last executing test programs: 2m36.933079743s ago: executing program 2 (id=1323): r0 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000), 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000700)=0x1) 2m36.830134145s ago: executing program 2 (id=1324): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) 2m35.338112454s ago: executing program 2 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/queue/discard_max_bytes\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/64, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/block/sda/queue/discard_max_bytes\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000800)=""/64, 0x40) 2m35.237566512s ago: executing program 2 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000050000000a0000cd000001800400068008000400070000"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, &(0x7f0000000900)=[{0x0}], 0x1, &(0x7f0000000600)}, 0x20004c01) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) copy_file_range(r0, &(0x7f00000003c0)=0x8, r0, &(0x7f0000000840)=0x8, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) write(r3, &(0x7f0000000200)='usb3503 0x08\n', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x610003d5) inotify_init1(0x800) 2m35.151986942s ago: executing program 2 (id=1334): r0 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000), 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000700)=0x1) 2m35.013270008s ago: executing program 2 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 localhost', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='localhost 1 \\x00000000 2147483647 /tmp\n', 0x27) close(r1) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff) write(r3, &(0x7f00000005c0)='hello\n', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='0\n', 0x2) close(r4) 2m19.166431103s ago: executing program 32 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 localhost', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='localhost 1 \\x00000000 2147483647 /tmp\n', 0x27) close(r1) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff) write(r3, &(0x7f00000005c0)='hello\n', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='0\n', 0x2) close(r4) 1m17.121831818s ago: executing program 0 (id=1658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x7, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "b68ed34f130403e57e"}}}}, 0x3b) 1m14.090544533s ago: executing program 0 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x10000007, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x8000006, 0x401, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x8000001, 0x5, 0x1, 0x1, 0x4, 0xa, 0x8, 0x5, 0x9, 0x804d7f, 0x2, 0x8c40, 0x6, 0x5, 0x3, 0x9, 0x2, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x9, 0x3, 0x7, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x9, 0x3, 0x7, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x5, 0x5, 0x80, 0x6, 0x8001, 0x4000040, 0xa1, 0x4, 0xffffffff, 0x2, 0x200, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x3, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x4, 0x1a9e1bfd, 0xfffffffc, 0x5, 0x9, 0x10001, 0x8, 0x7aae, 0x9, 0x2, 0x7ffffff7, 0x88000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x9a0, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b5, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x3, 0x6, 0x8007c12, 0x5, 0x1, 0x0, 0x5, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x10008, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0xc, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfffffffd, 0x2, 0x66608000, 0x7, 0x7fb, 0x8, 0x0, 0x8, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x6aea, 0x11, 0x1000, 0x2, 0x100, 0x3, 0x20000000, 0x8, 0x15, 0xffff, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x936f, 0x4f89, 0x3, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 1m13.470083561s ago: executing program 0 (id=1667): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38) 1m13.314097331s ago: executing program 0 (id=1669): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000040)="46f4", 0x2, 0x4) 1m9.214342701s ago: executing program 0 (id=1678): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m7.85625605s ago: executing program 0 (id=1681): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 52.423155396s ago: executing program 33 (id=1681): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 11.458130443s ago: executing program 6 (id=1906): ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x3, 0x2, 0x4, 0x1, 0x0, {}, {0x2, 0xc, 0x81, 0x1, 0x2, 0x2, "1b436a41"}, 0x1, 0x2, {0x0}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x2040403) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) 10.672117021s ago: executing program 4 (id=1907): ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x3, 0x2, 0x4, 0x1, 0x0, {}, {0x2, 0xc, 0x81, 0x1, 0x2, 0x2, "1b436a41"}, 0x1, 0x2, {0x0}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x2040403) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0x3, 0x4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) setreuid(0xffffffffffffffff, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000300)) 10.164187199s ago: executing program 6 (id=1909): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121a03, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x50443) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f0000000240)=ANY=[], 0x0, 0xc3, 0x0, 0x0, 0x41000, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1a6) 9.152185679s ago: executing program 6 (id=1911): capset(&(0x7f0000000000)={0x20080522}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000002b000100fffffffffddbdf2402"], 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040) 8.913684076s ago: executing program 3 (id=1914): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/integrity/ima/ascii_runtime_measurements\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/1024, 0x400) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/1024, 0x400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sec/ima/ascii_runtime_measurements\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/1024, 0x400) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sec/ima/binary_runtime_measurements\x00', 0x0, 0x0) read(r3, 0x0, 0x0) close(r3) 8.871733077s ago: executing program 3 (id=1915): socket$netlink(0x10, 0x3, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x84008200, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) setpgid(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) r2 = socket(0x2, 0x80002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1080002, 0x0, 0x0, 0xfffffffffffffffc, 0x31}, @fda={0x66646185, 0x4000000000000001, 0x0, 0x1c}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'none\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2000, 0x6, 0x1}}, 0x44) 7.638241423s ago: executing program 3 (id=1917): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="f100000000", 0x5, 0x0, 0x0, 0x0) 7.493737667s ago: executing program 3 (id=1918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) 6.813525199s ago: executing program 3 (id=1919): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f0000000400)=ANY=[]) read$FUSE(r2, &(0x7f000000e400)={0x2020}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) read$FUSE(r0, 0x0, 0x0) 5.794508638s ago: executing program 4 (id=1920): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 5.217875791s ago: executing program 6 (id=1922): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x80045, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x24, &(0x7f0000000000)=""/4102, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x203e}, 0x10) accept4$tipc(r0, 0x0, 0x0, 0x80800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.89143038s ago: executing program 1 (id=1923): syz_emit_ethernet(0x50, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x1a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{}]}}}}}}, 0x0) 4.676037672s ago: executing program 1 (id=1924): openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 4.542148695s ago: executing program 4 (id=1925): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYBLOB="000000000020000000000000000000000000000041342e6ccf6ce665c30f35020e7fb3c84682df5c9e41890f47d5", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 3.30552517s ago: executing program 5 (id=1926): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000290000000400000073000000000000001400000000000000290000000b00000000000006"], 0x30}, 0x922bac8556bdad8e) 3.278360624s ago: executing program 3 (id=1927): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) 3.263667196s ago: executing program 1 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) mount$afs(&(0x7f00000004c0)=ANY=[@ANYRES8], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080), 0x8000c0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004000)={0x30, 0x41, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x74}}, 0x0) 3.150324767s ago: executing program 5 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x7, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "b68ed34f130403e57e82cafe"}}}}, 0x3e) 3.142821328s ago: executing program 4 (id=1930): r0 = socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000000700", @ANYRES32=r1, @ANYBLOB="000000000000000010000c"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 2.885953981s ago: executing program 4 (id=1931): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0498c202000000000109022d00010000500409040008820300030009210000ff01221800090581030004"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) 2.79390508s ago: executing program 5 (id=1932): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x46a, 0xffdfffff, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040) 2.424170188s ago: executing program 5 (id=1933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="083cd54473c576db523c1e4d0aa6f92ab197812761df143306e3af20641750d1c49372828117707c6a010f33531c3e5d", 0x30}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="b533ebe1e044c9238e08e93e57953fbb8bf3390a5a38dbc6a67decae135d08c7707040d2b5e2f72c50efb728c743f6c5044b2a6f6e63df59ed5d108c79a211f193578fc129e6d3859ab9293223d73ddccfba77b5575b5cccd1534a89cce1d534319a", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a80)="bfa14930ee66b66c1184e86a540a59b49a289763bd0e17f855ea074897896bbb67e4d75df803bd11e813751b23a1cf7527eade658b04c91c9c4e5cf283f086d1c2610f2c3bc2795f750b652d814bb38bd896e3a842c8cf1347113b471ff205fe02ef163eaf16e5d45ca8", 0x6a}, {&(0x7f0000000b00)="dfdd57c3a3b11a5fa0487bd5617664142326ec863ea79f592bf85974250d903bd790aef2926aff24836d9bbf8ed51b70d5f0b604e4f373d4953899373bcaadc0c1bc9fdb7a05905c7228c711cdda846f617194ded473ccd4d5a9f1da49e3a163f06756de30036ab8a452199278ffdafc1606e4b42db0fe1203acf06c34b9d528b6ca98f7a2d5e75f53a2266dc4e821ccfaeed8f64306d743438b0938b3c3002b24e8698c27b36a029680f24b49adf7b7c426a23974aea26e881613ed1b1c2325e59a08ae", 0xc4}, {&(0x7f0000000c00)="77889e6ad078ef7222c0b0b7c03ac036636bb7bc", 0x14}], 0x3}}], 0x3, 0x60cd894) 2.275946504s ago: executing program 6 (id=1934): ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x3, 0x2, 0x4, 0x1, 0x0, {}, {0x2, 0xc, 0x81, 0x1, 0x2, 0x2, "1b436a41"}, 0x1, 0x2, {0x0}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x2040403) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) 2.268911806s ago: executing program 5 (id=1935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x34, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x4}}]}, 0x34}}, 0x4040) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004) 1.933422345s ago: executing program 1 (id=1936): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x40, 0x0, 0xa}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a14736ab557b6011da34bffab0482edfd435fa0f3d02a2e10627e2df4c6aec11"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 1.329670792s ago: executing program 6 (id=1937): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "0a520b4c951ee12e"}}}}}}}, 0x0) 464.236882ms ago: executing program 1 (id=1938): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWSETELEM={0x664, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x644, 0x3, 0x0, 0x1, [{0x4e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x394, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x65}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x27}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x31c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x30c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "7b11b2779cd45212d8d31174a6195fed4669e5f2992713e6a691d235f909c4f19a87daaf7ff6cffcef7ab4d6763c572b4f62fb5d9b3458830e13175e55c93472ff18131c30c12018f11ed857277f86e7bba92655ca8d7cd65fc3d4a2ecbb67314c50655c1d8035afc669d6d7625fb5008d0501befb93b256b81a0e57ba932da2026bbb5d41a78bf5085c1d93c1328bd5f765f8f15bbcdc7d2dc2a4659b14fb50c0a49dc462e5cf9a67"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_TO_DATA={0x1f4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x65, 0x1, "30602e1d704e6d4f1b57f35e9e101ed0b4ac6e22f04cc8a3b5c6724d70a51ff8a48fdf39d5e0c29059df1c5a2757320beb13942c807efef2893bd32a7ad7c616f15d9f03304da307aae6a2b65ea698d495ab2a6a4005585aa096de981ba18dd30f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "a53f2d53d95e3b494de86e24e7a3ed163b1d7c8987b834be2e4f6f05ed1433bfcdb96b36f067833f567a9aee529a18cf65d328e92dc1256117f715a4c11cdb89f11ee61d46840c66c74fb977668b0fac0751d04caeb3610831520d6445c7d8437b714049ce0d98e496b3beeb1f9e52bc6e6916fe7ec102ecd2d3d0da01a476cd823660c967f095dc7724ae5b80c16214a5ce2b53673bb2763380803c74a89bcba84322bb581143c3c6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "48b6ba9267b56931c7dbb40dbb401ce55d9f9b7963529249cceb8216cff287d37d1904728889022b6a4e0484b30077928b0c2bf2404eecbbe4935316efef94ce756796bfc745584f336eabe12ae6fdff80e13d62720bbd525e51af715c9ce4a8c67e541e92d6a81442b58a6bd98b22a8c7483d3213"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd0ae}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa9f5}]}, {0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "0780d863df421c1cef576091d8915be624c2d13eef524444ec0293921b552f74e06f4c343ebc8da88f7785a382bb070bfd567a71857ee0bfe76c6103623ae4873b08250531af4045aa09572f280894bceb"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40000007}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x31, 0x1, "22b615e8d13d69d4bf9ade182dab971078dd6216625bbe043c9350e1e5202a24dcc18d74c843424b85858df982"}]}]}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14}}, 0x6a0}, 0x1, 0x0, 0x0, 0x40000}, 0x24008800) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) 108.718881ms ago: executing program 1 (id=1939): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0x80000, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610) socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004090) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) close(0x3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/85, 0x200000, 0xc00, 0xcd6, 0x1}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x20) 89.861667ms ago: executing program 5 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/dont_log_ce\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 0s ago: executing program 4 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') kernel console output (not intermixed with test programs): bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 336.231761][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 336.231861][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x9bb6 instead [ 336.231886][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7e46 instead [ 336.232139][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 336.232164][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 336.232205][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x9bb6 instead [ 336.232230][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7e46 instead [ 336.232469][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 336.232579][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 336.232603][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x9bb6 instead [ 336.232645][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7e46 instead [ 336.232749][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 336.232772][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 336.232801][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x9bb6 instead [ 336.232843][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7e46 instead [ 336.233008][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 336.233036][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 336.233059][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x9bb6 instead [ 336.233101][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7e46 instead [ 336.233235][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 336.233260][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 336.233328][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x9bb6 instead [ 336.233352][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7e46 instead [ 336.233517][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 336.233560][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 336.233586][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x9bb6 instead [ 336.242100][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7e46 instead [ 336.252835][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 336.252861][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 336.252885][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9bb6 instead [ 336.252958][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7e46 instead [ 336.253216][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 336.253240][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 336.253279][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x9bb6 instead [ 336.253323][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7e46 instead [ 336.253495][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 336.253516][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 336.253557][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x9bb6 instead [ 336.253582][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7e46 instead [ 336.253719][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 336.253762][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 336.253791][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x9bb6 instead [ 336.253817][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7e46 instead [ 336.254033][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 336.254072][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 336.254114][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9bb6 instead [ 336.254139][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7e46 instead [ 336.254253][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 336.254300][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 336.254326][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x9bb6 instead [ 336.254368][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7e46 instead [ 336.254532][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 336.254553][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 336.254598][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x9bb6 instead [ 336.254623][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7e46 instead [ 336.254829][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 336.254852][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 336.254895][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9bb6 instead [ 336.254920][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7e46 instead [ 336.255167][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 336.255189][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 336.255231][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x9bb6 instead [ 336.255257][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7e46 instead [ 336.255480][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 336.255503][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 336.255545][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x9bb6 instead [ 336.255571][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7e46 instead [ 336.255789][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 336.255812][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 336.255854][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x9bb6 instead [ 336.255880][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7e46 instead [ 336.256161][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 336.256199][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 336.256225][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x9bb6 instead [ 336.256266][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7e46 instead [ 336.256475][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 336.256514][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 336.256559][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x9bb6 instead [ 336.256585][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7e46 instead [ 336.257121][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 336.257212][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 336.257235][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x9bb6 instead [ 336.257277][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7e46 instead [ 336.257621][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 336.257687][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 336.257729][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9bb6 instead [ 336.257755][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7e46 instead [ 336.257985][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 336.258010][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 336.258051][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x9bb6 instead [ 336.258077][ T9876] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7e46 instead [ 336.258217][ T9876] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 336.258316][ T9876] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 336.793384][ T5613] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 336.794557][ T5613] Bluetooth: hci3: Injecting HCI hardware error event [ 336.798512][ T5616] Bluetooth: hci3: hardware error 0x00 [ 336.896605][ T5803] usb 4-1: device descriptor read/64, error -71 [ 337.666935][ T5803] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 337.807722][ T5803] usb 4-1: device descriptor read/64, error -71 [ 337.832659][ T5613] Bluetooth: hci5: command tx timeout [ 337.860124][ T31] audit: type=1400 audit(2000000253.480:474): avc: denied { connect } for pid=9878 comm="syz.4.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.922442][ T5803] usb usb4-port1: attempt power cycle [ 338.089496][ T9818] tipc: Disabling bearer [ 338.257469][ T5803] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 338.278637][ T5803] usb 4-1: device descriptor read/8, error -71 [ 338.320273][ T9774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.337008][ T9774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.337814][ T9774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.344241][ T9774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.344943][ T9774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.385767][ T9774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.386557][ T9774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.413913][ T9774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.511440][ T9774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.525908][ T9774] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.527388][ T5803] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 338.547574][ T5803] usb 4-1: device descriptor read/8, error -71 [ 338.547665][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.547749][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.551262][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.551333][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.576515][ T9774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.576529][ T9774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.607259][ T5696] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 338.657269][ T5803] usb usb4-port1: unable to enumerate USB device [ 338.776880][ T5696] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 338.778661][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.778679][ T5696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.778711][ T5696] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.778758][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.791310][ T5696] hub 5-1:1.0: bad descriptor, ignoring hub [ 338.791326][ T5696] hub 5-1:1.0: probe with driver hub failed with error -5 [ 338.791757][ T5696] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 339.008499][ T9908] FAULT_INJECTION: forcing a failure. [ 339.008499][ T9908] name fail_futex, interval 1, probability 0, space 0, times 0 [ 339.008529][ T9908] CPU: 1 UID: 0 PID: 9908 Comm: syz.0.1453 Not tainted syzkaller #0 PREEMPT(full) [ 339.008554][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 339.008568][ T9908] Call Trace: [ 339.008575][ T9908] [ 339.008584][ T9908] dump_stack_lvl+0x100/0x190 [ 339.008620][ T9908] should_fail_ex.cold+0x5/0xa [ 339.008650][ T9908] get_futex_key+0x1d0/0x14f0 [ 339.008682][ T9908] ? __pfx_get_futex_key+0x10/0x10 [ 339.008711][ T9908] ? __lock_acquire+0x5c0/0x1f40 [ 339.008740][ T9908] futex_wake+0xf4/0x5e0 [ 339.008763][ T9908] ? lock_acquire+0x1d1/0x380 [ 339.008784][ T9908] ? __pfx_futex_wake+0x10/0x10 [ 339.008804][ T9908] ? __fget_files+0x215/0x3d0 [ 339.008841][ T9908] do_futex+0x2b2/0x440 [ 339.008869][ T9908] ? __pfx_do_futex+0x10/0x10 [ 339.008897][ T9908] ? __sys_bind+0x1c7/0x260 [ 339.008926][ T9908] __x64_sys_futex+0x34f/0x4d0 [ 339.008958][ T9908] ? __pfx___x64_sys_futex+0x10/0x10 [ 339.008997][ T9908] do_syscall_64+0x123/0x790 [ 339.009022][ T9908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.009043][ T9908] RIP: 0033:0x7f2b2379e159 [ 339.009060][ T9908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.009078][ T9908] RSP: 002b:00007f2b245fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.009098][ T9908] RAX: ffffffffffffffda RBX: 00007f2b23a25fa8 RCX: 00007f2b2379e159 [ 339.009111][ T9908] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b23a25fac [ 339.009123][ T9908] RBP: 00007f2b23a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 339.009136][ T9908] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 339.009149][ T9908] R13: 00007f2b23a26038 R14: 00007ffe1cb5ec80 R15: 00007ffe1cb5ed68 [ 339.009178][ T9908] [ 339.010145][ T9774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.109725][ T25] usb 5-1: USB disconnect, device number 27 [ 339.598813][ T5616] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 339.616948][ T31] audit: type=1400 audit(2000000254.820:475): avc: denied { create } for pid=9902 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 339.617000][ T31] audit: type=1400 audit(2000000254.860:476): avc: denied { sys_admin } for pid=9902 comm="syz.3.1452" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 340.229530][ T5727] net_ratelimit: 55 callbacks suppressed [ 340.250700][ T9908] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 340.597460][ T5696] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 340.962841][ T9931] tipc: Enabled bearer , priority 0 [ 341.077929][ T9934] syzkaller0: entered promiscuous mode [ 341.077945][ T9934] syzkaller0: entered allmulticast mode [ 341.078432][ T9934] tipc: Resetting bearer [ 341.110200][ T9930] tipc: Resetting bearer [ 341.135355][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 341.136562][ T5696] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 341.159514][ T5696] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 341.159620][ T5696] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 341.159699][ T5696] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 341.159786][ T5696] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 341.159900][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.159987][ T5696] usb 4-1: config 0 has no interface number 0 [ 341.160148][ T5696] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 341.160219][ T5696] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 341.160241][ T5696] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 341.160316][ T5696] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.160363][ T5696] usb 4-1: config 0 interface 125 has no altsetting 0 [ 341.160400][ T5696] usb 4-1: config 0 interface 125 has no altsetting 2 [ 341.313007][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.313027][ T5696] usb 4-1: Product: syz [ 341.313041][ T5696] usb 4-1: Manufacturer: syz [ 341.313056][ T5696] usb 4-1: SerialNumber: syz [ 341.317261][ T5696] usb 4-1: config 0 descriptor?? [ 341.348345][ T5696] usb 4-1: selecting invalid altsetting 2 [ 341.596478][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.641041][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.057328][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.122992][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.167601][ C1] usb 4-1: async_complete: urb error -71 [ 342.167765][ C1] usb 4-1: async_complete: urb error -71 [ 342.167921][ C1] usb 4-1: async_complete: urb error -71 [ 342.195697][ T5696] get_1284_register: usb error -71 [ 342.279886][ T5696] usb 4-1: USB disconnect, device number 34 [ 342.420573][ T5616] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 342.606900][ T5803] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 342.736844][ T5803] usb 2-1: device descriptor read/64, error -71 [ 342.979619][ T5803] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 343.040711][ T9956] FAULT_INJECTION: forcing a failure. [ 343.040711][ T9956] name fail_futex, interval 1, probability 0, space 0, times 0 [ 343.040739][ T9956] CPU: 0 UID: 0 PID: 9956 Comm: syz.0.1465 Not tainted syzkaller #0 PREEMPT(full) [ 343.040759][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 343.040769][ T9956] Call Trace: [ 343.040776][ T9956] [ 343.040783][ T9956] dump_stack_lvl+0x100/0x190 [ 343.040814][ T9956] should_fail_ex.cold+0x5/0xa [ 343.040840][ T9956] get_futex_key+0x1d0/0x14f0 [ 343.040867][ T9956] ? __pfx_get_futex_key+0x10/0x10 [ 343.040892][ T9956] ? __lock_acquire+0x5c0/0x1f40 [ 343.040918][ T9956] futex_wake+0xf4/0x5e0 [ 343.040938][ T9956] ? lock_acquire+0x1d1/0x380 [ 343.040957][ T9956] ? __pfx_futex_wake+0x10/0x10 [ 343.040975][ T9956] ? __fget_files+0x215/0x3d0 [ 343.041007][ T9956] do_futex+0x2b2/0x440 [ 343.041032][ T9956] ? __pfx_do_futex+0x10/0x10 [ 343.041056][ T9956] ? __sys_bind+0x1c7/0x260 [ 343.041085][ T9956] __x64_sys_futex+0x34f/0x4d0 [ 343.041114][ T9956] ? __pfx___x64_sys_futex+0x10/0x10 [ 343.041159][ T9956] do_syscall_64+0x123/0x790 [ 343.041184][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.041204][ T9956] RIP: 0033:0x7f2b2379e159 [ 343.041221][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.041240][ T9956] RSP: 002b:00007f2b245fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 343.041260][ T9956] RAX: ffffffffffffffda RBX: 00007f2b23a25fa8 RCX: 00007f2b2379e159 [ 343.041274][ T9956] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b23a25fac [ 343.041286][ T9956] RBP: 00007f2b23a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 343.041298][ T9956] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 343.041310][ T9956] R13: 00007f2b23a26038 R14: 00007ffe1cb5ec80 R15: 00007ffe1cb5ed68 [ 343.041334][ T9956] [ 343.108690][ T5803] usb 2-1: device descriptor read/64, error -71 [ 343.126437][ T5786] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 343.219901][ T5803] usb usb2-port1: attempt power cycle [ 343.392963][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 343.558475][ T5803] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 343.587405][ T5803] usb 2-1: device descriptor read/8, error -71 [ 343.830424][ T5803] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 343.852993][ T5803] usb 2-1: device descriptor read/8, error -71 [ 343.871250][ T9956] ceph: No mds server is up or the cluster is laggy [ 343.901053][ T5786] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 343.935641][ T9930] tipc: Disabling bearer [ 343.957664][ T5803] usb usb2-port1: unable to enumerate USB device [ 343.972378][ T9774] veth0_vlan: entered promiscuous mode [ 343.998358][ T9774] veth1_vlan: entered promiscuous mode [ 344.099169][ T9774] veth0_macvtap: entered promiscuous mode [ 344.114711][ T9964] syzkaller0: entered promiscuous mode [ 344.114726][ T9964] syzkaller0: entered allmulticast mode [ 345.002860][ T31] audit: type=1400 audit(2000000260.320:477): avc: denied { ioctl } for pid=9966 comm="syz.0.1468" path="socket:[22182]" dev="sockfs" ino=22182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.193783][ T9774] veth1_macvtap: entered promiscuous mode [ 345.241904][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.269215][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.327978][ T9774] net_ratelimit: 77 callbacks suppressed [ 345.329523][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.333734][ T1014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.333768][ T1014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.333798][ T1014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.417345][ T31] audit: type=1400 audit(2000000261.030:478): avc: denied { listen } for pid=9980 comm="syz.3.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 345.499610][ T5616] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 345.580514][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.580527][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.667902][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.667916][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.707521][ T31] audit: type=1400 audit(2000000261.330:479): avc: denied { mounton } for pid=9774 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 346.481417][ T5616] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 346.485014][ T5616] Bluetooth: hci1: Injecting HCI hardware error event [ 346.504947][ T5613] Bluetooth: hci1: hardware error 0x00 [ 346.792853][ T31] audit: type=1400 audit(2000000262.410:480): avc: denied { mount } for pid=9992 comm="syz.1.1478" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 346.870228][ T9992] ima: policy update failed [ 346.870362][ T31] audit: type=1802 audit(2000000262.490:481): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.1478" res=0 errno=0 [ 346.964427][ T1003] IPVS: starting estimator thread 0... [ 346.974181][ T31] audit: type=1400 audit(2000000262.590:482): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 347.087520][T10005] IPVS: using max 40 ests per chain, 96000 per kthread [ 347.764832][ T31] audit: type=1400 audit(2000000263.380:483): avc: denied { append } for pid=10008 comm="syz.1.1480" name="sg0" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 348.642044][ T5613] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 348.917109][ T942] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 349.050174][ T942] usb 1-1: device descriptor read/64, error -71 [ 349.083347][ T31] audit: type=1400 audit(2000000264.700:484): avc: denied { write } for pid=10042 comm="syz.5.1489" name="event0" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 349.087556][ T31] audit: type=1400 audit(2000000264.700:485): avc: denied { ioctl } for pid=10042 comm="syz.5.1489" path="/dev/input/event0" dev="devtmpfs" ino=916 ioctlcmd=0x6f03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 349.269679][ T5696] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 349.287967][ T942] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 349.456934][ T942] usb 1-1: device descriptor read/64, error -71 [ 349.508704][ T5613] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 349.509354][ T5613] Bluetooth: hci2: Injecting HCI hardware error event [ 349.543751][ T5616] Bluetooth: hci2: hardware error 0x00 [ 349.572859][ T942] usb usb1-port1: attempt power cycle [ 349.601798][ T5696] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 349.630809][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 349.630838][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 349.646450][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.646532][ T5696] usb 5-1: Product: syz [ 349.646575][ T5696] usb 5-1: Manufacturer: syz [ 349.646705][ T5696] usb 5-1: SerialNumber: syz [ 349.777332][ T5696] usb 5-1: config 0 descriptor?? [ 349.966864][ T942] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 349.987859][ T942] usb 1-1: device descriptor read/8, error -71 [ 350.218557][ T5710] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 350.229238][ T942] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 350.248261][ T942] usb 1-1: device descriptor read/8, error -71 [ 350.251583][T10067] syzkaller1: entered promiscuous mode [ 350.251598][T10067] syzkaller1: entered allmulticast mode [ 350.254320][ T30] usb 5-1: USB disconnect, device number 28 [ 350.358913][ T942] usb usb1-port1: unable to enumerate USB device [ 350.368499][ T5710] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 350.369484][ T5710] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 350.369502][ T5710] usb 4-1: config 1 has no interface number 0 [ 350.371380][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.371397][ T5710] usb 4-1: Product: syz [ 350.371409][ T5710] usb 4-1: Manufacturer: syz [ 350.371422][ T5710] usb 4-1: SerialNumber: syz [ 350.385553][ T5710] usb 4-1: 3:0 : does not exist [ 350.385569][ T5710] usb 4-1: 3:0 : does not exist [ 350.511492][ T31] audit: type=1400 audit(2000000266.130:486): avc: denied { block_suspend } for pid=10070 comm="syz.1.1499" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.568300][ C1] net_ratelimit: 281 callbacks suppressed [ 350.722636][ T5803] usb 4-1: USB disconnect, device number 35 [ 351.055643][T10093] syzkaller1: entered promiscuous mode [ 351.055660][T10093] syzkaller1: entered allmulticast mode [ 351.086852][ T5724] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 351.126283][ T31] audit: type=1400 audit(2000000266.740:487): avc: denied { create } for pid=10094 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 351.147111][ T31] audit: type=1400 audit(2000000266.770:488): avc: denied { write } for pid=10094 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 351.238784][ T31] audit: type=1400 audit(2000000266.860:489): avc: denied { read } for pid=10101 comm="syz.4.1512" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.239046][ T31] audit: type=1400 audit(2000000266.860:490): avc: denied { open } for pid=10101 comm="syz.4.1512" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.244684][ T31] audit: type=1400 audit(2000000266.860:491): avc: denied { ioctl } for pid=10101 comm="syz.4.1512" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.320791][ T5724] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 351.321819][ T5724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.321890][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.365532][ T5724] usb 2-1: selecting invalid altsetting 1 [ 351.365639][ T5724] dvb_ttusb_budget: ttusb_init_controller: error [ 351.365649][ T5724] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 351.447461][ T5724] DVB: Unable to find symbol stv0299_attach() [ 351.587228][ T5616] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 351.951906][ T5724] DVB: Unable to find symbol tda8083_attach() [ 351.951915][ T5724] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 351.972222][ T5724] usb 2-1: USB disconnect, device number 39 [ 353.038580][ T31] audit: type=1400 audit(2000000268.660:492): avc: denied { map } for pid=10114 comm="syz.0.1516" path="socket:[22916]" dev="sockfs" ino=22916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 353.038708][ T31] audit: type=1400 audit(2000000268.660:493): avc: denied { read write } for pid=10114 comm="syz.0.1516" path="socket:[22916]" dev="sockfs" ino=22916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.890341][T10142] tipc: Enabled bearer , priority 0 [ 354.933999][T10142] syzkaller0: entered promiscuous mode [ 354.934027][T10142] syzkaller0: entered allmulticast mode [ 354.934702][T10142] tipc: Resetting bearer [ 354.977233][T10141] tipc: Resetting bearer [ 355.046838][ T5724] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 355.176919][ T5724] usb 6-1: device descriptor read/64, error -71 [ 355.682984][ T31] audit: type=1400 audit(2000000271.290:494): avc: denied { setopt } for pid=10145 comm="syz.1.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.803648][T10153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.826816][ C0] net_ratelimit: 102 callbacks suppressed [ 355.847015][ T942] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 356.130799][ T942] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 356.153224][ T942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.153297][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.269217][ T942] usb 5-1: selecting invalid altsetting 1 [ 356.269321][ T942] dvb_ttusb_budget: ttusb_init_controller: error [ 356.269331][ T942] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 356.542940][ T942] DVB: Unable to find symbol stv0299_attach() [ 356.630100][ T942] DVB: Unable to find symbol tda8083_attach() [ 356.630108][ T942] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 356.656561][ T942] usb 5-1: USB disconnect, device number 29 [ 356.993385][ T5724] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 357.116961][ T5724] usb 6-1: device descriptor read/64, error -71 [ 357.230506][ T5724] usb usb6-port1: attempt power cycle [ 357.707913][ T5724] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 357.755937][ T5724] usb 6-1: device descriptor read/8, error -71 [ 358.806714][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1543'. [ 358.898852][T10218] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 359.876846][ T5724] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 360.039484][ T5724] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 360.040508][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.040575][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.053139][ T5724] usb 5-1: selecting invalid altsetting 1 [ 360.081348][ T5724] dvb_ttusb_budget: ttusb_init_controller: error [ 360.081362][ T5724] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 360.157527][ T5724] DVB: Unable to find symbol stv0299_attach() [ 360.206456][ T5724] DVB: Unable to find symbol tda8083_attach() [ 360.206464][ T5724] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 360.266888][ T30] usb 5-1: USB disconnect, device number 30 [ 360.507424][ T5724] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 360.668771][ T5724] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 360.673960][ T5724] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 360.673983][ T5724] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 360.673998][ T5724] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.679241][ T5724] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 360.679276][ T5724] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 360.679299][ T5724] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.680176][ T5724] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 360.680205][ T5724] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 360.680227][ T5724] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.682871][ T5724] usb 6-1: string descriptor 0 read error: -22 [ 360.682972][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.698083][ T5724] adutux 6-1:168.0: interrupt endpoints not found [ 360.869779][ C1] net_ratelimit: 95 callbacks suppressed [ 360.913638][ T5724] usb 6-1: USB disconnect, device number 6 [ 361.219908][T10141] tipc: Disabling bearer [ 362.820938][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'. [ 362.945199][ T5724] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 362.950699][T10265] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 363.083005][ T5724] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -71 [ 363.229708][T10275] syzkaller0: entered promiscuous mode [ 363.229723][T10275] syzkaller0: entered allmulticast mode [ 363.232595][T10275] tipc: Enabled bearer , priority 0 [ 363.277825][T10274] tipc: Resetting bearer [ 363.300297][T10274] tipc: Disabling bearer [ 363.319705][T10273] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 363.342249][ T942] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 363.486838][ T942] usb 6-1: Using ep0 maxpacket: 16 [ 363.494045][ T942] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 363.496672][ T942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.496696][ T942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.496716][ T942] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.542646][ T942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.558106][ T942] usb 6-1: config 0 descriptor?? [ 363.698738][ T30] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 364.899624][ T30] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 364.900628][ T30] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 364.900666][ T30] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.900715][ T30] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.901653][ T30] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 364.901688][ T30] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.901730][ T30] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.902729][ T30] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 364.902767][ T30] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.902805][ T30] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.020914][ T30] usb 4-1: string descriptor 0 read error: -22 [ 365.021035][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.025622][ T942] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 365.055330][ T30] adutux 4-1:168.0: interrupt endpoints not found [ 365.162487][ T942] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 365.162782][ T942] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 365.224140][ T30] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 365.224968][ T30] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 365.225301][ T30] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 365.238469][ T30] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 365.278630][ T942] usb 6-1: USB disconnect, device number 7 [ 365.325367][ T5710] usb 4-1: USB disconnect, device number 36 [ 365.733506][ T31] audit: type=1400 audit(2000000281.350:495): avc: denied { accept } for pid=10299 comm="syz.1.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.906811][ C1] net_ratelimit: 51 callbacks suppressed [ 366.303564][T10305] tipc: Started in network mode [ 366.303591][T10305] tipc: Node identity 3289c66b98b2, cluster identity 4711 [ 366.303725][T10305] tipc: Enabled bearer , priority 0 [ 366.448120][T10305] syzkaller0: entered promiscuous mode [ 366.448141][T10305] syzkaller0: entered allmulticast mode [ 366.448823][T10305] tipc: Resetting bearer [ 366.480971][T10304] tipc: Resetting bearer [ 369.110552][ T942] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 369.271301][ T942] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.02 [ 369.272289][ T942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.272349][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.275005][ T942] usb 5-1: config 0 descriptor?? [ 370.025679][T10349] xt_hashlimit: size too large, truncated to 1048576 [ 370.946840][ C0] net_ratelimit: 56 callbacks suppressed [ 371.153507][ T5724] usb 5-1: USB disconnect, device number 31 [ 371.749422][ T5710] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 371.750002][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 371.946846][ T5710] usb 1-1: device descriptor read/64, error -32 [ 372.192564][ T5710] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 372.345729][ T5710] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 372.367615][ T5710] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 372.367637][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.367689][ T5710] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.367724][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.378972][ T5710] hub 1-1:1.0: bad descriptor, ignoring hub [ 372.378987][ T5710] hub 1-1:1.0: probe with driver hub failed with error -5 [ 372.379418][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 372.379428][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 372.379442][ T5710] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 372.717911][ T1216] usb 1-1: USB disconnect, device number 49 [ 372.991647][T10379] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 373.126894][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.132314][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.170582][T10404] input: syz0 as /devices/virtual/input/input15 [ 375.147203][ T5710] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 375.308251][ T5710] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.02 [ 375.309246][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.309290][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 375.309310][ T5710] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 375.309323][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.309357][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.310805][ T5710] usb 4-1: config 0 descriptor?? [ 375.382648][ T5710] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 376.306917][ C1] net_ratelimit: 66 callbacks suppressed [ 376.605588][T10304] tipc: Disabling bearer [ 376.612923][ T5786] tipc: Node number set to 2856044139 [ 376.806506][ T31] audit: type=1400 audit(2000000292.420:496): avc: denied { connect } for pid=10410 comm="syz.1.1609" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.476537][T10413] ceph: No mds server is up or the cluster is laggy [ 378.048957][ T1216] libceph: connect (1)[c::]:6789 error -101 [ 378.049251][ T1216] libceph: mon0 (1)[c::]:6789 connect error [ 378.181389][ T5786] usb 4-1: USB disconnect, device number 37 [ 378.347812][ T5803] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 378.518165][ T5803] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 378.519138][ T5803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.519157][ T5803] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.519202][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.521546][ T5803] usb 5-1: config 0 descriptor?? [ 378.639582][T10434] tipc: Enabled bearer , priority 0 [ 378.666937][ T30] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 378.677031][T10434] syzkaller0: entered promiscuous mode [ 378.677050][T10434] syzkaller0: entered allmulticast mode [ 378.677640][T10434] tipc: Resetting bearer [ 378.696068][T10433] tipc: Resetting bearer [ 378.701898][ T5803] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 378.816881][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 378.835411][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 378.835445][ T30] usb 4-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 378.836377][ T30] usb 4-1: config 12 has an invalid interface number: 183 but max is 3 [ 378.836395][ T30] usb 4-1: config 12 has an invalid interface number: 229 but max is 3 [ 378.836412][ T30] usb 4-1: config 12 has 2 interfaces, different from the descriptor's value: 4 [ 378.836429][ T30] usb 4-1: config 12 has no interface number 0 [ 378.836443][ T30] usb 4-1: config 12 has no interface number 1 [ 378.836471][ T30] usb 4-1: config 12 interface 183 has no altsetting 0 [ 378.836486][ T30] usb 4-1: config 12 interface 229 has no altsetting 0 [ 378.838339][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.838356][ T30] usb 4-1: Product: syz [ 378.838369][ T30] usb 4-1: Manufacturer: syz [ 378.838381][ T30] usb 4-1: SerialNumber: syz [ 378.847401][ T5786] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 378.892064][ T5803] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 378.922005][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 378.922030][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 378.922051][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 378.922072][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 378.996186][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.996205][ T5803] usb 2-1: Product: syz [ 378.996217][ T5803] usb 2-1: Manufacturer: syz [ 378.996233][ T5803] usb 2-1: SerialNumber: syz [ 379.026471][ T5803] usb 2-1: config 0 descriptor?? [ 379.039874][ T5786] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 379.041530][ T5786] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 379.041551][ T5786] usb 1-1: config 1 has no interface number 0 [ 379.043649][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.043667][ T5786] usb 1-1: Product: syz [ 379.043679][ T5786] usb 1-1: Manufacturer: syz [ 379.043692][ T5786] usb 1-1: SerialNumber: syz [ 379.093692][ T5786] usb 1-1: 3:0 : does not exist [ 379.093705][ T5786] usb 1-1: 3:0 : does not exist [ 379.122347][ T30] usb 4-1: USB disconnect, device number 38 [ 379.266515][ T5803] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 379.280717][ T5803] usb 2-1: USB disconnect, device number 40 [ 380.522076][ T5786] usb 5-1: USB disconnect, device number 32 [ 380.867637][T10433] tipc: Disabling bearer [ 381.072027][T10457] md: couldn't update array info. -22 [ 381.108097][T10457] md: could not open device unknown-block(1,0). [ 381.108165][T10457] md: md_import_device returned -16 [ 381.155172][T10457] md: couldn't update array info. -22 [ 381.420333][ T5803] net_ratelimit: 126 callbacks suppressed [ 381.457911][T10467] md: could not open device unknown-block(1,1). [ 381.458403][T10467] md: md_import_device returned -16 [ 382.210783][T10470] ceph: No mds server is up or the cluster is laggy [ 382.287480][ T942] libceph: connect (1)[c::]:6789 error -101 [ 382.287661][ T942] libceph: mon0 (1)[c::]:6789 connect error [ 383.430562][ T942] libceph: connect (1)[c::]:6789 error -101 [ 383.430753][ T942] libceph: mon0 (1)[c::]:6789 connect error [ 383.622209][T10481] FAULT_INJECTION: forcing a failure. [ 383.622209][T10481] name failslab, interval 1, probability 0, space 0, times 0 [ 383.622234][T10481] CPU: 0 UID: 0 PID: 10481 Comm: syz.5.1630 Not tainted syzkaller #0 PREEMPT(full) [ 383.622248][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 383.622256][T10481] Call Trace: [ 383.622261][T10481] [ 383.622266][T10481] dump_stack_lvl+0x100/0x190 [ 383.622289][T10481] should_fail_ex.cold+0x5/0xa [ 383.622306][T10481] should_failslab+0xc2/0x120 [ 383.622326][T10481] __kmalloc_cache_noprof+0x91/0x6d0 [ 383.622340][T10481] ? nvmet_fc_register_targetport+0xb7e/0x1980 [ 383.622362][T10481] nvmet_fc_register_targetport+0xb7e/0x1980 [ 383.622386][T10481] ? __pfx_nvmet_fc_register_targetport+0x10/0x10 [ 383.622412][T10481] ? fcloop_alloc_nport.isra.0+0x5e8/0x9f0 [ 383.622429][T10481] fcloop_create_target_port+0x156/0x5a0 [ 383.622444][T10481] ? __pfx_fcloop_create_target_port+0x10/0x10 [ 383.622461][T10481] ? find_held_lock+0x2b/0x80 [ 383.622479][T10481] ? sysfs_file_kobj+0xe4/0x290 [ 383.622496][T10481] ? sysfs_file_kobj+0xe4/0x290 [ 383.622513][T10481] ? __pfx_fcloop_create_target_port+0x10/0x10 [ 383.622527][T10481] dev_attr_store+0x58/0x80 [ 383.622544][T10481] ? __pfx_dev_attr_store+0x10/0x10 [ 383.622561][T10481] sysfs_kf_write+0xf2/0x150 [ 383.622577][T10481] kernfs_fop_write_iter+0x3e0/0x5f0 [ 383.622590][T10481] ? __pfx_sysfs_kf_write+0x10/0x10 [ 383.622606][T10481] vfs_write+0x6af/0x1050 [ 383.622620][T10481] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 383.622635][T10481] ? __pfx_vfs_write+0x10/0x10 [ 383.622646][T10481] ? find_held_lock+0x2b/0x80 [ 383.622672][T10481] ksys_write+0x12a/0x250 [ 383.622685][T10481] ? __pfx_ksys_write+0x10/0x10 [ 383.622702][T10481] do_syscall_64+0x123/0x790 [ 383.622717][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.622728][T10481] RIP: 0033:0x7f5be339e159 [ 383.622738][T10481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.622749][T10481] RSP: 002b:00007f5be41f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.622761][T10481] RAX: ffffffffffffffda RBX: 00007f5be3625fa0 RCX: 00007f5be339e159 [ 383.622768][T10481] RDX: 000000000000002f RSI: 0000200000000400 RDI: 0000000000000005 [ 383.622775][T10481] RBP: 00007f5be343506b R08: 0000000000000000 R09: 0000000000000000 [ 383.622782][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.622789][T10481] R13: 00007f5be3626038 R14: 00007f5be3625fa0 R15: 00007ffe5a5b26b8 [ 383.622807][T10481] [ 383.740685][ T5696] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 384.981533][ T5696] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 384.985159][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 384.985186][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.985207][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 384.985231][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 385.029120][ T5724] usb 1-1: USB disconnect, device number 50 [ 385.046030][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.046048][ T5696] usb 2-1: Product: syz [ 385.046063][ T5696] usb 2-1: Manufacturer: syz [ 385.046077][ T5696] usb 2-1: SerialNumber: syz [ 385.121754][ T5696] usb 2-1: config 0 descriptor?? [ 385.140989][T10484] syzkaller0: entered promiscuous mode [ 385.141015][T10484] syzkaller0: entered allmulticast mode [ 385.394921][ T5696] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 385.412110][ T5696] usb 2-1: USB disconnect, device number 41 [ 386.445351][T10502] net_ratelimit: 113 callbacks suppressed [ 390.574455][ T5803] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 390.737655][ T5803] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.02 [ 390.738618][ T5803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.738668][ T5803] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 390.738701][ T5803] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.738726][ T5803] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 390.738751][ T5803] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 390.738777][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 390.738822][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.800696][ T5803] usb 2-1: config 0 descriptor?? [ 390.837174][T10564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.012147][ T31] audit: type=1400 audit(2000000306.620:497): avc: denied { setopt } for pid=10570 comm="syz.0.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.012187][ T31] audit: type=1400 audit(2000000306.620:498): avc: denied { write } for pid=10570 comm="syz.0.1657" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.012222][ T31] audit: type=1400 audit(2000000306.620:499): avc: denied { connect } for pid=10570 comm="syz.0.1657" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.328667][ T5803] logitech 0003:046D:C298.0006: unknown main item tag 0x2 [ 391.328695][ T5803] logitech 0003:046D:C298.0006: unknown main item tag 0x0 [ 391.328722][ T5803] logitech 0003:046D:C298.0006: unknown main item tag 0x0 [ 391.336172][ T5803] input: HID 046d:c298 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C298.0006/input/input16 [ 391.387107][ T5803] logitech 0003:046D:C298.0006: offset (39) exceeds report_count (19) [ 391.387162][ T5803] logitech 0003:046D:C298.0006: offset (25) exceeds report_count (19) [ 391.440423][ T1216] logitech 0003:046D:C298.0006: implement() called with too large value 1 (n: 0)! (kworker/0:2) [ 391.445711][T10574] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1658'. [ 391.506833][ C1] net_ratelimit: 80 callbacks suppressed [ 391.642309][ T5803] logitech 0003:046D:C298.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 391.645039][ T5803] logitech 0003:046D:C298.0006: implement() called with too large value 245 (n: 0)! (kworker/0:9) [ 391.670882][ T5803] logitech 0003:046D:C298.0006: implement() called with too large value 248 (n: 0)! (kworker/0:9) [ 391.670905][ T5803] logitech 0003:046D:C298.0006: implement() called with too large value 3 (n: 0)! (kworker/0:9) [ 391.671071][ T5803] logitech 0003:046D:C298.0006: implement() called with too large value 129 (n: 0)! (kworker/0:9) [ 391.671092][ T5803] logitech 0003:046D:C298.0006: implement() called with too large value 11 (n: 0)! (kworker/0:9) [ 391.671115][ T5803] logitech 0003:046D:C298.0006: Force feedback support for Logitech Gaming Wheels [ 391.747993][ T5803] usb 2-1: USB disconnect, device number 42 [ 391.896302][T10579] fido_id[10579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 392.622380][T10551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.153705][T10525] syzkaller0: entered promiscuous mode [ 393.153720][T10525] syzkaller0: entered allmulticast mode [ 393.420385][ T31] audit: type=1400 audit(2000000309.040:500): avc: denied { write } for pid=10587 comm="syz.1.1660" laddr=fe80::13 lport=60 faddr=fe80::bb fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 394.557698][ T5803] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 394.739090][ T5803] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 394.772272][ T5803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.772286][ T5803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 394.772320][ T5803] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.772352][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.775832][ T5803] hub 5-1:1.0: bad descriptor, ignoring hub [ 394.775842][ T5803] hub 5-1:1.0: probe with driver hub failed with error -5 [ 394.776126][ T5803] cdc_wdm 5-1:1.0: skipping garbage [ 394.776134][ T5803] cdc_wdm 5-1:1.0: skipping garbage [ 394.776141][ T5803] cdc_wdm 5-1:1.0: skipping garbage [ 394.776151][ T5803] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 395.929354][ T5724] usb 5-1: USB disconnect, device number 33 [ 396.267037][ T25] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 396.417705][ T25] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 396.418947][ T25] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 396.418986][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.419012][ T25] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.419036][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 396.419060][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.420148][ T25] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 396.420182][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.420207][ T25] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.420230][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 396.420255][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.422597][ T25] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 396.422636][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.422662][ T25] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.422685][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 396.422710][ T25] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.809374][ C0] net_ratelimit: 121 callbacks suppressed [ 397.455462][ T5616] Bluetooth: hci4: unexpected event for opcode 0x0011 [ 397.763440][T10603] IPVS: Error connecting to the multicast addr [ 397.810908][T10618] tipc: Enabled bearer , priority 0 [ 398.413964][T10631] UDC core: g1: couldn't find an available UDC or it's busy [ 398.565198][ T31] audit: type=1400 audit(2000000314.180:501): avc: denied { write } for pid=10630 comm="syz.5.1674" name="c.1" dev="configfs" ino=6907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 398.625829][T10636] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1675'. [ 398.712394][T10621] syzkaller0: entered promiscuous mode [ 398.712418][T10621] syzkaller0: entered allmulticast mode [ 398.713108][T10621] tipc: Resetting bearer [ 398.742635][T10615] tipc: Resetting bearer [ 399.069004][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.085476][ T25] usb 1-1: can't set config #168, error -71 [ 399.105537][ T25] usb 1-1: USB disconnect, device number 51 [ 399.524607][ T25] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 399.682239][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 399.689594][ T25] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 399.709241][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.709260][ T25] usb 1-1: Product: syz [ 399.709275][ T25] usb 1-1: Manufacturer: syz [ 399.709290][ T25] usb 1-1: SerialNumber: syz [ 399.711179][ T25] usb 1-1: config 0 descriptor?? [ 399.715693][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 399.870204][ T5696] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.917251][ T25] gspca_sq930x: reg_r 001f failed -32 [ 399.917310][ T25] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 399.924894][ T25] usb 1-1: USB disconnect, device number 52 [ 400.017864][ T5696] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 400.018829][ T5696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.018883][ T5696] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.018934][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.026378][ T5696] usb 6-1: config 0 descriptor?? [ 400.029523][ T5696] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 400.817437][T10615] tipc: Disabling bearer [ 400.927913][T10661] IPVS: Error connecting to the multicast addr [ 400.995151][T10663] syzkaller0: entered promiscuous mode [ 400.995166][T10663] syzkaller0: entered allmulticast mode [ 401.061028][T10666] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 401.508448][ T5616] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 401.513779][ T5616] Bluetooth: hci4: Injecting HCI hardware error event [ 401.546032][ T5616] Bluetooth: hci4: hardware error 0x00 [ 402.212641][ T31] audit: type=1400 audit(2000000317.830:502): avc: denied { mount } for pid=10672 comm="syz.1.1687" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 402.226807][ C1] net_ratelimit: 291 callbacks suppressed [ 402.331222][ T1216] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 402.511234][ T1216] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 402.526464][ T1216] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 402.526504][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 402.526526][ T1216] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.526546][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 402.526566][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 402.545904][ T1216] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 402.545938][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 402.545960][ T1216] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.545981][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 402.546002][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 402.546913][ T1216] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 402.546943][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 402.546965][ T1216] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.546985][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 402.547006][ T1216] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 402.665235][ T5786] usb 6-1: USB disconnect, device number 8 [ 402.903150][T10680] ceph: No mds server is up or the cluster is laggy [ 403.287585][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 403.288638][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 403.666880][ T5616] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 404.021251][T10694] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1694'. [ 404.597277][T10695] syzkaller1: entered promiscuous mode [ 404.597294][T10695] syzkaller1: entered allmulticast mode [ 404.671556][ T9940] Bluetooth: hci6: Frame reassembly failed (-84) [ 404.827893][ T31] audit: type=1400 audit(2000000320.450:503): avc: denied { connect } for pid=10710 comm="syz.3.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.881099][ T31] audit: type=1400 audit(2000000320.500:504): avc: denied { bind } for pid=10712 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.881280][ T31] audit: type=1400 audit(2000000320.500:505): avc: denied { name_bind } for pid=10712 comm="syz.3.1701" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 404.881445][ T31] audit: type=1400 audit(2000000320.500:506): avc: denied { node_bind } for pid=10712 comm="syz.3.1701" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 405.885179][ T1216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.901030][ T1216] usb 5-1: can't set config #168, error -71 [ 405.902883][ T1216] usb 5-1: USB disconnect, device number 34 [ 406.071533][ T31] audit: type=1400 audit(2000000321.690:507): avc: denied { write } for pid=10721 comm="syz.4.1704" name="c.1" dev="configfs" ino=6907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 406.071576][ T31] audit: type=1400 audit(2000000321.690:508): avc: denied { create } for pid=10721 comm="syz.4.1704" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 406.071608][ T31] audit: type=1400 audit(2000000321.690:509): avc: denied { write } for pid=10721 comm="syz.4.1704" name="c.1" dev="configfs" ino=6907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 406.707086][ T5613] Bluetooth: hci6: command 0x1003 tx timeout [ 406.708154][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 406.760872][ T31] audit: type=1400 audit(2000000322.380:510): avc: denied { write } for pid=10721 comm="syz.4.1704" name="c.1" dev="configfs" ino=6907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 407.906986][ C1] net_ratelimit: 97 callbacks suppressed [ 408.350968][T10733] syzkaller0: entered promiscuous mode [ 408.350994][T10733] syzkaller0: entered allmulticast mode [ 408.556856][ T5696] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 408.831025][ T5696] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 408.834175][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.834192][ T5696] usb 4-1: Product: syz [ 408.834206][ T5696] usb 4-1: Manufacturer: syz [ 408.834219][ T5696] usb 4-1: SerialNumber: syz [ 408.995514][ T31] audit: type=1400 audit(2000000323.592:511): avc: denied { create } for pid=10738 comm="syz.5.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 409.454465][ T5696] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 409.455260][ T5696] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 409.512367][ T5696] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 409.584541][ T5696] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 409.597494][ T5696] usb 4-1: USB disconnect, device number 39 [ 410.068060][ T5696] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 410.224741][ T5696] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 410.233688][ T5696] usb 6-1: config 0 has no interfaces? [ 410.265488][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.265532][ T5696] usb 6-1: Product: syz [ 410.265548][ T5696] usb 6-1: Manufacturer: syz [ 410.265562][ T5696] usb 6-1: SerialNumber: syz [ 410.268115][ T5696] usb 6-1: config 0 descriptor?? [ 411.089806][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 412.034589][T10760] erspan0: entered promiscuous mode [ 412.046574][T10760] macvtap1: entered promiscuous mode [ 412.046657][T10760] macvtap1: entered allmulticast mode [ 412.046666][T10760] erspan0: entered allmulticast mode [ 412.116826][ T30] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 412.279259][ T30] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 412.285558][ T30] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 412.285694][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.285753][ T30] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.285783][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.285812][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.370033][ T30] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 412.370276][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.370306][ T30] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.370360][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.370390][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.442618][ T30] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 412.442775][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.442841][ T30] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.442869][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.442897][ T30] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.841797][ T25] usb 6-1: USB disconnect, device number 9 [ 413.026938][ C1] net_ratelimit: 172 callbacks suppressed [ 414.410266][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.413491][ T30] usb 2-1: can't set config #168, error -71 [ 414.414857][ T30] usb 2-1: USB disconnect, device number 43 [ 414.455703][T10785] FAULT_INJECTION: forcing a failure. [ 414.455703][T10785] name failslab, interval 1, probability 0, space 0, times 0 [ 414.455736][T10785] CPU: 0 UID: 0 PID: 10785 Comm: syz.4.1718 Not tainted syzkaller #0 PREEMPT(full) [ 414.455760][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 414.455772][T10785] Call Trace: [ 414.455780][T10785] [ 414.455789][T10785] dump_stack_lvl+0x100/0x190 [ 414.455824][T10785] should_fail_ex.cold+0x5/0xa [ 414.455852][T10785] should_failslab+0xc2/0x120 [ 414.455886][T10785] __kmalloc_cache_noprof+0x91/0x6d0 [ 414.455908][T10785] ? ovs_flow_tbl_init+0x1f5/0x680 [ 414.455945][T10785] ovs_flow_tbl_init+0x1f5/0x680 [ 414.455980][T10785] ovs_dp_cmd_new+0x27f/0xe30 [ 414.456009][T10785] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 414.456028][T10785] ? __nla_parse+0x40/0x60 [ 414.456053][T10785] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 414.456086][T10785] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 414.456122][T10785] genl_family_rcv_msg_doit+0x214/0x300 [ 414.456155][T10785] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.456193][T10785] ? bpf_lsm_capable+0x9/0x10 [ 414.456213][T10785] ? security_capable+0x80/0x260 [ 414.456239][T10785] ? ns_capable+0xd2/0xf0 [ 414.456262][T10785] genl_rcv_msg+0x560/0x800 [ 414.456294][T10785] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.456323][T10785] ? __lock_acquire+0x5c0/0x1f40 [ 414.456345][T10785] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 414.456373][T10785] netlink_rcv_skb+0x159/0x420 [ 414.456399][T10785] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.456429][T10785] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.456467][T10785] ? netlink_deliver_tap+0x1ae/0xcc0 [ 414.456496][T10785] genl_rcv+0x28/0x40 [ 414.456522][T10785] netlink_unicast+0x585/0x850 [ 414.456553][T10785] ? __pfx_netlink_unicast+0x10/0x10 [ 414.456577][T10785] ? __pfx_sock_has_perm+0x10/0x10 [ 414.456605][T10785] netlink_sendmsg+0x8b0/0xda0 [ 414.456636][T10785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.456666][T10785] ? selinux_socket_sendmsg+0x198/0x2f0 [ 414.456695][T10785] __sys_sendto+0x48b/0x4e0 [ 414.456716][T10785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.456739][T10785] ? __pfx___sys_sendto+0x10/0x10 [ 414.456765][T10785] ? fd_install+0x223/0x580 [ 414.456798][T10785] ? xfd_validate_state+0x129/0x190 [ 414.456826][T10785] __x64_sys_sendto+0xe0/0x1c0 [ 414.456851][T10785] ? do_syscall_64+0xae/0x790 [ 414.456878][T10785] ? lockdep_hardirqs_on+0x7d/0x110 [ 414.456900][T10785] do_syscall_64+0x123/0x790 [ 414.456924][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.456947][T10785] RIP: 0033:0x7f148ef9e159 [ 414.456964][T10785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.456981][T10785] RSP: 002b:00007f148fdf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 414.457000][T10785] RAX: ffffffffffffffda RBX: 00007f148f225fa0 RCX: 00007f148ef9e159 [ 414.457012][T10785] RDX: 0000000000000034 RSI: 0000200000000200 RDI: 0000000000000005 [ 414.457024][T10785] RBP: 00007f148f03506b R08: 0000000000000000 R09: 0000000000000000 [ 414.457037][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.457049][T10785] R13: 00007f148f226038 R14: 00007f148f225fa0 R15: 00007fff30baf928 [ 414.457077][T10785] [ 414.644108][ T31] audit: type=1400 audit(2000000329.262:512): avc: denied { write } for pid=10787 comm="syz.1.1724" name="subsystems" dev="configfs" ino=3481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 415.168234][ T31] audit: type=1326 audit(2000000329.782:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 415.216143][ T31] audit: type=1326 audit(2000000329.782:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 415.287154][ T31] audit: type=1326 audit(2000000329.882:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 415.553250][ T31] audit: type=1326 audit(2000000330.162:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 415.553435][ T31] audit: type=1326 audit(2000000330.162:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 415.669726][ T31] audit: type=1326 audit(2000000330.292:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f148ef5e98e code=0x7ffc0000 [ 415.803150][ T31] audit: type=1326 audit(2000000330.422:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 415.804666][ T31] audit: type=1326 audit(2000000330.422:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 415.804770][ T31] audit: type=1326 audit(2000000330.422:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.4.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ef9e159 code=0x7ffc0000 [ 416.200478][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 416.202499][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 416.214492][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 416.230508][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 416.232459][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 416.327382][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 416.327466][ T5696] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 416.380814][T10812] tipc: Enabled bearer , priority 0 [ 416.403317][T10812] tipc: Resetting bearer [ 416.414986][T10811] tipc: Disabling bearer [ 416.477704][ T25] usb 6-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 416.478887][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.497440][ T5696] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 416.506592][ T5696] usb 4-1: config 0 has no interfaces? [ 416.527982][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.528001][ T5696] usb 4-1: Product: syz [ 416.528015][ T5696] usb 4-1: Manufacturer: syz [ 416.528030][ T5696] usb 4-1: SerialNumber: syz [ 416.533138][ T5696] usb 4-1: config 0 descriptor?? [ 416.857354][ T25] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 416.995958][ T5710] usb 6-1: USB disconnect, device number 10 [ 417.002148][ T5613] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 417.011396][ T25] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.014463][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 417.014500][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.014523][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.014544][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.014572][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.060932][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 417.060979][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.061005][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.061030][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.061054][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.140675][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 417.140996][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.141013][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.141046][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.141061][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.937749][ T5710] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 418.311764][ T5616] Bluetooth: hci6: command tx timeout [ 418.372859][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.373231][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.374404][T10808] bridge_slave_0: entered allmulticast mode [ 418.404498][T10808] bridge_slave_0: entered promiscuous mode [ 418.430154][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.430500][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.431074][T10808] bridge_slave_1: entered allmulticast mode [ 418.453042][ C0] net_ratelimit: 141 callbacks suppressed [ 418.458512][ T5710] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 418.479960][T10808] bridge_slave_1: entered promiscuous mode [ 418.482863][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.482880][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 418.482895][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 418.488332][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.488348][ T5710] usb 5-1: Product: syz [ 418.488360][ T5710] usb 5-1: Manufacturer: syz [ 418.488371][ T5710] usb 5-1: SerialNumber: syz [ 418.495066][ T5710] usb 5-1: config 0 descriptor?? [ 418.499026][T10840] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 418.626633][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.640081][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.646826][ T5710] rc_core: IR keymap rc-streamzap not found [ 418.646837][ T5710] Registered IR keymap rc-empty [ 418.652214][ T5710] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 418.664764][ T5710] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 418.944935][T10808] team0: Port device team_slave_0 added [ 418.954262][T10808] team0: Port device team_slave_1 added [ 419.010884][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.010894][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.010916][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.012703][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.012853][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.012875][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.092315][ T5710] usb 4-1: USB disconnect, device number 40 [ 419.248949][ T942] usb 5-1: USB disconnect, device number 35 [ 419.276631][T10808] hsr_slave_0: entered promiscuous mode [ 419.285246][T10808] hsr_slave_1: entered promiscuous mode [ 419.285927][T10808] debugfs: 'hsr0' already exists in 'hsr' [ 419.285943][T10808] Cannot create hsr debugfs directory [ 419.476513][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 419.498397][T10858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.498416][T10858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.503594][T10858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.503605][T10858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.559737][T10856] tipc: Enabled bearer , priority 0 [ 419.600704][T10856] tipc: Resetting bearer [ 419.649155][T10855] tipc: Disabling bearer [ 419.691608][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.703036][ T25] usb 2-1: can't set config #168, error -71 [ 419.714604][ T25] usb 2-1: USB disconnect, device number 44 [ 421.054073][ T5616] Bluetooth: hci6: command tx timeout [ 421.127710][ T1216] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 421.127838][ T5724] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 421.297969][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 421.298793][ T5724] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 421.298958][ T1216] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 421.300553][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.300698][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.300719][ T1216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 421.300774][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.303585][ T5724] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 421.303606][ T5724] usb 5-1: config 1 has no interface number 0 [ 421.313488][ T1216] usb 2-1: config 0 descriptor?? [ 421.314182][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.314199][ T5724] usb 5-1: Product: syz [ 421.314212][ T5724] usb 5-1: Manufacturer: syz [ 421.314225][ T5724] usb 5-1: SerialNumber: syz [ 421.389341][ T5724] usb 5-1: 3:0 : does not exist [ 421.389355][ T5724] usb 5-1: 3:0 : does not exist [ 421.737502][ T1216] usbhid 2-1:0.0: can't add hid device: -71 [ 421.737624][ T1216] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 421.769455][ T1216] usb 2-1: USB disconnect, device number 45 [ 421.839649][T10808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.867261][T10808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.868863][T10808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.887904][T10808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.892386][T10808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.934245][T10808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.938991][T10808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.982353][T10808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.076917][ T5710] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 422.231354][ T5710] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 422.232885][ T5710] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 422.232924][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.232975][ T5710] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.232999][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.233023][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.234624][ T5710] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 422.234660][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.234684][ T5710] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.234706][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.234728][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.235712][ T5710] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 422.235749][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.235774][ T5710] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.235816][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.235842][ T5710] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.284718][T10808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.342595][T10808] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.377329][ T5710] usb 4-1: string descriptor 0 read error: -22 [ 422.377426][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.391550][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.393101][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.432337][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.432408][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.486057][ T5710] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 422.562186][ T5616] Bluetooth: Frame is too long (len 10, expected len 4) [ 422.699054][ T25] usb 4-1: USB disconnect, device number 41 [ 422.837445][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 422.837496][ T31] audit: type=1400 audit(2000000337.402:530): avc: denied { write } for pid=10896 comm="syz.5.1756" name="header" dev="configfs" ino=6771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 422.837651][ T31] audit: type=1400 audit(2000000337.412:531): avc: denied { write } for pid=10896 comm="syz.5.1756" name="uncompressed" dev="configfs" ino=6772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 423.075818][T10899] tipc: Enabled bearer , priority 0 [ 423.100754][T10898] tipc: Disabling bearer [ 423.107282][ T5616] Bluetooth: hci6: command tx timeout [ 424.146802][ C1] net_ratelimit: 97 callbacks suppressed [ 424.547336][T10920] xt_hashlimit: size too large, truncated to 1048576 [ 424.725317][T10927] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1762'. [ 424.725343][T10927] nbd: must specify an index to disconnect [ 424.770746][T10808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.948130][ T5616] Bluetooth: hci6: command tx timeout [ 426.314652][T10808] veth0_vlan: entered promiscuous mode [ 426.327477][T10808] veth1_vlan: entered promiscuous mode [ 426.373530][T10808] veth0_macvtap: entered promiscuous mode [ 426.388615][T10808] veth1_macvtap: entered promiscuous mode [ 426.413058][T10808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.434121][T10808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.451767][ T1014] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.451911][ T1014] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.451973][ T1014] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.452013][ T1014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.608508][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.608521][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.656075][ T5786] usb 5-1: USB disconnect, device number 36 [ 426.862592][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.862607][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.930533][T10948] tipc: Enabled bearer , priority 0 [ 426.955313][T10948] tipc: Resetting bearer [ 426.991928][T10947] tipc: Disabling bearer [ 427.098558][ T5803] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 427.192007][T10964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1772'. [ 427.192029][T10964] nbd: must specify an index to disconnect [ 427.226882][ T5803] usb 4-1: device descriptor read/64, error -71 [ 427.363053][T10969] xt_hashlimit: size too large, truncated to 1048576 [ 427.478159][ T5803] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 428.060449][ T31] audit: type=1400 audit(2000000342.682:532): avc: denied { listen } for pid=10977 comm="syz.4.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.088669][ T5803] usb 4-1: device descriptor read/64, error -71 [ 428.139281][ T31] audit: type=1400 audit(2000000342.762:533): avc: denied { accept } for pid=10977 comm="syz.4.1776" lport=38609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.198201][ T5803] usb usb4-port1: attempt power cycle [ 428.301430][ T5786] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 428.306414][ T5786] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 429.218785][ T5786] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 429.224713][T10985] ceph: No mds server is up or the cluster is laggy [ 429.228214][ T5722] net_ratelimit: 319 callbacks suppressed [ 429.276939][ T5803] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 429.299834][ T5803] usb 4-1: device descriptor read/8, error -71 [ 429.537512][ T5803] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 429.563821][ T5803] usb 4-1: device descriptor read/8, error -71 [ 429.671159][ T5803] usb usb4-port1: unable to enumerate USB device [ 429.816807][ T5696] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 429.837658][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 429.966792][ T5696] usb 7-1: Using ep0 maxpacket: 16 [ 429.975975][ T5696] usb 7-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.00 [ 429.986213][ T5696] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 429.986238][ T5696] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.986260][ T5696] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.986284][ T5696] usb 7-1: config 0 interface 0 has no altsetting 0 [ 429.986331][ T5696] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.987594][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 429.999893][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 430.002542][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 430.009398][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.009415][ T9] usb 6-1: Product: syz [ 430.009428][ T9] usb 6-1: Manufacturer: syz [ 430.009441][ T9] usb 6-1: SerialNumber: syz [ 430.036038][ T9] usb 6-1: config 0 descriptor?? [ 430.095777][ T5696] usb 7-1: config 0 descriptor?? [ 430.277763][ T9] usb 6-1: USB disconnect, device number 11 [ 431.300013][ T5696] gyration 0003:0C16:0002.0007: ignoring exceeding usage max [ 431.617523][ T5696] gyration 0003:0C16:0002.0007: hidraw0: USB HID v0.10 Joystick [HID 0c16:0002] on usb-dummy_hcd.6-1/input0 [ 431.623748][ T5696] usb 7-1: USB disconnect, device number 2 [ 431.712935][T11019] fido_id[11019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 432.143123][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 432.171380][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 432.993863][ T5696] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 432.994284][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 433.056177][T11026] ceph: No mds server is up or the cluster is laggy [ 433.193135][T11041] evm: overlay not supported [ 433.217937][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 433.222736][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.222758][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 433.232069][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.232087][ T9] usb 4-1: Product: syz [ 433.232101][ T9] usb 4-1: Manufacturer: syz [ 433.232116][ T9] usb 4-1: SerialNumber: syz [ 433.997105][T11048] xt_hashlimit: size too large, truncated to 1048576 [ 434.160373][ T31] audit: type=1400 audit(2000000348.782:534): avc: denied { execute } for pid=11054 comm="syz.6.1807" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 434.431329][ C0] net_ratelimit: 125 callbacks suppressed [ 434.549164][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.549208][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.751740][ T1216] usb 4-1: USB disconnect, device number 46 [ 435.927291][T11085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11085 comm=syz.6.1816 [ 436.198833][ T31] audit: type=1400 audit(2000000350.822:535): avc: denied { write } for pid=11088 comm="syz.4.1818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 436.404051][ T1216] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 436.558660][ T1216] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.02 [ 436.562273][ T1216] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.562539][ T1216] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 436.562631][ T1216] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 436.562661][ T1216] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 436.562689][ T1216] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 436.562721][ T1216] usb 6-1: config 0 interface 0 has no altsetting 0 [ 436.562848][ T1216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.894668][ T1216] usb 6-1: config 0 descriptor?? [ 436.924696][T11087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.120739][T11095] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1820'. [ 438.280869][ T1216] usbhid 6-1:0.0: can't add hid device: -71 [ 438.280983][ T1216] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 438.306345][ T1216] usb 6-1: USB disconnect, device number 12 [ 439.485382][ T5727] net_ratelimit: 152 callbacks suppressed [ 439.632471][T11116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11116 comm=syz.5.1829 [ 439.737880][ T31] audit: type=1400 audit(2000000354.362:536): avc: denied { ioctl } for pid=11117 comm="syz.5.1830" path="socket:[25485]" dev="sockfs" ino=25485 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 441.359629][T11128] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1833'. [ 441.652111][T11132] nvme_fabrics: missing parameter 'nqn=%s' [ 441.777533][ T5724] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 441.804214][T11138] tipc: Enabling of bearer rejected, failed to enable media [ 441.937454][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 441.939061][ T5724] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 441.957811][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.957842][ T5724] usb 6-1: Product: syz [ 441.957856][ T5724] usb 6-1: Manufacturer: syz [ 441.957869][ T5724] usb 6-1: SerialNumber: syz [ 441.975423][ T5724] usb 6-1: config 0 descriptor?? [ 442.057080][ T1216] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 442.182193][ T5724] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 442.203990][ T5724] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 442.222021][ T5724] usb 6-1: USB disconnect, device number 13 [ 442.227381][ T1216] usb 4-1: Using ep0 maxpacket: 16 [ 442.246003][ T1216] usb 4-1: unable to get BOS descriptor or descriptor too short [ 442.246033][ T1216] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=66.41 [ 442.265977][ T1216] usb 4-1: config 10 has an invalid interface number: 45 but max is 0 [ 442.265993][ T1216] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 442.266003][ T1216] usb 4-1: config 10 has no interface number 0 [ 442.266023][ T1216] usb 4-1: config 10 interface 45 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 442.266038][ T1216] usb 4-1: config 10 interface 45 has no altsetting 0 [ 442.282605][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.282622][ T1216] usb 4-1: Product: syz [ 442.282635][ T1216] usb 4-1: Manufacturer: syz [ 442.282646][ T1216] usb 4-1: SerialNumber: syz [ 442.347062][ T5803] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 442.518631][ T1216] s2255 4-1:10.45: Could not find bulk-in endpoint [ 442.518722][ T1216] Sensoray 2255 driver load failed: 0xfffffff4 [ 442.518739][ T1216] s2255 4-1:10.45: probe with driver s2255 failed with error -12 [ 442.524065][ T5803] usb 7-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 442.525248][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.544046][ T1216] usb 4-1: USB disconnect, device number 47 [ 443.620050][ T5616] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 443.649101][ T5803] usb 7-1: USB disconnect, device number 3 [ 444.144475][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1845'. [ 444.166968][ T5803] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 444.318553][ T5803] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 444.321043][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.321142][ T5803] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.321280][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.377358][ T5803] usb 4-1: config 0 descriptor?? [ 444.405611][ T5803] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 444.627062][ C1] net_ratelimit: 100 callbacks suppressed [ 445.806465][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 445.993502][T11213] tipc: Started in network mode [ 445.993531][T11213] tipc: Node identity aa089f4d91fd, cluster identity 4711 [ 445.993736][T11213] tipc: Enabled bearer , priority 0 [ 445.994816][T11213] syzkaller0: entered promiscuous mode [ 445.994832][T11213] syzkaller0: entered allmulticast mode [ 446.122598][T11213] tipc: Resetting bearer [ 446.135508][T11212] tipc: Resetting bearer [ 446.172380][T11212] tipc: Disabling bearer [ 446.184935][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 446.198343][T11220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.198367][T11220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.198985][T11220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.198994][T11220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.329447][ T25] usb 4-1: USB disconnect, device number 48 [ 448.339944][T11236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1856'. [ 448.569648][ T1216] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 448.748810][ T1216] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 448.753126][ T1216] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 448.753156][ T1216] usb 7-1: config 1 has no interface number 0 [ 448.802063][ T1216] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.802090][ T1216] usb 7-1: Product: syz [ 448.802125][ T1216] usb 7-1: Manufacturer: syz [ 448.802166][ T1216] usb 7-1: SerialNumber: syz [ 449.027058][ T1216] usb 7-1: 3:0 : does not exist [ 449.027073][ T1216] usb 7-1: 3:0 : does not exist [ 449.625979][ T1216] usb 7-1: USB disconnect, device number 4 [ 449.699413][T11136] udevd[11136]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.807264][ C1] net_ratelimit: 97 callbacks suppressed [ 449.940868][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1865'. [ 450.093158][T11258] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 450.199075][T11266] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1871'. [ 450.536911][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 450.616975][ T30] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 450.697514][ T25] usb 6-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 450.698830][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.768705][ T30] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 450.771666][ T30] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 450.771753][ T30] usb 4-1: config 1 has no interface number 0 [ 450.809389][ T31] audit: type=1400 audit(2000000365.422:537): avc: denied { write } for pid=11277 comm="syz.1.1858" name="h" dev="configfs" ino=25054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.809583][ T31] audit: type=1400 audit(2000000365.422:538): avc: denied { write } for pid=11277 comm="syz.1.1858" name="h" dev="configfs" ino=25054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.943479][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.943568][ T30] usb 4-1: Product: syz [ 450.943601][ T30] usb 4-1: Manufacturer: syz [ 450.943628][ T30] usb 4-1: SerialNumber: syz [ 451.042639][ T30] usb 4-1: 3:0 : does not exist [ 451.042655][ T30] usb 4-1: 3:0 : does not exist [ 451.113513][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1876'. [ 451.207971][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 451.207993][T11288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.208009][T11288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.209641][T11288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.209650][T11288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.265100][ T31] audit: type=1400 audit(2000000365.892:539): avc: denied { read } for pid=11289 comm="syz.6.1878" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 451.290326][ T31] audit: type=1400 audit(2000000365.892:540): avc: denied { open } for pid=11289 comm="syz.6.1878" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 451.321839][ T5613] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 451.323000][ T5803] usb 6-1: USB disconnect, device number 14 [ 451.337725][ T5786] usb 4-1: USB disconnect, device number 49 [ 451.517073][T11295] md: couldn't update array info. -22 [ 451.557405][T11295] md: could not open device unknown-block(1,0). [ 451.557450][T11295] md: md_import_device returned -16 [ 451.597241][T11295] md: couldn't update array info. -22 [ 451.636863][T11295] md: could not open device unknown-block(1,1). [ 451.636894][T11295] md: md_import_device returned -16 [ 452.339595][ T31] audit: type=1400 audit(2000000366.642:541): avc: denied { read } for pid=11296 comm="syz.4.1880" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 452.339639][ T31] audit: type=1400 audit(2000000366.642:542): avc: denied { open } for pid=11296 comm="syz.4.1880" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 452.343503][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 453.986889][ T30] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 454.238677][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.02 [ 454.244105][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.244282][ T30] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 454.244390][ T30] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 454.244460][ T30] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 454.244515][ T30] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 454.244699][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 454.244892][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.360586][ T30] usb 2-1: config 0 descriptor?? [ 454.363642][T11317] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 454.506958][T11323] md: couldn't update array info. -22 [ 454.547198][T11323] md: could not open device unknown-block(1,0). [ 454.547239][T11323] md: md_import_device returned -16 [ 454.586881][T11323] md: couldn't update array info. -22 [ 454.626981][T11323] md: could not open device unknown-block(1,1). [ 454.627024][T11323] md: md_import_device returned -16 [ 454.784377][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1887'. [ 454.799056][ T30] usbhid 2-1:0.0: can't add hid device: -71 [ 454.799171][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 454.821259][ T30] usb 2-1: USB disconnect, device number 46 [ 454.850937][T11327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1882'. [ 454.948544][ C1] net_ratelimit: 85 callbacks suppressed [ 455.766662][T11343] loop5: detected capacity change from 0 to 7 [ 455.802927][T11343] Dev loop5: unable to read RDB block 7 [ 455.802955][T11343] loop5: AHDI p1 p2 p3 [ 455.802974][T11343] loop5: partition table partially beyond EOD, truncated [ 455.832632][T11343] loop5: p1 start 1818582900 is beyond EOD, truncated [ 455.832656][T11343] loop5: p3 start 335544320 is beyond EOD, truncated [ 455.950506][ T31] audit: type=1326 audit(2000000370.572:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.950900][ T31] audit: type=1326 audit(2000000370.572:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.952875][ T31] audit: type=1326 audit(2000000370.572:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.953341][ T31] audit: type=1326 audit(2000000370.572:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.953383][ T31] audit: type=1326 audit(2000000370.572:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.953422][ T31] audit: type=1326 audit(2000000370.572:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.953576][ T31] audit: type=1326 audit(2000000370.572:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.953909][ T31] audit: type=1326 audit(2000000370.572:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 455.954140][ T31] audit: type=1326 audit(2000000370.572:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b0f99e159 code=0x7ffc0000 [ 456.247775][ T31] audit: type=1400 audit(2000000370.872:552): avc: denied { write } for pid=11348 comm="syz.3.1901" name="namespaces" dev="configfs" ino=10064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 456.248743][T11351] nvmet: adding nsid 1 to subsystem testsubsys [ 456.496868][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 456.568838][T11351] nvme_fabrics: missing parameter 'transport=%s' [ 456.568849][T11351] nvme_fabrics: missing parameter 'nqn=%s' [ 456.627509][ T25] usb 2-1: device descriptor read/64, error -71 [ 456.660930][T11358] md: couldn't update array info. -22 [ 456.697007][T11358] md: could not open device unknown-block(1,0). [ 456.697052][T11358] md: md_import_device returned -16 [ 456.736944][T11358] md: couldn't update array info. -22 [ 456.767128][T11358] md: could not open device unknown-block(1,1). [ 456.767175][T11358] md: md_import_device returned -16 [ 457.091212][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 457.857376][ T25] usb 2-1: device descriptor read/64, error -71 [ 457.979243][ T25] usb usb2-port1: attempt power cycle [ 459.163695][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 459.194187][ T25] usb 2-1: device descriptor read/8, error -71 [ 459.546831][ T5786] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 459.997332][ T5786] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 459.998308][ T5786] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 459.998329][ T5786] usb 6-1: config 1 has no interface number 0 [ 460.003667][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.003686][ T5786] usb 6-1: Product: syz [ 460.003701][ T5786] usb 6-1: Manufacturer: syz [ 460.003716][ T5786] usb 6-1: SerialNumber: syz [ 460.078848][ T5786] usb 6-1: 3:0 : does not exist [ 460.078865][ T5786] usb 6-1: 3:0 : does not exist [ 460.157677][ C0] net_ratelimit: 120 callbacks suppressed [ 460.473620][ T5786] usb 6-1: USB disconnect, device number 15 [ 462.966851][ T5786] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 463.008951][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 463.008964][ T31] audit: type=1400 audit(2000000377.632:554): avc: denied { write } for pid=11411 comm="syz.3.1919" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.080887][T11414] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1911'. [ 463.080911][T11414] nbd: must specify an index to disconnect [ 463.127465][ T5786] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 463.128689][ T5786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 463.128736][ T5786] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 463.131521][ T5786] usb 6-1: string descriptor 0 read error: -22 [ 463.131651][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.373201][ T5786] usb 6-1: failed to read device descriptor: -71 [ 463.373248][ T5786] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 463.388894][ T5786] usb 6-1: invalid MIDI EP [ 463.388913][ T5786] usb 6-1: snd-bcd2000: error during probing [ 463.392550][ T5786] snd-bcd2000 6-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 463.398698][ T5786] usb 6-1: invalid MIDI EP [ 463.398710][ T5786] usb 6-1: snd-bcd2000: error during probing [ 463.399844][ T5786] snd-bcd2000 6-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 463.404049][ T5786] usb 6-1: invalid MIDI EP [ 463.404062][ T5786] usb 6-1: snd-bcd2000: error during probing [ 463.406120][ T5786] snd-bcd2000 6-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 463.409892][ T5786] usb 6-1: USB disconnect, device number 16 [ 464.780996][ T31] audit: type=1400 audit(2000000379.362:555): avc: denied { append } for pid=11429 comm="syz.4.1925" name="event3" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 465.206921][T11438] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1929'. [ 465.261439][T11438] syzkaller1: entered promiscuous mode [ 465.261455][T11438] syzkaller1: entered allmulticast mode [ 465.267909][ C0] net_ratelimit: 99 callbacks suppressed [ 465.550511][T11447] kAFS: unparsable volume name [ 465.638736][ T31] audit: type=1400 audit(2000000380.172:556): avc: denied { mounton } for pid=11439 comm="syz.1.1928" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 465.638881][ T31] audit: type=1400 audit(2000000380.172:557): avc: denied { bind } for pid=11439 comm="syz.1.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 466.079859][ T5786] usb 5-1: new full-speed USB device number 37 using dummy_hcd ** 14 printk messages dropped ** ** 294 printk messages dropped ** ** 296 printk messages dropped ** ** 298 printk messages dropped ** ** 305 printk messages dropped ** ** 191 printk messages dropped ** ** 5341 printk messages dropped ** ** 357 printk messages dropped ** ** 291 printk messages dropped ** ** 327 printk messages dropped ** ** 304 printk messages dropped ** ** 116 printk messages dropped ** [ 466.888921][ T5786] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.02 [ 466.931921][ T5786] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.002551][ T5786] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 467.002591][ T5786] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 467.002614][ T5786] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 467.002638][ T5786] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 467.002661][ T5786] usb 5-1: config 0 interface 0 has no altsetting 0 [ 467.002705][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.011368][ T5786] usb 5-1: config 0 descriptor?? [ 467.036381][T11451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 ** 2392 printk messages dropped ** ** 310 printk messages dropped ** ** 15 printk messages dropped ** ** 291 printk messages dropped ** ** 321 printk messages dropped ** ** 301 printk messages dropped ** ** 291 printk messages dropped ** ** 277 printk messages dropped ** ** 310 printk messages dropped ** ** 312 printk messages dropped ** ** 288 printk messages dropped ** ** 300 printk messages dropped ** ** 297 printk messages dropped ** ** 294 printk messages dropped ** ** 302 printk messages dropped ** ** 373 printk messages dropped ** ** 309 printk messages dropped ** ** 315 printk messages dropped ** ** 306 printk messages dropped ** ** 307 printk messages dropped ** ** 267 printk messages dropped ** ** 278 printk messages dropped ** ** 305 printk messages dropped ** ** 296 printk messages dropped ** ** 294 printk messages dropped ** ** 284 printk messages dropped ** ** 123 printk messages dropped ** ** 5 printk messages dropped ** ** 172 printk messages dropped ** ** 331 printk messages dropped ** ** 316 printk messages dropped ** ** 313 printk messages dropped ** ** 322 printk messages dropped ** ** 307 printk messages dropped ** ** 287 printk messages dropped ** ** 311 printk messages dropped ** ** 306 printk messages dropped ** ** 308 printk messages dropped ** ** 321 printk messages dropped ** ** 308 printk messages dropped ** ** 310 printk messages dropped ** ** 314 printk messages dropped ** ** 316 printk messages dropped ** ** 303 printk messages dropped ** ** 341 printk messages dropped ** ** 377 printk messages dropped ** ** 279 printk messages dropped ** ** 317 printk messages dropped ** ** 30 printk messages dropped ** ** 255 printk messages dropped ** ** 341 printk messages dropped ** ** 318 printk messages dropped ** ** 306 printk messages dropped ** ** 322 printk messages dropped ** ** 315 printk messages dropped ** ** 307 printk messages dropped ** ** 314 printk messages dropped ** ** 304 printk messages dropped ** ** 373 printk messages dropped ** ** 272 printk messages dropped ** ** 287 printk messages dropped ** ** 237 printk messages dropped ** ** 246 printk messages dropped ** ** 272 printk messages dropped ** ** 255 printk messages dropped ** ** 248 printk messages dropped ** ** 244 printk messages dropped ** ** 256 printk messages dropped ** ** 296 printk messages dropped ** ** 290 printk messages dropped ** ** 261 printk messages dropped ** [ 467.558334][ T5786] usbhid 5-1:0.0: can't add hid device: -71 [ 467.558585][ T5786] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.594097][ T5786] usb 5-1: USB disconnect, device number 37 ** 1270 printk messages dropped ** ** 325 printk messages dropped ** ** 307 printk messages dropped ** ** 297 printk messages dropped ** ** 31 printk messages dropped ** ** 756 printk messages dropped ** ** 324 printk messages dropped ** ** 303 printk messages dropped ** ** 312 printk messages dropped ** ** 358 printk messages dropped ** ** 304 printk messages dropped ** ** 292 printk messages dropped ** ** 316 printk messages dropped ** ** 250 printk messages dropped ** ** 282 printk messages dropped ** ** 304 printk messages dropped ** ** 311 printk messages dropped ** ** 301 printk messages dropped ** ** 293 printk messages dropped ** ** 285 printk messages dropped ** ** 338 printk messages dropped ** ** 313 printk messages dropped ** ** 277 printk messages dropped ** ** 315 printk messages dropped ** ** 270 printk messages dropped ** ** 304 printk messages dropped ** ** 305 printk messages dropped ** ** 317 printk messages dropped ** ** 94 printk messages dropped ** ** 30 printk messages dropped ** ** 2866 printk messages dropped ** ** 337 printk messages dropped ** ** 311 printk messages dropped ** ** 285 printk messages dropped ** ** 307 printk messages dropped ** ** 283 printk messages dropped ** ** 302 printk messages dropped ** ** 313 printk messages dropped ** ** 282 printk messages dropped ** ** 314 printk messages dropped ** ** 327 printk messages dropped ** ** 300 printk messages dropped ** ** 148 printk messages dropped ** ** 697 printk messages dropped ** ** 318 printk messages dropped ** ** 191 printk messages dropped ** [ 468.479595][T11472] kcov: kcov_start: t = fff ** replaying previous printk message ** [ 468.479595][T11472] kcov: kcov_start: t = ffff88803819a580, size = 524288, area = ffffc900063a9000 [ 468.482437][ T32] INFO: task syz.2.1338:9565 blocked for more than 143 seconds. [ 468.482457][ T32] Tainted: G L syzkaller #0 [ 468.482468][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.482476][ T32] task:syz.2.1338 state:D stack:28136 pid:9565 tgid:9561 ppid:5599 task_flags:0x400040 flags:0x00080002 [ 468.482536][ T32] Call Trace: [ 468.482542][ T32] [ 468.482554][ T32] __schedule+0x1259/0x6920 [ 468.482578][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 468.482606][ T32] ? do_raw_spin_lock+0x128/0x260 [ 468.482639][ T32] ? __pfx___schedule+0x10/0x10 [ 468.482655][ T32] ? find_held_lock+0x2b/0x80 [ 468.482683][ T32] ? schedule+0x225/0x2c0 [ 468.482705][ T32] schedule+0xdd/0x2c0 [ 468.482723][ T32] schedule_preempt_disabled+0x13/0x30 [ 468.482741][ T32] __mutex_lock+0xccb/0x1bd0 [ 468.482764][ T32] ? write_threads+0x288/0x600 [ 468.482798][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 468.482822][ T32] ? simple_strntoull+0xdf/0x170 [ 468.482850][ T32] ? net_generic+0x25/0x2a0 [ 468.482878][ T32] ? net_generic+0xea/0x2a0 [ 468.482908][ T32] ? net_generic+0xea/0x2a0 [ 468.482940][ T32] ? write_threads+0x288/0x600 [ 468.482966][ T32] write_threads+0x288/0x600 [ 468.482995][ T32] ? __pfx_write_threads+0x10/0x10 [ 468.483021][ T32] ? __might_fault+0xc5/0x140 [ 468.483042][ T32] ? __might_fault+0xc5/0x140 [ 468.483068][ T32] ? _copy_from_user+0x59/0xd0 [ 468.483094][ T32] ? __pfx_write_threads+0x10/0x10 [ 468.483120][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 468.483150][ T32] vfs_write+0x2aa/0x1050 [ 468.483173][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 468.483199][ T32] ? lock_acquire+0x1d1/0x380 [ 468.483219][ T32] ? __fget_files+0x34/0x3d0 [ 468.483244][ T32] ? __pfx_vfs_write+0x10/0x10 [ 468.483264][ T32] ? find_held_lock+0x2b/0x80 [ 468.483291][ T32] ? __fget_files+0x215/0x3d0 [ 468.483322][ T32] ? __fget_files+0x21f/0x3d0 [ 468.483355][ T32] ksys_write+0x12a/0x250 [ 468.483377][ T32] ? __pfx_ksys_write+0x10/0x10 [ 468.483417][ T32] do_syscall_64+0x123/0x790 [ 468.483442][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.483463][ T32] RIP: 0033:0x7f13d2f9e159 [ 468.483479][ T32] RSP: 002b:00007f13d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.483497][ T32] RAX: ffffffffffffffda RBX: 00007f13d3226180 RCX: 00007f13d2f9e159 [ 468.483510][ T32] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000005 [ 468.483522][ T32] RBP: 00007f13d303506b R08: 0000000000000000 R09: 0000000000000000 [ 468.483534][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.483546][ T32] R13: 00007f13d3226218 R14: 00007f13d3226180 R15: 00007ffe3e4c6768 [ 468.483573][ T32] [ 468.483596][ T32] [ 468.483596][ T32] Showing all locks held in the system: [ 468.483607][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 468.483621][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 468.483696][ T32] locks held by getty/5357: 2, on CPU#0: [ 468.483709][ T32] #0: ffff88802f0060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 468.486820][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 468.486875][ T32] locks held by syz.2.1338/9562: 3, on CPU#0: [ 468.486889][ T32] #0: ffff8880792e3970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 468.486945][ T32] #1: ffff888038168460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.486993][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 468.487043][ T32] locks held by syz.2.1338/9565: 3, on CPU#1: [ 468.487056][ T32] #0: ffff88807cedbeb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 468.487102][ T32] #1: ffff888038168460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.487150][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 468.487192][ T32] locks held by syz.0.1681/10655: 3, on CPU#0: [ 468.487205][ T32] #0: ffff888026c21eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 468.487248][ T32] #1: ffff888026b4a460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.487291][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 468.487333][ T32] locks held by syz.0.1681/10656: 3, on CPU#0: [ 468.487344][ T32] #0: ffff888026c21430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 468.487388][ T32] #1: ffff888026b4a460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.487431][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x57/0xd0 [ 468.487471][ T32] locks held by syz-executor/10808: 2, last CPU#0: [ 468.487483][ T32] #0: ffff88807f43c460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 468.487531][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x25/0x1a0 [ 468.487575][ T32] locks held by syz.3.1927/11441: 5, last CPU#1: [ 468.487587][ T32] #0: ffff88802c8109b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 468.487630][ T32] #1: ffff88807a60e460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 468.487673][ T32] #2: ffff88804cc9fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 468.487713][ T32] #3: ffff8880340aab48 (kn->active#88){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 468.487756][ T32] #4: ffffe8ffffd27e68 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 [ 468.487794][ T32] locks held by syz.5.1940/11468: 2, last CPU#1: [ 468.487806][ T32] #0: ffff888038bb7180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 468.487849][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 468.487890][ T32] [ 468.487900][ T32] ============================================= [ 468.487900][ T32] [ 468.487907][ T32] NMI backtrace for cpu 1 [ 468.487920][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 468.487942][ T32] Tainted: [L]=SOFTLOCKUP [ 468.487948][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 468.487958][ T32] Call Trace: [ 468.487964][ T32] [ 468.487971][ T32] dump_stack_lvl+0x100/0x190 [ 468.487995][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 468.488020][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 468.488040][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 468.488066][ T32] sys_info+0x141/0x190 [ 468.488087][ T32] watchdog+0xcb1/0x1030 [ 468.488111][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 468.488130][ T32] ? __pfx_watchdog+0x10/0x10 [ 468.488151][ T32] ? __kthread_parkme+0x18f/0x230 [ 468.488173][ T32] ? kthread+0x13a/0x450 [ 468.488194][ T32] ? __pfx_watchdog+0x10/0x10 [ 468.488212][ T32] kthread+0x373/0x450 [ 468.488234][ T32] ? __pfx_kthread+0x10/0x10 [ 468.488257][ T32] ret_from_fork+0x730/0xd60 [ 468.488276][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 468.488296][ T32] ? __switch_to+0x800/0x10f0 [ 468.488318][ T32] ? __pfx_kthread+0x10/0x10 [ 468.488341][ T32] ret_from_fork_asm+0x1a/0x30 [ 468.488369][ T32] [ 468.488387][ T32] Sending NMI from CPU 1 to CPUs 0: [ 468.488411][ C0] NMI backtrace for cpu 0 [ 468.488423][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.488441][ C0] Tainted: [L]=SOFTLOCKUP [ 468.488446][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 468.488454][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 468.488474][ C0] Code: 84 5a fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 58 fc cd fc eb a2 e8 e1 fc [ 468.488487][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 468.488499][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 468.488511][ C0] RDX: 00000000000003fd RSI: ffffffff85b1c5c0 RDI: ffffffff9bc76fa0 [ 468.488521][ C0] RBP: ffffffff9bc76f60 R08: 0000000000000001 R09: 000000000000001f [ 468.488530][ C0] R10: 0000000000000000 R11: 205d323734313154 R12: 0000000000000000 [ 468.488538][ C0] R13: 0000000000000020 R14: fffffbfff378ee49 R15: dffffc0000000000 [ 468.488548][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 468.488562][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.488572][ C0] CR2: 00007f148fdf3ff8 CR3: 0000000075828000 CR4: 00000000003526f0 [ 468.488581][ C0] Call Trace: [ 468.488586][ C0] [ 468.488592][ C0] wait_for_lsr+0x13a/0x210 [ 468.488613][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 468.488634][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 468.488652][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 468.488670][ C0] serial8250_console_write+0xf46/0x1330 [ 468.488686][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 468.488700][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 468.488717][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 468.488735][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 468.488752][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 468.488766][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 468.488780][ C0] ? do_raw_spin_lock+0xb0/0x260 [ 468.488801][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 468.488819][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 468.488842][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 468.488856][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 468.488872][ C0] nbcon_kthread_func+0x613/0x7d0 [ 468.488888][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 468.488905][ C0] ? __kthread_parkme+0x18f/0x230 [ 468.488922][ C0] ? kthread+0x13a/0x450 [ 468.488939][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 468.488953][ C0] kthread+0x373/0x450 [ 468.488970][ C0] ? __pfx_kthread+0x10/0x10 [ 468.488989][ C0] ret_from_fork+0x730/0xd60 [ 468.489004][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 468.489020][ C0] ? __switch_to+0x800/0x10f0 [ 468.489038][ C0] ? __pfx_kthread+0x10/0x10 [ 468.489057][ C0] ret_from_fork_asm+0x1a/0x30 [ 468.489076][ C0] [ 468.490867][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 469.478036][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 469.488712][ T32] Tainted: [L]=SOFTLOCKUP [ 469.493024][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 469.503060][ T32] Call Trace: [ 469.506322][ T32] [ 469.509235][ T32] dump_stack_lvl+0x100/0x190 [ 469.513904][ T32] vpanic+0x553/0x970 [ 469.517887][ T32] ? __pfx_vpanic+0x10/0x10 [ 469.522377][ T32] panic+0xd1/0xe0 [ 469.526094][ T32] ? __pfx_panic+0x10/0x10 [ 469.530498][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 469.536644][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 469.542786][ T32] ? watchdog.cold+0x1ec/0x234 [ 469.547568][ T32] watchdog.cold+0x1fd/0x234 [ 469.552157][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 469.557954][ T32] ? __pfx_watchdog+0x10/0x10 [ 469.562619][ T32] ? __kthread_parkme+0x18f/0x230 [ 469.567635][ T32] ? kthread+0x13a/0x450 [ 469.571887][ T32] ? __pfx_watchdog+0x10/0x10 [ 469.576549][ T32] kthread+0x373/0x450 [ 469.580605][ T32] ? __pfx_kthread+0x10/0x10 [ 469.585201][ T32] ret_from_fork+0x730/0xd60 [ 469.589777][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 469.594874][ T32] ? __switch_to+0x800/0x10f0 [ 469.599550][ T32] ? __pfx_kthread+0x10/0x10 [ 469.604128][ T32] ret_from_fork_asm+0x1a/0x30 [ 469.608901][ T32] [ 469.612138][ T32] Kernel Offset: disabled [ 469.616441][ T32] Rebooting in 86400 seconds..