last executing test programs: 2m44.379734004s ago: executing program 0 (id=1513): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x80980, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@delchain={0x44, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xf}, {0xb, 0xc}, {0x1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x70}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000280)=""/199, 0xc7}], 0x1, 0xfffffff7, 0x4) 2m43.806609779s ago: executing program 0 (id=1514): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000300)) ioctl$TIOCGICOUNT(r1, 0x5409, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2m39.820890769s ago: executing program 0 (id=1526): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}, 0x2}, {{0x0, 0x0, &(0x7f0000000100)}, 0x2}], 0x2, 0x43, 0x0) 2m39.659696641s ago: executing program 0 (id=1528): write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0xd}, @broadcast, @mcast2}}, 0x34) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300101080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) 2m39.52370037s ago: executing program 0 (id=1531): syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='+ 1 0 1', 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20010020, 0x0) 2m38.16430952s ago: executing program 0 (id=1538): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20080) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) 2m22.537308866s ago: executing program 32 (id=1538): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20080) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) 2m15.82481148s ago: executing program 2 (id=1672): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 2m15.71600071s ago: executing program 2 (id=1675): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m15.56050483s ago: executing program 2 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='!:my_read_msr1 ', 0xf) 2m15.457415586s ago: executing program 2 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4002000}, 0x8000) 2m15.323499543s ago: executing program 2 (id=1680): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x89) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m15.139197648s ago: executing program 2 (id=1682): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x31, 0x0, &(0x7f0000000100)) 2m0.036365041s ago: executing program 33 (id=1682): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x31, 0x0, &(0x7f0000000100)) 1m42.248721383s ago: executing program 5 (id=1830): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x129040, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, 0x0) 1m42.071770456s ago: executing program 5 (id=1833): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xcc, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d282c0a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}]}, 0xcc}], 0x1}, 0x40040) 1m40.235424614s ago: executing program 5 (id=1838): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b00"], 0x88) 1m37.603701327s ago: executing program 1 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x57, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x7530, 0x7530, 0x35, 0x0, @opaque="fa00"/45}}}}}, 0x0) 1m37.46957217s ago: executing program 5 (id=1860): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1m37.445823496s ago: executing program 1 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b900000000da50b9155257d7ad", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000001000)=@ublk_del_dev_sqe) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r6, 0xc0207511, &(0x7f0000000400)={0x0, 0xffff, 0x0, 0x0, r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r1}, 0x94) 1m37.316415194s ago: executing program 5 (id=1864): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x89) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 1m37.184111547s ago: executing program 5 (id=1865): unshare(0x28000600) socket$can_raw(0x1d, 0x3, 0x1) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) unshare(0x8000280) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x6020400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x400, 0x40}, 0x5}, 0x10) 1m36.347589039s ago: executing program 1 (id=1872): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x57, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x7530, 0x7530, 0x35, 0x0, @opaque="fa00"/45}}}}}, 0x0) 1m36.195284403s ago: executing program 1 (id=1874): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xd0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d282c0a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x4}]}, 0xd0}], 0x1}, 0x40040) 1m36.108497203s ago: executing program 1 (id=1876): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x89) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 1m35.86989624s ago: executing program 1 (id=1878): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x5, 0xfd, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x14) 1m22.102851177s ago: executing program 34 (id=1865): unshare(0x28000600) socket$can_raw(0x1d, 0x3, 0x1) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) unshare(0x8000280) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x6020400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x400, 0x40}, 0x5}, 0x10) 1m20.754319037s ago: executing program 35 (id=1878): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x5, 0xfd, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x14) 12.538141418s ago: executing program 3 (id=2430): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) 11.721654486s ago: executing program 3 (id=2437): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x30925) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x3, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 10.066043507s ago: executing program 3 (id=2443): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 6.729631253s ago: executing program 3 (id=2460): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x41595556, 0x9, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x4, 0x3}, {0x81, 0x5}, {0x4, 0x17}], 0x7b, 0x2, 0x8, 0x1}}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) 5.728525072s ago: executing program 6 (id=2467): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @private0}, 0x1c) 5.02363938s ago: executing program 6 (id=2470): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.794585773s ago: executing program 8 (id=2471): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 4.626510799s ago: executing program 7 (id=2472): setns(0xc9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 4.404306725s ago: executing program 4 (id=2474): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4.139810395s ago: executing program 7 (id=2475): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x1000000, @remote, 0x809}, {0xa, 0x8, 0x79, @empty}, 0x2, {[0x0, 0x1, 0x1, 0x2, 0xffffffff, 0x3, 0x40, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) 4.062584569s ago: executing program 3 (id=2476): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) 4.021005136s ago: executing program 4 (id=2477): mmap(&(0x7f000091d000/0x12000)=nil, 0x12000, 0xf, 0x30, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x4003, 0x400, 0x0, {0xa, 0x1000, 0xb9c, @local}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) ioctl(0xffffffffffffffff, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(0xffffffffffffffff, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(0xffffffffffffffff, 0x40140921, &(0x7f0000000440)="0200000001000000") 2.615287595s ago: executing program 3 (id=2478): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket(0x2b, 0x1, 0xa0c7) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x1) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) 2.499909376s ago: executing program 4 (id=2479): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f07010000002a900683749e"], 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x6}) 2.491555844s ago: executing program 7 (id=2480): timer_create(0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 1.741687407s ago: executing program 6 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1.295617441s ago: executing program 4 (id=2482): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f00000003c0)={0x0, 0xc3b1, 0x800, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) 1.17615623s ago: executing program 7 (id=2483): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x13c}}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x14, 0x81, 0x2, 0x0, 0x0, 0x3, 0x1003d}, ["", "", ""]}, 0x1c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="04130d03c9000100c8000104c900"], 0x10) 1.133110342s ago: executing program 8 (id=2484): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x1b, &(0x7f00000000c0)=[{0x6, '\x00', @data=0x7ff, 0x51}]}) 1.123156015s ago: executing program 6 (id=2485): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 1.015752814s ago: executing program 7 (id=2486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xa, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 940.891344ms ago: executing program 8 (id=2487): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 877.765794ms ago: executing program 6 (id=2488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) 667.409534ms ago: executing program 4 (id=2489): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0x1, 0x0, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$kcm(0x29, 0x2, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x1, 0x7, {{0x23, 0x4, 0x3, 0x9, 0x8c, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x3, 0xc3}, @rr={0x7, 0x1b, 0x5f, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @local, @multicast1]}, @noop, @rr={0x7, 0x13, 0xaa, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x7, [{@remote, 0x9}, {@local, 0x2}, {@rand_addr=0x64010100, 0x9}, {@empty, 0x6}, {@broadcast, 0x5}, {@multicast2, 0x9}, {@multicast1, 0xfffffffc}]}, @rr={0x7, 0x7, 0xef, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$inet(0x2, 0x1, 0x6) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000f80)={0x80000000, 0x0, &(0x7f0000000f00)}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) listen(r7, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 666.220702ms ago: executing program 8 (id=2490): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) preadv2(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x5, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 615.757478ms ago: executing program 6 (id=2491): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 557.483952ms ago: executing program 8 (id=2492): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) 452.642528ms ago: executing program 8 (id=2493): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102"], 0x0) 444.963929ms ago: executing program 4 (id=2494): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 0s ago: executing program 7 (id=2495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) kernel console output (not intermixed with test programs): descriptor?? [ 765.366622][ T5725] hub 5-1:0.132: bad descriptor, ignoring hub [ 765.372991][ T5725] hub 5-1:0.132: probe with driver hub failed with error -5 [ 765.383052][ T5725] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input65 [ 765.425128][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 765.454949][ T8069] block nbd9: Possible stuck request ffff888028375080: control (read@0,4096B). Runtime 420 seconds [ 765.574802][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 765.575467][ T9] usb 6-1: New USB device found, idVendor=0413, idProduct=6029, bcdDevice=76.6c [ 765.576627][ T9] usb 6-1: config 9 has an invalid interface number: 143 but max is 2 [ 765.576656][ T9] usb 6-1: config 9 has an invalid interface number: 118 but max is 2 [ 765.576693][ T9] usb 6-1: config 9 has an invalid interface number: 233 but max is 2 [ 765.576717][ T9] usb 6-1: config 9 has no interface number 0 [ 765.576737][ T9] usb 6-1: config 9 has no interface number 1 [ 765.576756][ T9] usb 6-1: config 9 has no interface number 2 [ 765.576809][ T9] usb 6-1: config 9 interface 143 altsetting 41 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 765.576839][ T9] usb 6-1: config 9 interface 143 altsetting 41 has an invalid descriptor for endpoint zero, skipping [ 765.576862][ T9] usb 6-1: config 9 interface 143 altsetting 41 has an invalid descriptor for endpoint zero, skipping [ 765.576885][ T9] usb 6-1: config 9 interface 143 altsetting 41 endpoint 0xA has invalid maxpacket 959, setting to 64 [ 765.576923][ T9] usb 6-1: config 9 interface 118 altsetting 12 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 765.576951][ T9] usb 6-1: config 9 interface 118 altsetting 12 has a duplicate endpoint with address 0x8F, skipping [ 765.576977][ T9] usb 6-1: config 9 interface 118 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 765.577008][ T9] usb 6-1: config 9 interface 233 altsetting 120 has an invalid descriptor for endpoint zero, skipping [ 765.577031][ T9] usb 6-1: config 9 interface 233 altsetting 120 has a duplicate endpoint with address 0xF, skipping [ 765.577055][ T9] usb 6-1: config 9 interface 143 has no altsetting 0 [ 765.577074][ T9] usb 6-1: config 9 interface 118 has no altsetting 0 [ 765.577094][ T9] usb 6-1: config 9 interface 233 has no altsetting 0 [ 765.581508][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.581539][ T9] usb 6-1: Product: syz [ 765.581559][ T9] usb 6-1: Manufacturer: syz [ 765.581577][ T9] usb 6-1: SerialNumber: syz [ 765.725870][ T5725] usb 5-1: USB disconnect, device number 61 [ 765.816954][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 766.184276][ T9] usb 6-1: Interface #143 referenced by multiple IADs [ 766.184338][ T9] usb 6-1: Interface #118 referenced by multiple IADs [ 766.185229][T12035] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 766.474700][ T9] cdc_eem 6-1:9.233: probe with driver cdc_eem failed with error -22 [ 766.490642][ T9] usb 6-1: USB disconnect, device number 2 [ 766.565327][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 766.565367][ T31] audit: type=1400 audit(1787905378.727:624): avc: denied { read write } for pid=12051 comm="syz.4.1718" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 766.568451][ T31] audit: type=1400 audit(1787905378.727:625): avc: denied { open } for pid=12051 comm="syz.4.1718" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 766.571450][ T31] audit: type=1400 audit(1787905378.727:626): avc: denied { ioctl } for pid=12051 comm="syz.4.1718" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 766.775625][ T5809] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 766.925445][ T5809] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 766.937924][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.937966][ T5809] usb 2-1: Product: syz [ 766.938006][ T5809] usb 2-1: Manufacturer: syz [ 766.938024][ T5809] usb 2-1: SerialNumber: syz [ 768.228183][ T5809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 768.283774][ T5809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 769.208364][ T8069] block nbd0: Possible stuck request ffff88802805e000: control (read@0,4096B). Runtime 690 seconds [ 769.839458][ T31] audit: type=1400 audit(1787905381.997:627): avc: denied { read write } for pid=12083 comm="syz.5.1730" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 769.840018][ T31] audit: type=1400 audit(1787905381.997:628): avc: denied { open } for pid=12083 comm="syz.5.1730" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 769.875652][ T5809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 769.965729][T12086] 9p: Bad value for 'rfdno' [ 770.336933][ T30] libceph: connect (1)[c::]:6789 error -101 [ 770.366533][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 770.731899][ T30] libceph: connect (1)[c::]:6789 error -101 [ 770.738500][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 770.855716][T12092] ceph: No mds server is up or the cluster is laggy [ 770.868170][ T31] audit: type=1400 audit(1787905383.027:629): avc: denied { write } for pid=12098 comm="syz.3.1735" name="icmp6" dev="proc" ino=4026533442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 771.714826][T12113] sit0: left promiscuous mode [ 771.781479][T12113] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.781876][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.848259][ T5809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 771.848713][ T5809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 771.848754][ T5809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 771.849757][ T5809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 772.104817][ T5809] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 772.200203][ T5809] usb 2-1: USB disconnect, device number 63 [ 772.635516][ T5809] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 772.693759][T12113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.711229][T12113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.784857][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 772.785454][ T5809] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 772.790233][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.790257][ T5809] usb 2-1: Product: syz [ 772.790270][ T5809] usb 2-1: Manufacturer: syz [ 772.790283][ T5809] usb 2-1: SerialNumber: syz [ 773.058165][ T5809] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 773.058217][ T5809] usb 2-1: MIDIStreaming interface descriptor not found [ 773.174963][ T5809] usb 2-1: USB disconnect, device number 64 [ 773.655609][ T31] audit: type=1400 audit(1787905385.807:630): avc: denied { mount } for pid=12123 comm="syz.4.1742" name="/" dev="autofs" ino=52974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 773.695544][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.695607][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.695635][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.695660][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.826079][ T4919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 773.833102][ T4919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 773.835769][ T4919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 773.836464][ T4919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 773.836957][ T4919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 774.416743][ T31] audit: type=1400 audit(1787905386.537:631): avc: denied { setopt } for pid=12136 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 774.802870][ T5599] syz_tun (unregistering): left allmulticast mode [ 775.106303][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 775.256797][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 775.260277][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 775.262631][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 775.262654][ T9] usb 6-1: config 0 has no interface number 0 [ 775.262684][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 775.262706][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 775.263897][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 775.263918][ T9] usb 6-1: Product: syz [ 775.263932][ T9] usb 6-1: SerialNumber: syz [ 775.266790][ T9] usb 6-1: config 0 descriptor?? [ 775.333312][ T9] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 775.341669][T12129] wlan0 speed is unknown, defaulting to 1000 [ 775.347221][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input66 [ 775.697447][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 775.704857][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 775.791732][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.799215][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.806958][T12129] bridge_slave_0: entered allmulticast mode [ 775.816185][T12129] bridge_slave_0: entered promiscuous mode [ 775.826024][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.833375][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.840548][T12129] bridge_slave_1: entered allmulticast mode [ 775.849001][T12129] bridge_slave_1: entered promiscuous mode [ 775.854937][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 775.855668][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 775.856513][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.880899][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 775.922310][T12129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.926266][ T5602] Bluetooth: hci6: command tx timeout [ 775.943356][T12129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.991049][ C0] cm109_urb_ctl_callback: 5 callbacks suppressed [ 775.991088][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.991375][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.991555][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.991734][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.991914][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.992101][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.992278][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.992457][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.992635][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.992823][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 775.997892][ T30] usb 6-1: USB disconnect, device number 3 [ 775.997889][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 776.006675][T12129] team0: Port device team_slave_0 added [ 776.108752][T12129] team0: Port device team_slave_1 added [ 776.131851][ T30] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 776.161033][T12129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.161080][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.161119][T12129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.213585][T12129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.213608][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.213629][T12129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.928734][T12173] overlayfs: missing 'lowerdir' [ 777.297025][T12142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.311227][ T9] gspca_nw80x: reg_r err -110 [ 777.311311][ T9] nw80x 4-1:3.0: probe with driver nw80x failed with error -110 [ 777.355741][ T25] usb 4-1: USB disconnect, device number 79 [ 777.475813][T12129] hsr_slave_0: entered promiscuous mode [ 777.476536][T12129] hsr_slave_1: entered promiscuous mode [ 777.476975][T12129] debugfs: 'hsr0' already exists in 'hsr' [ 777.476990][T12129] Cannot create hsr debugfs directory [ 777.632064][T11180] block nbd11: Possible stuck request ffff8880283ce000: control (read@0,4096B). Runtime 420 seconds [ 777.632132][ T8069] block nbd5: Possible stuck request ffff8880281c5080: control (read@0,4096B). Runtime 450 seconds [ 777.804848][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 777.956403][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 777.968441][ T9] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.968475][ T9] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 777.968505][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 778.002983][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 778.003021][ T9] usb 2-1: Product: syz [ 778.003055][ T9] usb 2-1: Manufacturer: syz [ 778.003070][ T9] usb 2-1: SerialNumber: syz [ 778.005163][ T5602] Bluetooth: hci6: command tx timeout [ 778.037917][ T9] usb 2-1: config 0 descriptor?? [ 778.043491][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 778.066818][ T9] usb 2-1: selecting invalid altsetting 0 [ 778.286113][ T25] usb 2-1: USB disconnect, device number 65 [ 778.308471][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 778.331975][ T9] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 778.431128][ T31] audit: type=1400 audit(1787905390.587:632): avc: denied { mount } for pid=12186 comm="syz.4.1753" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 778.511247][T12129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 778.526801][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.535190][T12129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 778.575157][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.585197][T12129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 778.609303][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.617619][T12129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 778.631253][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.733362][T12129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.824020][T12187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 778.872970][T12129] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.903705][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.903803][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.910416][ T31] audit: type=1400 audit(1787905391.057:633): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 778.951907][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.951990][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.087166][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 779.184992][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 779.271025][T12212] vlan2: entered allmulticast mode [ 779.271067][T12212] bridge1: entered allmulticast mode [ 779.272231][ T31] audit: type=1400 audit(1787905391.427:634): avc: denied { create } for pid=12202 comm="syz.4.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 779.298944][ T31] audit: type=1400 audit(1787905391.447:635): avc: denied { setopt } for pid=12202 comm="syz.4.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 779.377349][T12209] bridge1: port 1(erspan0) entered blocking state [ 779.377442][T12209] bridge1: port 1(erspan0) entered disabled state [ 779.377543][T12209] erspan0: entered allmulticast mode [ 779.382526][T12209] erspan0: entered promiscuous mode [ 779.385138][T12209] bridge1: port 1(erspan0) entered blocking state [ 779.385219][T12209] bridge1: port 1(erspan0) entered forwarding state [ 779.489874][T12212] bridge1: port 1(erspan0) entered disabled state [ 779.504620][T12212] erspan0: left allmulticast mode [ 779.504669][T12212] erspan0: left promiscuous mode [ 779.504935][T12212] bridge1: port 1(erspan0) entered disabled state [ 779.624107][ T31] audit: type=1400 audit(1787905391.777:636): avc: denied { firmware_load } for pid=12202 comm="syz.4.1761" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 779.679809][T12212] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.679971][T12212] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.573342][ T5602] Bluetooth: hci6: command tx timeout [ 780.749312][T12212] bridge_slave_0: left allmulticast mode [ 780.749357][T12212] bridge_slave_0: left promiscuous mode [ 780.749504][T12212] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.771465][T12212] bridge_slave_1: left allmulticast mode [ 780.771526][T12212] bridge_slave_1: left promiscuous mode [ 780.771917][T12212] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.802378][T12212] bond0: (slave bond_slave_0): Releasing backup interface [ 780.822339][T12212] bond0: (slave bond_slave_1): Releasing backup interface [ 780.846152][T12212] team0: Port device team_slave_0 removed [ 780.862549][T12212] team0: Port device team_slave_1 removed [ 780.870471][T12212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.878318][T12212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.899423][T12212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.908214][T12212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.939746][T12212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 781.446755][T11180] block nbd3: Possible stuck request ffff888028110000: control (read@0,1024B). Runtime 480 seconds [ 781.446808][T11180] block nbd3: Possible stuck request ffff8880281101c0: control (read@1024,1024B). Runtime 480 seconds [ 781.446829][T11180] block nbd3: Possible stuck request ffff888028110380: control (read@2048,1024B). Runtime 480 seconds [ 781.446847][T11180] block nbd3: Possible stuck request ffff888028110540: control (read@3072,1024B). Runtime 480 seconds [ 781.446878][ T8069] block nbd1: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 540 seconds [ 781.446902][ T8069] block nbd1: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 540 seconds [ 781.446923][ T8069] block nbd1: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 540 seconds [ 781.446943][ T8069] block nbd1: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 540 seconds [ 781.674834][T12223] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 781.829184][T12223] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 781.830079][T12223] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 781.830100][T12223] usb 5-1: config 1 has no interface number 0 [ 781.830132][T12223] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 781.830155][T12223] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 781.830177][T12223] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.831739][T12223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.831781][T12223] usb 5-1: Product: syz [ 781.831794][T12223] usb 5-1: Manufacturer: syz [ 781.831807][T12223] usb 5-1: SerialNumber: syz [ 781.853728][T12242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 781.921458][T12129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.076089][T12223] usb 5-1: Error in usbnet_get_endpoints (-71) [ 782.096901][T12223] usb 5-1: USB disconnect, device number 62 [ 782.151164][ T8063] block nbd2: Possible stuck request ffff8880280be000: control (read@0,4096B). Runtime 540 seconds [ 782.654786][ T5602] Bluetooth: hci6: command tx timeout [ 782.728299][ T8063] block nbd6: Possible stuck request ffff888028235080: control (read@0,1024B). Runtime 450 seconds [ 782.728354][ T8063] block nbd6: Possible stuck request ffff888028235240: control (read@1024,1024B). Runtime 450 seconds [ 782.728390][ T8063] block nbd6: Possible stuck request ffff888028235400: control (read@2048,1024B). Runtime 450 seconds [ 782.728417][ T8063] block nbd6: Possible stuck request ffff8880282355c0: control (read@3072,1024B). Runtime 450 seconds [ 782.821186][T12263] 9p: Bad value for 'rfdno' [ 782.937246][T11964] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 783.006945][T12129] veth0_vlan: entered promiscuous mode [ 783.023127][T11964] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 783.026817][T12129] veth1_vlan: entered promiscuous mode [ 783.463501][T12129] veth0_macvtap: entered promiscuous mode [ 783.582088][T12129] veth1_macvtap: entered promiscuous mode [ 783.970506][T12129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.984206][T12129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.094345][ T31] audit: type=1400 audit(1787905396.247:637): avc: denied { write } for pid=12273 comm="syz.1.1776" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 784.136177][ T6989] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.136232][ T6989] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.136273][ T6989] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.136306][ T6989] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.246278][ T31] audit: type=1400 audit(1787905396.407:638): avc: denied { create } for pid=12273 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 784.270905][ T31] audit: type=1400 audit(1787905396.427:639): avc: denied { bind } for pid=12273 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 784.344461][ T31] audit: type=1400 audit(1787905396.497:640): avc: denied { listen } for pid=12273 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 784.493381][ T31] audit: type=1400 audit(1787905396.597:641): avc: denied { read } for pid=12275 comm="syz.5.1777" name="dynamic_events" dev="tracefs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 784.541813][ T31] audit: type=1400 audit(1787905396.667:642): avc: denied { write } for pid=12273 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 784.842716][ T31] audit: type=1400 audit(1787905396.997:643): avc: denied { read } for pid=12273 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 784.888502][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.888540][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.070858][ T6989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.070906][ T6989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.708148][T12301] 9p: Bad value for 'rfdno' [ 785.972803][ T31] audit: type=1400 audit(1787905398.127:644): avc: denied { name_bind } for pid=12313 comm="syz.4.1789" path="socket:[54562]" dev="sockfs" ino=54562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 785.998934][ T31] audit: type=1400 audit(1787905398.167:645): avc: denied { name_bind } for pid=12313 comm="syz.4.1789" path="socket:[54561]" dev="sockfs" ino=54561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 786.054836][T12223] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 786.206293][T12223] usb 6-1: Using ep0 maxpacket: 32 [ 786.212061][T12223] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 786.691902][T12223] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.691948][T12223] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.717424][T12223] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 786.717466][T12223] usb 6-1: Product: syz [ 786.717494][T12223] usb 6-1: Manufacturer: syz [ 786.720269][T11963] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 786.754921][T12223] hub 6-1:4.0: USB hub found [ 786.755186][T11963] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.988200][T12223] hub 6-1:4.0: 2 ports detected [ 787.001059][T12334] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1795'. [ 787.116215][T12337] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 787.209677][T12223] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 787.364951][T12223] usb 6-1: USB disconnect, device number 4 [ 788.285722][T12359] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 788.316855][ T31] audit: type=1400 audit(1787905400.477:646): avc: denied { ioctl } for pid=12357 comm="syz.1.1804" path="/364/dev/md0" dev="devtmpfs" ino=4121 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 788.422605][ T1574] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 788.432234][ T1574] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 788.444866][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 788.596758][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 788.600845][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 788.605117][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 788.605143][ T9] usb 5-1: config 0 has no interface number 0 [ 788.605174][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 788.605198][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 788.609331][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 788.609354][ T9] usb 5-1: Product: syz [ 788.609367][ T9] usb 5-1: SerialNumber: syz [ 788.655957][ T9] usb 5-1: config 0 descriptor?? [ 788.666568][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 788.680201][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input67 [ 788.694982][T12359] md/raid10:md0: not clean -- starting background reconstruction [ 788.695022][T12359] md/raid10:md0: active with 1 out of 2 devices [ 788.695970][T12359] md0: detected capacity change from 0 to 2048 [ 788.698720][T11964] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 788.717707][T11964] hid-generic 0000:0000:0000.0027: hidraw1: HID v0.00 Device [syz1] on syz0 [ 788.796596][T12377] md: resync of RAID array md0 [ 788.919517][T12377] md: md0: resync done. [ 789.035173][T12383] md: recover of RAID array md0 [ 789.093635][T12383] md: md0: recover done. [ 789.094196][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 789.132182][T12392] bridge_slave_0: left allmulticast mode [ 789.138009][T12392] bridge_slave_0: left promiscuous mode [ 789.143895][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.164321][T12392] bridge_slave_1: left allmulticast mode [ 789.170879][T12392] bridge_slave_1: left promiscuous mode [ 789.176926][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.201567][T12392] bond0: (slave bond_slave_0): Releasing backup interface [ 789.247890][T12392] bond0: (slave bond_slave_1): Releasing backup interface [ 789.641432][T12392] team0: Port device team_slave_0 removed [ 789.765548][ T11] block nbd8: Possible stuck request ffff888028295080: control (read@0,1024B). Runtime 450 seconds [ 789.765598][ T11] block nbd8: Possible stuck request ffff888028295240: control (read@1024,1024B). Runtime 450 seconds [ 789.765634][ T11] block nbd8: Possible stuck request ffff888028295400: control (read@2048,1024B). Runtime 450 seconds [ 789.765660][ T11] block nbd8: Possible stuck request ffff8880282955c0: control (read@3072,1024B). Runtime 450 seconds [ 789.765849][T12392] team0: Port device team_slave_1 removed [ 789.846799][T12392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.846837][T12392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.963981][T12392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.964028][T12392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.092261][T12392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 790.450288][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 790.880757][T12414] jffs2: notice: (12414) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 790.977971][T12421] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 791.014956][T12421] md: couldn't update array info. -22 [ 791.095461][T12421] md: could not open device unknown-block(1,1). [ 791.095531][T12421] md: md_import_device returned -16 [ 791.168720][T12421] md: could not open device unknown-block(1,2). [ 791.168807][T12421] md: md_import_device returned -16 [ 791.216957][ T1574] usb 5-1: USB disconnect, device number 63 [ 791.246815][ T1574] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 791.685567][ T11] block nbd4: Possible stuck request ffff888028180000: control (read@0,1024B). Runtime 480 seconds [ 791.685614][ T11] block nbd4: Possible stuck request ffff8880281801c0: control (read@1024,1024B). Runtime 480 seconds [ 791.685648][ T11] block nbd4: Possible stuck request ffff888028180380: control (read@2048,1024B). Runtime 480 seconds [ 791.685671][ T11] block nbd4: Possible stuck request ffff888028180540: control (read@3072,1024B). Runtime 480 seconds [ 793.565114][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 793.944031][ T1574] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 793.967785][T12466] md: couldn't update array info. -22 [ 793.993597][T12469] md: could not open device unknown-block(1,1). [ 793.993660][T12469] md: md_import_device returned -16 [ 794.005461][T12466] md: could not open device unknown-block(1,2). [ 794.005505][T12466] md: md_import_device returned -16 [ 794.099464][ T1574] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 794.100339][ T1574] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 794.100361][ T1574] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.100377][ T1574] usb 6-1: config 0 has no interface number 0 [ 794.100405][ T1574] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 794.100436][ T1574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.108236][ T1574] usb 6-1: config 0 descriptor?? [ 794.116381][ T1574] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 794.245524][ T8063] block nbd12: Possible stuck request ffff888028437000: control (read@0,4096B). Runtime 390 seconds [ 794.257624][ T8069] block nbd7: Possible stuck request ffff88802825e000: control (read@0,1024B). Runtime 450 seconds [ 794.257662][ T8069] block nbd7: Possible stuck request ffff88802825e1c0: control (read@1024,1024B). Runtime 450 seconds [ 794.257685][ T8069] block nbd7: Possible stuck request ffff88802825e380: control (read@2048,1024B). Runtime 450 seconds [ 794.257706][ T8069] block nbd7: Possible stuck request ffff88802825e540: control (read@3072,1024B). Runtime 450 seconds [ 794.301606][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 794.301647][ T31] audit: type=1400 audit(1787905406.407:648): avc: denied { write } for pid=12471 comm="syz.1.1844" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 794.338227][ T31] audit: type=1400 audit(1787905406.497:649): avc: denied { bind } for pid=12452 comm="syz.5.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 794.339597][ T1574] usb 6-1: USB disconnect, device number 5 [ 794.460633][ T31] audit: type=1400 audit(1787905406.617:650): avc: denied { sqpoll } for pid=12483 comm="syz.6.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 795.526307][ T8069] block nbd9: Possible stuck request ffff888028375080: control (read@0,4096B). Runtime 450 seconds [ 796.004883][ T31] audit: type=1400 audit(1787905408.157:651): avc: denied { ioctl } for pid=12511 comm="syz.6.1859" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 796.004946][ T31] audit: type=1400 audit(1787905408.157:652): avc: denied { set_context_mgr } for pid=12511 comm="syz.6.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 798.165824][ T31] audit: type=1400 audit(1787905410.317:653): avc: denied { cmd } for pid=12560 comm="syz.3.1880" path="socket:[55486]" dev="sockfs" ino=55486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 798.833262][T12577] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 798.865548][T12577] md: couldn't update array info. -22 [ 798.925578][T12577] md: could not open device unknown-block(1,1). [ 798.925648][T12577] md: md_import_device returned -16 [ 798.976684][T12577] md: could not open device unknown-block(1,2). [ 798.976757][T12577] md: md_import_device returned -16 [ 799.421186][ T8069] block nbd0: Possible stuck request ffff88802805e000: control (read@0,4096B). Runtime 720 seconds [ 799.579702][T12597] No source specified [ 800.283620][T12629] No source specified [ 800.687509][ T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 800.847469][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 800.856724][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 800.888198][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.927181][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 800.927227][ T9] pvrusb2: ********** [ 800.932016][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 800.932029][ T9] pvrusb2: Important functionality might not be entirely working. [ 800.932037][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 800.932045][ T9] pvrusb2: ********** [ 801.008667][ T31] audit: type=1400 audit(1787905413.167:654): avc: denied { write } for pid=12653 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 801.165252][ T2352] pvrusb2: Invalid write control endpoint [ 801.388610][ T2352] pvrusb2: Invalid write control endpoint [ 801.401958][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 801.423056][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 801.423099][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 801.423111][ T2352] pvrusb2: Device being rendered inoperable [ 801.462543][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 801.462599][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 801.462978][ T5732] usb 4-1: USB disconnect, device number 80 [ 801.484980][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 801.498079][ T2352] pvrusb2: Attached sub-driver cx25840 [ 801.504121][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 801.514356][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 801.640380][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 801.643149][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 801.643177][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.643193][ T9] usb 5-1: config 0 has no interface number 0 [ 801.643222][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 801.643255][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.645371][ T9] usb 5-1: config 0 descriptor?? [ 801.651691][ T9] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 801.868530][ T9] usb 5-1: USB disconnect, device number 64 [ 803.069304][T12696] input: syz0 as /devices/virtual/input/input68 [ 803.215890][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.215951][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.244836][ T25] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 803.395371][ T25] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 803.396183][ T25] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 803.396219][ T25] usb 4-1: config 127 has no interface number 0 [ 803.396252][ T25] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 803.398297][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.398319][ T25] usb 4-1: Product: syz [ 803.398332][ T25] usb 4-1: Manufacturer: syz [ 803.398346][ T25] usb 4-1: SerialNumber: syz [ 803.401216][T12694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 803.674430][ T5602] Bluetooth: hci4: Malformed Event: 0x2f [ 804.181379][ T25] asix 4-1:127.57: probe with driver asix failed with error -71 [ 804.194847][ T25] usb 4-1: USB disconnect, device number 81 [ 804.844844][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 804.998358][ T25] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 804.999325][ T25] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 804.999347][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.999363][ T25] usb 7-1: config 0 has no interface number 0 [ 804.999392][ T25] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.999424][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.001676][ T25] usb 7-1: config 0 descriptor?? [ 805.013888][ T25] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 805.278588][ T31] audit: type=1400 audit(1787905417.437:655): avc: denied { listen } for pid=12709 comm="syz.6.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 805.303219][ T25] usb 7-1: USB disconnect, device number 2 [ 806.415417][ T25] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 806.565447][ T25] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 806.566347][ T25] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 806.566387][ T25] usb 4-1: config 1 has no interface number 0 [ 806.566424][ T25] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 806.566453][ T25] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 806.566482][ T25] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.568927][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.568950][ T25] usb 4-1: Product: syz [ 806.568963][ T25] usb 4-1: Manufacturer: syz [ 806.568976][ T25] usb 4-1: SerialNumber: syz [ 806.611123][T12752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 806.688641][T12762] wlan0 speed is unknown, defaulting to 1000 [ 806.856341][ T25] usb 4-1: Error in usbnet_get_endpoints (-71) [ 806.873971][ T25] usb 4-1: USB disconnect, device number 82 [ 806.971128][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'. [ 807.685979][T11180] block nbd5: Possible stuck request ffff8880281c5080: control (read@0,4096B). Runtime 480 seconds [ 807.686048][ T8069] block nbd11: Possible stuck request ffff8880283ce000: control (read@0,4096B). Runtime 450 seconds [ 807.972544][T12784] binder: 12777:12784 ioctl 4018620d 0 returned -22 [ 811.527205][T11180] block nbd1: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 570 seconds [ 811.527254][T11180] block nbd1: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 570 seconds [ 811.527282][T11180] block nbd1: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 570 seconds [ 811.527302][T11180] block nbd1: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 570 seconds [ 811.527622][ T8069] block nbd3: Possible stuck request ffff888028110000: control (read@0,1024B). Runtime 510 seconds [ 811.527649][ T8069] block nbd3: Possible stuck request ffff8880281101c0: control (read@1024,1024B). Runtime 510 seconds [ 811.527674][ T8069] block nbd3: Possible stuck request ffff888028110380: control (read@2048,1024B). Runtime 510 seconds [ 811.527703][ T8069] block nbd3: Possible stuck request ffff888028110540: control (read@3072,1024B). Runtime 510 seconds [ 811.603256][ T4919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 811.618941][ T4919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 811.632874][ T4919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 811.636241][ T4919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 811.636626][ T4919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 812.175936][ T8063] block nbd2: Possible stuck request ffff8880280be000: control (read@0,4096B). Runtime 570 seconds [ 812.244883][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 812.406613][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 812.416912][ T9] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 812.416949][ T9] usb 7-1: config 1 has no interface number 0 [ 812.416996][ T9] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 812.417023][ T9] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 812.417050][ T9] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.467267][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.479076][ T9] usb 7-1: Product: syz [ 812.479120][ T9] usb 7-1: Manufacturer: syz [ 812.479139][ T9] usb 7-1: SerialNumber: syz [ 812.498812][T12820] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 812.734877][ T9] usb 7-1: Error in usbnet_get_endpoints (-71) [ 812.750571][ T9] usb 7-1: USB disconnect, device number 3 [ 812.825072][ T8063] block nbd6: Possible stuck request ffff888028235080: control (read@0,1024B). Runtime 480 seconds [ 812.835916][ T8063] block nbd6: Possible stuck request ffff888028235240: control (read@1024,1024B). Runtime 480 seconds [ 812.835948][ T8063] block nbd6: Possible stuck request ffff888028235400: control (read@2048,1024B). Runtime 480 seconds [ 812.835971][ T8063] block nbd6: Possible stuck request ffff8880282355c0: control (read@3072,1024B). Runtime 480 seconds [ 812.868592][ T31] audit: type=1400 audit(1787905425.017:656): avc: denied { read } for pid=12835 comm="syz.3.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 812.909842][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 812.915770][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 812.919393][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 812.921276][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 812.921997][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 812.967574][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.150188][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.461156][ T25] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 813.462167][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.487139][ T25] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.500717][T12810] wlan0 speed is unknown, defaulting to 1000 [ 813.657507][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.764831][ T4919] Bluetooth: hci1: command tx timeout [ 813.849231][T12869] MTRR 1 not used [ 813.874888][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 814.036142][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 814.041888][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.054282][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.065129][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.081541][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.081587][ T9] usb 4-1: Product: syz [ 814.081616][ T9] usb 4-1: Manufacturer: syz [ 814.081635][ T9] usb 4-1: SerialNumber: syz [ 814.131613][ T9] usb 4-1: 0:2 : does not exist [ 814.219715][T12837] wlan0 speed is unknown, defaulting to 1000 [ 814.338940][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 814.416451][ T9] usb 4-1: USB disconnect, device number 83 [ 814.631243][ T12] bond0 (unregistering): Released all slaves [ 815.044792][ T4919] Bluetooth: hci5: command tx timeout [ 815.475349][T12810] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.475452][T12810] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.475592][T12810] bridge_slave_0: entered allmulticast mode [ 815.501474][T12810] bridge_slave_0: entered promiscuous mode [ 815.610667][T12810] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.610744][T12810] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.610871][T12810] bridge_slave_1: entered allmulticast mode [ 815.642534][T12810] bridge_slave_1: entered promiscuous mode [ 815.719166][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.721492][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.858243][ T4919] Bluetooth: hci1: command tx timeout [ 816.032028][T12120] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 816.110329][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 816.486599][T12120] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 816.547767][ T12] hsr_slave_0: left promiscuous mode [ 816.592992][ T12] hsr_slave_1: left promiscuous mode [ 816.626013][ T12] veth1_macvtap: left promiscuous mode [ 816.637609][ T12] veth0_macvtap: left promiscuous mode [ 816.643326][ T12] veth1_vlan: left promiscuous mode [ 816.650467][ T12] veth0_vlan: left promiscuous mode [ 816.880193][ T1574] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 817.046662][ T1574] usb 7-1: device descriptor read/64, error -71 [ 817.124778][ T4919] Bluetooth: hci5: command tx timeout [ 817.176616][ T31] audit: type=1400 audit(1787905429.337:657): avc: denied { write } for pid=12919 comm="syz.3.2000" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 817.206008][T12921] CacheFiles: No cache directory specified [ 817.284868][ T1574] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 817.414782][ T1574] usb 7-1: device descriptor read/64, error -71 [ 817.527318][ T1574] usb usb7-port1: attempt power cycle [ 817.925736][ T4919] Bluetooth: hci1: command tx timeout [ 817.925894][ T1574] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 817.978493][ T1574] usb 7-1: device descriptor read/8, error -71 [ 818.216848][ T1574] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 818.235290][ T1574] usb 7-1: device descriptor read/8, error -71 [ 818.310387][T12810] team0: Port device team_slave_0 added [ 818.342228][T12810] team0: Port device team_slave_1 added [ 818.345889][ T1574] usb usb7-port1: unable to enumerate USB device [ 818.429469][T12934] jffs2: notice: (12934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 818.459834][ T31] audit: type=1400 audit(1787905430.617:658): avc: denied { create } for pid=12935 comm="syz.4.2007" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 818.483963][ T31] audit: type=1400 audit(1787905430.637:659): avc: denied { write } for pid=12935 comm="syz.4.2007" name="file0" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 818.484010][ T31] audit: type=1400 audit(1787905430.637:660): avc: denied { open } for pid=12935 comm="syz.4.2007" path="/433/file0" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 818.552452][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.559790][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.586142][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.598771][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.605885][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.632468][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.762553][T12810] hsr_slave_0: entered promiscuous mode [ 818.764107][T12810] hsr_slave_1: entered promiscuous mode [ 818.766863][T12810] debugfs: 'hsr0' already exists in 'hsr' [ 818.766883][T12810] Cannot create hsr debugfs directory [ 818.976212][T12837] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.976751][T12837] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.976855][T12837] bridge_slave_0: entered allmulticast mode [ 818.978307][T12837] bridge_slave_0: entered promiscuous mode [ 818.987958][T12837] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.988076][T12837] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.988179][T12837] bridge_slave_1: entered allmulticast mode [ 818.989773][T12837] bridge_slave_1: entered promiscuous mode [ 819.033085][T12837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.050882][T12837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.087625][T12837] team0: Port device team_slave_0 added [ 819.099921][T12837] team0: Port device team_slave_1 added [ 819.146409][T12837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.146443][T12837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.146465][T12837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.149895][T12837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.149912][T12837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.149932][T12837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.204914][ T4919] Bluetooth: hci5: command tx timeout [ 819.207120][T12837] hsr_slave_0: entered promiscuous mode [ 819.207890][T12837] hsr_slave_1: entered promiscuous mode [ 819.208351][T12837] debugfs: 'hsr0' already exists in 'hsr' [ 819.208366][T12837] Cannot create hsr debugfs directory [ 819.313366][ T31] audit: type=1400 audit(1787905431.467:661): avc: denied { unlink } for pid=5600 comm="syz-executor" name="file0" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 819.517029][T12956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 819.568049][T12956] md: couldn't update array info. -22 [ 819.648163][T12956] md: could not open device unknown-block(1,1). [ 819.648252][T12956] md: md_import_device returned -16 [ 819.693741][T12956] md: could not open device unknown-block(1,2). [ 819.693828][T12956] md: md_import_device returned -16 [ 819.845026][ T8063] block nbd8: Possible stuck request ffff888028295080: control (read@0,1024B). Runtime 480 seconds [ 819.845075][ T8063] block nbd8: Possible stuck request ffff888028295240: control (read@1024,1024B). Runtime 480 seconds [ 819.845122][ T8063] block nbd8: Possible stuck request ffff888028295400: control (read@2048,1024B). Runtime 480 seconds [ 819.845149][ T8063] block nbd8: Possible stuck request ffff8880282955c0: control (read@3072,1024B). Runtime 480 seconds [ 819.894525][T12965] jffs2: notice: (12965) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 820.004822][ T4919] Bluetooth: hci1: command tx timeout [ 821.284754][ T4919] Bluetooth: hci5: command tx timeout [ 821.765232][ T8063] block nbd4: Possible stuck request ffff888028180000: control (read@0,1024B). Runtime 510 seconds [ 821.765280][ T8063] block nbd4: Possible stuck request ffff8880281801c0: control (read@1024,1024B). Runtime 510 seconds [ 821.765315][ T8063] block nbd4: Possible stuck request ffff888028180380: control (read@2048,1024B). Runtime 510 seconds [ 821.765341][ T8063] block nbd4: Possible stuck request ffff888028180540: control (read@3072,1024B). Runtime 510 seconds [ 821.812636][T12941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.876706][T12965] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 821.901792][T12810] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 821.953603][T12810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.954279][T12810] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 822.019800][T12810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.020538][T12810] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 822.122808][T12810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.130232][T12837] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 822.186441][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.197387][T12837] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 822.234107][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.244914][T12810] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 822.312406][T12810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.346192][T12837] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 822.410175][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.571242][T12837] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 822.591459][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.337088][T12810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.325251][ T8063] block nbd12: Possible stuck request ffff888028437000: control (read@0,4096B). Runtime 420 seconds [ 824.336245][ T8069] block nbd7: Possible stuck request ffff88802825e000: control (read@0,1024B). Runtime 480 seconds [ 824.347141][ T8069] block nbd7: Possible stuck request ffff88802825e1c0: control (read@1024,1024B). Runtime 480 seconds [ 824.347171][ T8069] block nbd7: Possible stuck request ffff88802825e380: control (read@2048,1024B). Runtime 480 seconds [ 824.347193][ T8069] block nbd7: Possible stuck request ffff88802825e540: control (read@3072,1024B). Runtime 480 seconds [ 824.422029][T12810] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.452230][T12837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.471499][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.471606][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.498831][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.498938][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.566508][T12837] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.589943][T13028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 824.603097][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.603209][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.620538][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.620631][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.706819][T13028] md: couldn't update array info. -22 [ 824.745340][T13028] md: could not open device unknown-block(1,1). [ 824.745407][T13028] md: md_import_device returned -16 [ 825.885858][ T8069] block nbd9: Possible stuck request ffff888028375080: control (read@0,4096B). Runtime 480 seconds [ 826.316469][T12837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.533278][T12810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.625380][ T25] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 826.747718][T12837] veth0_vlan: entered promiscuous mode [ 826.760249][T12837] veth1_vlan: entered promiscuous mode [ 826.787424][ T25] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 826.797749][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 826.797786][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.797818][ T25] usb 4-1: config 0 has no interface number 0 [ 826.797853][ T25] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 826.797891][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.846509][ T25] usb 4-1: config 0 descriptor?? [ 826.854435][ T25] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 826.875261][T12837] veth0_macvtap: entered promiscuous mode [ 827.051526][T12837] veth1_macvtap: entered promiscuous mode [ 827.068074][ T1574] usb 4-1: USB disconnect, device number 84 [ 827.550355][T12837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.561562][T12837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.628604][ T276] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.645792][ T7493] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.765259][ T7493] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.765332][ T7493] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.776634][T12810] veth0_vlan: entered promiscuous mode [ 827.828266][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2034'. [ 827.832409][T12810] veth1_vlan: entered promiscuous mode [ 828.080939][ T276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.080988][ T276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.128828][T12810] veth0_macvtap: entered promiscuous mode [ 828.158175][T12810] veth1_macvtap: entered promiscuous mode [ 828.188669][ T7493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.188737][ T7493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.219460][T12810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.241105][T12810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.183381][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.183519][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.183604][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.236248][ T7493] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.389224][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.389262][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.453755][ T8069] block nbd0: Possible stuck request ffff88802805e000: control (read@0,4096B). Runtime 750 seconds [ 829.517702][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.517762][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.022511][T13127] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2049'. [ 830.022553][T13127] openvswitch: netlink: Flow key attr not present in new flow. [ 830.044859][ T5732] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 831.076409][ T5732] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 831.080126][ T5732] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 831.080151][ T5732] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.080166][ T5732] usb 5-1: config 0 has no interface number 0 [ 831.080196][ T5732] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 831.080228][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.089074][ T5732] usb 5-1: config 0 descriptor?? [ 831.116904][ T5732] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 831.320956][T12223] usb 5-1: USB disconnect, device number 65 [ 833.341332][T13166] CacheFiles: No cache directory specified [ 835.622257][ T31] audit: type=1400 audit(1787905447.777:662): avc: denied { bind } for pid=13178 comm="syz.3.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 836.174826][T12223] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 836.584766][T12223] usb 8-1: Using ep0 maxpacket: 16 [ 836.586528][T12223] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 836.591659][T12223] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.592622][T12223] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.592682][T12223] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 836.592818][T12223] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.668720][T12223] usb 8-1: config 0 descriptor?? [ 837.814673][T11180] block nbd11: Possible stuck request ffff8880283ce000: control (read@0,4096B). Runtime 480 seconds [ 837.815060][ T8069] block nbd5: Possible stuck request ffff8880281c5080: control (read@0,4096B). Runtime 510 seconds [ 838.030278][T13221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 838.032583][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032610][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032628][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032646][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032665][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032684][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032703][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032721][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032739][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.032757][T12223] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 838.061232][T12223] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.002A/input/input70 [ 838.172208][T12223] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 838.372749][T12120] usb 8-1: USB disconnect, device number 2 [ 838.687325][T13257] jffs2: notice: (13257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 838.731790][ T31] audit: type=1400 audit(1787905450.887:663): avc: denied { write } for pid=13256 comm="syz.3.2089" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 838.754356][ T31] audit: type=1400 audit(1787905450.907:664): avc: denied { add_name } for pid=13256 comm="syz.3.2089" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 838.775886][ T31] audit: type=1400 audit(1787905450.937:665): avc: denied { create } for pid=13256 comm="syz.3.2089" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 838.845763][ T1574] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 839.203887][ T1574] usb 7-1: Using ep0 maxpacket: 16 [ 839.249131][ T1574] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 839.334234][ T1574] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 839.334284][ T1574] usb 7-1: config 0 has no interface number 0 [ 839.334334][ T1574] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.334363][ T1574] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 839.474739][ T1574] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 839.474783][ T1574] usb 7-1: Product: syz [ 839.474815][ T1574] usb 7-1: SerialNumber: syz [ 839.778794][ T1574] usb 7-1: config 0 descriptor?? [ 839.829329][ T31] audit: type=1400 audit(1787905451.987:666): avc: denied { read write open } for pid=13256 comm="syz.3.2089" path="/456/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 839.830461][ T1574] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 839.836741][ T1574] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input71 [ 840.272497][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 840.461118][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 840.896874][ T31] audit: type=1400 audit(1787905453.057:667): avc: denied { ioctl } for pid=13299 comm="syz.4.2097" path="socket:[58088]" dev="sockfs" ino=58088 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 841.666384][T11180] block nbd3: Possible stuck request ffff888028110000: control (read@0,1024B). Runtime 540 seconds [ 841.666476][T11180] block nbd3: Possible stuck request ffff8880281101c0: control (read@1024,1024B). Runtime 540 seconds [ 841.666509][T11180] block nbd3: Possible stuck request ffff888028110380: control (read@2048,1024B). Runtime 540 seconds [ 841.666533][T11180] block nbd3: Possible stuck request ffff888028110540: control (read@3072,1024B). Runtime 540 seconds [ 841.666577][ T8069] block nbd1: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 600 seconds [ 841.666605][ T8069] block nbd1: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 600 seconds [ 841.666628][ T8069] block nbd1: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 600 seconds [ 841.666651][ T8069] block nbd1: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 600 seconds [ 841.811470][T13345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2112'. [ 841.955881][ T31] audit: type=1400 audit(1787905453.957:668): avc: denied { bind } for pid=13340 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 841.977953][ T31] audit: type=1400 audit(1787905453.957:669): avc: denied { setopt } for pid=13340 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 842.056520][ T9] usb 7-1: USB disconnect, device number 8 [ 842.077934][ T9] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 842.234203][ T31] audit: type=1400 audit(1787905454.387:670): avc: denied { map } for pid=13354 comm="syz.4.2118" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 842.249265][ T31] audit: type=1400 audit(1787905454.407:671): avc: denied { call } for pid=13354 comm="syz.4.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 842.261077][ T8063] block nbd2: Possible stuck request ffff8880280be000: control (read@0,4096B). Runtime 600 seconds [ 842.298323][T13357] jffs2: notice: (13357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 842.322148][ T31] audit: type=1400 audit(1787905454.477:672): avc: denied { write } for pid=13356 comm="syz.8.2119" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 842.760827][T13378] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 842.832481][T13378] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 842.899364][ T8063] block nbd6: Possible stuck request ffff888028235080: control (read@0,1024B). Runtime 510 seconds [ 842.899414][ T8063] block nbd6: Possible stuck request ffff888028235240: control (read@1024,1024B). Runtime 510 seconds [ 842.899456][ T8063] block nbd6: Possible stuck request ffff888028235400: control (read@2048,1024B). Runtime 510 seconds [ 842.899482][ T8063] block nbd6: Possible stuck request ffff8880282355c0: control (read@3072,1024B). Runtime 510 seconds [ 842.943687][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 842.944795][T12120] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 843.007977][ T31] audit: type=1400 audit(1787905455.167:673): avc: denied { read } for pid=13388 comm="syz.3.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 843.095032][T12120] usb 5-1: Using ep0 maxpacket: 16 [ 843.095685][T12120] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 843.097379][T12120] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 843.097400][T12120] usb 5-1: config 0 has no interface number 0 [ 843.097430][T12120] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 843.097455][T12120] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 843.098648][T12120] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 843.098668][T12120] usb 5-1: Product: syz [ 843.098683][T12120] usb 5-1: SerialNumber: syz [ 843.116932][T12120] usb 5-1: config 0 descriptor?? [ 843.118092][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 843.119582][T12120] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 843.121135][T12120] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input73 [ 843.135591][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 843.154355][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 843.170163][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.170194][ T9] usb 9-1: Product: syz [ 843.170209][ T9] usb 9-1: Manufacturer: syz [ 843.170226][ T9] usb 9-1: SerialNumber: syz [ 843.178158][ T9] usb 9-1: config 0 descriptor?? [ 843.208040][ T9] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 843.208076][ T9] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 843.294829][T12223] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 843.446484][T12223] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 843.447714][T12223] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.447767][T12223] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.450141][T12223] usb 8-1: config 0 descriptor?? [ 843.455958][ T9] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 843.529768][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 843.580110][ T9] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 843.604840][ T9] em28xx 9-1:0.0: board has no eeprom [ 843.669449][T12223] usbhid 8-1:0.0: can't add hid device: -71 [ 843.669560][T12223] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 843.679607][T12223] usb 8-1: USB disconnect, device number 3 [ 843.689317][ T9] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 843.689353][ T9] em28xx 9-1:0.0: dvb set to bulk mode. [ 843.690027][T11963] em28xx 9-1:0.0: Binding DVB extension [ 843.720764][ T9] usb 9-1: USB disconnect, device number 2 [ 843.727954][ T9] em28xx 9-1:0.0: Disconnecting em28xx [ 843.858614][T11963] em28xx 9-1:0.0: Registering input extension [ 843.875161][ T9] em28xx 9-1:0.0: Closing input extension [ 843.937646][ T9] em28xx: Freeing device [ 844.082970][T13398] mmap: syz.3.2136 (13398) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 844.167473][T12223] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 844.268249][ T31] audit: type=1400 audit(1787905456.427:674): avc: denied { read } for pid=13413 comm="syz.8.2142" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 844.269253][ T31] audit: type=1400 audit(1787905456.427:675): avc: denied { open } for pid=13413 comm="syz.8.2142" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 844.316389][T12223] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 844.319023][T12223] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.319064][T12223] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.330239][T12223] usb 8-1: config 0 descriptor?? [ 844.461298][T13419] tipc: Started in network mode [ 844.461418][T13419] tipc: Node identity ac1414aa, cluster identity 4711 [ 844.461685][T13419] tipc: New replicast peer: 172.20.20.187 [ 844.466087][T13419] tipc: Enabled bearer , priority 10 [ 844.566597][ T1574] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 844.837466][ T1574] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 844.838806][ T1574] usb 9-1: config 0 has no interfaces? [ 844.838837][ T1574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.842181][ T1574] usb 9-1: config 0 descriptor?? [ 845.340909][T12223] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 845.342714][T12223] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input75 [ 845.392541][ T9] usb 9-1: USB disconnect, device number 3 [ 845.474102][T13444] FAULT_INJECTION: forcing a failure. [ 845.474102][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 845.491683][T13444] CPU: 0 UID: 0 PID: 13444 Comm: syz.6.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.491718][T13444] Tainted: [L]=SOFTLOCKUP [ 845.491726][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 845.491737][T13444] Call Trace: [ 845.491746][T13444] [ 845.491756][T13444] dump_stack_lvl+0x100/0x190 [ 845.491788][T13444] should_fail_ex.cold+0x5/0xa [ 845.491810][T13444] should_failslab+0xc2/0x120 [ 845.491831][T13444] __kmalloc_cache_noprof+0x91/0x6d0 [ 845.491871][T13444] ? sctp_endpoint_new+0xfc/0xb20 [ 845.491899][T13444] sctp_endpoint_new+0xfc/0xb20 [ 845.491924][T13444] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 845.491945][T13444] ? lockdep_init_map_type+0x5c/0x250 [ 845.491965][T13444] ? lockdep_init_map_type+0x5c/0x250 [ 845.491983][T13444] ? lockdep_init_map_type+0x5c/0x250 [ 845.492006][T13444] sctp_init_sock+0xe2b/0x1300 [ 845.492028][T13444] ? __pfx_sctp_init_sock+0x10/0x10 [ 845.492047][T13444] inet_create+0x94c/0x1060 [ 845.492075][T13444] ? inet_create+0x94/0x1060 [ 845.492100][T13444] __sock_create+0x339/0x860 [ 845.492128][T13444] __sys_socket+0x14d/0x260 [ 845.492153][T13444] ? __pfx___sys_socket+0x10/0x10 [ 845.492177][T13444] __x64_sys_socket+0x72/0xb0 [ 845.492196][T13444] ? lockdep_hardirqs_on+0x7d/0x110 [ 845.492214][T13444] do_syscall_64+0x123/0x790 [ 845.492234][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.492254][T13444] RIP: 0033:0x7faf93f9e159 [ 845.492268][T13444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.492287][T13444] RSP: 002b:00007faf921f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 845.492306][T13444] RAX: ffffffffffffffda RBX: 00007faf94225fa0 RCX: 00007faf93f9e159 [ 845.492316][T13444] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 845.492326][T13444] RBP: 00007faf94035024 R08: 0000000000000000 R09: 0000000000000000 [ 845.492335][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.492347][T13444] R13: 00007faf94226038 R14: 00007faf94225fa0 R15: 00007ffcb64d2018 [ 845.492370][T13444] [ 845.618381][T12223] tipc: Node number set to 2886997162 [ 845.741983][T12223] usb 8-1: USB disconnect, device number 4 [ 845.742092][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 845.975948][ T9] usb 5-1: USB disconnect, device number 66 [ 846.695922][T13455] FAULT_INJECTION: forcing a failure. [ 846.695922][T13455] name failslab, interval 1, probability 0, space 0, times 0 [ 846.755265][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 846.770302][T13455] CPU: 1 UID: 0 PID: 13455 Comm: syz.4.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.770340][T13455] Tainted: [L]=SOFTLOCKUP [ 846.770349][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 846.770363][T13455] Call Trace: [ 846.770370][T13455] [ 846.770379][T13455] dump_stack_lvl+0x100/0x190 [ 846.770418][T13455] should_fail_ex.cold+0x5/0xa [ 846.770446][T13455] should_failslab+0xc2/0x120 [ 846.770473][T13455] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 846.770495][T13455] ? lock_acquire+0x1d1/0x380 [ 846.770516][T13455] ? kstrdup_const+0x63/0x80 [ 846.770549][T13455] kstrdup+0x51/0xe0 [ 846.770578][T13455] kstrdup_const+0x63/0x80 [ 846.770606][T13455] alloc_vfsmnt+0xe5/0x710 [ 846.770637][T13455] clone_mnt+0x4b/0x930 [ 846.770669][T13455] copy_tree+0xfc/0xbf0 [ 846.770702][T13455] __do_loopback+0x418/0x4e0 [ 846.770732][T13455] vfs_open_tree+0x5db/0xae0 [ 846.770757][T13455] ? _raw_spin_unlock+0x28/0x50 [ 846.770786][T13455] ? __pfx_vfs_open_tree+0x10/0x10 [ 846.770833][T13455] __x64_sys_open_tree+0xa3/0x150 [ 846.770864][T13455] do_syscall_64+0x123/0x790 [ 846.770889][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.770913][T13455] RIP: 0033:0x7f0c47b9e159 [ 846.770931][T13455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.770949][T13455] RSP: 002b:00007f0c48b1d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 846.770971][T13455] RAX: ffffffffffffffda RBX: 00007f0c47e25fa0 RCX: 00007f0c47b9e159 [ 846.770982][T13455] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 846.770993][T13455] RBP: 00007f0c47c35024 R08: 0000000000000000 R09: 0000000000000000 [ 846.771003][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.771014][T13455] R13: 00007f0c47e26038 R14: 00007f0c47e25fa0 R15: 00007ffebd9d5418 [ 846.771038][T13455] [ 847.016439][T13464] syzkaller0: entered promiscuous mode [ 847.022305][T13464] syzkaller0: entered allmulticast mode [ 847.039948][T13468] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 847.079277][T13468] md: couldn't update array info. -22 [ 847.110325][T13468] md: could not open device unknown-block(1,1). [ 847.110405][T13468] md: md_import_device returned -16 [ 847.112552][T13468] md: could not open device unknown-block(1,0). [ 847.112603][T13468] md: md_import_device returned -16 [ 847.299768][T13479] CacheFiles: No cache directory specified [ 848.367031][ T31] audit: type=1400 audit(1787905460.397:676): avc: denied { write } for pid=13487 comm="syz.4.2175" name="instances" dev="tracefs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 848.367098][ T31] audit: type=1400 audit(1787905460.397:677): avc: denied { add_name } for pid=13487 comm="syz.4.2175" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 848.367145][ T31] audit: type=1400 audit(1787905460.397:678): avc: denied { create } for pid=13487 comm="syz.4.2175" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 848.476434][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 848.585167][ T31] audit: type=1400 audit(1787905460.577:679): avc: denied { write } for pid=13487 comm="syz.4.2175" name="instances" dev="tracefs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 848.608809][ T31] audit: type=1400 audit(1787905460.577:680): avc: denied { remove_name } for pid=13487 comm="syz.4.2175" name="foo" dev="tracefs" ino=58366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 848.633597][ T31] audit: type=1400 audit(1787905460.577:681): avc: denied { rmdir } for pid=13487 comm="syz.4.2175" name="foo" dev="tracefs" ino=58366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 848.842617][T12223] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 849.014919][T12223] usb 9-1: Using ep0 maxpacket: 32 [ 849.021571][T12223] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 849.136582][T12223] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 849.136624][T12223] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 849.157515][T12223] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 849.157556][T12223] usb 9-1: Product: syz [ 849.157576][T12223] usb 9-1: Manufacturer: syz [ 849.236638][T13511] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 849.280151][T13512] syzkaller0: entered promiscuous mode [ 849.286225][T13512] syzkaller0: entered allmulticast mode [ 849.346678][T13511] md: couldn't update array info. -22 [ 849.455227][T13511] md: could not open device unknown-block(1,1). [ 849.456755][T13511] md: md_import_device returned -16 [ 849.457096][T13517] md: could not open device unknown-block(1,0). [ 849.457147][T13517] md: md_import_device returned -16 [ 849.649357][T13524] CacheFiles: No cache directory specified [ 850.488378][ T4919] Bluetooth: hci6: hcon ffff88803cd8c000 sent 1 < count 1025 [ 850.730754][ T11] block nbd8: Possible stuck request ffff888028295080: control (read@0,1024B). Runtime 510 seconds [ 850.730810][ T11] block nbd8: Possible stuck request ffff888028295240: control (read@1024,1024B). Runtime 510 seconds [ 850.730832][ T11] block nbd8: Possible stuck request ffff888028295400: control (read@2048,1024B). Runtime 510 seconds [ 850.730850][ T11] block nbd8: Possible stuck request ffff8880282955c0: control (read@3072,1024B). Runtime 510 seconds [ 851.488564][ T5732] usb 9-1: USB disconnect, device number 4 [ 851.848890][ T11] block nbd4: Possible stuck request ffff888028180000: control (read@0,1024B). Runtime 540 seconds [ 851.849009][ T11] block nbd4: Possible stuck request ffff8880281801c0: control (read@1024,1024B). Runtime 540 seconds [ 851.849086][ T11] block nbd4: Possible stuck request ffff888028180380: control (read@2048,1024B). Runtime 540 seconds [ 851.849195][ T11] block nbd4: Possible stuck request ffff888028180540: control (read@3072,1024B). Runtime 540 seconds [ 851.973155][T13567] tipc: Started in network mode [ 851.973207][T13567] tipc: Node identity ac1414aa, cluster identity 4711 [ 851.973423][T13567] tipc: New replicast peer: 172.20.20.187 [ 851.976135][T13567] tipc: Enabled bearer , priority 10 [ 852.385330][T12223] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 852.535042][T12223] usb 9-1: Using ep0 maxpacket: 16 [ 852.541329][T12223] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 852.552173][T12223] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 852.561549][T12223] usb 9-1: config 0 has no interface number 0 [ 852.569207][T12223] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.581807][T12223] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 852.581848][T12223] usb 9-1: Product: syz [ 852.581881][T12223] usb 9-1: SerialNumber: syz [ 852.603920][T12223] usb 9-1: config 0 descriptor?? [ 852.617647][T12223] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 852.712272][T13593] tipc: Started in network mode [ 852.712346][T13593] tipc: Node identity ac1414aa, cluster identity 4711 [ 852.712632][T13593] tipc: New replicast peer: 172.20.20.187 [ 852.713568][T13593] tipc: Enabled bearer , priority 10 [ 852.963131][T13598] MTRR 1 not used [ 853.087105][T12120] tipc: Node number set to 2886997162 [ 853.704834][ T5803] tipc: Node number set to 2886997162 [ 854.174005][ T31] audit: type=1400 audit(1787905466.327:682): avc: denied { listen } for pid=13626 comm="syz.7.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 854.216038][ T31] audit: type=1400 audit(1787905466.377:683): avc: denied { connect } for pid=13626 comm="syz.7.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 854.338646][T13631] CacheFiles: No cache directory specified [ 854.406034][ T8063] block nbd12: Possible stuck request ffff888028437000: control (read@0,4096B). Runtime 450 seconds [ 854.426359][ T8069] block nbd7: Possible stuck request ffff88802825e000: control (read@0,1024B). Runtime 510 seconds [ 854.426509][ T8069] block nbd7: Possible stuck request ffff88802825e1c0: control (read@1024,1024B). Runtime 510 seconds [ 854.426567][ T8069] block nbd7: Possible stuck request ffff88802825e380: control (read@2048,1024B). Runtime 510 seconds [ 854.426626][ T8069] block nbd7: Possible stuck request ffff88802825e540: control (read@3072,1024B). Runtime 510 seconds [ 855.254430][ T1574] usb 9-1: USB disconnect, device number 5 [ 855.741812][T13668] CacheFiles: No cache directory specified [ 855.754910][ T5803] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 855.760123][ T1574] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 855.916586][ T5803] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 855.917820][ T5803] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 855.917847][ T5803] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 855.917867][ T5803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 855.919473][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 855.919495][ T5803] usb 7-1: Product: syz [ 855.919509][ T5803] usb 7-1: Manufacturer: syz [ 855.919523][ T5803] usb 7-1: SerialNumber: syz [ 855.923615][ T5803] usb 7-1: config 0 descriptor?? [ 855.957130][ T5803] usb 7-1: selecting invalid altsetting 0 [ 856.082310][ T1574] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 856.083057][T12120] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 856.196426][ T1574] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 856.196459][ T1574] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 856.196479][ T1574] usb 8-1: config 220 has no interface number 2 [ 856.196518][ T1574] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 856.196539][ T1574] usb 8-1: config 220 interface 0 has no altsetting 0 [ 856.196552][ T1574] usb 8-1: config 220 interface 76 has no altsetting 0 [ 856.196563][ T1574] usb 8-1: config 220 interface 1 has no altsetting 0 [ 856.292840][ T5803] usb 7-1: USB disconnect, device number 9 [ 856.445252][T11180] block nbd9: Possible stuck request ffff888028375080: control (read@0,4096B). Runtime 510 seconds [ 856.551168][T12120] usb 9-1: device descriptor read/64, error -71 [ 856.619279][ T1574] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.627555][ T1574] usb 8-1: Product: syz [ 856.631832][ T1574] usb 8-1: Manufacturer: syz [ 856.636618][ T1574] usb 8-1: SerialNumber: syz [ 856.784857][T12120] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 856.868483][ T1574] usb 8-1: selecting invalid altsetting 0 [ 856.870013][ T1574] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 856.890348][ T1574] uvcvideo 8-1:220.0: No valid video chain found. [ 856.907338][ T1574] usb 8-1: selecting invalid altsetting 0 [ 856.914796][ T1574] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 856.924841][T12120] usb 9-1: device descriptor read/64, error -71 [ 856.934195][ T1574] usb 8-1: USB disconnect, device number 5 [ 857.034995][T12120] usb usb9-port1: attempt power cycle [ 857.048153][ T31] audit: type=1400 audit(1787905469.207:684): avc: denied { execute } for pid=13680 comm="syz.6.2247" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 857.059105][T13681] loop6: detected capacity change from 0 to 2640 [ 857.212616][T12223] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 857.374873][T12120] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 857.384446][T12223] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 857.395653][T12223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.406810][T12120] usb 9-1: device descriptor read/8, error -71 [ 857.413082][T12223] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.424987][T12223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.434665][T12223] usb 5-1: Product: syz [ 857.442582][T12223] usb 5-1: Manufacturer: syz [ 857.442607][T12223] usb 5-1: SerialNumber: syz [ 857.560097][T13689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 857.608446][T13689] md: couldn't update array info. -22 [ 857.644811][T12120] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 857.677004][T12120] usb 9-1: device descriptor read/8, error -71 [ 857.687021][T13689] md: could not open device unknown-block(1,1). [ 857.687090][T13689] md: md_import_device returned -16 [ 857.707954][T12223] usb 5-1: 0:1 : does not exist [ 857.713099][T12223] usb 5-1: unit 1 not found! [ 857.718163][T12223] usb 5-1: unit 64 not found! [ 857.724920][T13689] md: could not open device unknown-block(1,2). [ 857.724982][T13689] md: md_import_device returned -16 [ 857.772603][T12223] usb 5-1: USB disconnect, device number 67 [ 857.785170][T12120] usb usb9-port1: unable to enumerate USB device [ 858.144983][ T5803] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 858.304830][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 858.305386][ T5803] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 858.306634][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.306656][ T5803] usb 4-1: config 0 has no interfaces? [ 858.306678][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.308663][ T5803] usb 4-1: config 0 descriptor?? [ 859.598155][ T8069] block nbd0: Possible stuck request ffff88802805e000: control (read@0,4096B). Runtime 780 seconds [ 859.919001][T12223] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 860.816230][T12223] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 860.827384][T12223] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 860.827425][T12223] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 860.835586][T12223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.835618][T12223] usb 7-1: Product: syz [ 860.835633][T12223] usb 7-1: Manufacturer: syz [ 860.835646][T12223] usb 7-1: SerialNumber: syz [ 860.838621][T12223] usb 7-1: config 0 descriptor?? [ 860.854905][T12223] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 860.915520][ T5803] usb 4-1: USB disconnect, device number 85 [ 861.305228][ T5803] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 861.455354][ T5803] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 861.465651][ T5803] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 861.465689][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.465711][ T5803] usb 4-1: config 0 has no interface number 0 [ 861.465747][ T5803] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 861.465787][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.485259][T12223] usb 7-1: USB disconnect, device number 10 [ 861.519719][ T5803] usb 4-1: config 0 descriptor?? [ 861.535765][ T5803] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 861.714667][T13778] fuse: Bad value for 'fd' [ 861.873757][T12223] usb 4-1: USB disconnect, device number 86 [ 862.589829][T13809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 862.712711][T13809] md: couldn't update array info. -22 [ 862.765552][T13811] md: could not open device unknown-block(1,1). [ 862.765623][T13811] md: md_import_device returned -16 [ 862.777708][T13809] md: could not open device unknown-block(1,2). [ 862.784144][T13809] md: md_import_device returned -16 [ 863.740342][T13837] CacheFiles: No cache directory specified [ 864.563908][T13839] comedi comedi1: 8255: I/O base address not correctly aligned [ 864.645977][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.646053][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.787353][T13846] fuse: Bad value for 'fd' [ 865.149543][T13855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 865.217719][T13855] md: couldn't update array info. -22 [ 865.256247][T13855] md: could not open device unknown-block(1,1). [ 865.257761][T13855] md: md_import_device returned -16 [ 865.263506][T13855] md: could not open device unknown-block(1,0). [ 865.263556][T13855] md: md_import_device returned -16 [ 865.628483][T13868] o2cb: This node has not been configured. [ 865.629135][T13868] o2cb: Cluster check failed. Fix errors before retrying. [ 865.629265][T13868] (syz.6.2313,13868,1):user_dlm_register:674 ERROR: status = -22 [ 865.629327][T13868] (syz.6.2313,13868,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 865.647326][ T31] audit: type=1400 audit(1787905477.787:685): avc: denied { write } for pid=13858 comm="syz.6.2313" name="/" dev="ocfs2_dlmfs" ino=61068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 865.655923][ T31] audit: type=1400 audit(1787905477.787:686): avc: denied { add_name } for pid=13858 comm="syz.6.2313" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 865.656142][ T31] audit: type=1400 audit(1787905477.787:687): avc: denied { create } for pid=13858 comm="syz.6.2313" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 865.656267][ T31] audit: type=1400 audit(1787905477.787:688): avc: denied { associate } for pid=13858 comm="syz.6.2313" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 867.065490][ T1574] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 867.076321][T12223] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 867.225950][ T1574] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 867.236727][T12223] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 867.249194][T12223] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 867.249240][T12223] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.249327][T12223] usb 5-1: config 0 has no interface number 0 [ 867.249365][T12223] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 867.249406][T12223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.290870][ T1574] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 867.290898][ T1574] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 867.290916][ T1574] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 867.290934][ T1574] usb 7-1: config 220 has no interface number 2 [ 867.290984][ T1574] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 867.291008][ T1574] usb 7-1: config 220 interface 0 has no altsetting 0 [ 867.291024][ T1574] usb 7-1: config 220 interface 76 has no altsetting 0 [ 867.291041][ T1574] usb 7-1: config 220 interface 1 has no altsetting 0 [ 867.372337][T12223] usb 5-1: config 0 descriptor?? [ 867.378906][ T1574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.378946][ T1574] usb 7-1: Product: syz [ 867.378965][ T1574] usb 7-1: Manufacturer: syz [ 867.378983][ T1574] usb 7-1: SerialNumber: syz [ 867.405621][T12223] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 867.512324][T13910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 867.567158][T13910] md: couldn't update array info. -22 [ 867.635591][ T1574] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 867.635651][ T1574] uvcvideo 7-1:220.0: No valid video chain found. [ 867.635711][ T1574] usb 7-1: selecting invalid altsetting 0 [ 867.686702][T13910] md: could not open device unknown-block(1,1). [ 867.686788][T13910] md: md_import_device returned -16 [ 867.701132][ T1574] usb 7-1: selecting invalid altsetting 0 [ 867.701163][ T1574] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 867.718108][ T1574] usb 7-1: USB disconnect, device number 11 [ 867.766324][T13910] md: could not open device unknown-block(1,2). [ 867.766404][T13910] md: md_import_device returned -16 [ 867.793617][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2336'. [ 867.802686][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2336'. [ 867.814960][ T9] usb 5-1: USB disconnect, device number 68 [ 867.846428][T11180] block nbd5: Possible stuck request ffff8880281c5080: control (read@0,4096B). Runtime 540 seconds [ 867.857756][ T8069] block nbd11: Possible stuck request ffff8880283ce000: control (read@0,4096B). Runtime 510 seconds [ 867.885024][T13928] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 867.946232][T13928] md: couldn't update array info. -22 [ 868.045718][T13936] md: could not open device unknown-block(1,1). [ 868.045786][T13936] md: md_import_device returned -16 [ 868.094906][T13928] md: could not open device unknown-block(1,2). [ 868.094972][T13928] md: md_import_device returned -16 [ 868.986524][ T31] audit: type=1400 audit(1787905481.147:689): avc: denied { read } for pid=13958 comm="syz.6.2350" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 869.002488][T13960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 869.085729][T13960] md: couldn't update array info. -22 [ 869.165100][T13960] md: could not open device unknown-block(1,1). [ 869.165166][T13960] md: md_import_device returned -16 [ 869.245215][T13960] md: could not open device unknown-block(1,2). [ 869.246699][T13960] md: md_import_device returned -16 [ 869.305016][T13973] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2354'. [ 869.514891][ T5732] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 869.696116][ T5732] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 869.711983][ T5732] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 869.712029][ T5732] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 869.712060][ T5732] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 869.712088][ T5732] usb 7-1: config 220 has no interface number 2 [ 869.712138][ T5732] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 869.712167][ T5732] usb 7-1: config 220 interface 0 has no altsetting 0 [ 869.712188][ T5732] usb 7-1: config 220 interface 76 has no altsetting 0 [ 869.712207][ T5732] usb 7-1: config 220 interface 1 has no altsetting 0 [ 869.858736][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.867128][ T5732] usb 7-1: Product: syz [ 869.867175][ T5732] usb 7-1: Manufacturer: syz [ 869.867217][ T5732] usb 7-1: SerialNumber: syz [ 870.154245][ T5732] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 870.154300][ T5732] uvcvideo 7-1:220.0: No valid video chain found. [ 870.154362][ T5732] usb 7-1: selecting invalid altsetting 0 [ 870.188281][ T5732] usb 7-1: selecting invalid altsetting 0 [ 870.188328][ T5732] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 870.208935][ T5732] usb 7-1: USB disconnect, device number 12 [ 870.327546][T14000] tipc: Enabling of bearer rejected, already enabled [ 870.502792][T14006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 870.840623][T14006] md: couldn't update array info. -22 [ 870.849749][T14018] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2368'. [ 870.890380][T14012] md: could not open device unknown-block(1,1). [ 870.890453][T14012] md: md_import_device returned -16 [ 870.901851][T14013] md: could not open device unknown-block(1,2). [ 870.901896][T14013] md: md_import_device returned -16 [ 871.210215][ T4919] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 871.786828][T11180] block nbd1: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 630 seconds [ 871.786880][T11180] block nbd1: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 630 seconds [ 871.786912][T11180] block nbd1: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 630 seconds [ 871.786936][T11180] block nbd1: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 630 seconds [ 871.803118][ T8069] block nbd3: Possible stuck request ffff888028110000: control (read@0,1024B). Runtime 570 seconds [ 871.803153][ T8069] block nbd3: Possible stuck request ffff8880281101c0: control (read@1024,1024B). Runtime 570 seconds [ 871.803177][ T8069] block nbd3: Possible stuck request ffff888028110380: control (read@2048,1024B). Runtime 570 seconds [ 871.803196][ T8069] block nbd3: Possible stuck request ffff888028110540: control (read@3072,1024B). Runtime 570 seconds [ 872.096982][ T31] audit: type=1400 audit(1787905484.247:690): avc: denied { block_suspend } for pid=14049 comm="syz.6.2380" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 872.325613][ T11] block nbd2: Possible stuck request ffff8880280be000: control (read@0,4096B). Runtime 630 seconds [ 873.022115][ T8069] block nbd6: Possible stuck request ffff888028235080: control (read@0,1024B). Runtime 540 seconds [ 873.022167][ T8069] block nbd6: Possible stuck request ffff888028235240: control (read@1024,1024B). Runtime 540 seconds [ 873.022204][ T8069] block nbd6: Possible stuck request ffff888028235400: control (read@2048,1024B). Runtime 540 seconds [ 873.022230][ T8069] block nbd6: Possible stuck request ffff8880282355c0: control (read@3072,1024B). Runtime 540 seconds [ 873.232315][ T4919] Bluetooth: hci6: hcon ffff88803cd88000 sent 0 < count 1 [ 873.232361][ T4919] Bluetooth: hci6: hcon ffff88803cd8c000 sent 0 < count 1025 [ 874.005098][ T5803] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 874.166064][ T5803] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 874.168716][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.168744][ T5803] usb 7-1: Product: syz [ 874.168758][ T5803] usb 7-1: Manufacturer: syz [ 874.168772][ T5803] usb 7-1: SerialNumber: syz [ 874.170870][ T5803] usb 7-1: config 0 descriptor?? [ 874.386495][ T5803] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 875.289554][ T4919] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 875.289633][ T4919] Bluetooth: hci2: Injecting HCI hardware error event [ 875.293972][ T4919] Bluetooth: hci2: hardware error 0x00 [ 875.427855][ T31] audit: type=1400 audit(1787905487.577:691): avc: denied { setattr } for pid=14104 comm="syz.7.2397" name="[io_uring]" dev="anon_inodefs" ino=61517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.143974][ T5803] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 876.358684][ T5803] usb 7-1: USB disconnect, device number 13 [ 876.575122][T14137] md: couldn't update array info. -22 [ 876.667465][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2409'. [ 877.107300][T14138] md: could not open device unknown-block(1,1). [ 877.107341][T14138] md: md_import_device returned -16 [ 877.154854][T14141] md: could not open device unknown-block(1,2). [ 877.154916][T14141] md: md_import_device returned -16 [ 877.190838][ T31] audit: type=1400 audit(1787905489.347:692): avc: denied { bind } for pid=14142 comm="syz.6.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 877.204661][ T31] audit: type=1400 audit(1787905489.357:693): avc: denied { map } for pid=14142 comm="syz.6.2410" path="socket:[61584]" dev="sockfs" ino=61584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 877.241908][ T31] audit: type=1400 audit(1787905489.397:694): avc: denied { read write } for pid=14142 comm="syz.6.2410" path="socket:[61584]" dev="sockfs" ino=61584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 877.370163][ T4919] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 878.378612][ T5803] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 878.444970][T11963] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 878.519246][T12223] hid_parser_main: 5 callbacks suppressed [ 878.519310][T12223] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 878.527866][T12223] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 878.555165][ T5803] usb 9-1: Using ep0 maxpacket: 16 [ 878.561178][ T5803] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 878.571807][ T5803] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 878.571838][ T5803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 878.597017][ T5803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.605282][ T5803] usb 9-1: Product: syz [ 878.605297][ T5803] usb 9-1: Manufacturer: syz [ 878.605306][ T5803] usb 9-1: SerialNumber: syz [ 878.621723][T11963] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 878.632592][T11963] usb 7-1: config index 0 descriptor too short (expected 7768, got 18) [ 878.632662][T11963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.651266][ T5803] usb 9-1: config 0 descriptor?? [ 878.662047][T11963] usb 7-1: config 0 descriptor?? [ 878.669915][ T5803] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 878.679308][ T5803] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 878.949703][T11963] usb 7-1: USB disconnect, device number 14 [ 879.285823][ T5803] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 879.302775][ T5803] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 879.737619][T14175] No such timeout policy "s" [ 879.737663][T14175] netlink: Failed to associated timeout policy 's' [ 879.756955][ T31] audit: type=1400 audit(1787905491.917:695): avc: denied { append } for pid=14173 comm="syz.3.2420" name="sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 879.886707][T14179] md: couldn't update array info. -22 [ 880.514242][T14181] md: could not open device unknown-block(1,1). [ 880.515858][T14181] md: md_import_device returned -16 [ 880.516056][T14179] md: could not open device unknown-block(1,2). [ 880.516089][T14179] md: md_import_device returned -16 [ 880.607574][ T5803] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 880.697652][ T5803] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 880.728406][ T5803] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 880.770208][ T5803] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 880.795249][ T5803] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 880.819072][ T5803] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 880.828412][ T5803] usb 9-1: USB disconnect, device number 10 [ 881.436639][ T11] block nbd8: Possible stuck request ffff888028295080: control (read@0,1024B). Runtime 540 seconds [ 881.436690][ T11] block nbd8: Possible stuck request ffff888028295240: control (read@1024,1024B). Runtime 540 seconds [ 881.436732][ T11] block nbd8: Possible stuck request ffff888028295400: control (read@2048,1024B). Runtime 540 seconds [ 881.436758][ T11] block nbd8: Possible stuck request ffff8880282955c0: control (read@3072,1024B). Runtime 540 seconds [ 881.906652][ T4919] Bluetooth: hci1: hcon ffff888055190000 sent 1 < count 1025 [ 881.925122][ T8063] block nbd4: Possible stuck request ffff888028180000: control (read@0,1024B). Runtime 570 seconds [ 881.925172][ T8063] block nbd4: Possible stuck request ffff8880281801c0: control (read@1024,1024B). Runtime 570 seconds [ 881.925210][ T8063] block nbd4: Possible stuck request ffff888028180380: control (read@2048,1024B). Runtime 570 seconds [ 881.925236][ T8063] block nbd4: Possible stuck request ffff888028180540: control (read@3072,1024B). Runtime 570 seconds [ 882.983584][ T31] audit: type=1400 audit(1787905495.057:696): avc: denied { write } for pid=14230 comm="syz.8.2441" name="instances" dev="tracefs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 883.052808][ T31] audit: type=1400 audit(1787905495.207:697): avc: denied { write } for pid=14230 comm="syz.8.2441" name="instances" dev="tracefs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 883.449804][T14247] md: couldn't update array info. -22 [ 883.556179][T14247] md: could not open device unknown-block(1,1). [ 883.556259][T14247] md: md_import_device returned -16 [ 883.584962][T14250] md: could not open device unknown-block(1,2). [ 883.585028][T14250] md: md_import_device returned -16 [ 883.805043][ T1574] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 883.885009][T14262] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 883.937052][T14262] md: couldn't update array info. -22 [ 883.957506][ T1574] usb 4-1: Using ep0 maxpacket: 16 [ 883.959878][ T1574] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 883.974818][ T1574] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 883.974861][ T1574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 883.983798][ T1574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.983826][ T1574] usb 4-1: Product: syz [ 883.983850][ T1574] usb 4-1: Manufacturer: syz [ 883.983870][ T1574] usb 4-1: SerialNumber: syz [ 884.007859][T14262] md: could not open device unknown-block(1,1). [ 884.007893][T14262] md: md_import_device returned -16 [ 884.011300][ T1574] usb 4-1: config 0 descriptor?? [ 884.043599][ T1574] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 884.043640][ T1574] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 884.124940][T14262] md: could not open device unknown-block(1,0). [ 884.131962][T14262] md: md_import_device returned -16 [ 884.326904][ T31] audit: type=1400 audit(1787905496.487:698): avc: denied { append } for pid=14272 comm="syz.7.2452" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 884.333793][T14273] loop9: detected capacity change from 0 to 255852544 [ 884.380451][T14273] loop9: detected capacity change from 255852544 to 524287999 [ 884.424778][ T5732] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 884.485963][ T8069] block nbd7: Possible stuck request ffff88802825e000: control (read@0,1024B). Runtime 540 seconds [ 884.486026][ T8069] block nbd7: Possible stuck request ffff88802825e1c0: control (read@1024,1024B). Runtime 540 seconds [ 884.486061][ T8069] block nbd7: Possible stuck request ffff88802825e380: control (read@2048,1024B). Runtime 540 seconds [ 884.486085][ T8069] block nbd7: Possible stuck request ffff88802825e540: control (read@3072,1024B). Runtime 540 seconds [ 884.502209][ T11] block nbd12: Possible stuck request ffff888028437000: control (read@0,4096B). Runtime 480 seconds [ 884.624839][ T5732] usb 7-1: Using ep0 maxpacket: 32 [ 884.626866][T12223] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 884.642972][ T5732] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 884.657881][ T5732] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 884.657931][ T5732] usb 7-1: config 0 has no interface number 0 [ 884.657977][ T5732] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 884.658001][ T5732] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 884.671192][ T1574] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 884.673985][ T1574] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 884.708203][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.716344][ T5732] usb 7-1: Product: syz [ 884.716366][ T5732] usb 7-1: Manufacturer: syz [ 884.716378][ T5732] usb 7-1: SerialNumber: syz [ 884.732928][ T5732] usb 7-1: config 0 descriptor?? [ 884.777701][T12223] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 884.790845][T12223] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 884.790882][T12223] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 884.790899][T12223] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 884.790917][T12223] usb 5-1: config 220 has no interface number 2 [ 884.790975][T12223] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 884.790997][T12223] usb 5-1: config 220 interface 0 has no altsetting 0 [ 884.791011][T12223] usb 5-1: config 220 interface 76 has no altsetting 0 [ 884.791025][T12223] usb 5-1: config 220 interface 1 has no altsetting 0 [ 884.861821][T12223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.861876][T12223] usb 5-1: Product: syz [ 884.861891][T12223] usb 5-1: Manufacturer: syz [ 884.861905][T12223] usb 5-1: SerialNumber: syz [ 885.129514][ T5732] radio-si470x 7-1:0.35: this is not a si470x device. [ 885.155752][ T5732] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 885.200750][ T5732] usb 7-1: USB disconnect, device number 15 [ 885.815468][ T1574] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 885.815843][ T1574] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 885.816176][ T1574] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 885.816500][ T1574] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 885.816796][ T1574] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 885.817082][ T1574] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 885.820309][ T1574] usb 4-1: USB disconnect, device number 87 [ 887.079839][ T8069] block nbd9: Possible stuck request ffff888028375080: control (read@0,4096B). Runtime 540 seconds [ 887.367477][T12223] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 887.367533][T12223] uvcvideo 5-1:220.0: No valid video chain found. [ 887.367572][T12223] usb 5-1: selecting invalid altsetting 0 [ 887.407730][T12223] usb 5-1: selecting invalid altsetting 0 [ 887.407786][T12223] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 887.431061][T12223] usb 5-1: USB disconnect, device number 69 [ 887.824194][T14319] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2465'. [ 889.014909][T11963] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 889.055479][T12223] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 889.168052][T11963] usb 7-1: Using ep0 maxpacket: 32 [ 889.168540][T11963] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 889.174936][T11963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.191875][T11963] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 889.214834][T12223] usb 9-1: Using ep0 maxpacket: 16 [ 889.220712][T12223] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 889.230732][T12223] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 889.230768][T12223] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 889.259792][T12223] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.268326][T12223] usb 9-1: Product: syz [ 889.268389][T12223] usb 9-1: Manufacturer: syz [ 889.268409][T12223] usb 9-1: SerialNumber: syz [ 889.291519][T12223] usb 9-1: config 0 descriptor?? [ 889.303578][T12223] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 889.313732][T12223] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 890.381563][ T8069] block nbd0: Possible stuck request ffff88802805e000: control (read@0,4096B). Runtime 810 seconds [ 890.402060][T11963] gspca_nw80x: reg_r err -32 [ 890.402146][T11963] nw80x 7-1:3.0: probe with driver nw80x failed with error -32 [ 890.643032][T11963] usb 7-1: USB disconnect, device number 16 [ 890.667951][T12223] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 890.697462][T12223] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 890.709288][T12223] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 890.717013][T12223] em28xx 9-1:0.0: No AC97 audio processor [ 890.794484][T14349] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 892.315586][T11963] usb 9-1: USB disconnect, device number 11 [ 892.316749][T11963] em28xx 9-1:0.0: Disconnecting em28xx [ 892.345650][ T4919] Bluetooth: hci1: hcon ffff8880217c4000 sent 0 < count 1 [ 892.345695][ T4919] Bluetooth: hci1: hcon ffff888055190000 sent 0 < count 1025 [ 892.406268][T11963] em28xx: Freeing device [ 892.428974][T14363] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 893.055485][ T5803] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 893.255586][T12223] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 893.280044][ T1574] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 893.399941][ T5803] usb 7-1: Using ep0 maxpacket: 32 [ 893.426552][T12223] usb 5-1: Using ep0 maxpacket: 16 [ 893.427163][ T1574] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 893.439511][ T5803] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 893.440531][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.526324][ T5803] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 893.822713][ T1574] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 893.822783][ T1574] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 893.822804][ T1574] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 893.822829][ T1574] usb 9-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 893.920688][T12223] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 893.921740][T12223] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 893.921766][T12223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 893.923751][T12223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.923772][T12223] usb 5-1: Product: syz [ 893.923787][T12223] usb 5-1: Manufacturer: syz [ 893.923800][T12223] usb 5-1: SerialNumber: syz [ 893.990971][ T1574] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 893.991047][ T1574] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 893.991091][ T1574] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 893.991125][ T1574] usb 9-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 894.071957][ T1574] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.071999][ T1574] usb 9-1: Product: syz [ 894.072027][ T1574] usb 9-1: Manufacturer: syz [ 894.072045][ T1574] usb 9-1: SerialNumber: syz [ 894.124489][ T32] INFO: task syz.0.1538:11549 blocked for more than 143 seconds. [ 894.140321][ T5803] gspca_nw80x: reg_r err -32 [ 894.140683][ T5803] nw80x 7-1:3.0: probe with driver nw80x failed with error -32 [ 894.182300][ T32] Tainted: G L syzkaller #0 [ 894.182405][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.182442][ T32] task:syz.0.1538 state:D stack:28168 pid:11549 tgid:11548 ppid:5598 task_flags:0x400040 flags:0x00080002 [ 894.182690][ T32] Call Trace: [ 894.182722][ T32] [ 894.182791][ T32] __schedule+0x1259/0x6920 [ 894.182872][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 894.182958][ T32] ? lock_acquire+0x1d1/0x380 [ 894.183020][ T32] ? lock_acquire+0x1d1/0x380 [ 894.183050][ T32] ? __pfx___schedule+0x10/0x10 [ 894.183105][ T32] ? find_held_lock+0x2b/0x80 [ 894.183163][ T32] ? schedule+0x225/0x2c0 [ 894.183258][ T32] schedule+0xdd/0x2c0 [ 894.183319][ T32] schedule_preempt_disabled+0x13/0x30 [ 894.183379][ T32] __mutex_lock+0xcbf/0x1bc0 [ 894.183410][ T32] ? bdev_open+0xa2/0xe40 [ 894.183445][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 894.183517][ T32] ? bd_prepare_to_claim+0x1e0/0x280 [ 894.183576][ T32] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 894.183671][ T32] ? bdev_open+0xa2/0xe40 [ 894.183728][ T32] bdev_open+0xa2/0xe40 [ 894.183829][ T32] ? iput+0x3a/0x40 [ 894.183894][ T32] blkdev_open+0x34e/0x4f0 [ 894.183958][ T32] do_dentry_open+0x6ab/0x14d0 [ 894.183985][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 894.184075][ T32] vfs_open+0x82/0x3f0 [ 894.184135][ T32] path_openat+0x19fa/0x2440 [ 894.184227][ T32] ? __pfx_path_openat+0x10/0x10 [ 894.220088][T12223] usb 5-1: config 0 descriptor?? [ 894.311411][ T32] do_file_open+0x20e/0x430 [ 894.311490][ T32] ? __pfx_do_file_open+0x10/0x10 [ 894.311617][ T32] ? _raw_spin_unlock+0x28/0x50 [ 894.311672][ T32] ? alloc_fd+0x471/0x7a0 [ 894.311737][ T32] do_sys_openat2+0x10f/0x1e0 [ 894.311766][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 894.311817][ T32] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 894.311910][ T32] __x64_sys_openat+0x12d/0x210 [ 894.311940][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 894.312006][ T32] do_syscall_64+0x123/0x790 [ 894.312034][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.312059][ T32] RIP: 0033:0x7f818e95e98e [ 894.312084][ T32] RSP: 002b:00007f818cbf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 894.312151][ T32] RAX: ffffffffffffffda RBX: 00007f818cbf66c0 RCX: 00007f818e95e98e [ 894.312187][ T32] RDX: 0000000000020080 RSI: 00007f818cbf5c00 RDI: ffffffffffffff9c [ 894.312227][ T32] RBP: 00007f818cbf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 894.312261][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 894.312295][ T32] R13: 00007f818ec26038 R14: 00007f818ec25fa0 R15: 00007ffe0415ccc8 [ 894.312396][ T32] [ 894.312846][ T32] [ 894.312846][ T32] Showing all locks held in the system: [ 894.312886][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 894.312909][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 894.313087][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 894.313122][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 894.313314][ T32] locks held by kworker/1:2/1574: 5, last CPU#1: [ 894.313365][ T32] #0: ffff88801c145140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 894.313573][ T32] #1: ffffc90006027d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 894.313754][ T32] #2: [ 894.337678][ T5803] usb 7-1: USB disconnect, device number 17 [ 894.496913][ T32] ffff88802b0b81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 894.496963][ T32] #3: ffff88802bb9e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 894.497009][ T32] #4: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0xaa0 [ 894.497106][ T32] locks held by getty/5357: 2, on CPU#1: [ 894.497119][ T32] #0: ffff8880379830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 894.497162][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 894.497203][ T32] locks held by udevd/5607: 1, on CPU#0: [ 894.497214][ T32] #0: ffff888027ae7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497257][ T32] locks held by udevd/5613: 1, on CPU#1: [ 894.497275][ T32] #0: ffff888025b77350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497317][ T32] locks held by udevd/5614: 1, on CPU#0: [ 894.497328][ T32] #0: ffff888025ac7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497369][ T32] locks held by udevd/5624: 1, on CPU#0: [ 894.497381][ T32] #0: ffff8880282a7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497421][ T32] locks held by udevd/5626: 1, on CPU#1: [ 894.497433][ T32] #0: ffff888027ae3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497474][ T32] locks held by udevd/5631: 1, on CPU#1: [ 894.497485][ T32] #0: ffff888028103350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497533][ T32] locks held by kworker/0:5/5803: 5, on CPU#0: [ 894.497544][ T32] #0: ffff88801c145140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 894.497605][ T32] #1: ffffc90004b0fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 894.497649][ T32] #2: ffff88802af661d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 894.497686][ T32] #3: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_find_and_get_ns+0x2f/0x70 [ 894.497729][ T32] #4: ffffffff8ecac320 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x15b/0x2c0 [ 894.497776][ T32] locks held by udevd/5897: 1, on CPU#0: [ 894.497787][ T32] #0: ffff888028107350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497829][ T32] locks held by udevd/5900: 1, on CPU#1: [ 894.497840][ T32] #0: ffff888025ac3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497882][ T32] locks held by udevd/5903: 1, on CPU#1: [ 894.497894][ T32] #0: ffff8880281e3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497935][ T32] locks held by udevd/6294: 1, on CPU#1: [ 894.497946][ T32] #0: ffff8880282a3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.497988][ T32] locks held by udevd/7753: 1, on CPU#0: [ 894.497999][ T32] #0: ffff8880281e7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.498041][ T32] locks held by udevd/7998: 1, on CPU#1: [ 894.498051][ T32] #0: ffff888023f5b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 894.498096][ T32] locks held by syz.0.1538/11549: 1, on CPU#1: [ 894.498107][ T32] #0: ffff888025b77350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 894.498150][ T32] locks held by kworker/1:7/12223: 5, last CPU#1: [ 894.498161][ T32] #0: ffff88801c145140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 894.498205][ T32] #1: ffffc90009e8fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 894.498272][ T32] #2: ffff88802ae761d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 894.498309][ T32] #3: ffff888021b271d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 894.498352][ T32] #4: ffff8880366e41a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 894.498397][ T32] locks held by syz-executor/12810: 3, last CPU#1: [ 894.498409][ T32] #0: ffffffff8ef3cab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 894.498448][ T32] #1: ffff88801c07f678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 894.498488][ T32] #2: ffff88802d9c9078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 894.498535][ T32] locks held by syz.4.2494/14387: 4, last CPU#1: [ 894.498547][ T32] #0: ffff888033cb2808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 894.498589][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830 [ 894.498627][ T32] #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x2100 [ 894.499117][ T32] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 894.499162][ T32] [ 894.499166][ T32] ============================================= [ 894.499166][ T32] [ 894.499173][ T32] NMI backtrace for cpu 1 [ 894.499186][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 894.499209][ T32] Tainted: [L]=SOFTLOCKUP [ 894.499215][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 894.499226][ T32] Call Trace: [ 894.499232][ T32] [ 894.499239][ T32] dump_stack_lvl+0x100/0x190 [ 894.499264][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 894.499295][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 894.499313][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 894.499339][ T32] sys_info+0x141/0x190 [ 894.499357][ T32] watchdog+0xcb1/0x1030 [ 894.499380][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 894.499404][ T32] ? __pfx_watchdog+0x10/0x10 [ 894.499422][ T32] ? __kthread_parkme+0x18f/0x230 [ 894.499444][ T32] ? kthread+0x13a/0x450 [ 894.499464][ T32] ? __pfx_watchdog+0x10/0x10 [ 894.499480][ T32] kthread+0x373/0x450 [ 894.499500][ T32] ? __pfx_kthread+0x10/0x10 [ 894.499522][ T32] ret_from_fork+0x730/0xd60 [ 894.499540][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 894.499559][ T32] ? __switch_to+0x800/0x10f0 [ 894.499583][ T32] ? __pfx_kthread+0x10/0x10 [ 894.499605][ T32] ret_from_fork_asm+0x1a/0x30 [ 894.499632][ T32] [ 894.499661][ T32] Sending NMI from CPU 1 to CPUs 0: [ 894.499684][ C0] NMI backtrace for cpu 0 [ 894.499696][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.499716][ C0] Tainted: [L]=SOFTLOCKUP [ 894.499721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 894.499730][ C0] RIP: 0010:io_serial_in+0x0/0xb0 [ 894.499751][ C0] Code: cc cc cc cc e8 a1 f7 cf fc eb a0 e8 2a f8 cf fc eb dd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 54 55 48 89 fd 53 89 f3 e8 0e e6 5c fc 48 8d bd 11 [ 894.499764][ C0] RSP: 0000:ffffc90000157970 EFLAGS: 00000046 [ 894.499781][ C0] RAX: ffffffff85aef110 RBX: 0000000000000000 RCX: 0000000000000001 [ 894.499791][ C0] RDX: ffff88801f298000 RSI: 0000000000000005 RDI: ffffffff9bc5bb20 [ 894.499800][ C0] RBP: ffffffff9bc5bb20 R08: 0000000000000007 R09: 0000000000000000 [ 894.499809][ C0] R10: 0000000000000004 R11: 205d323354202020 R12: 000000000000075a [ 894.499819][ C0] R13: 0000000000000020 R14: fffffbfff378b7c1 R15: dffffc0000000000 [ 894.499829][ C0] FS: 0000000000000000(0000) GS:ffff888123b69000(0000) knlGS:0000000000000000 [ 894.499844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 894.499854][ C0] CR2: 0000001b32a1aff8 CR3: 000000005b94f000 CR4: 00000000003526f0 [ 894.499863][ C0] Call Trace: [ 894.499869][ C0] [ 894.499874][ C0] wait_for_lsr+0x13a/0x210 [ 894.499897][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 894.499920][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 894.499940][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 894.499960][ C0] serial8250_console_write+0xf46/0x1330 [ 894.499977][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 894.499993][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 894.500015][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 894.500040][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 894.500062][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 894.500083][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 894.500103][ C0] ? do_raw_spin_lock+0x90/0x260 [ 894.500122][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 894.500139][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 894.500158][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 894.500178][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 894.500200][ C0] nbcon_kthread_func+0x613/0x7d0 [ 894.500221][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 894.500244][ C0] ? __kthread_parkme+0x18f/0x230 [ 894.500260][ C0] ? kthread+0x13a/0x450 [ 894.500276][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 894.500296][ C0] kthread+0x373/0x450 [ 894.500313][ C0] ? __pfx_kthread+0x10/0x10 [ 894.500331][ C0] ret_from_fork+0x730/0xd60 [ 894.500345][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 894.500361][ C0] ? __switch_to+0x800/0x10f0 [ 894.500378][ C0] ? __pfx_kthread+0x10/0x10 [ 894.500397][ C0] ret_from_fork_asm+0x1a/0x30 [ 894.500416][ C0] [ 894.506329][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 895.465616][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 895.476359][ T32] Tainted: [L]=SOFTLOCKUP [ 895.480677][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 895.490708][ T32] Call Trace: [ 895.493970][ T32] [ 895.496893][ T32] dump_stack_lvl+0x100/0x190 [ 895.501570][ T32] vpanic+0x553/0x970 [ 895.505541][ T32] ? __pfx_vpanic+0x10/0x10 [ 895.510023][ T32] panic+0xd1/0xe0 [ 895.513722][ T32] ? __pfx_panic+0x10/0x10 [ 895.518133][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 895.524274][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 895.530418][ T32] ? watchdog.cold+0x1ec/0x234 [ 895.535182][ T32] watchdog.cold+0x1fd/0x234 [ 895.539756][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 895.545557][ T32] ? __pfx_watchdog+0x10/0x10 [ 895.550210][ T32] ? __kthread_parkme+0x18f/0x230 [ 895.555230][ T32] ? kthread+0x13a/0x450 [ 895.559458][ T32] ? __pfx_watchdog+0x10/0x10 [ 895.564115][ T32] kthread+0x373/0x450 [ 895.568165][ T32] ? __pfx_kthread+0x10/0x10 [ 895.572736][ T32] ret_from_fork+0x730/0xd60 [ 895.577305][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 895.582396][ T32] ? __switch_to+0x800/0x10f0 [ 895.587053][ T32] ? __pfx_kthread+0x10/0x10 [ 895.591623][ T32] ret_from_fork_asm+0x1a/0x30 [ 895.596372][ T32] [ 895.599634][ T32] Kernel Offset: disabled [ 895.603950][ T32] Rebooting in 86400 seconds..