0 (event_mutex){+.+.}-{4:4}, at: ftrace_set_clr_event+0x195/0x5f0 [ 1044.865156][ T32] #3: ffffffff8fe7cb20 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x9d/0x110 [ 1045.016211][ T32] #4: ffffffff8fc7cb50 (cpu_hotplug_lock){++++}-{0:0}, at: __static_call_update+0xa6/0x590 [ 1045.016397][ T32] #5: ffffffff8ff2f820 (static_call_mutex){+.+.}-{4:4}, at: __static_call_update+0xb4/0x590 [ 1045.016628][ T32] #6: ffffffff8fc9c4c0 (text_mutex){+.+.}-{4:4}, at: arch_static_call_transform+0x28/0xc0 [ 1045.016838][ T32] locks held by syz.3.3374/17701: 1, on CPU#0: [ 1045.016861][ T32] #0: ffff8880374907f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1045.017012][ T32] locks held by kworker/u8:16/17713: 3, last CPU#1: [ 1045.017045][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.017278][ T32] #1: ffffc90003edfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.017519][ T32] #2: ffff88803ecf0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1045.017648][ T32] locks held by kworker/u8:21/17721: 2, last CPU#1: [ 1045.017678][ T32] #0: ffff888035a06140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.069333][T12811] Bluetooth: hci10: command tx timeout [ 1045.205334][ T32] #1: ffffc900049ffd08 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.205512][ T32] locks held by kworker/u8:22/17729: 3, last CPU#1: [ 1045.205546][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.205779][ T32] #1: ffffc90004bdfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.205987][ T32] #2: ffff88807eba6258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1045.206156][ T32] locks held by kworker/u8:23/17733: 5, last CPU#1: [ 1045.206190][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.206418][ T32] #1: ffffc90006d87d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.206661][ T32] #2: ffffffff8fc7cb50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1045.206793][ T32] #3: ffffffff8ff414a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 1045.206989][ T32] #4: ffffffff8fc9c4c0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1045.633213][ T32] locks held by kworker/u8:24/17735: 3, last CPU#1: [ 1045.633265][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.633452][ T32] #1: ffffc90004bffd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.633612][ T32] #2: ffff888056660800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1045.633824][ T32] locks held by kworker/u8:25/17769: 3, last CPU#1: [ 1045.633866][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.634107][ T32] #1: ffffc90003defd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.634247][ T32] #2: ffff888037cec258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1045.634566][ T32] locks held by kworker/u8:26/17775: 4, last CPU#1: [ 1045.634609][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.634795][ T32] #1: ffffc9000493fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.766102][ T32] #2: ffff888056150800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1045.766336][ T32] #3: ffff8880b833bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 1045.766652][ T32] locks held by kworker/u8:27/17783: 3, last CPU#1: [ 1045.766684][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.766838][ T32] #1: ffffc90004c1fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.767069][ T32] #2: ffff8880679a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1045.767358][ T32] locks held by kworker/u8:29/17787: 4, last CPU#1: [ 1045.767413][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1045.767602][ T32] #1: ffffc90004bafd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1045.767800][ T32] #2: ffff888055ce0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1045.768025][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1045.884196][ T32] locks held by syz-executor/17790: 4, last CPU#1: [ 1045.884254][ T32] #0: ffffffff8ff3de50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x5079/0x8430 [ 1045.884499][ T32] #1: ffff88807ac8d900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1045.884809][ T32] #2: ffff888028169bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1045.884980][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1045.885207][ T32] locks held by syz-executor/17795: 2, last CPU#1: [ 1045.885253][ T32] #0: ffff88807dc3c080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1045.885563][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1045.885753][ T32] locks held by syz-executor/17801: 1, last CPU#1: [ 1045.885782][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1045.885994][ T32] locks held by modprobe/17805: 1, last CPU#1: [ 1045.886036][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1045.886326][ T32] locks held by syz-executor/17806: 2, last CPU#1: [ 1045.886381][ T32] #0: ffff8880395e40e8 (&type->s_umount_key#25/1){+.+.}-{4:4}, at: sget_fc+0x3c6/0x1f70 [ 1045.886620][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1045.886833][ T32] locks held by udevd/17808: 3, last CPU#1: [ 1046.117440][ T32] #0: ffff888074ce8ac0 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 1046.117631][ T32] #1: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5b/0x2d0 [ 1046.117797][ T32] #2: ffffffff8fffd658 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1046.118118][ T32] [ 1046.118131][ T32] ============================================= [ 1046.118131][ T32] [ 1046.118149][ T32] NMI backtrace for cpu 1 [ 1046.118168][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.118197][ T32] Tainted: [L]=SOFTLOCKUP [ 1046.118210][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1046.118228][ T32] Call Trace: [ 1046.118254][ T32] [ 1046.118284][ T32] dump_stack_lvl+0x100/0x190 [ 1046.118433][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1046.118598][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1046.118646][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1046.118754][ T32] sys_info+0x141/0x190 [ 1046.118842][ T32] watchdog+0xcb1/0x1030 [ 1046.119114][ T32] ? __pfx_watchdog+0x10/0x10 [ 1046.119222][ T32] ? __kthread_parkme+0x18f/0x230 [ 1046.119434][ T32] ? kthread+0x13a/0x450 [ 1046.119468][ T32] ? __pfx_watchdog+0x10/0x10 [ 1046.119503][ T32] kthread+0x373/0x450 [ 1046.119559][ T32] ? __pfx_kthread+0x10/0x10 [ 1046.119685][ T32] ret_from_fork+0x730/0xd60 [ 1046.119831][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1046.119940][ T32] ? __switch_to+0x800/0x10f0 [ 1046.120017][ T32] ? __pfx_kthread+0x10/0x10 [ 1046.120150][ T32] ret_from_fork_asm+0x1a/0x30 [ 1046.120568][ T32] [ 1046.120709][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1046.120743][ C0] NMI backtrace for cpu 0 [ 1046.120761][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.120788][ C0] Tainted: [L]=SOFTLOCKUP [ 1046.120801][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1046.120817][ C0] RIP: 0010:preempt_count_add+0x12/0x150 [ 1046.120855][ C0] Code: fd 09 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 00 00 00 00 fc ff df 48 63 c7 55 <53> 48 89 c3 65 48 01 05 7a 7e b6 13 48 c7 c0 c0 15 9b 9c 48 89 c1 [ 1046.120877][ C0] RSP: 0018:ffffc90000157940 EFLAGS: 00000082 [ 1046.120909][ C0] RAX: 0000000000000001 RBX: 000002af6c7387ff RCX: 0000000000000000 [ 1046.120932][ C0] RDX: dffffc0000000000 RSI: ffffffff8c625600 RDI: 0000000000000001 [ 1046.120952][ C0] RBP: 000002af6c7385fa R08: 0000000000000005 R09: 0000000000000000 [ 1046.120972][ C0] R10: 00000000000007b5 R11 ** replaying previous printk message ** [ 1046.120972][ C0] R10: 00000000000007b5 R11: 205d323354202020 R12: 0000000000000000 [ 1046.120993][ C0] R13: 0000000000000af1 R14: fffffbfff398fd21 R15: dffffc0000000000 [ 1046.121015][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1046.121042][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1046.121065][ C0] CR2: 000055e3de2f2f48 CR3: 0000000075b7d000 CR4: 00000000003526f0 [ 1046.121088][ C0] Call Trace: [ 1046.121117][ C0] [ 1046.121158][ C0] delay_tsc+0x3c/0xc0 [ 1046.121228][ C0] wait_for_lsr+0xf3/0x210 [ 1046.121434][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1046.121552][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 1046.121585][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 1046.121761][ C0] serial8250_console_write+0x1108/0x14f0 [ 1046.121921][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1046.121964][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1046.122068][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1046.122313][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1046.122531][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1046.122638][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1046.122670][ C0] ? do_raw_spin_lock+0xb0/0x260 [ 1046.122915][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1046.123003][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1046.123099][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1046.123171][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1046.123410][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1046.123581][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1046.123773][ C0] ? __kthread_parkme+0x18f/0x230 [ 1046.123932][ C0] ? kthread+0x13a/0x450 [ 1046.123983][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1046.124033][ C0] kthread+0x373/0x450 [ 1046.124094][ C0] ? __pfx_kthread+0x10/0x10 [ 1046.124172][ C0] ret_from_fork+0x730/0xd60 [ 1046.124282][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1046.124424][ C0] ? __switch_to+0x800/0x10f0 [ 1046.124496][ C0] ? __pfx_kthread+0x10/0x10 [ 1046.124584][ C0] ret_from_fork_asm+0x1a/0x30 [ 1046.124944][ C0] [ 1046.730794][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1046.939851][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.950532][ T32] Tainted: [L]=SOFTLOCKUP [ 1046.954850][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1046.964908][ T32] Call Trace: [ 1046.968196][ T32] [ 1046.971141][ T32] dump_stack_lvl+0x100/0x190 [ 1046.975961][ T32] vpanic+0x553/0x970 [ 1046.980036][ T32] ? __pfx_vpanic+0x10/0x10 [ 1046.984808][ T32] panic+0xd1/0xe0 [ 1046.988617][ T32] ? __pfx_panic+0x10/0x10 [ 1046.993235][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1046.999441][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1047.005616][ T32] ? watchdog.cold+0x1ec/0x234 [ 1047.010575][ T32] watchdog.cold+0x1fd/0x234 [ 1047.015412][ T32] ? __pfx_watchdog+0x10/0x10 [ 1047.020225][ T32] ? __kthread_parkme+0x18f/0x230 [ 1047.025401][ T32] ? kthread+0x13a/0x450 [ 1047.029666][ T32] ? __pfx_watchdog+0x10/0x10 [ 1047.034362][ T32] kthread+0x373/0x450 [ 1047.038486][ T32] ? __pfx_kthread+0x10/0x10 [ 1047.043233][ T32] ret_from_fork+0x730/0xd60 [ 1047.047926][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.053118][ T32] ? __switch_to+0x800/0x10f0 [ 1047.057888][ T32] ? __pfx_kthread+0x10/0x10 [ 1047.062648][ T32] ret_from_fork_asm+0x1a/0x30 [ 1047.067871][ T32] [ 1047.071161][ T32] Kernel Offset: disabled [ 1047.075483][ T32] Rebooting in 86400 seconds..