last executing test programs: 6m18.535578883s ago: executing program 32 (id=1113): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) 4m32.988703011s ago: executing program 33 (id=3227): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 3m44.026187085s ago: executing program 2 (id=4036): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m43.97847265s ago: executing program 2 (id=4037): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0x1000, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) readv(r0, &(0x7f0000002a80)=[{&(0x7f00000017c0)=""/214, 0xd6}], 0x1) 3m43.119361932s ago: executing program 2 (id=4045): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 3m42.012184505s ago: executing program 2 (id=4049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") close(0x3) 3m41.955348622s ago: executing program 2 (id=4051): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 3m41.840927139s ago: executing program 2 (id=4053): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') 3m30.076139074s ago: executing program 34 (id=4021): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x4}) 3m28.078750662s ago: executing program 35 (id=4042): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 3m26.698624101s ago: executing program 36 (id=4053): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') 2m55.911582211s ago: executing program 6 (id=4356): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r1, @ANYBLOB="080008000604000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x44}}, 0x5821c98b097a09f2) 2m55.859116262s ago: executing program 6 (id=4359): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x3f}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m55.787923658s ago: executing program 6 (id=4363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='online', 0x6) 2m55.784392438s ago: executing program 6 (id=4364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x80, 0x7, &(0x7f0000000340)={0x10, "05000000275d80698d019800000047568375038923ec02b61472ceb17c66f7489b"}}) 2m52.710208879s ago: executing program 6 (id=4428): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m52.649589628s ago: executing program 6 (id=4430): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x2) fcntl$notify(r0, 0x402, 0x8000000e) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2m49.980085824s ago: executing program 8 (id=4464): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd28, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 2m49.925922252s ago: executing program 8 (id=4465): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x40, @local, @remote, [], "3b00123400000000"}}}}}}}, 0x0) 2m49.878831143s ago: executing program 8 (id=4466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2m49.827589635s ago: executing program 8 (id=4467): listen(0xffffffffffffffff, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000010058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2m49.731903326s ago: executing program 8 (id=4468): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m49.695616501s ago: executing program 8 (id=4469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x4) 2m37.675409704s ago: executing program 37 (id=4430): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x2) fcntl$notify(r0, 0x402, 0x8000000e) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2m34.653388827s ago: executing program 38 (id=4469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x4) 1m46.87188022s ago: executing program 7 (id=5314): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1m46.871596655s ago: executing program 7 (id=5315): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r0, &(0x7f0000000040)="a9", 0x1) 1m46.811575541s ago: executing program 7 (id=5316): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000840)="e55ada0a26b834f902c337d74e5e7238720efb7f8ec4d0727d476db4c872aa904427840eab3b36d1ed0bfbd7d7e69c6ddb2d8226eb56e81bf8ed7bc36a3881f90a5727aff51762c4b5d02893baa44c4fcebd4fc1c1136289c57bb6b9cac240b24cc199cc7edaeaad975966a70c5ca43e81ba4cc0232281bdf279b9b7425198f2bdba0dca17ac5f36268368465090c8440b9760a36dbd8c3c802ddfefc112ebc32dc8b4647b588da74e1bfa3832615c74474e82bf0b93b1de336368ffd64d25c5e41478", 0xc3}, {&(0x7f0000000a00)="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", 0xf3d}], 0x2) 1m43.796524507s ago: executing program 7 (id=5339): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 1m43.728318291s ago: executing program 7 (id=5340): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m43.341027079s ago: executing program 7 (id=5344): r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m43.258802331s ago: executing program 39 (id=5344): r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m34.566301737s ago: executing program 1 (id=5484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r3, 0x1, 0x70bd28, 0x40, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4) 1m34.488077032s ago: executing program 1 (id=5485): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x174c56b28484f9e2, 0x1d8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f00000000c0)='./file0/file2\x00') 1m34.400683591s ago: executing program 1 (id=5486): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000240)=""/245, 0xf5}], 0x1, 0xa3, 0xfffffefc) 1m34.392317044s ago: executing program 1 (id=5487): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m34.320462544s ago: executing program 1 (id=5488): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x29, 0xd, 0xb48c, {0x2, @usr_ip6_spec={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1000, 0x82, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xde0, 0x2db, [0x800, 0x386a]}, @udp_ip4_spec={@remote, @broadcast, 0x4e20, 0x4e21, 0x4}, {0x0, @link_local, 0xa0d, 0x3, [0x6, 0x800]}, 0x3, 0x8}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m33.339820837s ago: executing program 1 (id=5490): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1m33.229326799s ago: executing program 40 (id=5490): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1m9.967457021s ago: executing program 9 (id=5876): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3f05bf47d496b63413e6b3ef3261a3c22ccc202b754f90bc28600ffd447fbce287d51c3a57d503ff524478eaf71ba748486a2cc51b5e939069ab7b0d92fde256a8507fc7c6435894d01afc539ae4f54d33", 0x51}], 0x1, 0x0, 0x60, 0x40041}], 0x1, 0x48040) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb00040c"], 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m9.853280283s ago: executing program 9 (id=5877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m9.722432153s ago: executing program 9 (id=5879): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) 1m9.648556131s ago: executing program 9 (id=5880): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m9.560221225s ago: executing program 9 (id=5882): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x42, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000003c0)={0x3, 0x10, 0x7, 0x3, "3dcd4ed846e1e2edefd9b6eaa131640bbc9f793484a2a1cda1940471d3c8030a"}) 1m9.350137358s ago: executing program 9 (id=5885): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008"], 0x48}}, 0x20000034) 1m9.236017522s ago: executing program 41 (id=5885): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008"], 0x48}}, 0x20000034) 4.060506667s ago: executing program 5 (id=6783): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 3.494536857s ago: executing program 0 (id=6797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x428a4}}, 0x20}}, 0x8000) 3.39520417s ago: executing program 0 (id=6798): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0xdd) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0xa, 0xa, @loopback, 0x41}, 0x1c, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 3.32400253s ago: executing program 0 (id=6800): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4036, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) 3.18956213s ago: executing program 0 (id=6801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x2000003, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7fc, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) 3.081397162s ago: executing program 5 (id=6803): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.081100184s ago: executing program 5 (id=6805): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 2.994050948s ago: executing program 0 (id=6806): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe0300000705810200020007050202"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b11, 0x0) 2.993793352s ago: executing program 5 (id=6807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030029bd70000e0000220100000008000100", @ANYRES32=r3, @ANYBLOB="08000200000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 2.921575774s ago: executing program 5 (id=6809): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x608003) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94) 2.004549376s ago: executing program 4 (id=6818): r0 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa548, 0x800, 0x1, 0x154}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000001b00)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x2, 0x1, 0x0, 0x0, 0x8, 0x1, {0x3, 0x0, 0x0, '\x00', 0x0}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x801e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, r3, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x24, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x2}}) syz_io_uring_submit(r5, r2, r7, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x2e, 0x6000, @fd_index=0xa, 0x5, 0x0, 0x0, 0xb, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x42be, 0xafb2, 0x8, 0x0, 0x0) 1.908516263s ago: executing program 4 (id=6819): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) 1.841312872s ago: executing program 4 (id=6821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.407731652s ago: executing program 3 (id=6823): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}}, 0x2e, 0x7}, &(0x7f0000000400)=0x90) 1.31062649s ago: executing program 3 (id=6824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x48}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="66b80500000066b9000001000f01c1ba4000b01a8826d9f6baa100b872513e3667670f01c966b93903000066b803000000baf80c66b8a01b428e66efbafc0ced0f1866b8010000000f32b80c018ec80f20520f326635004000000f30", 0x5c}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.174887244s ago: executing program 4 (id=6825): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x805}, @void, @mpls={[{0xf1, 0x0, 0x1}], @ipv6=@udp={0x8, 0x6, "9a185f", 0x8, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, {[], {0x4e22, 0x4e21, 0x8}}}}}, 0x38) 1.118700759s ago: executing program 3 (id=6826): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) r1 = accept(r0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/146, 0x92}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/70, 0x46}], 0x1}}], 0x2, 0x10180, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) recvmmsg$unix(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}}], 0x1, 0x100, 0x0) 983.288378ms ago: executing program 4 (id=6827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 594.592662ms ago: executing program 4 (id=6828): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4ea3, @empty}}, 0x1000, 0x2, 0x8005, 0x101, 0x4c, 0x8, 0xfc}, 0x9c) 221.009247ms ago: executing program 5 (id=6829): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 108.775197ms ago: executing program 3 (id=6830): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) 96.297768ms ago: executing program 3 (id=6831): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x711, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {0x7, 0xffff}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 175.114µs ago: executing program 3 (id=6832): syz_usb_connect(0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x108242, 0x78e22799f4a46fa9) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='file0', 0x5) 0s ago: executing program 0 (id=6833): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x7}, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): 14914] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 400.823924][T19830] input: syz0 as /devices/virtual/input/input45 [ 400.967515][T14914] usb 10-1: Using ep0 maxpacket: 8 [ 400.970712][T14914] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 400.974204][T14914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.237879][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.747822][T19853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19853 comm=syz.3.5615 [ 401.838678][T19857] ip6gre2: entered promiscuous mode [ 401.840946][T19857] ip6gre2: entered allmulticast mode [ 401.848732][T19857] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.950594][T19833] ceph: No mds server is up or the cluster is laggy [ 402.268246][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.360976][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802870c000: rx timeout, send abort [ 402.363650][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802870c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 402.434904][T19867] Unable to extract alua_access_type [ 402.543663][T19872] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5623'. [ 402.550755][T19872] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5623'. [ 402.594081][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5625'. [ 402.598013][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5625'. [ 402.601774][T19876] netlink: 'syz.9.5625': attribute type 11 has an invalid length. [ 402.604513][T19876] netlink: 'syz.9.5625': attribute type 7 has an invalid length. [ 402.667643][ T64] Bluetooth: hci2: command tx timeout [ 402.708251][T19884] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5629'. [ 402.907678][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 402.910339][ T847] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 402.915293][ T847] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 402.999757][T19903] dwc3 pcspkr: missing memory resource [ 403.051214][ T42] kauditd_printk_skb: 138 callbacks suppressed [ 403.051233][ T42] audit: type=1800 audit(1785871063.313:2483): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 403.098650][ T42] audit: type=1800 audit(1785871063.363:2484): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 403.105502][ T42] audit: type=1800 audit(1785871063.363:2485): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5641" name="attach" dev="sysfs" ino=36989 res=0 errno=0 [ 403.108029][T19910] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 403.115157][T19910] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 403.120890][ T42] audit: type=1800 audit(1785871063.383:2486): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 403.121881][T19911] vhci_hcd: xmit failed -107 [ 403.133491][T19910] vhci_hcd vhci_hcd.0: Device attached [ 403.142884][ T12] vhci_hcd vhci_hcd.0: stop threads [ 403.145168][ T12] vhci_hcd vhci_hcd.0: release socket [ 403.147844][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 403.174566][ T42] audit: type=1800 audit(1785871063.433:2487): pid=19916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5643" name="midi1_first_group" dev="configfs" ino=93919 res=0 errno=0 [ 403.189071][ T42] audit: type=1800 audit(1785871063.443:2488): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 403.210483][ T42] audit: type=1800 audit(1785871063.473:2489): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 403.245255][ T42] audit: type=1800 audit(1785871063.503:2490): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 403.258071][ T42] audit: type=1800 audit(1785871063.513:2491): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=304023 res=0 errno=0 [ 403.307853][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.315741][ T42] audit: type=1800 audit(1785871063.573:2492): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 403.554982][ T5835] usb 10-1: USB disconnect, device number 7 [ 403.637889][T15579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.962160][T19959] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 403.965640][T19959] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 403.977774][T19959] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 403.991684][T19959] overlayfs: failed to look up (cgroup.events) for ino (-13) [ 404.115090][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.350923][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.697433][ T56] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 404.728892][T19984] bridge1: entered promiscuous mode [ 404.731013][T19984] bridge1: entered allmulticast mode [ 404.862013][ T56] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 404.869636][ T56] usb 5-1: config 0 has no interface number 0 [ 404.872649][ T56] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.876981][ T56] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 404.884817][ T56] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 404.888657][ T56] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 404.891945][ T56] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.896415][ T56] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 404.899490][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.001453][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 405.003845][ T847] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 405.006219][ T847] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 405.242975][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5684'. [ 405.246655][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5684'. [ 405.265276][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5684'. [ 405.270087][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5684'. [ 405.277434][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.280500][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.284742][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.294075][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.387964][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.495024][T20030] vxcan0: tx address claim with different name [ 405.857212][T20046] input: syz0 as /devices/virtual/input/input46 [ 406.442661][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5706'. [ 406.457969][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.489559][T20074] bond3: Invalid ad_actor_system MAC address. [ 406.498286][T20074] bond3: option ad_actor_system: invalid value (65541) [ 406.516839][T20074] bond3 (unregistering): Released all slaves [ 406.610827][T20089] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 406.677815][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.796238][T20100] Config c/1 of g1 needs at least one function. [ 406.805505][T20100] udc usbip-vudc.0: failed to start g1: -22 [ 406.808391][T20100] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 406.837865][T20100] UDC core: g1: couldn't find an available UDC or it's busy [ 406.863639][T20105] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5718'. [ 407.147510][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.147777][ T847] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 407.152620][T20129] netlink: 'syz.5.5729': attribute type 4 has an invalid length. [ 407.160461][ T847] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 407.184698][T20129] netlink: 'syz.5.5729': attribute type 4 has an invalid length. [ 407.453852][ T1046] usb 5-1: USB disconnect, device number 13 [ 407.468045][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.757531][ T24] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 407.909958][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.914050][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 407.917715][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 407.921950][ T24] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 407.925442][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.937464][ T3267] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 408.069871][ T42] kauditd_printk_skb: 135 callbacks suppressed [ 408.069896][ T42] audit: type=1800 audit(1785871068.333:2628): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 408.087452][ T3267] usb 10-1: Using ep0 maxpacket: 8 [ 408.099674][ T3267] usb 10-1: unable to get BOS descriptor or descriptor too short [ 408.105788][ T3267] usb 10-1: no configurations [ 408.109251][ T3267] usb 10-1: can't read configurations, error -22 [ 408.126192][ T42] audit: type=1800 audit(1785871068.383:2629): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 408.175415][ T42] audit: type=1800 audit(1785871068.433:2630): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 408.227203][ T42] audit: type=1800 audit(1785871068.483:2631): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 408.242570][ T42] audit: type=1400 audit(1785871068.503:2632): avc: denied { write } for pid=20170 comm="syz.9.5746" name="/" dev="9p" ino=74470817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.250202][ T42] audit: type=1400 audit(1785871068.503:2633): avc: denied { unlink } for pid=20170 comm="syz.9.5746" name="file0" dev="9p" ino=74470907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 408.258116][ T42] audit: type=1400 audit(1785871068.503:2634): avc: denied { write } for pid=20170 comm="syz.9.5746" name="/" dev="9p" ino=74470817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.269732][ T42] audit: type=1800 audit(1785871068.503:2635): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=306784 res=0 errno=0 [ 408.409765][ T42] audit: type=1800 audit(1785871068.673:2636): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 408.500477][ T42] audit: type=1800 audit(1785871068.763:2637): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 408.507762][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.195674][T20191] coredump: 220(syz.0.5754): Core dump to core aborted: cannot preserve file permissions [ 409.378255][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5757'. [ 409.381057][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5757'. [ 409.383815][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5757'. [ 409.390166][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 409.392312][ T847] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 409.395278][ T847] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 409.488343][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5757'. [ 409.552242][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.717946][ T3267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.868073][ T24] usb 14-1: new full-speed USB device number 9 using dummy_hcd [ 410.039239][ T24] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.045962][ T24] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.051234][ T24] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.055364][ T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.536261][ T3267] usb 8-1: USB disconnect, device number 12 [ 410.589975][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.413087][T20282] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 411.594293][T20298] __nla_validate_parse: 2 callbacks suppressed [ 411.594311][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5798'. [ 411.628594][ T6822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.631621][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.638743][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.949090][ T3267] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 412.092646][T20323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5809'. [ 412.096501][T20323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5809'. [ 412.118370][ T3267] usb 8-1: not running at top speed; connect to a high speed hub [ 412.123977][ T3267] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.130236][ T3267] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 412.133263][ T3267] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.256942][T20336] tpm_crb_acpi QEMU0002:00: [Firmware Bug]: failed to get TPM2 ACPI table [ 412.260663][T20336] tpm_crb_acpi QEMU0002:00: probe with driver tpm_crb_acpi failed with error -22 [ 412.638139][ T847] usb 14-1: USB disconnect, device number 9 [ 412.677634][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.748553][ T6822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.754864][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.761647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.800474][T20347] kvm: kvm [20346]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 413.118180][T20356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.136980][ T42] kauditd_printk_skb: 66 callbacks suppressed [ 413.137001][ T42] audit: type=1800 audit(1785871073.393:2704): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 413.193475][ T42] audit: type=1800 audit(1785871073.453:2705): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 413.214797][ T42] audit: type=1800 audit(1785871073.463:2706): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17386 res=0 errno=0 [ 413.216892][T20364] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 413.232076][ T42] audit: type=1800 audit(1785871073.463:2707): pid=20364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5825" name="new_device" dev="sysfs" ino=45835 res=0 errno=0 [ 413.239237][ T42] audit: type=1800 audit(1785871073.473:2708): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307678 res=0 errno=0 [ 413.246524][ T42] audit: type=1800 audit(1785871073.483:2709): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=307679 res=0 errno=0 [ 413.251462][T20364] typec_fusb302 0-0022: failed to request gpio_int_n [ 413.253963][ T42] audit: type=1800 audit(1785871073.503:2710): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307693 res=0 errno=0 [ 413.286887][ T42] audit: type=1800 audit(1785871073.543:2711): pid=20368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5825" name="new_device" dev="sysfs" ino=47201 res=0 errno=0 [ 413.305757][ T42] audit: type=1800 audit(1785871073.563:2712): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307705 res=0 errno=0 [ 413.312970][ T42] audit: type=1800 audit(1785871073.563:2713): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=307706 res=0 errno=0 [ 413.313039][T20368] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 413.313084][T20364] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 413.313363][T20364] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 413.328007][T20368] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 413.708476][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.715656][T15579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.721734][T15579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.725863][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.757688][ T24] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 413.917405][ T24] usb 14-1: Using ep0 maxpacket: 8 [ 413.923322][ T24] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 413.927845][T20395] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 413.930624][T20395] i2c i2c-1: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 413.932581][ T24] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 413.939150][ T24] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.947515][ T24] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.952243][ T24] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.955227][ T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.118457][ T24] IPVS: starting estimator thread 0... [ 414.208923][T20404] IPVS: using max 44 ests per chain, 105600 per kthread [ 414.219099][ T6839] Bluetooth: hci3: Frame reassembly failed (-84) [ 414.221613][ T6839] Bluetooth: hci3: Frame reassembly failed (-84) [ 414.725106][ T24] usb 8-1: USB disconnect, device number 13 [ 414.747778][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.197543][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 415.347441][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 415.350830][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 415.353951][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.357388][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.360881][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.363961][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.371112][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.374775][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.419205][T20432] raw_sendmsg: syz.0.5853 forgot to set AF_INET. Fix it! [ 415.787583][T15579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.267532][ T64] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 416.267583][ T5736] Bluetooth: hci3: command 0xfc11 tx timeout [ 416.435615][T20440] nbd: nbd0 already in use [ 416.437985][T20440] block nbd0: NBD_DISCONNECT [ 416.439938][T20440] block nbd0: Send disconnect failed -32 [ 416.466239][T15666] bridge_slave_1: left allmulticast mode [ 416.469761][T15666] bridge_slave_1: left promiscuous mode [ 416.474891][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.493009][T15666] bridge_slave_0: left allmulticast mode [ 416.495354][T15666] bridge_slave_0: left promiscuous mode [ 416.495754][ T24] usb 14-1: USB disconnect, device number 10 [ 416.499430][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.711755][T15666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.718741][T15666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.724197][T15666] bond0 (unregistering): Released all slaves [ 416.739086][T15666] bond1 (unregistering): Released all slaves [ 416.834474][T15666] : left promiscuous mode [ 416.962021][ T64] Bluetooth: hci0: Zero size dump init pkt [ 417.126643][T20476] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 417.133059][T20476] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 417.153722][T20476] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 417.243144][T20472] uhci_hcd 0000:00:1d.0: remove, state 84 [ 417.290802][T20472] usb usb2: USB disconnect, device number 1 [ 417.594840][T20472] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 417.703643][T15666] IPVS: stopping backup sync thread 6219 ... [ 417.903737][ T5822] usb 8-1: USB disconnect, device number 14 [ 417.988791][T14914] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 418.097580][T15666] hsr_slave_0: left promiscuous mode [ 418.100448][T15666] hsr_slave_1: left promiscuous mode [ 418.103002][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.105819][T15666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.112602][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.115404][T15666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.132026][T15666] veth1_macvtap: left promiscuous mode [ 418.133681][T15666] veth0_macvtap: left promiscuous mode [ 418.135474][T15666] veth1_vlan: left promiscuous mode [ 418.138290][T15666] veth0_vlan: left promiscuous mode [ 418.149462][T14914] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 418.153062][T14914] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 418.157203][T14914] usb 10-1: config 0 interface 0 has no altsetting 0 [ 418.163399][T14914] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 418.167486][T14914] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 418.170990][T14914] usb 10-1: Product: syz [ 418.172978][T14914] usb 10-1: Manufacturer: syz [ 418.175150][T14914] usb 10-1: SerialNumber: syz [ 418.184354][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 418.184371][ T42] audit: type=1800 audit(1785871078.443:2783): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309091 res=0 errno=0 [ 418.205069][ T42] audit: type=1800 audit(1785871078.443:2784): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=309123 res=0 errno=0 [ 418.213593][ T42] audit: type=1800 audit(1785871078.443:2785): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=309098 res=0 errno=0 [ 418.223158][ T42] audit: type=1800 audit(1785871078.453:2786): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=309099 res=0 errno=0 [ 418.236166][ T42] audit: type=1800 audit(1785871078.453:2787): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=309120 res=0 errno=0 [ 418.245403][ T42] audit: type=1800 audit(1785871078.453:2788): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=309121 res=0 errno=0 [ 418.254379][ T42] audit: type=1800 audit(1785871078.453:2789): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=309100 res=0 errno=0 [ 418.263567][ T42] audit: type=1800 audit(1785871078.453:2790): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=309122 res=0 errno=0 [ 418.272966][ T42] audit: type=1800 audit(1785871078.483:2791): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 418.375225][ T42] audit: type=1800 audit(1785871078.633:2792): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309158 res=0 errno=0 [ 418.390280][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.401677][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.405972][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.410636][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.414089][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.457770][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.464461][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.467512][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.470860][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.477198][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.534169][T15666] team0 (unregistering): Port device team_slave_1 removed [ 419.008015][T15666] IPVS: stop unused estimator thread 0... [ 419.129631][T20532] pim6reg: entered allmulticast mode [ 419.145878][T20532] cgroup: fork rejected by pids controller in /syz3 [ 419.165167][T20530] pim6reg: left allmulticast mode [ 419.230036][T15666] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.277586][T20505] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.280529][T20505] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.283064][T20505] bridge_slave_0: entered allmulticast mode [ 419.290029][T20505] bridge_slave_0: entered promiscuous mode [ 419.293312][T20505] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.298857][T20505] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.301935][T20505] bridge_slave_1: entered allmulticast mode [ 419.307913][T20505] bridge_slave_1: entered promiscuous mode [ 419.353793][T19691] bridge0: port 3(syz_tun) entered disabled state [ 419.368973][T19691] syz_tun (unregistering): left allmulticast mode [ 419.371366][T19691] syz_tun (unregistering): left promiscuous mode [ 419.373777][T19691] bridge0: port 3(syz_tun) entered disabled state [ 419.394592][T20505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.399623][T20505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.416121][T15666] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.436197][T20505] team0: Port device team_slave_0 added [ 419.439902][T20505] team0: Port device team_slave_1 added [ 419.454330][T20505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.456537][T20505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.464410][T20505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.475074][T20505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.477584][T20505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.485550][T20505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.522830][T20505] hsr_slave_0: entered promiscuous mode [ 419.525187][T20505] hsr_slave_1: entered promiscuous mode [ 419.527656][T20505] debugfs: 'hsr0' already exists in 'hsr' [ 419.530146][T20505] Cannot create hsr debugfs directory [ 419.561647][T15666] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.675220][T15666] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.748314][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.749951][T20505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.767908][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.772084][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.775040][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.778002][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.960133][T20505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.060137][T15666] bridge_slave_1: left promiscuous mode [ 420.062694][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.068826][T15666] bridge_slave_0: left allmulticast mode [ 420.070698][T15666] bridge_slave_0: left promiscuous mode [ 420.072610][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.222078][T15666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.227449][T15666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.231479][T15666] bond0 (unregistering): Released all slaves [ 420.244062][T15666] bond1 (unregistering): (slave bond2): Releasing backup interface [ 420.248328][T15666] bond1 (unregistering): Released all slaves [ 420.265577][T15666] bond2 (unregistering): Released all slaves [ 420.344691][T20505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.383072][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 420.531107][ T64] Bluetooth: hci0: command tx timeout [ 420.650019][T20505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.676013][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 420.746423][ T3267] usb 10-1: USB disconnect, device number 10 [ 420.867587][T15579] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 420.923559][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 420.986222][T15666] hsr_slave_0: left promiscuous mode [ 420.991588][T15666] hsr_slave_1: left promiscuous mode [ 420.993768][T15666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.996650][T15666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.028753][T15579] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.032054][T15579] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 421.034871][T15579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.105886][T15666] team0 (unregistering): Port device team_slave_1 removed [ 421.114187][T15666] team0 (unregistering): Port device team_slave_0 removed [ 421.220124][T15666] team0 (unregistering): Port device dummy0 removed [ 421.234157][T20505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.238571][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.271034][T20505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.274780][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.277798][T20505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.286601][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.290510][T20505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.297456][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.328229][T20540] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.330977][T20540] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.334097][T20540] bridge_slave_0: entered allmulticast mode [ 421.338263][T20540] bridge_slave_0: entered promiscuous mode [ 421.347733][T20540] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.350796][T20540] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.353853][T20540] bridge_slave_1: entered allmulticast mode [ 421.359148][T20540] bridge_slave_1: entered promiscuous mode [ 421.393695][T20540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.409012][T20540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.429875][T15579] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 421.445826][T20540] team0: Port device team_slave_0 added [ 421.455489][T20540] team0: Port device team_slave_1 added [ 421.496418][T20540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.498634][T20540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.507728][T20540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.512698][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 421.516911][T20540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.520486][T20540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.530752][T20540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.587976][T15579] usb 10-1: Using ep0 maxpacket: 8 [ 421.596403][T20540] hsr_slave_0: entered promiscuous mode [ 421.599454][T20540] hsr_slave_1: entered promiscuous mode [ 421.604620][T15579] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 421.610578][T15579] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.616691][T15579] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.620960][T15579] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.628735][T15579] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.632586][T15579] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.635310][T15579] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.675941][T20505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.692074][T15666] IPVS: stop unused estimator thread 0... [ 421.748783][T20505] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.810452][T20540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.830006][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.833151][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.840671][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.843717][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.867509][ T64] Bluetooth: hci3: command tx timeout [ 421.941264][T20540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.070625][T20540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.166824][T20540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.185766][T20505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.232315][T15666] bridge_slave_1: left allmulticast mode [ 422.234234][T15666] bridge_slave_1: left promiscuous mode [ 422.236158][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.241673][T15666] bridge_slave_0: left allmulticast mode [ 422.243961][T15666] bridge_slave_0: left promiscuous mode [ 422.246376][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.386650][T15666] bond1 (unregistering): (slave geneve2): Releasing active interface [ 422.405532][T15666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.411754][T15666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.415317][T15666] bond0 (unregistering): Released all slaves [ 422.420087][T15666] bond1 (unregistering): Released all slaves [ 422.486929][T20540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.499550][T20540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.502829][T20540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.540416][T20540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.544894][T20540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.558044][T20540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.562373][T20540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.588298][T20540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.597456][ T64] Bluetooth: hci0: command tx timeout [ 422.665965][T20505] veth0_vlan: entered promiscuous mode [ 422.703051][T20505] veth1_vlan: entered promiscuous mode [ 422.752137][T20505] veth0_macvtap: entered promiscuous mode [ 422.787168][T20505] veth1_macvtap: entered promiscuous mode [ 422.795466][T15666] hsr_slave_0: left promiscuous mode [ 422.799529][T15666] hsr_slave_1: left promiscuous mode [ 422.802092][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.805067][T15666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.808992][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.812072][T15666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.820662][T15666] veth1_macvtap: left promiscuous mode [ 422.822861][T15666] veth0_macvtap: left promiscuous mode [ 422.825102][T15666] veth1_vlan: left promiscuous mode [ 422.827131][T15666] veth0_vlan: left promiscuous mode [ 423.000843][T15666] team0 (unregistering): Port device team_slave_1 removed [ 423.009953][T15666] team0 (unregistering): Port device team_slave_0 removed [ 423.100318][T20540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.116003][T20505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.127650][T20505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.136286][T20540] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.154699][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.157677][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.179820][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.182836][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.267398][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.271661][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.290002][T20540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.293314][T20540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.324263][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 423.324283][ T42] audit: type=1800 audit(1785871083.583:2858): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=321875 res=0 errno=0 [ 423.374633][ T6839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.387404][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.395898][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.397291][ T42] audit: type=1800 audit(1785871083.643:2859): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=322001 res=0 errno=0 [ 423.406948][ T6839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.438947][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.441445][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.472459][ T42] audit: type=1800 audit(1785871083.733:2860): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 423.485900][ T42] audit: type=1800 audit(1785871083.743:2861): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 423.503026][T15666] IPVS: stop unused estimator thread 0... [ 423.510502][ T42] audit: type=1800 audit(1785871083.773:2862): pid=20645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5886" name="type" dev="sysfs" ino=5918 res=0 errno=0 [ 423.544004][ T42] audit: type=1800 audit(1785871083.803:2863): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 423.569838][ T42] audit: type=1800 audit(1785871083.833:2864): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=322160 res=0 errno=0 [ 423.578258][ T42] audit: type=1400 audit(1785871083.843:2865): avc: denied { write } for pid=20648 comm="syz.4.5904" name="/" dev="9p" ino=74470817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.589034][ T42] audit: type=1400 audit(1785871083.853:2866): avc: denied { write } for pid=20648 comm="syz.4.5904" name="/" dev="9p" ino=74470817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.605075][ T42] audit: type=1400 audit(1785871083.863:2867): avc: denied { write } for pid=20648 comm="syz.4.5904" name="/" dev="9p" ino=74470817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.606202][T20540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.613731][T20649] netfs: Duplicate cookie detected [ 423.617939][T20649] netfs: O-cookie c=0000001a [fl=4000 na=0 nA=0 s=-] [ 423.620143][T20649] netfs: O-cookie V=0000001a [9p,syz,] [ 423.621877][T20649] netfs: O-key=[8] 'a355700400000000' [ 423.623500][T20649] netfs: N-cookie c=0000001b [fl=0 na=0 nA=0 s=-] [ 423.625491][T20649] netfs: N-cookie V=0000001a [9p,syz,] [ 423.627453][T20649] netfs: N-key=[8] 'a355700400000000' [ 423.631454][ T1046] usb 5-1: USB disconnect, device number 14 [ 423.658470][T20540] veth0_vlan: entered promiscuous mode [ 423.666068][T20540] veth1_vlan: entered promiscuous mode [ 423.683481][T20540] veth0_macvtap: entered promiscuous mode [ 423.688869][T20540] veth1_macvtap: entered promiscuous mode [ 423.698101][T20540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.704429][T20540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.712283][T20653] tipc: Started in network mode [ 423.715041][T20653] tipc: Node identity ac14140f, cluster identity 4711 [ 423.719051][T20653] tipc: Enabled bearer , priority 10 [ 423.782185][T15666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.789720][T15666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.840431][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.846750][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.881620][ T6841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.884357][ T6841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.897720][T15666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.900919][T15666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.948153][ T64] Bluetooth: hci3: command tx timeout [ 424.060685][T20665] smpboot: CPU 1 is now offline [ 424.178871][T15871] usb 10-1: USB disconnect, device number 11 [ 424.302977][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5914'. [ 424.305913][T20676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.308759][T20676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.315889][T20676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.318384][T20676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.350115][ T56] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 424.429931][T20685] input: syz0 as /devices/virtual/input/input47 [ 424.517950][ T56] usb 9-1: Using ep0 maxpacket: 32 [ 424.526428][ T56] usb 9-1: unable to get BOS descriptor or descriptor too short [ 424.546007][ T56] usb 9-1: string descriptor 0 read error: -22 [ 424.549525][ T56] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 424.556692][ T56] usb 9-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 424.668454][ T64] Bluetooth: hci0: command tx timeout [ 424.732647][ T56] tipc: Node number set to 2886997007 [ 424.749242][T20698] Bluetooth: MGMT ver 1.23 [ 425.136418][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5937'. [ 425.231432][T20735] (syz.0.5939,20735,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 425.344367][T20742] syzkaller1: entered promiscuous mode [ 425.346131][T20742] syzkaller1: entered allmulticast mode [ 426.027394][ T64] Bluetooth: hci3: command tx timeout [ 426.046379][T20766] syz_tun: entered allmulticast mode [ 426.065958][T20765] syz_tun: left allmulticast mode [ 426.104483][T20762] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 426.104840][T20768] 9pnet_virtio: no channels available for device syz [ 426.116288][T20762] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 426.130016][T20762] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 426.135558][T20762] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref] [ 426.163413][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5955'. [ 426.170943][T20770] netlink: 'syz.5.5955': attribute type 11 has an invalid length. [ 426.174785][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5955'. [ 426.179788][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5955'. [ 426.183867][T20770] netlink: 'syz.5.5955': attribute type 11 has an invalid length. [ 426.192808][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5955'. [ 426.200920][T20762] pci 0000:00:05.0: Adding to iommu group 5 [ 426.224297][T20762] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 426.249625][T20762] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 426.288632][T20762] pci 0000:00:1d.0: Adding to iommu group 7 [ 426.299440][T20762] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned [ 426.305577][T20762] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 426.309425][T20762] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 426.313870][T20762] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 426.492236][T20782] input: syz0 as /devices/virtual/input/input48 [ 426.535208][T20762] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 81605 usecs [ 426.595413][T20762] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 426.632855][T20762] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 426.636638][T20762] uhci_hcd 0000:00:1d.0: detected 2 ports [ 426.659657][T20762] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 426.670365][T20762] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 426.674618][T20762] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 426.677227][T20762] usb usb2: Product: UHCI Host Controller [ 426.679654][T20762] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 426.681859][T20762] usb usb2: SerialNumber: 0000:00:1d.0 [ 426.757873][ T64] Bluetooth: hci0: command tx timeout [ 427.109686][ T5107] usb 9-1: USB disconnect, device number 8 [ 427.466292][T20813] netlink: 'syz.4.5974': attribute type 4 has an invalid length. [ 427.567357][T15579] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 427.719739][T15579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.727677][T15579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.731282][T15579] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.735628][T15579] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.738841][ T5107] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 427.741458][T15579] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.759708][T15579] libceph: connect (1)[c::]:6789 error -101 [ 427.764754][T15579] libceph: mon0 (1)[c::]:6789 connect error [ 427.851422][ T847] libceph: connect (1)[c::]:6789 error -101 [ 427.856755][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 427.889644][ T5107] usb 9-1: config 0 has no interfaces? [ 427.891361][ T5107] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.894464][ T5107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.028443][ T5107] libceph: connect (1)[c::]:6789 error -101 [ 428.032893][ T5107] libceph: mon0 (1)[c::]:6789 connect error [ 428.107643][ T64] Bluetooth: hci3: command tx timeout [ 428.118258][ T847] libceph: connect (1)[c::]:6789 error -101 [ 428.120568][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 428.542133][T15579] libceph: connect (1)[c::]:6789 error -101 [ 428.544373][T15579] libceph: mon0 (1)[c::]:6789 connect error [ 428.579570][T20826] ceph: No mds server is up or the cluster is laggy [ 428.583152][T20829] ceph: No mds server is up or the cluster is laggy [ 428.639861][ T847] libceph: connect (1)[c::]:6789 error -101 [ 428.641929][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 428.716449][ T42] kauditd_printk_skb: 158 callbacks suppressed [ 428.716469][ T42] audit: type=1800 audit(1785871088.963:3026): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 428.793828][T20838] dvmrp0: entered allmulticast mode [ 428.855530][ T42] audit: type=1800 audit(1785871089.113:3027): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 428.947340][ T42] audit: type=1800 audit(1785871089.203:3028): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 429.021445][ T42] audit: type=1800 audit(1785871089.283:3029): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 429.086586][ T42] audit: type=1800 audit(1785871089.343:3030): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 429.120430][ T42] audit: type=1800 audit(1785871089.383:3031): pid=20848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5986" name="resource1" dev="sysfs" ino=2919 res=0 errno=0 [ 429.241847][T20852] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 429.248800][ T42] audit: type=1800 audit(1785871089.513:3032): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323680 res=0 errno=0 [ 429.388731][ T42] audit: type=1400 audit(1785871089.653:3033): avc: denied { create } for pid=20858 comm="syz.0.5991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 429.413618][ T42] audit: type=1400 audit(1785871089.653:3034): avc: denied { append } for pid=20858 comm="syz.0.5991" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 429.428470][ T42] audit: type=1800 audit(1785871089.663:3035): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 429.647614][T20877] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6000'. [ 429.735127][T20884] netlink: 'syz.5.6003': attribute type 19 has an invalid length. [ 429.739996][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6003'. [ 429.743276][T20884] netlink: 'syz.5.6003': attribute type 19 has an invalid length. [ 429.745745][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6003'. [ 430.136927][T20902] dvmrp0: left allmulticast mode [ 430.323732][ T5107] usb 8-1: USB disconnect, device number 15 [ 430.480251][T15579] usb 9-1: USB disconnect, device number 9 [ 430.519676][T20920] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 430.751191][T20937] db_root: cannot be changed because it's in use [ 430.776997][T20933] xhci_hcd 0000:00:01.0: xHCI Host Controller [ 430.810142][T20933] xhci_hcd 0000:00:01.0: new USB bus registered, assigned bus number 63 [ 430.877142][T20933] xhci_hcd 0000:00:01.0: Host halt failed, -110 [ 430.880661][T20933] xhci_hcd 0000:00:01.0: can't setup: -110 [ 430.882620][T20933] xhci_hcd 0000:00:01.0: USB bus 63 deregistered [ 430.940882][T20933] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -110 [ 430.943685][T20933] xhci_hcd 0000:00:01.0: probe with driver xhci_hcd failed with error -110 [ 431.128748][T20954] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 431.132940][T20954] SELinux: invalid class [ 431.137855][T20954] SELinux: failed to load policy [ 431.178395][T20961] gadgetfs: bound to dummy_udc driver [ 431.468402][T17004] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 431.639818][T17004] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.645083][T17004] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 431.648814][T17004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.651646][T17004] usb 10-1: Product: syz [ 431.653078][T17004] usb 10-1: Manufacturer: syz [ 431.654611][T17004] usb 10-1: SerialNumber: syz [ 431.929120][T20970] xt_hashlimit: size too large, truncated to 1048576 [ 432.110020][T20980] loop4: detected capacity change from 0 to 2640 [ 432.114055][T20980] buffer_io_error: 322 callbacks suppressed [ 432.114073][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.120086][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.123004][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.125515][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.128733][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.131312][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.134828][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.138555][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.141111][T20980] ldm_validate_partition_table(): Disk read failed. [ 432.143414][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.145879][T20980] Buffer I/O error on dev loop4, logical block 0, async page read [ 432.148677][T20980] Dev loop4: unable to read RDB block 0 [ 432.150589][T20980] loop4: unable to read partition table [ 432.153278][T20980] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 432.201168][T20984] netlink: 'syz.4.6046': attribute type 13 has an invalid length. [ 432.203934][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6046'. [ 432.212175][T20984] netlink: 'syz.4.6046': attribute type 13 has an invalid length. [ 432.215426][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6046'. [ 432.229158][ T5812] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.232651][ T5812] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.242281][ T5812] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.252345][ T5812] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.337581][ T5883] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 432.393042][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6049'. [ 432.489525][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 432.494888][ T5883] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.499094][ T847] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 432.502736][ T5883] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.514933][ T5883] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.522122][ T5883] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.531540][ T5883] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.535351][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.669091][ T847] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 432.676932][ T847] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 432.687955][ T847] usb 5-1: Product: syz [ 432.689831][ T847] usb 5-1: Manufacturer: syz [ 432.691768][ T847] usb 5-1: SerialNumber: syz [ 434.243953][ T3267] usb 10-1: USB disconnect, device number 12 [ 434.450414][ T42] kauditd_printk_skb: 109 callbacks suppressed [ 434.450433][ T42] audit: type=1800 audit(1785871094.713:3145): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.493549][ T42] audit: type=1800 audit(1785871094.753:3146): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.541686][ T42] audit: type=1800 audit(1785871094.803:3147): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.581939][ T42] audit: type=1800 audit(1785871094.843:3148): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.727410][ T42] audit: type=1800 audit(1785871094.983:3149): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.763283][ T42] audit: type=1800 audit(1785871095.023:3150): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.804069][ T42] audit: type=1800 audit(1785871095.063:3151): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.867449][ T42] audit: type=1800 audit(1785871095.123:3152): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.899410][ T42] audit: type=1800 audit(1785871095.163:3153): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 434.943225][ T42] audit: type=1800 audit(1785871095.203:3154): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 435.110703][ T847] usb 8-1: USB disconnect, device number 16 [ 435.138878][T21084] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 435.174152][T21086] gadgetfs: bound to dummy_udc driver [ 435.265215][T21084] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 435.270506][T21084] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 435.273276][T21084] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 435.284395][ T56] usb 5-1: USB disconnect, device number 15 [ 435.437452][ T5854] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 435.441612][ C3] gadgetfs: connected [ 435.449004][T21085] gadgetfs: suspended from state 3 [ 435.451990][T21085] gadgetfs: disconnected [ 435.636930][T21109] jffs2: notice: (21109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 435.726396][T21114] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.734235][T21114] bridge_slave_0 (unregistering): left allmulticast mode [ 435.736540][T21114] bridge_slave_0 (unregistering): left promiscuous mode [ 435.740587][T21114] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.269092][T21142] pim6reg1: entered promiscuous mode [ 436.271387][T21142] pim6reg1: entered allmulticast mode [ 436.612826][T21154] netlink: 'syz.0.6109': attribute type 1 has an invalid length. [ 436.643657][T21154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.977363][ T5107] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 437.131504][ T5107] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.135135][ T5107] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 437.139535][ T5107] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.143534][ T5107] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 437.152950][ T5107] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.156716][ T5107] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.161269][ T5107] usb 9-1: Product: syz [ 437.162916][ T5107] usb 9-1: Manufacturer: syz [ 437.221561][T21190] input: syz1 as /devices/virtual/input/input49 [ 437.299081][T21195] binder: 21194:21195 ioctl c0306201 0 returned -14 [ 437.520986][T21207] SELinux: failed to load policy [ 437.969043][ T5854] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 438.050476][T21225] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 438.119005][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.125299][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.130170][ T5854] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 438.134508][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.349641][T21236] input: syz0 as /devices/virtual/input/input50 [ 438.779867][T21251] SELinux: ebitmap: high bit 1536 is not equal to the expected value 768 [ 438.782788][T21251] SELinux: invalid class [ 438.786397][T21251] SELinux: failed to load policy [ 438.904792][T21256] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 438.958552][T21259] loop2: detected capacity change from 0 to 7 [ 438.962052][T21259] Dev loop2: unable to read RDB block 7 [ 438.963906][T21259] loop2: AHDI p1 p2 p3 [ 438.965236][T21259] loop2: partition table partially beyond EOD, truncated [ 438.968193][T21259] loop2: p1 start 1601398130 is beyond EOD, truncated [ 438.972973][T21259] loop2: p2 start 1702059890 is beyond EOD, truncated [ 439.564011][ T42] kauditd_printk_skb: 119 callbacks suppressed [ 439.564038][ T42] audit: type=1800 audit(1785871099.823:3274): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 439.592709][ T42] audit: type=1800 audit(1785871099.853:3275): pid=21269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6159" name="uevent" dev="sysfs" ino=45026 res=0 errno=0 [ 439.603022][ T42] audit: type=1800 audit(1785871099.863:3276): pid=21269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6159" name="uevent" dev="sysfs" ino=27841 res=0 errno=0 [ 439.642509][ T42] audit: type=1800 audit(1785871099.903:3277): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 439.704096][ T42] audit: type=1800 audit(1785871099.963:3278): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 439.727764][ T6151] usb 9-1: USB disconnect, device number 10 [ 439.748133][ T42] audit: type=1800 audit(1785871100.003:3279): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 439.763755][ T42] audit: type=1800 audit(1785871100.023:3280): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 439.794607][ T42] audit: type=1800 audit(1785871100.053:3281): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 439.809826][ T42] audit: type=1800 audit(1785871100.063:3282): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 439.851175][ T42] audit: type=1800 audit(1785871100.113:3283): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 439.950096][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.952895][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.098186][ T5883] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 440.237391][ T6151] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 440.248855][ T5883] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 440.251895][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.389042][ T6151] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.393508][ T6151] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 440.397433][ T6151] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.427628][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.428245][T15579] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 440.432248][T15579] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 440.740197][ T5821] usb 10-1: USB disconnect, device number 13 [ 440.765198][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6169'. [ 442.210052][T21311] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6176'. [ 442.517891][T15579] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 442.517987][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.519886][T15579] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 442.862408][T15579] usb 5-1: USB disconnect, device number 16 [ 442.875415][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6189'. [ 442.901714][T17094] usb 9-1: USB disconnect, device number 11 [ 443.317409][T17094] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 443.476454][T21360] xt_hashlimit: size too large, truncated to 1048576 [ 443.485699][T17094] usb 9-1: config 0 has no interfaces? [ 443.491325][T17094] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 443.494409][T17094] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.505130][T17094] usb 9-1: Product: syz [ 443.506598][T17094] usb 9-1: Manufacturer: syz [ 443.509597][T17094] usb 9-1: SerialNumber: syz [ 443.623593][T21363] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6199'. [ 443.885296][T21378] input: syz0 as /devices/virtual/input/input51 [ 443.897385][T21378] input: failed to attach handler leds to device input51, error: -6 [ 444.337419][ T5854] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 444.490453][ T5854] usb 8-1: unable to get BOS descriptor or descriptor too short [ 444.493899][ T5854] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.505266][ T5854] usb 8-1: string descriptor 0 read error: -22 [ 444.511855][ T5854] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 444.517005][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.738014][ T42] kauditd_printk_skb: 76 callbacks suppressed [ 444.738028][ T42] audit: type=1800 audit(1785871105.003:3360): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 444.775585][ T42] audit: type=1800 audit(1785871105.033:3361): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 444.793177][T21426] netlink: 'syz.5.6227': attribute type 19 has an invalid length. [ 445.889802][T21435] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 445.896301][ T42] audit: type=1800 audit(1785871106.153:3362): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327399 res=0 errno=0 [ 445.956731][ T5821] usb 9-1: USB disconnect, device number 12 [ 445.976847][ T42] audit: type=1800 audit(1785871106.233:3363): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 446.153887][ T42] audit: type=1800 audit(1785871106.413:3364): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 446.211153][ T42] audit: type=1800 audit(1785871106.473:3365): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 446.296387][ T42] audit: type=1800 audit(1785871106.553:3366): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 446.316684][ T42] audit: type=1400 audit(1785871106.573:3367): avc: denied { write } for pid=21454 comm="syz.5.6242" name="functions" dev="configfs" ino=17804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.342171][ T42] audit: type=1800 audit(1785871106.593:3368): pid=21456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6242" name="max_segment_size" dev="configfs" ino=107764 res=0 errno=0 [ 446.356779][ T42] audit: type=1800 audit(1785871106.603:3369): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 447.108600][ T5854] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 447.116961][ T5821] usb 8-1: USB disconnect, device number 17 [ 447.299146][ T5854] usb 9-1: unable to get BOS descriptor or descriptor too short [ 447.302576][ T5854] usb 9-1: not running at top speed; connect to a high speed hub [ 447.306625][ T5854] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 447.309371][ T5854] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 447.314061][ T5854] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 447.319765][ T5854] usb 9-1: config 14 has no interface number 0 [ 447.321716][ T5854] usb 9-1: config 14 has no interface number 1 [ 447.326004][ T5854] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 447.331810][ T5854] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 447.337724][ T5854] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.343531][ T5854] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.346728][ T5854] usb 9-1: config 14 interface 57 has no altsetting 0 [ 447.351176][ T5854] usb 9-1: config 14 interface 228 has no altsetting 0 [ 447.355074][ T5854] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 447.361360][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.363923][ T5854] usb 9-1: Product: syz [ 447.365244][ T5854] usb 9-1: Manufacturer: syz [ 447.369034][ T5854] usb 9-1: SerialNumber: syz [ 447.619155][T21489] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 449.221923][T21542] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 449.330701][T21544] pim6reg1: entered promiscuous mode [ 449.332428][T21544] pim6reg1: entered allmulticast mode [ 449.407385][ T847] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 449.559661][ T847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.563340][ T847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.576366][ T847] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 449.584526][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.753370][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 449.753384][ T42] audit: type=1800 audit(1785871110.013:3431): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 449.823172][ T42] audit: type=1800 audit(1785871110.083:3432): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 449.879844][ T5854] usb 9-1: USB disconnect, device number 13 [ 449.891153][ T42] audit: type=1800 audit(1785871110.153:3433): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 449.905495][ T65] block nbd0: Receive control failed (result -107) [ 449.906703][ T42] audit: type=1800 audit(1785871110.163:3434): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 449.934234][ T42] audit: type=1800 audit(1785871110.193:3435): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6288" name="online" dev="sysfs" ino=764 res=0 errno=0 [ 449.954715][ T42] audit: type=1800 audit(1785871110.213:3436): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761 res=0 errno=0 [ 449.969380][ T42] audit: type=1800 audit(1785871110.233:3437): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20353 res=0 errno=0 [ 449.980633][T21560] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 449.988369][T17149] block nbd0: shutting down sockets [ 450.021957][ T42] audit: type=1800 audit(1785871110.283:3438): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 450.033907][ T42] audit: type=1800 audit(1785871110.293:3439): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=328297 res=0 errno=0 [ 450.040959][ T42] audit: type=1800 audit(1785871110.293:3440): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=328309 res=0 errno=0 [ 450.361173][T21586] pci_bus 0000:01: busn_res: [bus 01] is released [ 450.386633][T21589] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 450.393262][T21589] pci 0000:00:04.0: PCI bridge to [bus 01] [ 450.395141][T21589] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 450.397599][T21589] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 450.408352][T21589] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 450.412679][T21589] pci 0000:00:04.0: enabling Extended Tags [ 450.433228][T21589] pci 0000:00:04.0: Adding to iommu group 4 [ 450.477142][T21589] pci 0000:00:04.0: PCI bridge to [bus 01] [ 450.483793][T21589] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 450.490645][T21589] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 450.496515][T21589] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff]: assigned [ 450.499545][T21589] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 450.502802][T21589] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 450.505318][T21589] pci 0000:00:04.0: PCI bridge to [bus 01] [ 450.515941][T21589] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 450.520180][T21589] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff] [ 450.523847][T21589] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 450.566100][T21589] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 450.618441][T21589] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 451.032430][T21614] overlayfs: failed to decode file handle (len=8, type=8192, flags=0, err=-22) [ 451.193061][T21619] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 451.196837][T21619] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 451.464259][T21627] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 451.557372][ T847] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 451.711225][ T847] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 451.714267][ T847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.716785][ T847] usb 9-1: Product: syz [ 451.718722][ T847] usb 9-1: Manufacturer: syz [ 451.720374][ T847] usb 9-1: SerialNumber: syz [ 452.169251][T15579] usb 8-1: USB disconnect, device number 18 [ 452.247404][ T5107] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 452.397454][ T5107] usb 5-1: Using ep0 maxpacket: 8 [ 452.401712][ T5107] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.406287][ T5107] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.410921][ T5107] usb 5-1: config 0 interface 0 has no altsetting 0 [ 452.413749][ T5107] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 452.417489][ T5107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.577451][ T5822] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 452.728790][ T5822] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.732126][ T5822] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 452.735061][ T5822] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 452.739050][ T5822] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 452.741955][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.077421][ T55] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 454.238493][ T55] usb 10-1: not running at top speed; connect to a high speed hub [ 454.243023][ T55] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 454.247856][ T55] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 454.253505][ T55] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 454.257421][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.260712][ T55] usb 10-1: Product: syz [ 454.262375][ T55] usb 10-1: Manufacturer: syz [ 454.264218][ T55] usb 10-1: SerialNumber: syz [ 454.339058][ T5107] usb 9-1: USB disconnect, device number 14 [ 454.396137][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 454.399992][T21654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6330'. [ 455.018421][ T55] usb 5-1: USB disconnect, device number 17 [ 455.038252][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 455.038272][ T42] audit: type=1800 audit(1785871115.303:3521): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 455.107620][ T42] audit: type=1800 audit(1785871115.373:3522): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 455.206574][ T42] audit: type=1800 audit(1785871115.463:3523): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 455.288998][ T42] audit: type=1800 audit(1785871115.553:3524): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 455.300443][ T42] audit: type=1800 audit(1785871115.563:3525): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 455.314127][ T42] audit: type=1800 audit(1785871115.573:3526): pid=21669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6336" name="remove" dev="sysfs" ino=2753 res=0 errno=0 [ 455.346493][ T42] audit: type=1800 audit(1785871115.603:3527): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 455.351574][ T5107] usb 8-1: USB disconnect, device number 19 [ 455.403251][ T42] audit: type=1800 audit(1785871115.663:3528): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 455.430561][ T42] audit: type=1800 audit(1785871115.693:3529): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 455.439690][T21680] ima: policy update failed [ 455.452810][ T42] audit: type=1400 audit(1785871115.693:3530): avc: denied { write } for pid=21679 comm="syz.3.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 455.488385][T21683] loop5: detected capacity change from 0 to 7 [ 455.494388][T21683] Dev loop5: unable to read RDB block 7 [ 455.496231][T21683] loop5: unable to read partition table [ 455.498623][T21683] loop5: partition table beyond EOD, truncated [ 455.503315][T21683] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 456.372280][T21714] netlink: 'syz.4.6355': attribute type 15 has an invalid length. [ 456.374974][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6355'. [ 456.378168][T21714] netlink: 'syz.4.6355': attribute type 15 has an invalid length. [ 456.380877][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6355'. [ 456.474716][T21720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 456.859399][ T5822] usb 10-1: USB disconnect, device number 14 [ 457.167868][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6373'. [ 457.231032][T21753] input: syz1 as /devices/virtual/input/input52 [ 457.438827][T21768] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6381'. [ 457.442592][T21768] net_ratelimit: 1 callbacks suppressed [ 457.442694][T21768] openvswitch: netlink: Message has 512 unknown bytes. [ 457.463674][T21771] netlink: 'syz.5.6382': attribute type 1 has an invalid length. [ 457.476113][T21771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.498059][T21771] bond1: (slave geneve2): making interface the new active one [ 457.502291][T21771] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 457.698248][T21782] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.6387'. [ 458.437447][ T55] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 458.601110][ T55] usb 9-1: config 0 has no interfaces? [ 458.604759][ T55] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 458.608131][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 458.610665][ T55] usb 9-1: Product: syz [ 458.612214][ T55] usb 9-1: Manufacturer: syz [ 458.613746][ T55] usb 9-1: SerialNumber: syz [ 458.713706][ T3267] libceph: connect (1)[c::]:6789 error -101 [ 458.722716][ T3267] libceph: mon0 (1)[c::]:6789 connect error [ 458.730025][ T3267] libceph: connect (1)[c::]:6789 error -101 [ 458.735657][ T3267] libceph: mon0 (1)[c::]:6789 connect error [ 458.796740][T21835] ceph: No mds server is up or the cluster is laggy [ 459.801249][T21864] binder: 21863:21864 ioctl c0306201 2000000003c0 returned -14 [ 460.704011][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 460.704050][ T42] audit: type=1800 audit(1785871120.963:3615): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 460.711690][T21886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 460.715266][ T42] audit: type=1800 audit(1785871120.963:3616): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6429" name="new_array" dev="sysfs" ino=65143 res=0 errno=0 [ 460.725052][ T42] audit: type=1800 audit(1785871120.973:3617): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6429" name="array_state" dev="sysfs" ino=282377 res=0 errno=0 [ 460.760288][ T42] audit: type=1800 audit(1785871121.023:3618): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 460.826523][ T42] audit: type=1800 audit(1785871121.083:3619): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 460.896447][ T42] audit: type=1800 audit(1785871121.153:3620): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 460.944944][ T42] audit: type=1800 audit(1785871121.203:3621): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 461.040833][ T42] audit: type=1800 audit(1785871121.303:3622): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 461.052845][ T42] audit: type=1800 audit(1785871121.313:3623): pid=21901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6435" name="pm_print_times" dev="sysfs" ino=870 res=0 errno=0 [ 461.091443][ T42] audit: type=1800 audit(1785871121.353:3624): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 461.235030][ T5821] usb 9-1: USB disconnect, device number 15 [ 461.497596][ T5854] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 461.649073][ T5854] usb 8-1: Using ep0 maxpacket: 8 [ 461.652459][ T5854] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.655481][ T5854] usb 8-1: config 0 has no interface number 0 [ 461.659729][ T5854] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.664074][ T5854] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.666925][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.713248][ T6832] rpcbind: server 127.0.0.1 not responding, timed out [ 461.998494][T21926] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 464.264784][ T847] usb 8-1: USB disconnect, device number 20 [ 464.587156][T22025] input: syz0 as /devices/virtual/input/input53 [ 464.594315][T22025] input: failed to attach handler leds to device input53, error: -6 [ 465.140593][T22046] xt_hashlimit: size too large, truncated to 1048576 [ 465.607556][ T5835] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 465.780192][ T5835] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 465.786282][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 465.786323][ T42] audit: type=1800 audit(1785871126.043:3671): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 465.789677][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.845808][ T42] audit: type=1800 audit(1785871126.063:3672): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 465.855163][ T42] audit: type=1800 audit(1785871126.073:3673): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330789 res=0 errno=0 [ 465.864296][ T42] audit: type=1800 audit(1785871126.083:3674): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=330818 res=0 errno=0 [ 465.873634][ T42] audit: type=1800 audit(1785871126.093:3675): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=330796 res=0 errno=0 [ 465.883335][ T42] audit: type=1800 audit(1785871126.093:3676): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=330797 res=0 errno=0 [ 465.894871][ T42] audit: type=1800 audit(1785871126.093:3677): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=330798 res=0 errno=0 [ 465.904013][ T42] audit: type=1326 audit(1785871126.103:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22083 comm="syz.5.6512" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897259e019 code=0x0 [ 466.604877][ T42] audit: type=1800 audit(1785871126.863:3679): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 466.672792][ T42] audit: type=1800 audit(1785871126.933:3680): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 466.754083][T22093] overlayfs: failed to verify upper (119/file1, ino=653, err=-116) [ 466.757515][T22093] overlayfs: failed to verify index dir 'upper' xattr [ 466.760160][T22093] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 467.716292][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6515'. [ 467.769018][T22107] bond2: entered promiscuous mode [ 467.772270][T22107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.858382][T22111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.861538][T22111] bond2: (slave sit4): The slave device specified does not support setting the MAC address [ 467.866837][T22111] bond2: (slave sit4): Error -95 calling set_mac_address [ 467.914825][T22115] netlink: 'syz.0.6517': attribute type 1 has an invalid length. [ 467.918952][T22115] netlink: 'syz.0.6517': attribute type 2 has an invalid length. [ 467.937708][T22119] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 468.032794][T22125] bridge_slave_1: left allmulticast mode [ 468.035704][T22125] bridge_slave_1: left promiscuous mode [ 468.039583][T22125] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.055462][T22125] bridge_slave_0: left allmulticast mode [ 468.058755][T22125] bridge_slave_0: left promiscuous mode [ 468.068085][T22125] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.257796][ T5822] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 468.360317][ T5883] usb 8-1: USB disconnect, device number 21 [ 468.519628][ T5822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 468.526187][ T5822] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.540037][ T5822] usb 5-1: string descriptor 0 read error: -22 [ 468.543331][ T5822] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 468.551879][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.482537][T22167] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 469.490750][T22167] CIFS: Attempting to mount //127.0.0.1/share [ 469.496818][T22167] CIFS: VFS: Error connecting to socket. Aborting operation. [ 469.501107][T22167] CIFS: VFS: cifs_mount failed w/return code = -101 [ 470.347849][T22185] smpboot: CPU 1 is now offline [ 470.407585][T22188] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 470.610682][T22207] IPv4: Oversized IP packet from 127.202.26.0 [ 470.898957][T22216] input: syz0 as /devices/virtual/input/input54 [ 470.901084][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 470.901179][ T42] audit: type=1800 audit(1785871131.163:3717): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332450 res=0 errno=0 [ 470.918409][ T42] audit: type=1800 audit(1785871131.163:3718): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=332465 res=0 errno=0 [ 470.925322][ T42] audit: type=1800 audit(1785871131.163:3719): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=332468 res=0 errno=0 [ 470.932620][ T42] audit: type=1800 audit(1785871131.183:3720): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=332467 res=0 errno=0 [ 470.942013][ T42] audit: type=1800 audit(1785871131.183:3721): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=332466 res=0 errno=0 [ 470.952592][ T42] audit: type=1800 audit(1785871131.183:3722): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 470.961295][ T42] audit: type=1800 audit(1785871131.183:3723): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=332457 res=0 errno=0 [ 470.969706][ T42] audit: type=1800 audit(1785871131.183:3724): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=332460 res=0 errno=0 [ 470.978204][ T42] audit: type=1800 audit(1785871131.183:3725): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=332453 res=0 errno=0 [ 470.985150][ T42] audit: type=1800 audit(1785871131.183:3726): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332494 res=0 errno=0 [ 471.023039][ T5821] usb 5-1: USB disconnect, device number 18 [ 471.133685][T22226] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 471.150142][T22229] CIFS: Attempting to mount //127.0.0.1/share [ 471.193837][T22222] pci_bus 0000:01: busn_res: [bus 01] is released [ 471.227084][T22227] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 471.279252][T22227] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 471.282107][T22227] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 471.284898][T22227] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 471.287182][T22227] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 471.291898][T22227] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 471.314877][T22227] pci 0000:00:01.0: Adding to iommu group 1 [ 471.329696][T22227] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 471.333163][T22227] pci 0000:00:01.0: vgaarb: bridge control possible [ 471.335776][T22227] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 471.345136][T22227] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 471.354232][T22227] pci 0000:00:04.0: PCI bridge to [bus 01] [ 471.363416][T22227] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 471.367715][T22227] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff] [ 471.373054][T22227] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 471.376925][T22227] pci 0000:00:04.0: enabling Extended Tags [ 471.399840][T22227] pci 0000:00:04.0: Adding to iommu group 4 [ 471.415482][T22227] pci 0000:00:04.0: PCI bridge to [bus 01] [ 471.420701][T22227] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 471.425294][T22227] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 471.431613][T22227] pci 0000:00:01.0: BAR 0 [mem 0x80800000-0x80ffffff pref]: assigned [ 471.450693][T22227] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff]: assigned [ 471.467011][T22227] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 471.476154][T22227] pci 0000:00:01.0: BAR 2 [mem 0x380000200000-0x380000203fff 64bit pref]: assigned [ 471.491400][T22227] pci 0000:00:01.0: BAR 4 [mem 0x80001000-0x80001fff]: assigned [ 471.495962][T22227] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 471.503149][T22227] pci 0000:00:04.0: PCI bridge to [bus 01] [ 471.508957][T22227] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 471.512976][T22227] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff] [ 471.516621][T22227] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 471.589094][T22227] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 471.591946][T22227] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 471.595333][T22227] [drm] features: -virgl +edid -resource_blob -host_visible [ 471.595347][T22227] [drm] features: -context_init -blob_alignment [ 471.618533][T22227] [drm] number of scanouts: 1 [ 471.620105][T22227] [drm] number of cap sets: 0 [ 471.678016][T22227] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 471.707103][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 471.710938][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 471.789234][T22227] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 471.834935][T22243] ceph: No mds server is up or the cluster is laggy [ 471.840540][T22227] pcieport 0000:00:04.0: PME: Signaling with IRQ 30 [ 471.934452][T22227] pcieport 0000:00:04.0: AER: enabled with IRQ 31 [ 471.988918][T22229] CIFS: VFS: cifs_mount failed w/return code = -112 [ 472.138017][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 472.140718][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 472.182639][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 472.190073][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 472.428308][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 472.431016][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 472.447814][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 472.454113][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 472.586167][T22285] syzkaller1: entered promiscuous mode [ 472.596021][T22285] syzkaller1: entered allmulticast mode [ 472.677719][ T5107] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 472.937047][T22256] ceph: No mds server is up or the cluster is laggy [ 472.938399][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 472.941112][T22261] ceph: No mds server is up or the cluster is laggy [ 472.941951][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 472.958856][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 472.963517][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 473.236434][ T5107] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 473.259337][ T5107] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 473.281112][ T5107] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 473.298925][ T5107] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 473.417561][ T5107] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 473.434241][ T5107] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 473.448758][ T5107] usb 8-1: Product: syz [ 473.463323][ T5107] usb 8-1: Manufacturer: syz [ 473.816131][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6594'. [ 474.132792][T22315] process '/newroot/311/file0' started with executable stack [ 474.285943][T22331] netlink: 'syz.5.6603': attribute type 9 has an invalid length. [ 474.289332][T22331] netlink: 19 bytes leftover after parsing attributes in process `syz.5.6603'. [ 474.523993][T22354] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 474.877441][ T5883] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 475.027435][ T5883] usb 9-1: Using ep0 maxpacket: 8 [ 475.035720][ T5883] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 475.039649][ T5883] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.043648][ T5883] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.048549][ T5883] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.053471][ T5883] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.061298][ T5883] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 475.065769][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.248898][ T5883] usb 8-1: USB disconnect, device number 22 [ 475.252375][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6632'. [ 475.254248][T22394] ip_tables: iptables: counters copy to user failed while replacing table [ 475.255244][T22396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6632'. [ 475.413749][T22409] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 475.725469][ T3267] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 475.912525][ T3267] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.929550][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 475.933517][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 475.937020][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 475.940926][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 475.946159][ T42] kauditd_printk_skb: 88 callbacks suppressed [ 475.946184][ T42] audit: type=1400 audit(1785871136.213:3815): avc: denied { write } for pid=19473 comm="syz-executor" name="329" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 475.954958][ T42] audit: type=1400 audit(1785871136.213:3816): avc: denied { remove_name } for pid=19473 comm="syz-executor" name="file1" dev="tmpfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 475.956479][ T42] audit: type=1400 audit(1785871136.213:3817): avc: denied { rmdir } for pid=19473 comm="syz-executor" name="file1" dev="tmpfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 475.956526][ T42] audit: type=1400 audit(1785871136.213:3818): avc: denied { write } for pid=19473 comm="syz-executor" name="329" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 475.956571][ T42] audit: type=1400 audit(1785871136.213:3819): avc: denied { write } for pid=19473 comm="syz-executor" name="329" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 475.956611][ T42] audit: type=1400 audit(1785871136.213:3820): avc: denied { write } for pid=19473 comm="syz-executor" name="329" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 475.957000][ T42] audit: type=1400 audit(1785871136.213:3821): avc: denied { write } for pid=19473 comm="syz-executor" name="329" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 475.957715][ T42] audit: type=1400 audit(1785871136.223:3822): avc: denied { rmdir } for pid=19473 comm="syz-executor" name="329" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 476.203337][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 476.226604][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 476.229976][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 476.233321][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 476.237612][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 476.241085][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 476.244495][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 476.256817][ T3267] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.272120][ T42] audit: type=1800 audit(1785871136.533:3823): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 476.310166][ T3267] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.313342][ T3267] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 476.318386][ T42] audit: type=1800 audit(1785871136.573:3824): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 476.338244][ T3267] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 476.341325][ T3267] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.349157][ T3267] usb 8-1: Product: syz [ 476.350800][ T3267] usb 8-1: Manufacturer: syz [ 476.352763][ T3267] usb 8-1: SerialNumber: syz [ 477.674719][ T847] usb 9-1: USB disconnect, device number 16 [ 477.760987][T22468] netlink: 'syz.4.6663': attribute type 7 has an invalid length. [ 477.763721][T22468] netlink: 'syz.4.6663': attribute type 7 has an invalid length. [ 477.856216][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6665'. [ 478.356269][T22504] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 478.359357][T22504] overlayfs: failed to set xattr on upper [ 478.366190][T22504] overlayfs: ...falling back to redirect_dir=nofollow. [ 478.376822][T22504] overlayfs: ...falling back to index=off. [ 478.380442][T22504] overlayfs: ...falling back to uuid=null. [ 478.383073][T22504] overlayfs: maximum fs stacking depth exceeded [ 478.413715][ T55] usb 8-1: USB disconnect, device number 23 [ 478.469577][T22514] netlink: 'syz.3.6684': attribute type 2 has an invalid length. [ 478.474972][T22514] netlink: 'syz.3.6684': attribute type 2 has an invalid length. [ 478.478376][T22514] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.6684'. [ 478.611013][T22526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 479.088473][T22552] binder: 22551:22552 ioctl c0306201 200000000040 returned -22 [ 479.129028][T22554] loop2: detected capacity change from 0 to 7 [ 479.132991][T22554] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 479.138657][T22554] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 479.141448][T22554] Dev loop2: unable to read RDB block 7 [ 479.143787][T22554] loop2: unable to read partition table [ 479.146210][T22554] loop2: partition table beyond EOD, truncated [ 479.148895][T22554] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.231243][T22560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6704'. [ 479.247366][T22561] netlink: 'syz.3.6705': attribute type 7 has an invalid length. [ 479.251301][T22560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6704'. [ 479.251451][T22561] netlink: 'syz.3.6705': attribute type 7 has an invalid length. [ 479.385246][T22568] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 479.667362][ T1046] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 479.820752][ T1046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.827066][ T1046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.830603][ T1046] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 479.834176][ T1046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.988905][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6714'. [ 480.096989][T22592] netlink: 'syz.4.6718': attribute type 1 has an invalid length. [ 480.122402][T22592] gretap2: entered allmulticast mode [ 480.128766][T22592] bond1: (slave gretap2): making interface the new active one [ 480.135118][T22592] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 480.377809][T22604] overlayfs: statfs failed on './file0' [ 480.538431][T22608] kvm: user requested TSC rate below hardware speed [ 480.960843][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 480.960865][ T42] audit: type=1800 audit(1785871141.223:3896): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 481.024921][T22631] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 481.027911][ T42] audit: type=1800 audit(1785871141.293:3897): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335583 res=0 errno=0 [ 481.048137][T22631] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 481.051639][ T42] audit: type=1800 audit(1785871141.313:3898): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335605 res=0 errno=0 [ 481.113542][ T42] audit: type=1800 audit(1785871141.373:3899): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 481.172028][T22639] overlayfs: failed to clone upperpath [ 481.375571][T22650] netlink: 'syz.3.6743': attribute type 1 has an invalid length. [ 481.398383][ T42] audit: type=1800 audit(1785871141.663:3900): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 481.481098][ T42] audit: type=1800 audit(1785871141.743:3901): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 481.483125][T22650] gretap1: entered allmulticast mode [ 481.495724][T22650] bond1: (slave gretap1): making interface the new active one [ 481.502166][T22650] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 481.552167][ T42] audit: type=1800 audit(1785871141.813:3902): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 481.642727][T22658] kvm: Disabled LAPIC found during irq injection [ 481.664229][T22660] ptrace attach of "/syz-executor exec"[22661] was attempted by "/syz-executor exec"[22660] [ 481.735230][T22663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6748'. [ 481.739663][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6748'. [ 481.757791][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.770577][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.776590][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.781316][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.821391][ T42] audit: type=1800 audit(1785871142.083:3903): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 481.899052][ T42] audit: type=1800 audit(1785871142.163:3904): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 481.926899][T22674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.110962][ T42] audit: type=1800 audit(1785871142.373:3905): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 482.151767][T22683] netlink: 'syz.3.6757': attribute type 1 has an invalid length. [ 482.155010][T22683] netlink: 'syz.3.6757': attribute type 4 has an invalid length. [ 482.158629][T22683] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6757'. [ 482.162451][T22683] netlink: 'syz.3.6757': attribute type 1 has an invalid length. [ 482.165011][T22683] netlink: 'syz.3.6757': attribute type 4 has an invalid length. [ 482.167593][T22683] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6757'. [ 482.444070][T22691] xt_hashlimit: size too large, truncated to 1048576 [ 482.451383][ T5821] usb 5-1: USB disconnect, device number 19 [ 483.009029][T22722] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6772'. [ 483.424247][T22742] : renamed from bond0 (while UP) [ 483.880685][T22769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6793'. [ 483.884489][T22769] netlink: 'syz.0.6793': attribute type 7 has an invalid length. [ 483.889996][T22769] netlink: 'syz.0.6793': attribute type 8 has an invalid length. [ 483.893007][T22769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6793'. [ 484.035589][T22778] netlink: 'syz.0.6797': attribute type 1 has an invalid length. [ 484.052079][T22778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.142332][T22782] ref_ctr_offset mismatch. inode: 0x856 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 484.742438][ T5883] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 484.868528][T22814] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 484.871113][T22814] overlayfs: failed to set xattr on upper [ 484.872943][T22814] overlayfs: ...falling back to redirect_dir=nofollow. [ 484.875069][T22814] overlayfs: ...falling back to index=off. [ 484.883869][T22814] overlayfs: ...falling back to uuid=null. [ 484.886119][T22814] overlayfs: ...falling back to xino=off. [ 484.889279][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.893949][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.898173][ T5883] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 484.902543][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.914433][ T5883] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 484.918921][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.922548][ T5883] usb 5-1: Product: syz [ 484.924532][ T5883] usb 5-1: Manufacturer: syz [ 484.926657][ T5883] usb 5-1: SerialNumber: syz [ 485.113029][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6814'. [ 485.636020][T22830] netlink: 'syz.4.6819': attribute type 10 has an invalid length. [ 486.315929][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 486.315971][ T42] audit: type=1800 audit(1785871146.573:3955): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 486.343499][ T42] audit: type=1800 audit(1785871146.603:3956): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336739 res=0 errno=0 [ 486.359393][ T42] audit: type=1800 audit(1785871146.613:3957): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=336743 res=0 errno=0 [ 486.370150][T22844] X25: diagnostic #104 - 9A 18 5F [ 486.462234][ T42] audit: type=1800 audit(1785871146.723:3958): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=336771 res=0 errno=0 [ 486.527648][T22847] "syz.3.6826" (22847) uses obsolete ecb(arc4) skcipher [ 486.549817][ T42] audit: type=1800 audit(1785871146.813:3959): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 486.751448][ T42] audit: type=1400 audit(1785871147.013:3960): avc: denied { write } for pid=22852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.850161][ T42] audit: type=1400 audit(1785871147.113:3961): avc: denied { write } for pid=22857 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.942296][ T42] audit: type=1800 audit(1785871147.203:3962): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 486.963918][ T42] audit: type=1400 audit(1785871147.203:3963): avc: denied { write } for pid=22859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.039108][ T42] audit: type=1400 audit(1785871147.293:3964): avc: denied { write } for pid=22864 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.449675][T22873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6831'. [ 487.512472][ T5821] usb 5-1: USB disconnect, device number 20 [ 487.533246][T22875] [ 487.534095][T22875] ====================================================== [ 487.536304][T22875] WARNING: possible circular locking dependency detected [ 487.538492][T22875] syzkaller #0 Tainted: G L [ 487.540455][T22875] ------------------------------------------------------ [ 487.542597][T22875] syz.3.6832/22875 is trying to acquire lock: [ 487.544478][T22875] ffff888039953818 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 487.547811][T22875] [ 487.547811][T22875] but task is already holding lock: [ 487.550112][T22875] ffff88802e54c120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 487.553036][T22875] [ 487.553036][T22875] which lock already depends on the new lock. [ 487.553036][T22875] [ 487.556209][T22875] [ 487.556209][T22875] the existing dependency chain (in reverse order) is: [ 487.558983][T22875] [ 487.558983][T22875] -> #2 (&common->filesem){++++}-{4:4}: [ 487.561512][T22875] lock_acquire+0x1b9/0x370 [ 487.563168][T22875] down_read+0x99/0x4c0 [ 487.564672][T22875] fsg_show_file+0x20/0x180 [ 487.566264][T22875] configfs_read_iter+0x426/0x6f0 [ 487.568030][T22875] __kernel_read+0x397/0xad0 [ 487.569680][T22875] integrity_kernel_read+0x7e/0xb0 [ 487.571451][T22875] ima_calc_file_hash_tfm+0x25e/0x350 [ 487.573276][T22875] ima_calc_file_hash+0x1e3/0x380 [ 487.574944][T22875] ima_collect_measurement+0x94f/0xb30 [ 487.577018][T22875] process_measurement+0xdfe/0x2350 [ 487.578988][T22875] ima_file_check+0xc3/0x110 [ 487.580684][T22875] security_file_post_open+0xc4/0x210 [ 487.582672][T22875] path_openat+0x985/0x4280 [ 487.584276][T22875] do_file_open+0x20e/0x430 [ 487.585859][T22875] do_sys_openat2+0x10f/0x1e0 [ 487.587500][T22875] __x64_sys_openat+0x12d/0x210 [ 487.589186][T22875] do_syscall_64+0x115/0x870 [ 487.590852][T22875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.592854][T22875] [ 487.592854][T22875] -> #1 (&p->frag_sem){++++}-{4:4}: [ 487.595147][T22875] lock_acquire+0x1b9/0x370 [ 487.596777][T22875] down_read+0x99/0x4c0 [ 487.598291][T22875] __configfs_open_file+0xe8/0x9c0 [ 487.600092][T22875] do_dentry_open+0x6ab/0x14d0 [ 487.601857][T22875] vfs_open+0x82/0x3f0 [ 487.603368][T22875] dentry_open+0x71/0xd0 [ 487.604850][T22875] ima_calc_file_hash+0xe1/0x380 [ 487.606547][T22875] ima_collect_measurement+0x94f/0xb30 [ 487.608425][T22875] process_measurement+0xdfe/0x2350 [ 487.610218][T22875] ima_file_check+0xc3/0x110 [ 487.611872][T22875] security_file_post_open+0xc4/0x210 [ 487.613737][T22875] path_openat+0x985/0x4280 [ 487.615322][T22875] do_file_open+0x20e/0x430 [ 487.616908][T22875] do_sys_openat2+0x10f/0x1e0 [ 487.618544][T22875] __x64_sys_openat+0x12d/0x210 [ 487.620296][T22875] do_syscall_64+0x115/0x870 [ 487.621935][T22875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.623943][T22875] [ 487.623943][T22875] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 487.626603][T22875] check_prev_add+0xeb/0xe60 [ 487.628208][T22875] __lock_acquire+0x136c/0x1a40 [ 487.629900][T22875] lock_acquire+0x1b9/0x370 [ 487.631511][T22875] __mutex_lock+0x1a4/0x1bd0 [ 487.633132][T22875] process_measurement+0x5ab/0x2350 [ 487.634904][T22875] ima_file_check+0xc3/0x110 [ 487.636515][T22875] security_file_post_open+0xc4/0x210 [ 487.638376][T22875] path_openat+0x985/0x4280 [ 487.639892][T22875] do_file_open+0x20e/0x430 [ 487.641436][T22875] file_open_name+0x1c3/0x3e0 [ 487.643052][T22875] filp_open+0x2e/0x50 [ 487.644500][T22875] fsg_lun_open+0x6b/0x7b0 [ 487.646041][T22875] fsg_store_file+0x1e7/0x450 [ 487.647665][T22875] configfs_write_iter+0x302/0x4e0 [ 487.649455][T22875] vfs_write+0x6ac/0x1050 [ 487.651014][T22875] ksys_write+0x12a/0x250 [ 487.652545][T22875] do_syscall_64+0x115/0x870 [ 487.654445][T22875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.656455][T22875] [ 487.656455][T22875] other info that might help us debug this: [ 487.656455][T22875] [ 487.659638][T22875] Chain exists of: [ 487.659638][T22875] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 487.659638][T22875] [ 487.664118][T22875] Possible unsafe locking scenario: [ 487.664118][T22875] [ 487.666416][T22875] CPU0 CPU1 [ 487.668096][T22875] ---- ---- [ 487.669778][T22875] lock(&common->filesem); [ 487.671228][T22875] lock(&p->frag_sem); [ 487.673314][T22875] lock(&common->filesem); [ 487.675495][T22875] lock(&ima_iint_mutex_key[depth]); [ 487.677107][T22875] [ 487.677107][T22875] *** DEADLOCK *** [ 487.677107][T22875] [ 487.679622][T22875] 5 locks held by syz.3.6832/22875: [ 487.681260][T22875] #0: ffff888035585970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 487.684054][T22875] #1: ffff8880246a6450 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 487.686834][T22875] #2: ffff88802ce7aa80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 487.689850][T22875] #3: ffff888023abf370 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 487.692764][T22875] #4: ffff88802e54c120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 487.695743][T22875] [ 487.695743][T22875] stack backtrace: [ 487.697566][T22875] CPU: 0 UID: 0 PID: 22875 Comm: syz.3.6832 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.697588][T22875] Tainted: [L]=SOFTLOCKUP [ 487.697592][T22875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.697606][T22875] Call Trace: [ 487.697619][T22875] [ 487.697624][T22875] dump_stack_lvl+0x100/0x190 [ 487.697640][T22875] print_circular_bug.cold+0x178/0x1c7 [ 487.697659][T22875] check_noncircular+0x146/0x160 [ 487.697673][T22875] ? arch_stack_walk+0xa6/0xf0 [ 487.697694][T22875] check_prev_add+0xeb/0xe60 [ 487.697707][T22875] ? stack_trace_save+0x8e/0xc0 [ 487.697719][T22875] __lock_acquire+0x136c/0x1a40 [ 487.697735][T22875] lock_acquire+0x1b9/0x370 [ 487.697747][T22875] ? process_measurement+0x5ab/0x2350 [ 487.697760][T22875] ? __pfx___might_resched+0x10/0x10 [ 487.697774][T22875] __mutex_lock+0x1a4/0x1bd0 [ 487.697789][T22875] ? process_measurement+0x5ab/0x2350 [ 487.697801][T22875] ? process_measurement+0x5ab/0x2350 [ 487.697813][T22875] ? __pfx___mutex_lock+0x10/0x10 [ 487.697827][T22875] ? __pfx___might_resched+0x10/0x10 [ 487.697841][T22875] ? down_write+0x146/0x1f0 [ 487.697857][T22875] ? process_measurement+0x5ab/0x2350 [ 487.697868][T22875] process_measurement+0x5ab/0x2350 [ 487.697880][T22875] ? find_held_lock+0x2b/0x80 [ 487.697890][T22875] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 487.697904][T22875] ? __pfx_process_measurement+0x10/0x10 [ 487.697917][T22875] ? avc_has_perm+0x135/0x1e0 [ 487.697930][T22875] ? __pfx_avc_has_perm+0x10/0x10 [ 487.697941][T22875] ? hook_file_open+0x24f/0x8f0 [ 487.697959][T22875] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 487.697985][T22875] ima_file_check+0xc3/0x110 [ 487.697998][T22875] ? __pfx_ima_file_check+0x10/0x10 [ 487.698012][T22875] security_file_post_open+0xc4/0x210 [ 487.698031][T22875] path_openat+0x985/0x4280 [ 487.698046][T22875] ? __pfx_path_openat+0x10/0x10 [ 487.698057][T22875] ? kasan_save_stack+0x30/0x50 [ 487.698070][T22875] ? kasan_save_track+0x14/0x30 [ 487.698082][T22875] ? __kasan_slab_alloc+0x89/0x90 [ 487.698095][T22875] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 487.698107][T22875] ? do_getname_kernel+0x5d/0x250 [ 487.698120][T22875] ? filp_open+0x1d/0x50 [ 487.698132][T22875] ? fsg_lun_open+0x6b/0x7b0 [ 487.698144][T22875] ? fsg_store_file+0x1e7/0x450 [ 487.698157][T22875] do_file_open+0x20e/0x430 [ 487.698169][T22875] ? __pfx_do_file_open+0x10/0x10 [ 487.698186][T22875] ? rcu_is_watching+0x12/0xc0 [ 487.698203][T22875] file_open_name+0x1c3/0x3e0 [ 487.698216][T22875] ? __pfx_file_open_name+0x10/0x10 [ 487.698229][T22875] ? do_getname_kernel+0x5d/0x250 [ 487.698242][T22875] ? __asan_memcpy+0x3c/0x60 [ 487.698253][T22875] ? do_getname_kernel+0x1be/0x250 [ 487.698267][T22875] filp_open+0x2e/0x50 [ 487.698281][T22875] fsg_lun_open+0x6b/0x7b0 [ 487.698294][T22875] ? __pfx_down_read+0x10/0x10 [ 487.698309][T22875] fsg_store_file+0x1e7/0x450 [ 487.698322][T22875] configfs_write_iter+0x302/0x4e0 [ 487.698336][T22875] vfs_write+0x6ac/0x1050 [ 487.698352][T22875] ? __pfx_configfs_write_iter+0x10/0x10 [ 487.698365][T22875] ? __pfx_vfs_write+0x10/0x10 [ 487.698385][T22875] ksys_write+0x12a/0x250 [ 487.698394][T22875] ? __pfx_ksys_write+0x10/0x10 [ 487.698406][T22875] do_syscall_64+0x115/0x870 [ 487.698419][T22875] ? clear_bhb_loop+0x40/0x90 [ 487.698432][T22875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.698443][T22875] RIP: 0033:0x7fbea119e019 [ 487.698454][T22875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.698466][T22875] RSP: 002b:00007fbea20b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.698484][T22875] RAX: ffffffffffffffda RBX: 00007fbea1425fa0 RCX: 00007fbea119e019 [ 487.698491][T22875] RDX: 0000000000000005 RSI: 0000200000000380 RDI: 0000000000000004 [ 487.698498][T22875] RBP: 00007fbea123500c R08: 0000000000000000 R09: 0000000000000000 [ 487.698505][T22875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.698511][T22875] R13: 00007fbea1426038 R14: 00007fbea1425fa0 R15: 00007ffdb33e5e68 [ 487.698521][T22875] [ 487.848121][T22875] mass_storage.0/lun.0: file too small: file0