last executing test programs: 36.9653109s ago: executing program 4 (id=1062): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001000000206d0495c200000000000109022400010000900909040000fe0300010009210500fc0122280009058103ff03038206726b1cb9121ef93cb3e27920c94ecbacf51f81624b0371b17931e66041ceead694132a14"], 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x101801) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000004c0)={0x2, 0x1, 0x6, {0x6, 0x759bc414, 0x800007, 0x20003}}) r3 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="a6", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000180)) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x28, {0x28, 0x8, "83efb930f0187ff0478fa22a61a546d32eddb794b60013cfc3f255019709000000000000009c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r8 = getpgrp(0x0) r9 = gettid() move_pages(r9, 0x4, &(0x7f0000000180)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000001000/0x4000)=nil], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioperm(0x4, 0x4, 0x5) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) rt_tgsigqueueinfo(r8, r9, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffc, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 34.645906073s ago: executing program 4 (id=1076): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xb00, 0x12) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0xd0d6a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) 30.740945145s ago: executing program 4 (id=1093): socket(0x28, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/ip6_tables_targets\x00') r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 29.241080118s ago: executing program 4 (id=1097): socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x6000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r5, 0xb) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808000000a3f30a010203010902240001020010110904630702584200080905fe0f1000080009090502"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) fadvise64(r6, 0x2400000, 0x2, 0x500) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x8000, 0x0, 0x0, @empty, @private2, [], "98efd03a7e60b623"}}}}}}}, 0x0) 25.829985348s ago: executing program 4 (id=1105): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x100, 0x30}, 0xc) r7 = socket$inet6(0xa, 0x80001, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0xa4e0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000180)={0x18, r9, 0x1, 0x0, &(0x7f0000000140)=[{0x0, 0x1000}]}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x310) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 24.828853251s ago: executing program 4 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000180)='gadgetfs\x00', 0x220000, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x24483) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x220) 13.305071169s ago: executing program 3 (id=1148): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x0, 0xf, 0x5, "ae2964eb4f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200502000000d351fa995ca93f9e8c792daa336506ce4db56b6e1ea846023d8eab19ee073bedb184a3f6b64a331a9cce16d71ec89e679072f7d2866bac8d5f88c74a4fa1ab02f56807742a23eb98d873dc6b6ab713445e22e5864d722a3fa46baa8845eb2734f94bcad37e4ff81deda8f58cb9c3062662b49b"], 0x0, 0x0}) 10.699853849s ago: executing program 2 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x61d9, 0x0, 0x1, 0xffff, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='\x00', 0x482802, &(0x7f0000000300)={@align=0x9, {0xfffe, 0x1, 0x8, 0x8}}, 0x9, &(0x7f0000000340), &(0x7f0000000380)=0x9}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x1f, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000d000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000003bde0000000600000000000000000085000000b2a20000c1030800fcffffff18260000", @ANYRES32=r4, @ANYBLOB="000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000000400000005ab1000fcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x29, '\x00', r2, 0x2b}, 0x94) 10.584782703s ago: executing program 2 (id=1162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fc, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setns(r3, 0x0) r4 = socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r6, 0x20d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) ioctl$SCSI_IOCTL_GET_IDLUN(r9, 0x5382, &(0x7f0000000300)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) getsockopt$bt_hci(r4, 0x84, 0x1b, 0x0, &(0x7f0000001040)) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 10.476175081s ago: executing program 2 (id=1163): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010", @ANYRES32, @ANYRESHEX], 0x3c}}, 0x40011) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x6e1e, &(0x7f00000013c0)={0x0, 0xb2d2, 0x400, 0xfffffffc, 0x87}) r5 = eventfd2(0x80, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r5, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) r6 = getpgid(0xffffffffffffffff) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r6, 0x0, 0x4004) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000500000000ffff00008000000002"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r7, &(0x7f0000003f80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, 0x0) 10.0237044s ago: executing program 3 (id=1165): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) pipe2$9p(&(0x7f0000000040), 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 9.938008622s ago: executing program 2 (id=1166): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000008000000070000000000000096c0fcfe558f506ed0111092cfb73f26fd9e3237ef41b730f47fb2ff6c386506c1479ad304ee1014a53ad509320836e0d8b7caa397f260b354074e3bfdc74ea8f9c9735bb58cfcca7989f216b8263be2f785a726c00ee514adbed7e807a9bb1ff45da2fde359f9f191e6e507155494ed0f317d72b29888596bb413fcc9ee96896c73da8846356a3772f5cb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x2, 0xc0, 0x8001, 0x8}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x9, 0x0, 0xe4, 0x40, 0xa, 0x0, 0x2b, 0x16}, {0x200000, 0x10000, 0x3, 0xfc, 0xba, 0x5, 0x7d, 0x8, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x9, 0x1, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x3, 0x0, 0x42, 0xb, 0xfa, 0x8, 0x7, 0x12}, {0x10000, 0x26000, 0xb, 0xa, 0x3, 0x2, 0xab, 0x3, 0x7, 0xf, 0xdb}, {0x4000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0xa1, 0x47, 0x0, 0xfe}, {0x3000, 0x70000, 0x3, 0x3, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xa000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0x10, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x41000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x2, 0x80, 0xfff]}) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x401, 0x6, 0xff, 0x2, 0x2, 0x9}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e0103000047"], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 9.193330293s ago: executing program 3 (id=1167): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110027bd7000fddbdf251500000008000300", @ANYRES32=r9, @ANYBLOB="20002b8005000200000000000800010003"], 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x4000080) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x3c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40801) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r3}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf25040000000800020005000000184ab70c8eeae7bfa54271102f6ffa74792500ad85de24f9761fc51ad1af3305894da5c96a6cc5c8f2628a4b8366fb2ea6c865d911f3ce85bcce98441c3a084e2c2c528fbcf3c64aec6639538482e25452bd975293943f0d1447f60bfeaf40311a56c129e74c75f7b55199b0d14fbc2465b41a5da2f6bc79dcad1e9f9a7f62bbf05dc60061a8f872c8cadb98403aca1096b8de85824974298136b43e7eeecdd0a88cc87d5f675e30fb63fb6fd5a6bcf7dddbc6"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) 9.17328766s ago: executing program 32 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000180)='gadgetfs\x00', 0x220000, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x24483) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x220) 7.876681203s ago: executing program 1 (id=1173): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0xd0d6a}) 7.764009342s ago: executing program 1 (id=1174): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setresgid(0xee01, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000004c0)='attr/prev\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000400)=[{0x0, 0x3, {0x0, 0xff, 0x1}, {0x0, 0x0, 0x1}, 0xff, 0x2}], 0x4b) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, &(0x7f00000003c0)='0', 0x1) 7.15772962s ago: executing program 3 (id=1175): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x0, 0xf, 0x5, "ae2964eb4f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200502000000d351fa995ca93f9e8c792daa336506ce4db56b6e1ea846023d8eab19ee073bedb184a3f6b64a331a9cce16d71ec89e679072f7d2866bac8d5f88c74a4fa1ab02f56807742a23eb98d873dc6b6ab713445e22e5864d722a3fa46baa8845eb2734f94bcad37e4ff81deda8f58cb9c3062662b49b"], 0x0, 0x0}) 6.654638659s ago: executing program 1 (id=1176): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 6.078988383s ago: executing program 0 (id=1177): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) pipe2$9p(&(0x7f0000000040), 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 5.98201308s ago: executing program 2 (id=1178): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200"], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xb00, 0x12) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0xd0d6a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) 5.786887494s ago: executing program 0 (id=1179): socket(0x28, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/ip6_tables_targets\x00') r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 5.209980554s ago: executing program 1 (id=1180): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="0a000000010000004200aabff624088ffab34077ae000040000000c2000000", @ANYBLOB="97630bf5b605a5b51e48a426b4a98bb74b9ac97d107ebd8c25376bf062064575d152e5ff1b2d25bd09bee2ed64483bf9f58f2c63dac9358d73ded573a1d59ec7f47b8c830769c4eac2221f1c22a2192c318747a3203fd5f8961e8194fb7701627bcb48d249b4757a13b5c533da484b35d177ad6e7bebe3e90594daf45a9426712c0da00cd11da48b4d094e08365c476fb25697b803960d26c4b6700c64782d777c626ea6c4c3ba9868ccf708fccf875bc0d2dc449f818fc64264097ab30932c1dd12fc035fdfc3bba768ad55333b39d7ae06b0b101df70e381d24faf48d7b5dc3a3c1892593d5ce74346bc894339161eee5555f26b", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)="3848fc893a8c72f0ae9ac0beb63a3aa856726aded6078ab60b9aa32ff4c491", &(0x7f00000000c0), 0x1007, r2}, 0x38) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="11"], 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) 4.68888843s ago: executing program 0 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x1, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe03, 0x0, 0x6, 0x1000000000}, 0x0, 0x1002, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8004}}, 0xe8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf3000000000000025000200091bfeff3d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 3.898905799s ago: executing program 3 (id=1182): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x112, 0xe, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getpgrp(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000440)={0x0, 0x0, '\x00', {0x0, @reserved}}) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000004000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c64469431c000000010a050000000000c2f57d8f0a0000060800084000000000"], 0x1c}}, 0x20008000) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000000104010800000000000000000a00000105000100e2e8e9410a000200000000080000ffffffffffffff7f8d7396f40e37bcbad18df4f6c99d0f61d66e1d8d9483a351a9abcd1ad8c36bc6217ed904177f5426925126b9059d8808fed441d3dbcedafe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) 3.77485506s ago: executing program 1 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84f, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)="41d09292b4f9babe89cd637b86dd", 0xe, 0x80, &(0x7f0000000200)={0x11, 0x17, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) 2.261978485s ago: executing program 2 (id=1184): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, 0x0, 0x5) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_io_uring_setup(0x126a, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x1, 0x3a8}, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x5, r3, 0x3e, {0x8000000000e8, 0x3}, 0x7f}, 0x1) sendto$inet_nvme_of_msg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) unshare(0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @any, 0xfd}, 0xa) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 932.012946ms ago: executing program 0 (id=1185): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x2f35, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000440)) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000e000000000000000000000000bbfe8000000000000000000000000000aa00404e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002f3d890780000"], 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x400401, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x9, 0x10, 0x3}) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60010120006108e12151392948191aee68eb9ebd783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000040000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1a4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004"], 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x12}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r6, @ANYBLOB="00032abd7000fddbdf25030000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004803}, 0x8000) 930.257417ms ago: executing program 1 (id=1186): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000"], 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x54) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000380)}) ioprio_set$pid(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14/M\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0x19e, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000500)='\xbc50\xf4\xc4Fv:\xc0\xe3\x97\x8cL\x85\xf0\x9bhq\xa9', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) 885.404933ms ago: executing program 3 (id=1187): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 62.970681ms ago: executing program 0 (id=1188): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) pipe2$9p(&(0x7f0000000040), 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 0s ago: executing program 0 (id=1189): r0 = memfd_create(&(0x7f0000000f80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x03n\x0f\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x06\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3\x00\x00\x00\x00\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t\x8a/\x90\xd8\xb7\x80<\xef\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\x89\x9e\v\x9f\xa3\x03hSq\x95\x8f\xe1J\xd3#/f4\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\x90$\xab\xfd\x92\xb0\xde\xfb\x91b0T\x87\xdd\x00\x1b4\xbb\x13^\xb1~\x02\xc0\xd7\x8e\xdc:8y\xb2\xb7i<[C`\\\x98T\xca\xb4N\xe3@\xa2\xa0\xae&\xde\xa2\xbc\x00'/1188, 0x5) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x23, 0x99, 0xd1, 0x8, 0xcf3, 0xb003, 0x17b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x27, 0x16, 0x0, 0x60, 0xc3, 0x40, 0x7}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000480)) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x5, 0xaf0, @vifc_lcl_ifindex=r3, @empty}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x1010, r0, 0x0) kernel console output (not intermixed with test programs): [ 273.217077][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 273.223646][ T5730] usb 2-1: config 0 has no interfaces? [ 273.230038][ T5730] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 273.252403][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.265937][ T8359] bond1 (unregistering): Released all slaves [ 273.276118][ T5730] usb 2-1: config 0 descriptor?? [ 273.309769][ T30] audit: type=1400 audit(1780653725.257:521): avc: denied { mount } for pid=8360 comm="syz.0.681" name="/" dev="hugetlbfs" ino=18592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 273.335270][ T8361] ip6t_srh: unknown srh invflags 4000 [ 273.442512][ T8365] bond1 (unregistering): Released all slaves [ 273.545631][ T8373] tipc: Enabled bearer , priority 0 [ 273.567333][ T8373] syzkaller0: entered promiscuous mode [ 273.582596][ T8373] syzkaller0: entered allmulticast mode [ 273.602036][ T8373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.683'. [ 273.626661][ T5730] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 273.636268][ T8373] tipc: Resetting bearer [ 273.658137][ T8372] tipc: Resetting bearer [ 273.686449][ T8372] tipc: Disabling bearer [ 273.786756][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 273.798805][ T5730] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.811859][ T5730] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.821145][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.831178][ T5730] usb 4-1: Product: syz [ 273.836373][ T5730] usb 4-1: Manufacturer: syz [ 273.842118][ T5730] usb 4-1: SerialNumber: syz [ 273.843261][ T8380] netlink: 'syz.4.686': attribute type 2 has an invalid length. [ 273.869779][ T5730] usb 4-1: config 0 descriptor?? [ 273.875845][ T8368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.893498][ T8380] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 273.955664][ T30] audit: type=1400 audit(1780653725.897:522): avc: denied { connect } for pid=8379 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.237732][ T8386] lo speed is unknown, defaulting to 1000 [ 274.931809][ T5729] usb 4-1: USB disconnect, device number 47 [ 275.357084][ T8401] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 275.367970][ T8401] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 275.376750][ T30] audit: type=1400 audit(1780653727.318:523): avc: denied { firmware_load } for pid=8400 comm="syz.0.690" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 275.399977][ T30] audit: type=1400 audit(1780653727.328:524): avc: denied { write } for pid=8402 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.996699][ T8405] futex_wake_op: syz.2.691 tries to shift op by 36; fix this program [ 276.021275][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 276.414446][ T48] usb 2-1: USB disconnect, device number 58 [ 276.701886][ T8412] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 277.032324][ T8419] lo speed is unknown, defaulting to 1000 [ 278.375053][ T5615] Bluetooth: hci4: command 0x0405 tx timeout [ 278.377376][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 279.803742][ T8439] syzkaller0: entered promiscuous mode [ 279.809249][ T8439] syzkaller0: entered allmulticast mode [ 280.543762][ T48] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 280.554303][ T30] audit: type=1400 audit(1780653732.451:525): avc: denied { create } for pid=8449 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 280.723225][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 280.984979][ T30] audit: type=1400 audit(1780653732.451:526): avc: denied { connect } for pid=8449 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 281.013626][ T48] usb 4-1: config 0 has no interfaces? [ 281.024267][ T48] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 281.052120][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.077017][ T48] usb 4-1: config 0 descriptor?? [ 281.204279][ T5348] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 281.372677][ T5348] usb 3-1: Invalid ep0 maxpacket: 16 [ 281.582672][ T5348] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 281.629705][ T8474] xt_cgroup: invalid path, errno=-2 [ 281.842535][ T5348] usb 3-1: Invalid ep0 maxpacket: 16 [ 281.917162][ T5348] usb usb3-port1: attempt power cycle [ 282.272771][ T5348] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 282.355152][ T5348] usb 3-1: Invalid ep0 maxpacket: 16 [ 282.730837][ T5348] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 282.765158][ T5348] usb 3-1: Invalid ep0 maxpacket: 16 [ 282.778717][ T5348] usb usb3-port1: unable to enumerate USB device [ 283.475007][ T30] audit: type=1400 audit(1780653734.962:527): avc: denied { mount } for pid=8486 comm="syz.0.714" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 284.396164][ T29] usb 4-1: USB disconnect, device number 48 [ 284.502527][ T8501] bond2 (unregistering): Released all slaves [ 284.702361][ T8513] serio: Serial port ptm0 [ 285.064679][ T8507] bond2 (unregistering): Released all slaves [ 285.205733][ T30] audit: type=1400 audit(1780653737.163:528): avc: denied { connect } for pid=8518 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 285.257252][ T30] audit: type=1400 audit(1780653737.213:529): avc: denied { write } for pid=8518 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 285.285949][ T30] audit: type=1400 audit(1780653737.243:530): avc: denied { connect } for pid=8518 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.490768][ T5715] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 285.529890][ T30] audit: type=1326 audit(1780653737.463:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 285.588430][ T30] audit: type=1326 audit(1780653737.463:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 285.642944][ T30] audit: type=1326 audit(1780653737.513:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 285.674006][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 285.689133][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.707764][ T30] audit: type=1326 audit(1780653737.513:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 285.745194][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 285.752835][ T5715] usb 4-1: can't read configurations, error -61 [ 285.799912][ T30] audit: type=1326 audit(1780653737.513:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 285.848948][ T30] audit: type=1326 audit(1780653737.523:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 285.886571][ T30] audit: type=1326 audit(1780653737.523:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 285.913309][ T5715] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 285.963805][ T30] audit: type=1326 audit(1780653737.523:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 286.043558][ T30] audit: type=1326 audit(1780653737.533:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 286.081626][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 286.114181][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.134808][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 286.148751][ T5715] usb 4-1: can't read configurations, error -61 [ 286.159667][ T30] audit: type=1326 audit(1780653737.533:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 286.196904][ T5715] usb usb4-port1: attempt power cycle [ 286.221873][ T30] audit: type=1326 audit(1780653737.533:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adfd9ce59 code=0x7ffc0000 [ 286.550175][ T5715] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 286.581592][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 286.597442][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.634496][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 286.692586][ T5715] usb 4-1: can't read configurations, error -61 [ 286.889951][ T5715] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 286.942009][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 286.984249][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.049364][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 287.108168][ T5715] usb 4-1: can't read configurations, error -61 [ 287.172244][ T5715] usb usb4-port1: unable to enumerate USB device [ 287.683754][ T8459] Set syz1 is full, maxelem 65536 reached [ 287.938485][ T5715] Process accounting resumed [ 288.559767][ T5715] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 288.719037][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 288.726316][ T5715] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 288.734571][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.746297][ T5715] usb 4-1: config 0 has no interface number 0 [ 288.752567][ T5715] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.763473][ T5715] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.778119][ T5715] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 288.783883][ T5348] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 288.787728][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.808476][ T5715] usb 4-1: Product: syz [ 288.812789][ T5715] usb 4-1: Manufacturer: syz [ 288.817462][ T5715] usb 4-1: SerialNumber: syz [ 288.825855][ T5715] usb 4-1: config 0 descriptor?? [ 288.837448][ T5715] asix 4-1:0.34: probe with driver asix failed with error -22 [ 288.948947][ T5348] usb 2-1: Using ep0 maxpacket: 16 [ 288.955737][ T5348] usb 2-1: config 0 has no interfaces? [ 288.962207][ T5348] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 288.971865][ T5348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.986047][ T5348] usb 2-1: config 0 descriptor?? [ 289.102396][ T8536] batadv_slave_0: Caught tx_queue_len zero misconfig [ 289.109908][ T8539] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 289.261573][ T8584] vivid-003: ================= START STATUS ================= [ 289.282115][ T8584] vivid-003: Radio HW Seek Mode: Bounded [ 289.290030][ T8584] vivid-003: Radio Programmable HW Seek: false [ 289.298375][ T8584] vivid-003: RDS Rx I/O Mode: Block I/O [ 289.304176][ T8584] vivid-003: Generate RBDS Instead of RDS: false [ 289.316319][ T8584] vivid-003: RDS Reception: true [ 289.322259][ T8584] vivid-003: RDS Program Type: 0 inactive [ 289.328667][ T8584] vivid-003: RDS PS Name: inactive [ 289.333912][ T8584] vivid-003: RDS Radio Text: inactive [ 289.341651][ T8584] vivid-003: RDS Traffic Announcement: false inactive [ 289.348550][ T8584] vivid-003: RDS Traffic Program: false inactive [ 289.355058][ T8584] vivid-003: RDS Music: false inactive [ 289.360729][ T8584] vivid-003: ================== END STATUS ================== [ 289.598667][ T8592] tipc: Enabling of bearer rejected, failed to enable media [ 289.679964][ T8592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.732'. [ 289.788582][ T5348] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 290.543761][ T5348] usb 5-1: config 9 has an invalid interface number: 245 but max is 0 [ 290.557584][ T5348] usb 5-1: config 9 has no interface number 0 [ 290.632312][ T5348] usb 5-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 290.805677][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.834540][ T5348] usb 5-1: Product: syz [ 290.841313][ T5348] usb 5-1: Manufacturer: syz [ 290.841333][ T5348] usb 5-1: SerialNumber: syz [ 290.912445][ T8625] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 290.922969][ T8625] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 291.273631][ T8582] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.729'. [ 291.284437][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 291.284894][ T30] audit: type=1400 audit(1780653743.226:657): avc: denied { ioctl } for pid=8581 comm="syz.4.729" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 291.292188][ T5348] uvcvideo 5-1:9.245: Found UVC 0.06 device syz (8086:1155) [ 291.329184][ T5348] uvcvideo 5-1:9.245: Entity type for entity Output 32770 was not initialized! [ 291.342873][ T5348] uvcvideo 5-1:9.245: Failed to create links for entity 32770 [ 291.343955][ T5715] usb 4-1: USB disconnect, device number 53 [ 291.356396][ T5348] uvcvideo 5-1:9.245: Failed to register entities (-22). [ 291.377553][ T5348] usb 5-1: USB disconnect, device number 38 [ 292.310658][ T5348] usb 2-1: USB disconnect, device number 59 [ 292.889948][ T8642] 9p: Bad value for 'rfdno' [ 293.436685][ T29] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 293.627560][ T8648] tipc: Enabling of bearer rejected, failed to enable media [ 293.651496][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 293.724818][ T8654] xt_cgroup: invalid path, errno=-2 [ 293.752407][ T8655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.743'. [ 294.073780][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 294.082860][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.091233][ T29] usb 3-1: Product: ᬗ骭㌆஛簀ϕ툖嚧덫㈉ୡ࿼ⳳ覤愍 [ 294.115350][ T29] usb 3-1: Manufacturer: Л [ 294.135625][ T29] usb 3-1: SerialNumber: 俶钓菗뷕叠谘Ⳑ얏䓶홆䢔䵊呖ͻ櫱颧덯䒙圥썩播ꙓ셤腶㹅㶁ꡂ﷘ᇜ鍇ଌ辮࿌ᗒ蟺✺폫孪秺边뜂㊛ᛍ㖥◨㕄닸筅㙧繁ꎕ쒩鑌賖ೲ蠃萐吜Ꙙ﮶㾵뽋挓솝埘麥ꑟ喙輛ᬧ笯케荀끍㥸烇芴깴媓눣㥊楄Ἵ杔ࠪ곣ꖯ㼿춦遚Ȇꌈ醣롹퐢儉鍔裪ⅽ㽪嗟銧 [ 294.194589][ T8660] binder: 8659:8660 ioctl c0306201 200000000180 returned -22 [ 294.203027][ T8660] binder: 8659:8660 ioctl c08c5114 200000000200 returned -22 [ 294.670977][ T8674] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 294.678242][ T8674] overlayfs: failed to set xattr on upper [ 294.684037][ T8674] overlayfs: ...falling back to redirect_dir=nofollow. [ 294.691059][ T8674] overlayfs: ...falling back to index=off. [ 294.696969][ T8674] overlayfs: ...falling back to uuid=null. [ 295.846397][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 295.890431][ T29] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 295.899642][ T8678] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 295.905450][ T5348] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 295.934187][ T8678] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 295.974984][ T8662] comedi comedi3: comedi_parport: I/O port conflict (0x100,3) [ 296.105456][ T5348] usb 4-1: Using ep0 maxpacket: 16 [ 296.365772][ T5348] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 296.376630][ T5348] usb 4-1: config 0 has no interface number 0 [ 296.401533][ T5348] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 296.610565][ T5348] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 296.659419][ T5348] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 296.685029][ T29] usb 3-1: USB disconnect, device number 42 [ 296.776190][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.806809][ T5348] usb 4-1: Product: syz [ 296.832976][ T5348] usb 4-1: Manufacturer: syz [ 297.242937][ T5348] usb 4-1: SerialNumber: syz [ 297.318181][ T5348] usb 4-1: config 0 descriptor?? [ 297.324298][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.340718][ T8670] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.349298][ T8670] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.420920][ T5348] asix 4-1:0.34: probe with driver asix failed with error -71 [ 297.431157][ T5348] usb 4-1: USB disconnect, device number 54 [ 297.514666][ T5738] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 298.364292][ T8691] nbd4: detected capacity change from 0 to 63 [ 298.412912][ T8704] tipc: Enabled bearer , priority 0 [ 298.424686][ T5738] usb 2-1: Invalid ep0 maxpacket: 16 [ 298.436156][ T8704] syzkaller0: entered promiscuous mode [ 298.459946][ T8704] syzkaller0: entered allmulticast mode [ 298.513365][ T8713] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 0, id = 0 [ 298.527698][ T8704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.758'. [ 298.645985][ T5738] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 298.654819][ T8704] tipc: Resetting bearer [ 298.666780][ T8717] xt_hashlimit: size too large, truncated to 1048576 [ 298.676538][ T8703] tipc: Resetting bearer [ 298.692436][ T8717] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 298.725660][ T8703] tipc: Disabling bearer [ 298.804428][ T5738] usb 2-1: Invalid ep0 maxpacket: 16 [ 298.822234][ T5738] usb usb2-port1: attempt power cycle [ 298.830822][ T5626] block nbd4: Receive control failed (result -104) [ 299.051422][ T8725] Invalid source name [ 299.076302][ T8725] UBIFS error (pid: 8725): cannot open "ubifs", error -22 [ 299.173834][ T5738] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 299.244384][ T5738] usb 2-1: Invalid ep0 maxpacket: 16 [ 299.263479][ T8731] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 299.273836][ T8731] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 299.603586][ T5738] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 299.634247][ T5738] usb 2-1: Invalid ep0 maxpacket: 16 [ 299.648459][ T5738] usb usb2-port1: unable to enumerate USB device [ 299.913515][ T29] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 299.993689][ T8741] xt_cgroup: invalid path, errno=-2 [ 300.124757][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 300.293415][ T29] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 300.305965][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 300.445016][ T29] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 300.477557][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.509574][ T29] usb 3-1: Product: syz [ 300.726208][ T8745] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 300.733913][ T8745] overlayfs: failed to set xattr on upper [ 300.739740][ T8745] overlayfs: ...falling back to redirect_dir=nofollow. [ 300.746755][ T8745] overlayfs: ...falling back to index=off. [ 300.752654][ T8745] overlayfs: ...falling back to uuid=null. [ 300.792754][ T29] usb 3-1: Manufacturer: syz [ 300.797554][ T29] usb 3-1: SerialNumber: syz [ 301.176878][ T29] usb 3-1: config 0 descriptor?? [ 301.197603][ T29] hub 3-1:0.0: bad descriptor, ignoring hub [ 301.216560][ T29] hub 3-1:0.0: probe with driver hub failed with error -5 [ 301.590311][ T5348] usb 3-1: USB disconnect, device number 43 [ 302.327580][ T29] libceph: connect (1)[c::]:6789 error -101 [ 302.813760][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 302.828818][ T8751] ceph: No mds server is up or the cluster is laggy [ 302.829125][ T29] libceph: connect (1)[c::]:6789 error -101 [ 302.854187][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 303.178622][ T30] audit: type=1400 audit(1780653755.142:658): avc: denied { getopt } for pid=8782 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.491684][ T5729] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 304.431210][ T5729] usb 3-1: Invalid ep0 maxpacket: 16 [ 304.581291][ T5729] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 304.952537][ T5729] usb 3-1: Invalid ep0 maxpacket: 16 [ 304.968273][ T5729] usb usb3-port1: attempt power cycle [ 305.161031][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 305.330861][ T5729] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 305.350831][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.389349][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 305.391135][ T5729] usb 3-1: Invalid ep0 maxpacket: 16 [ 305.441950][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.543542][ T8804] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 305.577051][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.605946][ T8798] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 305.652418][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.680643][ T5729] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 305.743157][ T5729] usb 3-1: Invalid ep0 maxpacket: 16 [ 305.790292][ T5729] usb usb3-port1: unable to enumerate USB device [ 306.057221][ T30] audit: type=1326 audit(1780653758.023:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce66f9ce59 code=0x7fc00000 [ 308.096351][ T8834] SQUASHFS error: Failed to read block 0x0: -5 [ 308.103645][ T8834] unable to read squashfs_super_block [ 308.407007][ T9] usb 5-1: USB disconnect, device number 39 [ 309.713269][ T8850] tipc: Enabled bearer , priority 0 [ 309.759338][ T8850] syzkaller0: entered promiscuous mode [ 309.775987][ T8850] syzkaller0: entered allmulticast mode [ 309.805199][ T8850] sch_tbf: peakrate 7 is lower than or equals to rate 994622507201582345 ! [ 309.910127][ T8852] netlink: 44 bytes leftover after parsing attributes in process `syz.1.797'. [ 309.925936][ T8850] tipc: Resetting bearer [ 309.941125][ T8848] tipc: Resetting bearer [ 309.984297][ T8848] tipc: Disabling bearer [ 310.006833][ T30] audit: type=1400 audit(1780653761.965:660): avc: denied { bind } for pid=8858 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 310.028988][ T9] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 310.116695][ T8862] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 310.126928][ T8862] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 310.759207][ T8865] futex_wake_op: syz.1.802 tries to shift op by 36; fix this program [ 310.781466][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 311.117824][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 311.400248][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.407475][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.547832][ T9] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 311.742768][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 311.753543][ T9] usb usb5-port1: attempt power cycle [ 311.953830][ T30] audit: type=1400 audit(1780653763.916:661): avc: denied { setopt } for pid=8879 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.026480][ T8882] netlink: 56 bytes leftover after parsing attributes in process `syz.2.810'. [ 312.037127][ T8882] netlink: 56 bytes leftover after parsing attributes in process `syz.2.810'. [ 312.049190][ T8882] netlink: 11 bytes leftover after parsing attributes in process `syz.2.810'. [ 312.057372][ T5348] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 312.201773][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 312.224077][ T5348] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.256821][ T5348] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 312.270526][ T8888] bond3 (unregistering): Released all slaves [ 312.285581][ T5348] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.312558][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.495097][ T8874] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.513573][ T5348] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.576601][ T8894] bond3 (unregistering): Released all slaves [ 312.617097][ T29] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 312.634740][ T30] audit: type=1400 audit(1780653764.597:662): avc: denied { accept } for pid=8902 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 312.830100][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 313.475095][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 314.716389][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 314.947186][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 314.963362][ T8904] sit1: entered allmulticast mode [ 314.989054][ T29] usb 2-1: string descriptor 0 read error: -22 [ 314.995520][ T29] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 315.002358][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 315.005406][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.020134][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 315.128731][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 315.137315][ T9] usb 5-1: Product: syz [ 315.141469][ T9] usb 5-1: Manufacturer: syz [ 315.146079][ T9] usb 5-1: SerialNumber: syz [ 315.170322][ T9] usb 5-1: config 0 descriptor?? [ 315.180618][ T8899] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 315.742870][ T29] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 315.752615][ T5348] usb 5-1: USB disconnect, device number 42 [ 315.827524][ T48] usb 4-1: USB disconnect, device number 55 [ 316.060617][ T8920] syzkaller0: entered promiscuous mode [ 316.060638][ T8920] syzkaller0: entered allmulticast mode [ 316.079853][ T29] usb 2-1: USB disconnect, device number 64 [ 316.149050][ T30] audit: type=1400 audit(1780653768.079:663): avc: denied { bind } for pid=8916 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.173793][ T8924] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 316.181326][ T8920] tipc: Enabled bearer , priority 0 [ 316.229191][ T8917] tipc: Resetting bearer [ 316.262376][ T8917] tipc: Disabling bearer [ 316.292954][ T8921] overlayfs: missing 'lowerdir' [ 316.298196][ T30] audit: type=1326 audit(1780653768.269:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298226][ T30] audit: type=1326 audit(1780653768.269:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298248][ T30] audit: type=1326 audit(1780653768.269:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298271][ T30] audit: type=1326 audit(1780653768.269:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298293][ T30] audit: type=1326 audit(1780653768.269:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298316][ T30] audit: type=1326 audit(1780653768.269:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298337][ T30] audit: type=1326 audit(1780653768.269:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298359][ T30] audit: type=1326 audit(1780653768.269:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 316.298381][ T30] audit: type=1326 audit(1780653768.269:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.2.821" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 317.122747][ T8941] lo speed is unknown, defaulting to 1000 [ 317.164886][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 317.196725][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 317.211804][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 317.223782][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 317.233375][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 317.244794][ T5729] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 317.298472][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 317.327294][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 317.338776][ T9] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 317.347974][ T9] usb 5-1: config 0 has no interface number 0 [ 317.354932][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 317.365502][ T9] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 317.378270][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 317.396652][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 317.406996][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.417527][ T9] usb 5-1: Product: syz [ 317.424645][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 317.424780][ T9] usb 5-1: Manufacturer: syz [ 317.441330][ T9] usb 5-1: SerialNumber: syz [ 317.455171][ T5729] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 317.467921][ T9] usb 5-1: config 0 descriptor?? [ 317.475714][ T8937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.496190][ T9] asix 5-1:0.34: probe with driver asix failed with error -22 [ 317.514056][ T5729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.548713][ T5729] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 317.585219][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.882639][ T5729] usb 3-1: config 0 descriptor?? [ 317.915534][ T8949] 9p: Bad value for 'wfdno' [ 318.291698][ T5729] usbhid 3-1:0.0: can't add hid device: -32 [ 318.298864][ T5729] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 319.403549][ T5626] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 319.432426][ T29] usb 3-1: USB disconnect, device number 48 [ 319.848312][ T29] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 320.038235][ T5729] usb 5-1: USB disconnect, device number 43 [ 320.183300][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 320.194134][ T29] usb 3-1: config 0 has no interfaces? [ 320.200718][ T29] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 320.222600][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.247224][ T29] usb 3-1: config 0 descriptor?? [ 320.475748][ T8989] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 320.494955][ T8989] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 320.523121][ T5729] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 320.855009][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 320.874165][ T5729] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 320.885317][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.900760][ T5729] usb 5-1: config 0 descriptor?? [ 321.111977][ T5729] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 321.127089][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.144883][ T5729] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 321.156219][ T5729] usb 5-1: media controller created [ 321.179533][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.243157][ T1220] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 321.368717][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.380127][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.498384][ T1220] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 321.513667][ T1220] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 321.527688][ T1220] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.537981][ T1220] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 321.549342][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 321.559197][ T1220] usb 4-1: Product: syz [ 321.564473][ T1220] usb 4-1: Manufacturer: syz [ 321.569167][ T1220] usb 4-1: SerialNumber: syz [ 321.576154][ T1220] usb 4-1: config 0 descriptor?? [ 321.586632][ T8998] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 321.601481][ T1220] usb 4-1: selecting invalid altsetting 0 [ 321.741575][ T9010] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 321.772703][ T9010] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 322.007916][ T5729] az6027: usb out operation failed. (-71) [ 322.016802][ T5729] az6027: usb out operation failed. (-71) [ 322.029031][ T5729] stb0899_attach: Driver disabled by Kconfig [ 322.228119][ T5729] az6027: no front-end attached [ 322.228119][ T5729] [ 322.248289][ T5715] usb 4-1: USB disconnect, device number 56 [ 322.295235][ T5729] az6027: usb out operation failed. (-71) [ 322.324681][ T5729] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 322.400180][ T5729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 322.420749][ T5729] dvb-usb: schedule remote query interval to 400 msecs. [ 322.429163][ T5729] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 322.445095][ T5729] usb 5-1: USB disconnect, device number 44 [ 322.548085][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.845'. [ 322.566765][ T9016] bond3 (unregistering): Released all slaves [ 322.568422][ T5729] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 322.615585][ T5348] usb 3-1: USB disconnect, device number 49 [ 322.902428][ T5729] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 322.917994][ T9036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.848'. [ 322.976930][ T5715] hid_parser_main: 26 callbacks suppressed [ 322.976943][ T5715] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 323.012838][ T5715] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.082467][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 323.098531][ T5729] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.098594][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 323.116079][ T9039] fido_id[9039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 323.144556][ T5729] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.166767][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.194196][ T5729] usb 5-1: Product: syz [ 323.213918][ T5729] usb 5-1: Manufacturer: syz [ 323.226112][ T5729] usb 5-1: SerialNumber: syz [ 323.249611][ T5729] usb 5-1: config 0 descriptor?? [ 323.278696][ T9021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 323.483367][ T5626] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 323.493280][ T5626] Bluetooth: hci4: Injecting HCI hardware error event [ 323.502234][ T5615] Bluetooth: hci4: hardware error 0x00 [ 323.644599][ T5348] usb 5-1: USB disconnect, device number 45 [ 323.860857][ T9049] comedi comedi3: pcl818: I/O port conflict (0x100,16) [ 323.951688][ T48] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 324.043397][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.852'. [ 324.090974][ T9053] bridge: RTM_NEWNEIGH with invalid ether address [ 324.123520][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 324.143427][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 324.156855][ T9053] comedi comedi3: s526: I/O port conflict (0x100,64) [ 324.169242][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 324.200477][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 324.246375][ T48] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 324.264988][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.294336][ T48] usb 3-1: Product: syz [ 324.325225][ T48] usb 3-1: Manufacturer: syz [ 324.331374][ T29] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 324.431493][ T48] usb 3-1: SerialNumber: syz [ 324.574084][ T9066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.855'. [ 324.605976][ T9066] input: syz1 as /devices/virtual/input/input15 [ 324.624580][ T29] usb 4-1: device descriptor read/64, error -71 [ 324.913863][ T29] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 324.914735][ T48] usb 3-1: 1:1 : bogus bTerminalLink 0 [ 324.927611][ T48] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 324.935625][ T48] usb 3-1: unit 1 not found! [ 324.944643][ T48] usb 3-1: unit 7 not found! [ 324.983143][ T48] usb 3-1: USB disconnect, device number 50 [ 325.035921][ T7150] udevd[7150]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.072665][ T29] usb 4-1: device descriptor read/64, error -71 [ 325.242887][ T29] usb usb4-port1: attempt power cycle [ 325.444804][ T9078] netlink: 264 bytes leftover after parsing attributes in process `syz.4.857'. [ 325.457556][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 325.457569][ T30] audit: type=1400 audit(1780653777.433:680): avc: denied { create } for pid=9077 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 325.488923][ T30] audit: type=1400 audit(1780653777.433:681): avc: denied { module_load } for pid=9077 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 325.550646][ T5615] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 325.591616][ T29] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 325.621660][ T29] usb 4-1: device descriptor read/8, error -71 [ 325.662015][ T5729] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 325.850523][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 325.864098][ T5729] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.877608][ T29] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 325.892641][ T5729] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 325.916252][ T5729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 325.926467][ T29] usb 4-1: device descriptor read/8, error -71 [ 325.945188][ T5729] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 325.967867][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.987499][ T5729] usb 2-1: Product: syz [ 325.991710][ T5729] usb 2-1: Manufacturer: syz [ 325.996353][ T5729] usb 2-1: SerialNumber: syz [ 326.018945][ T5729] usb 2-1: config 0 descriptor?? [ 326.051537][ T29] usb usb4-port1: unable to enumerate USB device [ 326.268752][ T9084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.412658][ T9086] blkio.reset_stats is deprecated [ 326.422906][ T9086] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 326.426830][ T5729] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 326.839994][ T29] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 326.862408][ T5729] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 326.872612][ T5729] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 326.881304][ T5729] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 327.001828][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 327.016371][ T29] usb 3-1: config 1 has an invalid interface number: 67 but max is 0 [ 327.031037][ T29] usb 3-1: config 1 has no interface number 0 [ 327.039725][ T29] usb 3-1: config 1 interface 67 altsetting 129 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 327.050942][ T29] usb 3-1: config 1 interface 67 has no altsetting 0 [ 327.059319][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=ab.ed [ 327.069228][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.079636][ T29] usb 3-1: Product: syz [ 327.083935][ T29] usb 3-1: Manufacturer: syz [ 327.088644][ T29] usb 3-1: SerialNumber: syz [ 327.370039][ T5729] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 327.584886][ T29] usb 3-1: USB disconnect, device number 51 [ 327.620336][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 327.629702][ T5729] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.644929][ T5729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.655353][ T5729] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 327.665066][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.675312][ T5729] usb 4-1: config 0 descriptor?? [ 327.889449][ T5348] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 328.039403][ T5348] usb 5-1: Using ep0 maxpacket: 16 [ 328.047921][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.063876][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.073716][ T5348] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 328.089203][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.104037][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.112038][ T5348] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 328.137419][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.166870][ T5348] usb 5-1: config 0 descriptor?? [ 328.175565][ T5729] mcp2221 0003:04D8:00DD.000F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 328.279977][ T30] audit: type=1326 audit(1780653780.255:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e2899ce59 code=0x0 [ 328.366043][ T9125] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 328.401027][ T9125] bond2: entered promiscuous mode [ 328.406646][ T9125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.431569][ T48] usb 2-1: USB disconnect, device number 65 [ 328.450578][ T30] audit: type=1400 audit(1780653780.435:683): avc: denied { map } for pid=9119 comm="syz.2.875" path="socket:[21866]" dev="sockfs" ino=21866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 328.456270][ T9123] netlink: 'syz.2.875': attribute type 3 has an invalid length. [ 328.542660][ T9132] x_tables: duplicate underflow at hook 2 [ 328.552342][ T9129] bond2: (slave bridge1): making interface the new active one [ 328.560978][ T9129] bridge1: entered promiscuous mode [ 328.571522][ T9129] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 328.650768][ T5348] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0010/input/input16 [ 328.670877][ T6040] block nbd4: Possible stuck request ffff888027c35080: control (read@0,1024B). Runtime 30 seconds [ 328.685023][ T6040] block nbd4: Possible stuck request ffff888027c35240: control (read@1024,1024B). Runtime 30 seconds [ 328.696017][ T6040] block nbd4: Possible stuck request ffff888027c35400: control (read@2048,1024B). Runtime 30 seconds [ 328.709316][ T6040] block nbd4: Possible stuck request ffff888027c355c0: control (read@3072,1024B). Runtime 30 seconds [ 328.733531][ T48] usb 4-1: USB disconnect, device number 61 [ 328.758178][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 328.776381][ T9137] overlayfs: failed to clone upperpath [ 328.821221][ T5348] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 328.848032][ T5348] usb 5-1: USB disconnect, device number 46 [ 328.907387][ T9140] fido_id[9140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 329.026604][ T9141] fuse: fd is not a fuse device [ 329.032071][ T9141] fuse: fd is not a fuse device [ 329.200185][ T30] audit: type=1400 audit(1780653781.145:684): avc: denied { create } for pid=9144 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.220474][ T30] audit: type=1400 audit(1780653781.145:685): avc: denied { bind } for pid=9144 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.240911][ T30] audit: type=1400 audit(1780653781.155:686): avc: denied { setopt } for pid=9144 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.268759][ T9155] xt_cgroup: invalid path, errno=-2 [ 330.467271][ T9159] mmap: syz.1.886 (9159): VmData 37793792 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 330.504284][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 331.841476][ T5348] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 332.277260][ T5348] usb 2-1: Using ep0 maxpacket: 32 [ 332.286872][ T5348] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 332.313977][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.337214][ T5348] usb 2-1: Product: syz [ 332.346568][ T5348] usb 2-1: Manufacturer: syz [ 332.356866][ T5348] usb 2-1: SerialNumber: syz [ 332.575432][ T5348] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 332.587786][ T5715] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 332.597994][ T5348] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 332.626916][ T5348] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 332.635958][ T9179] fuse: Bad value for 'fd' [ 332.747159][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 332.755780][ T5715] usb 4-1: config 9 has an invalid interface number: 147 but max is 0 [ 332.764443][ T5715] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 332.788267][ T29] usb 2-1: USB disconnect, device number 66 [ 332.817767][ T5715] usb 4-1: config 9 has no interface number 0 [ 332.824245][ T29] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 332.836208][ T5715] usb 4-1: config 9 interface 147 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.851515][ T29] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 332.863586][ T5715] usb 4-1: config 9 interface 147 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 332.877075][ T29] visor 2-1:1.0: device disconnected [ 332.889367][ T5715] usb 4-1: config 9 interface 147 has no altsetting 0 [ 332.906054][ T5715] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=ed.3b [ 332.917013][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.926121][ T5715] usb 4-1: Product: syz [ 332.931681][ T5715] usb 4-1: Manufacturer: syz [ 332.936355][ T5715] usb 4-1: SerialNumber: syz [ 333.567491][ T5715] ushc 4-1:9.147: probe with driver ushc failed with error -71 [ 333.591949][ T5715] usb 4-1: USB disconnect, device number 62 [ 333.696713][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 334.089934][ T9196] xt_cgroup: invalid path, errno=-2 [ 334.493736][ T9195] loop5: detected capacity change from 0 to 2640 [ 334.501782][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.510190][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.518033][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.525841][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.533923][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.541795][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.549627][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.557449][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.565254][ T9195] ldm_validate_partition_table(): Disk read failed. [ 334.571845][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.579678][ T9195] Buffer I/O error on dev loop5, logical block 0, async page read [ 334.587709][ T9195] Dev loop5: unable to read RDB block 0 [ 334.593413][ T9195] loop5: unable to read partition table [ 334.599111][ T9195] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 334.614152][ T30] audit: type=1400 audit(1780653786.468:687): avc: denied { append } for pid=9193 comm="syz.2.895" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 334.719971][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 334.744258][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.782122][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 334.817628][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.844048][ T9] usb 5-1: Product: syz [ 334.855495][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 334.871668][ T9] usb 5-1: Manufacturer: syz [ 334.879267][ T9] usb 5-1: SerialNumber: syz [ 334.892422][ T9] usb 5-1: config 0 descriptor?? [ 334.982077][ T9209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63001 sclass=netlink_route_socket pid=9209 comm=syz.0.901 [ 335.345048][ T30] audit: type=1400 audit(1780653787.318:688): avc: denied { execute } for pid=9210 comm="syz.3.903" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 335.585577][ T1220] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 335.745539][ T1220] usb 2-1: Using ep0 maxpacket: 16 [ 335.761966][ T1220] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.780802][ T1220] usb 2-1: config 0 has no interface number 0 [ 335.792119][ T1220] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 335.802531][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.811742][ T1220] usb 2-1: Product: syz [ 335.817085][ T1220] usb 2-1: Manufacturer: syz [ 335.821897][ T1220] usb 2-1: SerialNumber: syz [ 335.833875][ T1220] usb 2-1: config 0 descriptor?? [ 335.849434][ T1220] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 336.081375][ T9226] netlink: 48 bytes leftover after parsing attributes in process `syz.0.905'. [ 336.957290][ T1220] gspca_spca1528: reg_w err -71 [ 337.024640][ T5715] usb 5-1: USB disconnect, device number 47 [ 337.045553][ T1220] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 337.065484][ T1220] usb 2-1: USB disconnect, device number 67 [ 337.378501][ T9235] xt_cgroup: invalid path, errno=-2 [ 337.537945][ T30] audit: type=1400 audit(1780653789.519:689): avc: denied { bind } for pid=9236 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 337.621179][ T5615] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 339.283565][ T9267] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 339.923407][ T5348] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 339.931025][ T48] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 340.074316][ T48] usb 4-1: device descriptor read/64, error -71 [ 340.103322][ T5348] usb 2-1: Using ep0 maxpacket: 8 [ 340.110015][ T5348] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 340.128475][ T5348] usb 2-1: config 0 has no interface number 0 [ 340.144941][ T5348] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 340.173258][ T5348] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 340.195645][ T5348] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.217098][ T5348] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 340.246084][ T30] audit: type=1400 audit(1780653792.231:690): avc: denied { ioctl } for pid=9272 comm="syz.2.921" path="socket:[22928]" dev="sockfs" ino=22928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.255671][ T5348] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 340.286924][ T5348] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 340.296406][ T5348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.324413][ T5348] usb 2-1: config 0 descriptor?? [ 340.480729][ T9280] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 340.830537][ T9280] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 340.843915][ T9280] overlayfs: failed to look up (tracing) for ino (-66) [ 341.076112][ T48] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 341.085059][ T30] audit: type=1400 audit(1780653792.451:691): avc: denied { mount } for pid=9274 comm="syz.4.915" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 341.587335][ T5348] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 341.613204][ T30] audit: type=1400 audit(1780653792.461:692): avc: denied { mounton } for pid=9274 comm="syz.4.915" path="/182/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 341.645046][ T5615] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 341.656272][ T5615] Bluetooth: hci2: Injecting HCI hardware error event [ 341.665422][ T5615] Bluetooth: hci2: hardware error 0x00 [ 341.676724][ T48] usb 4-1: device descriptor read/64, error -71 [ 341.762030][ T30] audit: type=1400 audit(1780653793.121:693): avc: denied { setopt } for pid=9264 comm="syz.1.918" lport=53807 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 341.842998][ T48] usb usb4-port1: attempt power cycle [ 341.950039][ T9284] xt_hashlimit: size too large, truncated to 1048576 [ 341.957069][ T9284] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 342.131621][ T30] audit: type=1400 audit(1780653794.112:694): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 342.194429][ T48] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 342.266667][ T9] usb 2-1: USB disconnect, device number 68 [ 342.287336][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 342.482366][ T48] usb 4-1: device not accepting address 65, error -71 [ 342.933040][ T9313] bond1 (unregistering): Released all slaves [ 343.168220][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 343.211805][ T48] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 343.272193][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 343.298027][ T48] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 343.347749][ T48] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 343.362809][ T48] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 343.381682][ T48] usb 4-1: Product: syz [ 343.390403][ T48] usb 4-1: Manufacturer: syz [ 343.402007][ T48] usb 4-1: SerialNumber: syz [ 343.417230][ T48] usb 4-1: config 0 descriptor?? [ 343.497104][ T9320] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 343.520243][ T9335] xt_hashlimit: size too large, truncated to 1048576 [ 343.594518][ T9336] trusted_key: encrypted_key: keylen parameter is missing [ 343.604673][ T9336] netlink: 'syz.4.932': attribute type 40 has an invalid length. [ 343.781516][ T5615] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 343.934442][ T9335] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 344.667048][ T5715] usb 4-1: USB disconnect, device number 66 [ 344.776798][ T30] audit: type=1326 audit(1780653796.763:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.2.936" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x0 [ 344.991226][ T9352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.288484][ T30] audit: type=1400 audit(1780653797.273:696): avc: denied { accept } for pid=9357 comm="syz.0.935" lport=54280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.709657][ T30] audit: type=1400 audit(1780653797.693:697): avc: denied { connect } for pid=9370 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 345.758219][ T30] audit: type=1400 audit(1780653797.723:698): avc: denied { write } for pid=9370 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 345.863981][ T9378] tipc: Enabled bearer , priority 0 [ 345.878213][ T9378] syzkaller0: entered promiscuous mode [ 345.884524][ T9378] syzkaller0: entered allmulticast mode [ 345.933166][ T9378] tipc: Resetting bearer [ 345.944125][ T9380] xt_hashlimit: size too large, truncated to 1048576 [ 346.041204][ T9377] tipc: Resetting bearer [ 346.227407][ T9377] tipc: Disabling bearer [ 346.373238][ T9392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.947'. [ 346.774318][ T30] audit: type=1400 audit(1780653798.764:699): avc: denied { read } for pid=9393 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.989205][ T9384] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 347.009951][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 347.035029][ T30] audit: type=1400 audit(1780653799.024:700): avc: denied { setattr } for pid=9399 comm="syz.1.950" name="PPPOL2TP" dev="sockfs" ino=22517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.152163][ T9408] overlayfs: failed to clone upperpath [ 347.332641][ T9417] xt_cgroup: invalid path, errno=-2 [ 347.407287][ T9421] tipc: Enabling of bearer rejected, failed to enable media [ 347.716758][ T29] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 347.899683][ T29] usb 3-1: device descriptor read/64, error -71 [ 348.150608][ T29] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 348.308257][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 348.309314][ T29] usb 3-1: device descriptor read/64, error -71 [ 348.353396][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 348.449560][ T29] usb usb3-port1: attempt power cycle [ 348.527755][ T9455] fido_id[9455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 348.799023][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 348.829065][ T29] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 348.880104][ T29] usb 3-1: device descriptor read/8, error -71 [ 348.959263][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 348.975185][ T9] usb 5-1: config index 0 descriptor too short (expected 62234, got 27) [ 348.993932][ T9] usb 5-1: config 5 has an invalid interface number: 51 but max is 0 [ 349.028878][ T9] usb 5-1: config 5 has no interface number 0 [ 349.036290][ T9] usb 5-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 349.052228][ T9] usb 5-1: config 5 interface 51 has no altsetting 0 [ 349.061763][ T9] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 349.078813][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.088340][ T9] usb 5-1: Product: syz [ 349.092751][ T9] usb 5-1: Manufacturer: syz [ 349.097393][ T9] usb 5-1: SerialNumber: syz [ 349.149979][ T29] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 349.169738][ T29] usb 3-1: device descriptor read/8, error -71 [ 349.279015][ T29] usb usb3-port1: unable to enumerate USB device [ 349.298752][ T1220] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 349.316075][ T9] powermate 5-1:5.51: probe with driver powermate failed with error -5 [ 349.331033][ T9] usb 5-1: USB disconnect, device number 48 [ 349.461180][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.472626][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.484229][ T1220] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 349.493682][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.504751][ T1220] usb 4-1: config 0 descriptor?? [ 349.627167][ T9480] overlayfs: failed to clone upperpath [ 350.209683][ T1220] usbhid 4-1:0.0: can't add hid device: -32 [ 350.697923][ T30] audit: type=1400 audit(1780653802.676:701): avc: denied { map } for pid=9474 comm="syz.3.973" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 350.749762][ T1220] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 350.774904][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.820320][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.895700][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.941002][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.969011][ T30] audit: type=1400 audit(1780653802.956:702): avc: denied { read } for pid=9474 comm="syz.3.973" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 351.591676][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 352.027806][ T1220] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 352.066681][ T1220] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.190822][ T48] usb 4-1: USB disconnect, device number 67 [ 352.236158][ T9513] fido_id[9513]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 352.677399][ T9517] fuse: Unknown parameter '0x0000000000000008' [ 352.886698][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 352.916603][ T30] audit: type=1326 audit(1780653804.897:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 352.998116][ T30] audit: type=1326 audit(1780653804.897:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 353.041571][ T30] audit: type=1326 audit(1780653804.897:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 353.140959][ T30] audit: type=1326 audit(1780653804.897:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 353.172949][ T30] audit: type=1326 audit(1780653804.897:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 353.246737][ T1220] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 353.373128][ T9531] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 353.414048][ T5729] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 353.525270][ T30] audit: type=1326 audit(1780653804.897:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 353.552135][ T1220] usb 5-1: Using ep0 maxpacket: 32 [ 353.606103][ T1220] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 353.649485][ T1220] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 353.680392][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.748745][ T1220] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.769537][ T9531] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 353.785936][ T30] audit: type=1326 audit(1780653804.897:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 353.816138][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 353.847669][ T1220] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 353.898472][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 353.918671][ T1220] usb 5-1: config 1 has no interface number 0 [ 353.968761][ T1220] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 353.997396][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.025267][ T30] audit: type=1326 audit(1780653804.897:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2899ce59 code=0x7ffc0000 [ 354.092576][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.133109][ T5729] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.158547][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.181173][ T1220] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 354.199464][ T5729] usb 3-1: config 0 descriptor?? [ 354.210124][ T9533] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 354.409921][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.423844][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.611029][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.987'. [ 354.635905][ T9522] netlink: 277 bytes leftover after parsing attributes in process `syz.4.987'. [ 354.667008][ T5729] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 354.676701][ T1220] snd_usb_pod 5-1:1.1: set_interface failed [ 354.684477][ T1220] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 354.696194][ T1220] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 354.707666][ T5729] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 354.731256][ T1220] usb 5-1: USB disconnect, device number 49 [ 354.803082][ T9551] bond1 (unregistering): Released all slaves [ 354.833074][ T9557] tipc: Started in network mode [ 354.841953][ T9557] tipc: Node identity 080211, cluster identity 4711 [ 354.853086][ T9557] tipc: Enabled bearer , priority 0 [ 354.869824][ T9557] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 354.877319][ T9557] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 354.889723][ T9557] tipc: Resetting bearer [ 354.938627][ T9533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.952487][ T9533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.970639][ T1220] usb 3-1: USB disconnect, device number 56 [ 355.045843][ T48] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 355.067926][ T5730] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 355.086515][ T5730] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.143386][ T9569] fido_id[9569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.164722][ T9568] fuse: Unknown parameter '0x0000000000000006' [ 355.182003][ T9568] fuse: fd is not a fuse device [ 355.207402][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 355.221990][ T48] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 355.243388][ T48] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 355.262838][ T48] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 355.277199][ T48] usb 2-1: Product: syz [ 355.285935][ T48] usb 2-1: Manufacturer: syz [ 355.295808][ T48] usb 2-1: SerialNumber: syz [ 355.318680][ T48] usb 2-1: config 0 descriptor?? [ 355.337621][ T9555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 355.466159][ T9577] vti0: entered promiscuous mode [ 355.670999][ T9583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 355.878654][ T5729] tipc: Node number set to 134353152 [ 356.426527][ T29] usb 2-1: USB disconnect, device number 69 [ 356.516598][ T5729] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 356.687606][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.732200][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32768, setting to 1024 [ 356.745202][ T5729] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 356.755330][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.794463][ T5729] usb 5-1: config 0 descriptor?? [ 356.972476][ T9605] netlink: 'syz.0.1003': attribute type 3 has an invalid length. [ 356.980583][ T9605] netlink: 'syz.0.1003': attribute type 3 has an invalid length. [ 356.988459][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 357.194782][ T48] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 357.216509][ T5729] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 357.241832][ T5729] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 357.281526][ T9619] tipc: Enabling of bearer rejected, already enabled [ 357.327059][ T29] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 357.357131][ T48] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 357.368187][ T48] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 357.385624][ T48] usb 3-1: config 0 has no interface number 0 [ 357.394834][ T48] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.411399][ T48] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 357.412859][ T5729] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 357.432659][ T48] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 357.454151][ T48] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 357.472558][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.490672][ T48] usb 3-1: config 0 descriptor?? [ 357.505638][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 357.512677][ T29] usb 2-1: config 0 has no interfaces? [ 357.518281][ T29] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 357.527868][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.541469][ T29] usb 2-1: config 0 descriptor?? [ 357.611761][ T5729] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 357.634610][ T5729] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -5 [ 357.657565][ T9624] fuse: Unknown parameter '0x0000000000000008' [ 357.780874][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 357.780891][ T30] audit: type=1326 audit(1780653809.769:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.2.1005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e2899ce59 code=0x0 [ 357.858197][ T48] usb 3-1: USB disconnect, device number 57 [ 357.942979][ T9633] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 357.950031][ T9633] overlayfs: failed to set xattr on upper [ 357.955818][ T9633] overlayfs: ...falling back to redirect_dir=nofollow. [ 357.962677][ T9633] overlayfs: ...falling back to index=off. [ 357.968528][ T9633] overlayfs: ...falling back to uuid=null. [ 357.995126][ T9633] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 358.009797][ T30] audit: type=1400 audit(1780653809.929:719): avc: denied { mounton } for pid=9627 comm="syz.0.1012" path="/file0" dev="ramfs" ino=23980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 358.067160][ T9604] fuse: Bad value for 'fd' [ 358.633065][ T9647] Option 'D' to dns_resolver key: bad/missing value [ 358.744281][ T6040] block nbd4: Possible stuck request ffff888027c35080: control (read@0,1024B). Runtime 60 seconds [ 358.755257][ T6040] block nbd4: Possible stuck request ffff888027c35240: control (read@1024,1024B). Runtime 60 seconds [ 358.863972][ T6040] block nbd4: Possible stuck request ffff888027c35400: control (read@2048,1024B). Runtime 60 seconds [ 358.880859][ T6040] block nbd4: Possible stuck request ffff888027c355c0: control (read@3072,1024B). Runtime 60 seconds [ 358.899716][ T5729] usb 5-1: USB disconnect, device number 50 [ 359.015247][ T48] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 359.460563][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 359.460694][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 359.473356][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 359.487867][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 359.488268][ T9666] netlink: 'syz.4.1024': attribute type 15 has an invalid length. [ 359.497157][ T9664] netlink: 'syz.4.1024': attribute type 15 has an invalid length. [ 359.514012][ T48] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 359.526051][ T48] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 359.548573][ T48] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 359.564918][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.576980][ T48] usb 4-1: Product: syz [ 359.583276][ T48] usb 4-1: Manufacturer: syz [ 359.591980][ T48] usb 4-1: SerialNumber: syz [ 359.823526][ T9673] FAULT_INJECTION: forcing a failure. [ 359.823526][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 359.836330][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.4.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.836359][ T9673] Tainted: [L]=SOFTLOCKUP [ 359.836366][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.836376][ T9673] Call Trace: [ 359.836382][ T9673] [ 359.836388][ T9673] dump_stack_lvl+0x100/0x190 [ 359.836415][ T9673] should_fail_ex.cold+0x5/0xa [ 359.836441][ T9673] ? alloc_pipe_info+0x1ec/0x590 [ 359.836463][ T9673] should_failslab+0xc2/0x120 [ 359.836484][ T9673] __kmalloc_noprof+0xe0/0x850 [ 359.836515][ T9673] alloc_pipe_info+0x1ec/0x590 [ 359.836541][ T9673] splice_direct_to_actor+0x78f/0xa30 [ 359.836567][ T9673] ? __pfx_direct_splice_actor+0x10/0x10 [ 359.836590][ T9673] ? inode_has_perm+0x16d/0x1d0 [ 359.836614][ T9673] ? __file_has_perm+0x336/0x460 [ 359.836636][ T9673] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 359.836661][ T9673] ? __pfx___file_has_perm+0x10/0x10 [ 359.836690][ T9673] do_splice_direct+0x174/0x240 [ 359.836714][ T9673] ? __pfx_do_splice_direct+0x10/0x10 [ 359.836739][ T9673] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 359.836763][ T9673] ? bpf_lsm_file_permission+0x9/0x10 [ 359.836789][ T9673] ? security_file_permission+0x76/0x210 [ 359.836817][ T9673] ? rw_verify_area+0xce/0x6d0 [ 359.836837][ T9673] do_sendfile+0xadc/0xe20 [ 359.836860][ T9673] ? __pfx_do_sendfile+0x10/0x10 [ 359.836880][ T9673] ? __fget_files+0x21f/0x3d0 [ 359.836909][ T9673] __x64_sys_sendfile64+0x1d8/0x220 [ 359.836931][ T9673] ? ksys_write+0x1ac/0x250 [ 359.836950][ T9673] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 359.836977][ T9673] ? rcu_is_watching+0x12/0xc0 [ 359.837006][ T9673] do_syscall_64+0x115/0x870 [ 359.837028][ T9673] ? clear_bhb_loop+0x40/0x90 [ 359.837050][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.837068][ T9673] RIP: 0033:0x7f1adfd9ce59 [ 359.837083][ T9673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.837100][ T9673] RSP: 002b:00007f1ae0cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 359.837117][ T9673] RAX: ffffffffffffffda RBX: 00007f1ae0016090 RCX: 00007f1adfd9ce59 [ 359.837128][ T9673] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 359.837138][ T9673] RBP: 00007f1ae0cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 359.837148][ T9673] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000001 [ 359.837158][ T9673] R13: 00007f1ae0016128 R14: 00007f1ae0016090 R15: 00007ffe1ef35ad8 [ 359.837183][ T9673] [ 360.180586][ T9674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.206006][ T9674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.647683][ T5729] usb 2-1: USB disconnect, device number 70 [ 360.754894][ T9683] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 360.774983][ T48] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 360.827430][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 360.904912][ T48] usb 4-1: USB disconnect, device number 68 [ 360.981855][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.175417][ T9694] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 361.182402][ T9694] overlayfs: failed to set xattr on upper [ 361.188143][ T9694] overlayfs: ...falling back to redirect_dir=nofollow. [ 361.195000][ T9694] overlayfs: ...falling back to index=off. [ 361.200803][ T9694] overlayfs: ...falling back to uuid=null. [ 361.276825][ T9695] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 362.050520][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1034'. [ 362.068577][ T9701] 9p: Bad value for 'rfdno' [ 362.272242][ T5805] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 362.312201][ T9] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 362.424973][ T5805] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 362.434126][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.444085][ T5805] usb 2-1: Product: syz [ 362.448324][ T5805] usb 2-1: Manufacturer: syz [ 362.452973][ T5805] usb 2-1: SerialNumber: syz [ 362.462128][ T9] usb 5-1: device descriptor read/64, error -71 [ 362.463681][ T5805] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 362.509899][ T5729] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 362.712024][ T9] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 362.882059][ T9] usb 5-1: device descriptor read/64, error -71 [ 363.361998][ T9] usb usb5-port1: attempt power cycle [ 363.741856][ T9] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 363.790379][ T9] usb 5-1: device descriptor read/8, error -71 [ 363.861417][ T5805] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 364.043203][ T5805] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 364.059719][ T5805] usb 3-1: config 0 has no interface number 0 [ 364.061346][ T9] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 364.093806][ T5805] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.121816][ T9] usb 5-1: device descriptor read/8, error -71 [ 364.139395][ T5805] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 364.173771][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.222306][ T5805] usb 3-1: Product: syz [ 364.241144][ T5805] usb 3-1: Manufacturer: syz [ 364.263309][ T9] usb usb5-port1: unable to enumerate USB device [ 364.265610][ T5729] usb 2-1: Service connection timeout for: 256 [ 364.286799][ T5805] usb 3-1: SerialNumber: syz [ 364.309205][ T5805] usb 3-1: config 0 descriptor?? [ 364.318285][ T5729] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 364.373788][ T5805] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 364.383465][ T5729] ath9k_htc: Failed to initialize the device [ 364.453247][ T5729] usb 2-1: ath9k_htc: USB layer deinitialized [ 364.961917][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.992541][ T9741] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 365.014754][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.639790][ T5715] usb 3-1: USB disconnect, device number 58 [ 366.648575][ T5715] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 366.757198][ T30] audit: type=1400 audit(1780653818.754:720): avc: denied { name_bind } for pid=9755 comm="syz.4.1049" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 367.029867][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 367.109852][ T5715] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 367.179777][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 367.195707][ T9] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 367.214413][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.228542][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 367.266197][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.300800][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 367.307496][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.326017][ T48] usb 2-1: USB disconnect, device number 71 [ 367.332189][ T9] usb 5-1: config 0 descriptor?? [ 367.343887][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.377258][ T5715] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 367.407232][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.439359][ T5715] usb 3-1: config 0 descriptor?? [ 367.508343][ T9765] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 367.686608][ T9769] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1054'. [ 367.755935][ T9] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 367.772587][ T9] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 367.793118][ T9] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 367.905787][ T9] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 367.912305][ T5715] pantherlord 0003:0810:0002.0017: unknown main item tag 0x2 [ 367.938568][ T5715] pantherlord 0003:0810:0002.0017: invalid report_count 71145555 [ 367.940711][ T9] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 368.347406][ T5715] pantherlord 0003:0810:0002.0017: item 0 4 1 9 parsing failed [ 368.365129][ T5715] pantherlord 0003:0810:0002.0017: parse failed [ 368.376037][ T9774] pim6reg: entered allmulticast mode [ 368.384686][ T5715] pantherlord 0003:0810:0002.0017: probe with driver pantherlord failed with error -22 [ 368.406757][ T9774] team0: entered allmulticast mode [ 368.421262][ T9774] team_slave_0: entered allmulticast mode [ 368.427265][ T5715] usb 3-1: USB disconnect, device number 59 [ 368.436014][ T9774] team_slave_1: entered allmulticast mode [ 368.444326][ T9774] team0: left allmulticast mode [ 368.446896][ T9] corsair-psu 0003:1B1C:1C09.0016: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 368.499698][ T9774] team_slave_0: left allmulticast mode [ 368.529262][ T9774] team_slave_1: left allmulticast mode [ 368.556594][ T9780] fuse: fd is not a fuse device [ 368.561603][ T30] audit: type=1400 audit(1780653820.545:721): avc: denied { mounton } for pid=9779 comm="syz.0.1057" path="/264/file0" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.662396][ T9774] pim6reg: left allmulticast mode [ 368.928874][ T9] corsair-psu 0003:1B1C:1C09.0016: unable to initialize device (-110) [ 368.942941][ T9] corsair-psu 0003:1B1C:1C09.0016: probe with driver corsair-psu failed with error -110 [ 369.446914][ T9] usb 5-1: USB disconnect, device number 55 [ 369.529104][ T9795] tipc: Enabling of bearer rejected, failed to enable media [ 369.680813][ T5715] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 369.848454][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 369.862801][ T5715] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 369.870579][ T9] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 369.877379][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 369.893983][ T9807] bond1 (unregistering): Released all slaves [ 369.903391][ T5715] usb 4-1: config 0 has no interface number 0 [ 369.926989][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 369.978393][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.018078][ T9817] xt_hashlimit: size too large, truncated to 1048576 [ 370.032395][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.062200][ T5715] usb 4-1: config 0 has no interface number 0 [ 370.064260][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 370.089226][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.110525][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 370.122495][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.152668][ T9818] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 370.155644][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.170798][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.181749][ T5715] usb 4-1: config 0 has no interface number 0 [ 370.181783][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.198889][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.209672][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.211109][ T5730] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 370.217757][ T5715] usb 4-1: config 0 has no interface number 0 [ 370.229220][ T9812] bond1 (unregistering): Released all slaves [ 370.231765][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.243375][ T30] audit: type=1400 audit(1780653822.226:722): avc: denied { connect } for pid=9820 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.247293][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.278307][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.286607][ T5715] usb 4-1: config 0 has no interface number 0 [ 370.292976][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.302933][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.313672][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.321943][ T5715] usb 4-1: config 0 has no interface number 0 [ 370.380289][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 370.395442][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 370.404525][ T30] audit: type=1400 audit(1780653822.226:723): avc: denied { read } for pid=9820 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.428768][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.453326][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.476683][ T9] usb 5-1: config 0 descriptor?? [ 370.500534][ T9797] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 370.510366][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.539571][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 370.550859][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.561049][ T5730] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 370.577343][ T5730] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 370.587506][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 370.589379][ T5715] usb 4-1: config 0 has no interface number 0 [ 370.604498][ T5730] usb 2-1: Product: syz [ 370.636490][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.636643][ T5730] usb 2-1: Manufacturer: syz [ 370.669872][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.684440][ T5730] usb 2-1: SerialNumber: syz [ 370.698627][ T5715] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.702137][ T5730] usb 2-1: config 0 descriptor?? [ 370.756145][ T5715] usb 4-1: config 0 has no interface number 0 [ 370.760645][ T9813] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 370.776147][ T5715] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.797684][ T5715] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.826036][ T9797] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 370.856451][ T5715] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 370.881999][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.897378][ T9829] tipc: Enabled bearer , priority 0 [ 370.899293][ T5715] usb 4-1: Product: syz [ 370.907066][ T9829] syzkaller0: entered promiscuous mode [ 370.915683][ T5715] usb 4-1: Manufacturer: syz [ 370.918038][ T9829] syzkaller0: entered allmulticast mode [ 370.977689][ T5715] usb 4-1: SerialNumber: syz [ 371.000750][ T5715] usb 4-1: config 0 descriptor?? [ 371.064200][ T9829] tipc: Resetting bearer [ 371.106171][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 371.120741][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 371.128695][ T9828] tipc: Resetting bearer [ 371.159616][ T9] usb 5-1: USB disconnect, device number 56 [ 371.196972][ T5715] usb 4-1: can't set config #0, error -71 [ 371.232981][ T5715] usb 4-1: USB disconnect, device number 69 [ 371.255828][ T9828] tipc: Disabling bearer [ 371.395664][ T1220] usb 2-1: USB disconnect, device number 72 [ 371.757636][ T9849] tipc: Enabling of bearer rejected, failed to enable media [ 371.787553][ T5729] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 372.300014][ T5729] usb 4-1: device descriptor read/64, error -71 [ 372.414199][ T9860] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1077'. [ 372.444548][ T9860] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1077'. [ 372.507324][ T5715] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 372.579385][ T5729] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 372.612228][ T30] audit: type=1400 audit(1780653824.607:724): avc: denied { create } for pid=9865 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.657014][ T5715] usb 5-1: device descriptor read/64, error -71 [ 372.737081][ T5729] usb 4-1: device descriptor read/64, error -71 [ 372.818865][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.828203][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.056371][ T9876] futex_wake_op: syz.1.1083 tries to shift op by 36; fix this program [ 374.172512][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 374.198906][ T5729] usb usb4-port1: attempt power cycle [ 374.250203][ T5715] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 374.436382][ T5715] usb 5-1: device descriptor read/64, error -71 [ 374.558484][ T5715] usb usb5-port1: attempt power cycle [ 374.669398][ T30] audit: type=1400 audit(1780653826.668:725): avc: denied { name_bind } for pid=9888 comm="syz.3.1087" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 374.708439][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 374.916174][ T5715] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 374.967208][ T5715] usb 5-1: device descriptor read/8, error -71 [ 374.990551][ T9899] tipc: Enabled bearer , priority 0 [ 374.997947][ T9899] syzkaller0: entered promiscuous mode [ 375.003436][ T9899] syzkaller0: entered allmulticast mode [ 375.025281][ T9899] tipc: Resetting bearer [ 375.039906][ T9897] tipc: Resetting bearer [ 375.063471][ T9897] tipc: Disabling bearer [ 375.132398][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 375.288405][ T5715] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 375.637523][ T5715] usb 5-1: device descriptor read/8, error -71 [ 376.027605][ T5715] usb usb5-port1: unable to enumerate USB device [ 376.208201][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 376.217421][ T10] usb 2-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 376.692010][ T9915] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 376.699005][ T9915] overlayfs: failed to set xattr on upper [ 376.705072][ T9915] overlayfs: ...falling back to redirect_dir=nofollow. [ 376.711905][ T9915] overlayfs: ...falling back to index=off. [ 376.717958][ T9915] overlayfs: ...falling back to uuid=null. [ 376.811065][ T9916] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 377.045788][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.057012][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 377.087752][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.149696][ T9919] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 377.174684][ T10] usb 2-1: Product: ઔ簝ﾼ겂昙₯婿釁淄Წ㓐⳼䖈믖붖⽴뷴劂묢腲屏ኦ덫酯썙㾯龅屭挮힡犥跇杙̕㐣扛د陿㳣婎㋤９삳䋲킊단吾앫ዀ₸爀냄肉쇳ڷ諸튮⻈暙ꭣྒ邊㑦猲⊈띈빹삠裈뎞箁⒓冂ŀꎿ⥋鼐•鴯୒ [ 377.181829][ T9919] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 377.220849][ T10] usb 2-1: Manufacturer: ఼ [ 377.225493][ T10] usb 2-1: SerialNumber: 뷁ਣ觐ࢇ潦⏖̩槭먵諊 [ 377.226800][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 377.251457][ T10] usb 2-1: selecting invalid altsetting 1 [ 377.259307][ T10] usb 2-1: unit 6 not found! [ 377.261116][ T9921] netlink: 'syz.2.1096': attribute type 21 has an invalid length. [ 377.283632][ T9924] lo speed is unknown, defaulting to 1000 [ 378.214869][ T5715] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 378.372094][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 378.384163][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 378.392134][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 378.400673][ T9938] bridge_slave_1: left allmulticast mode [ 378.401222][ T5715] usb 5-1: config 2 has an invalid interface number: 99 but max is 0 [ 378.414483][ T5715] usb 5-1: config 2 has no interface number 0 [ 378.414561][ T9938] bridge_slave_1: left promiscuous mode [ 378.426396][ T5715] usb 5-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 378.429695][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.446979][ T5715] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.458689][ T5715] usb 5-1: config 2 interface 99 has no altsetting 0 [ 378.461333][ T9895] SELinux: policydb version 4430648 does not match my version range 15-35 [ 378.480751][ T9895] SELinux: failed to load policy [ 378.481741][ T5715] usb 5-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 378.495252][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.504160][ T9938] bridge_slave_0: left allmulticast mode [ 378.585352][ T9938] bridge_slave_0: left promiscuous mode [ 378.633487][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.645876][ T5715] usb 5-1: Product: syz [ 378.661337][ T5715] usb 5-1: Manufacturer: syz [ 378.674872][ T5715] usb 5-1: SerialNumber: syz [ 379.044122][ T30] audit: type=1400 audit(1780653830.990:726): avc: denied { create } for pid=9922 comm="syz.4.1097" name=5C4380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 379.108791][ T5715] usb 5-1: USB disconnect, device number 61 [ 380.292155][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 380.335268][ T10] usb 2-1: USB disconnect, device number 73 [ 380.417487][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.492121][ T5615] Bluetooth: hci3: Malformed Event: 0x02 [ 380.552123][ T30] audit: type=1400 audit(1780653832.551:727): avc: denied { unlink } for pid=5613 comm="syz-executor" name=5C4380 dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 380.748207][ T9958] bond1 (unregistering): Released all slaves [ 380.884077][ T9963] bond1 (unregistering): Released all slaves [ 381.093135][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 381.403459][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 381.435998][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 381.457330][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 381.470350][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 381.583637][ T10] usb 4-1: Product: syz [ 381.588651][ T10] usb 4-1: Manufacturer: syz [ 381.593543][ T10] usb 4-1: SerialNumber: syz [ 381.606713][ T10] usb 4-1: config 0 descriptor?? [ 381.613176][ T9967] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 381.901779][ T10] usb 4-1: USB disconnect, device number 73 [ 382.079312][ T9961] lo speed is unknown, defaulting to 1000 [ 382.782934][ T5715] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 382.951938][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 382.989478][ T5715] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 383.033869][ T5715] usb 4-1: config 0 has no interface number 0 [ 383.078297][ T5715] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 383.165406][ T5715] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 383.297617][ T5715] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 383.402622][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.486217][ T5715] usb 4-1: Product: syz [ 383.529263][ T5715] usb 4-1: Manufacturer: syz [ 383.573422][ T5715] usb 4-1: SerialNumber: syz [ 383.700246][ T5715] usb 4-1: config 0 descriptor?? [ 383.718665][ T9992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.734205][T10005] 9p: Bad value for 'rfdno' [ 383.753655][ T9992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.903248][T10005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 383.906013][ T30] audit: type=1400 audit(1780653835.912:728): avc: granted { setsecparam } for pid=10006 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 383.931528][T10005] UDF-fs: Scanning with blocksize 512 failed [ 383.961750][T10005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 383.961781][T10005] UDF-fs: Scanning with blocksize 1024 failed [ 383.962050][T10005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 383.962064][T10005] UDF-fs: Scanning with blocksize 2048 failed [ 383.969808][T10005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 383.969824][T10005] UDF-fs: Scanning with blocksize 4096 failed [ 384.002321][ T9992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.002428][ T9992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.013198][ T30] audit: type=1400 audit(1780653836.022:729): avc: denied { bind } for pid=10009 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 384.021092][ T30] audit: type=1400 audit(1780653836.022:730): avc: denied { listen } for pid=10009 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 384.204517][ T5715] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 384.217805][ T5715] asix 4-1:0.34: probe with driver asix failed with error -61 [ 384.311275][ T10] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 384.472923][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 384.484551][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 384.502138][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 234, changing to 4 [ 384.514886][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 384.530121][ T10] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 384.540040][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.549414][ T10] usb 3-1: Product: syz [ 384.554984][ T10] usb 3-1: Manufacturer: syz [ 384.559592][ T10] usb 3-1: SerialNumber: syz [ 384.608362][T10012] overlayfs: failed to resolve './bus': -2 [ 384.776084][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.783755][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 384.795474][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.802878][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 384.813844][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.838483][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 384.850629][ T10] usb 3-1: USB disconnect, device number 60 [ 384.868422][ T6285] udevd[6285]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.533156][ T10] usb 4-1: USB disconnect, device number 74 [ 385.594445][ T30] audit: type=1400 audit(1780653837.593:731): avc: denied { watch watch_reads } for pid=10022 comm="syz.3.1121" path="pipe:[25665]" dev="pipefs" ino=25665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 387.008322][T10040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'. [ 388.093620][ T30] audit: type=1400 audit(1780653840.104:732): avc: denied { set_context_mgr } for pid=10055 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 388.360142][ T30] audit: type=1400 audit(1780653840.295:733): avc: denied { create } for pid=10039 comm="syz.3.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 388.808516][ T6040] block nbd4: Possible stuck request ffff888027c35080: control (read@0,1024B). Runtime 90 seconds [ 388.862000][ T6040] block nbd4: Possible stuck request ffff888027c35240: control (read@1024,1024B). Runtime 90 seconds [ 388.874085][ T6040] block nbd4: Possible stuck request ffff888027c35400: control (read@2048,1024B). Runtime 90 seconds [ 388.891833][ T6040] block nbd4: Possible stuck request ffff888027c355c0: control (read@3072,1024B). Runtime 90 seconds [ 390.028363][ T5730] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 391.118710][ T5730] usb 3-1: Invalid ep0 maxpacket: 16 [ 391.296642][ T5730] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 391.868560][T10129] futex_wake_op: syz.3.1140 tries to shift op by 36; fix this program [ 391.882241][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 392.701078][T10133] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 392.720854][T10137] syz_tun: entered allmulticast mode [ 392.725299][T10133] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 393.277898][T10150] geneve3: entered promiscuous mode [ 393.283549][T10150] geneve3: entered allmulticast mode [ 393.363515][T10153] tipc: Enabled bearer , priority 0 [ 393.380107][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 393.389316][T10153] syzkaller0: entered promiscuous mode [ 393.394912][T10153] syzkaller0: entered allmulticast mode [ 393.475552][T10153] tipc: Resetting bearer [ 393.557576][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 393.567725][T10152] tipc: Resetting bearer [ 393.573059][ T10] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 393.583102][ T10] usb 4-1: config 0 has no interface number 0 [ 393.615568][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 393.629034][T10152] tipc: Disabling bearer [ 393.652677][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 393.697883][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 393.727776][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.836489][ T10] usb 4-1: Product: syz [ 393.841001][ T10] usb 4-1: Manufacturer: syz [ 393.846156][ T10] usb 4-1: SerialNumber: syz [ 393.906958][ T10] usb 4-1: config 0 descriptor?? [ 393.944536][T10148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.974145][T10148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.376307][ T1220] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 394.412246][T10148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.428880][T10148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.577456][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.071397][ T10] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 395.082385][ T10] asix 4-1:0.34: probe with driver asix failed with error -61 [ 395.094164][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.118205][ T1220] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 395.146839][ T1220] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 395.162409][ T1220] usb 2-1: Manufacturer: syz [ 395.183114][ T1220] usb 2-1: config 0 descriptor?? [ 395.413723][ T30] audit: type=1400 audit(1780653847.418:734): avc: denied { write } for pid=10184 comm="syz.2.1158" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 395.445300][T10186] Bluetooth: MGMT ver 1.23 [ 396.024492][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.330159][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.382683][ T10] usb 4-1: USB disconnect, device number 75 [ 397.280729][ T1220] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 397.310421][ T1220] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 397.340364][ T1220] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 397.356746][ T1220] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 397.373648][ T1220] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 397.392405][ T1220] usb 2-1: USB disconnect, device number 74 [ 397.552729][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.565068][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.573487][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.581576][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.584538][ T5715] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 397.596841][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.769288][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.808191][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.838975][ T5715] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 398.344216][T10233] futex_wake_op: syz.0.1171 tries to shift op by 36; fix this program [ 398.442940][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 398.462435][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.563736][ T5715] usb 3-1: config 0 descriptor?? [ 398.629495][T10220] lo speed is unknown, defaulting to 1000 [ 398.867560][ T1220] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.916447][ T1220] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.920144][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1167'. [ 398.985545][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 398.995392][ T5715] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 399.017686][ T5715] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 399.019120][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 399.028958][ T5715] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 399.042342][ T5715] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 399.050551][ T5715] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 399.058450][ T5715] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 399.066375][ T5715] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 399.096152][ T5715] hid-thrustmaster 0003:044F:B65D.001A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 399.137073][ T5715] hid-thrustmaster 0003:044F:B65D.001A: Wrong number of endpoints? [ 399.172858][T10251] fido_id[10251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 399.247681][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.272416][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.417554][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.452250][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.503269][T10220] bridge_slave_0: entered allmulticast mode [ 399.531826][T10220] bridge_slave_0: entered promiscuous mode [ 399.563670][ T5715] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 399.573056][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.586032][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.599608][T10220] bridge_slave_1: entered allmulticast mode [ 399.614764][T10220] bridge_slave_1: entered promiscuous mode [ 399.629923][ C1] hid-thrustmaster 0003:044F:B65D.001A: Wheel with model id 0x2 is a Thrustmaster T500RS [ 399.671268][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.676134][ T5615] Bluetooth: hci5: command tx timeout [ 399.692551][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.735025][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 399.757392][ T5715] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 399.767406][ T5715] usb 4-1: config 0 has no interface number 0 [ 399.788921][T10220] team0: Port device team_slave_0 added [ 399.799257][ T5715] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 399.820128][T10220] team0: Port device team_slave_1 added [ 399.829444][ T5715] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 399.842910][ C1] hid-thrustmaster 0003:044F:B65D.001A: Success?! The wheel should have been initialized! [ 399.844874][ T5730] usb 3-1: USB disconnect, device number 63 [ 399.875146][ T5715] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 399.891211][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.908749][ T5715] usb 4-1: Product: syz [ 399.918027][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.925293][ T5715] usb 4-1: Manufacturer: syz [ 399.935448][ T5715] usb 4-1: SerialNumber: syz [ 399.940069][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.974030][ T5715] usb 4-1: config 0 descriptor?? [ 399.982617][T10260] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 400.001581][T10260] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 400.009553][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.103970][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.123653][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.187158][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.230298][T10260] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 400.254830][T10260] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 400.307918][T10220] hsr_slave_0: entered promiscuous mode [ 400.324179][T10220] hsr_slave_1: entered promiscuous mode [ 400.334032][T10220] debugfs: 'hsr0' already exists in 'hsr' [ 400.349968][T10220] Cannot create hsr debugfs directory [ 400.484657][ T5715] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 400.644858][ T5715] asix 4-1:0.34: probe with driver asix failed with error -61 [ 400.703012][ T5805] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 401.297594][ T5805] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 401.335052][T10275] overlayfs: failed to clone upperpath [ 401.409170][T10276] overlayfs: failed to clone upperpath [ 401.719440][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.730905][ T5805] usb 3-1: config 0 has no interface number 0 [ 401.742563][ T5805] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 401.751889][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.760647][ T5615] Bluetooth: hci5: command tx timeout [ 401.770568][ T5805] usb 3-1: Product: syz [ 401.782588][ T5805] usb 3-1: Manufacturer: syz [ 401.787259][ T5805] usb 3-1: SerialNumber: syz [ 401.806608][ T5805] usb 3-1: config 0 descriptor?? [ 401.865615][ T5805] yurex 3-1:0.50: Could not find endpoints [ 402.486834][ T5805] usb 4-1: USB disconnect, device number 76 [ 402.635978][ T5730] usb 3-1: USB disconnect, device number 64 [ 402.791548][T10292] x_tables: duplicate underflow at hook 1 [ 403.771521][T10294] futex_wake_op: syz.3.1182 tries to shift op by 36; fix this program [ 403.968276][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'. [ 403.979256][ T5615] Bluetooth: hci5: command tx timeout [ 404.060238][T10292] vlan2: entered allmulticast mode [ 404.065402][T10292] macsec0: entered allmulticast mode [ 404.070679][T10292] veth1_macvtap: entered allmulticast mode [ 404.083199][T10220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.172684][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.222135][T10220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.247968][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.543028][T10220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.596439][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.621954][T10220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.648850][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.769254][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.818947][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.848253][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.855367][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.890429][ T5805] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 405.911114][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.918188][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.990440][ T5615] Bluetooth: hci5: command tx timeout [ 406.091884][ T5805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.120814][ T5805] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.182383][ T5805] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 406.213655][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.236886][ T5805] usb 2-1: config 0 descriptor?? [ 407.046888][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 407.065567][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 407.289512][T10322] [ 407.291864][T10322] ====================================================== [ 407.298867][T10322] WARNING: possible circular locking dependency detected [ 407.305872][T10322] syzkaller #0 Tainted: G L [ 407.311832][T10322] ------------------------------------------------------ [ 407.318830][T10322] syz.3.1187/10322 is trying to acquire lock: [ 407.324876][T10322] ffff888026f15c98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x1c/0x300 [ 407.333748][T10322] [ 407.333748][T10322] but task is already holding lock: [ 407.341090][T10322] ffff888027a83d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 407.350476][T10322] [ 407.350476][T10322] which lock already depends on the new lock. [ 407.350476][T10322] [ 407.360862][T10322] [ 407.360862][T10322] the existing dependency chain (in reverse order) is: [ 407.369854][T10322] [ 407.369854][T10322] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 407.377662][T10322] __mutex_lock+0x1a4/0x1b10 [ 407.382770][T10322] elevator_change+0x1bc/0x530 [ 407.388044][T10322] elevator_set_none+0x92/0xf0 [ 407.393320][T10322] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 407.399636][T10322] nbd_start_device+0x1a6/0xbd0 [ 407.405000][T10322] nbd_genl_connect+0xff2/0x1a40 [ 407.410454][T10322] genl_family_rcv_msg_doit+0x214/0x300 [ 407.416503][T10322] genl_rcv_msg+0x560/0x800 [ 407.421510][T10322] netlink_rcv_skb+0x159/0x420 [ 407.426774][T10322] genl_rcv+0x28/0x40 [ 407.431260][T10322] netlink_unicast+0x585/0x850 [ 407.436528][T10322] netlink_sendmsg+0x8b0/0xda0 [ 407.441797][T10322] ____sys_sendmsg+0x9e1/0xb70 [ 407.447065][T10322] ___sys_sendmsg+0x190/0x1e0 [ 407.452243][T10322] __sys_sendmsg+0x170/0x220 [ 407.457340][T10322] do_syscall_64+0x115/0x870 [ 407.462439][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.468840][T10322] [ 407.468840][T10322] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 407.477430][T10322] blk_alloc_queue+0x610/0x790 [ 407.482704][T10322] blk_mq_alloc_queue+0x174/0x290 [ 407.488249][T10322] __blk_mq_alloc_disk+0x29/0x120 [ 407.493778][T10322] nbd_dev_add+0x492/0xb10 [ 407.498700][T10322] nbd_init+0x291/0x2b0 [ 407.503366][T10322] do_one_initcall+0x121/0x750 [ 407.508636][T10322] kernel_init_freeable+0x6ea/0x7b0 [ 407.514334][T10322] kernel_init+0x1f/0x1e0 [ 407.519169][T10322] ret_from_fork+0x72b/0xd50 [ 407.524262][T10322] ret_from_fork_asm+0x1a/0x30 [ 407.529535][T10322] [ 407.529535][T10322] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 407.536732][T10322] fs_reclaim_acquire+0xc4/0x100 [ 407.542172][T10322] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 407.548484][T10322] __alloc_skb+0x140/0x710 [ 407.553405][T10322] __ip6_append_data+0x34f1/0x4bf0 [ 407.559021][T10322] ip6_append_data+0x10b/0x410 [ 407.564284][T10322] rawv6_sendmsg+0x169c/0x4420 [ 407.569546][T10322] inet_sendmsg+0x11c/0x140 [ 407.574551][T10322] ____sys_sendmsg+0x98d/0xb70 [ 407.579814][T10322] ___sys_sendmsg+0x190/0x1e0 [ 407.584990][T10322] __sys_sendmsg+0x170/0x220 [ 407.590084][T10322] do_syscall_64+0x115/0x870 [ 407.595174][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.601563][T10322] [ 407.601563][T10322] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 407.609267][T10322] lock_sock_nested+0x41/0xf0 [ 407.614445][T10322] inet_shutdown+0x67/0x410 [ 407.619448][T10322] nbd_mark_nsock_dead+0xae/0x5c0 [ 407.624977][T10322] recv_work+0x5fb/0x8c0 [ 407.629721][T10322] process_one_work+0xa0e/0x1980 [ 407.635159][T10322] worker_thread+0x5ef/0xe50 [ 407.640247][T10322] kthread+0x370/0x450 [ 407.644814][T10322] ret_from_fork+0x72b/0xd50 [ 407.649902][T10322] ret_from_fork_asm+0x1a/0x30 [ 407.655166][T10322] [ 407.655166][T10322] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 407.662780][T10322] __mutex_lock+0x1a4/0x1b10 [ 407.667871][T10322] nbd_queue_rq+0x428/0x1080 [ 407.672965][T10322] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 407.679013][T10322] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 407.685847][T10322] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 407.692342][T10322] blk_mq_run_hw_queue+0x23c/0x670 [ 407.697957][T10322] blk_mq_dispatch_list+0x51d/0x1360 [ 407.703747][T10322] blk_mq_flush_plug_list+0x130/0x600 [ 407.709623][T10322] __blk_flush_plug+0x2c4/0x4b0 [ 407.714979][T10322] __submit_bio+0x584/0x6c0 [ 407.719990][T10322] submit_bio_noacct_nocheck+0x543/0xbf0 [ 407.726129][T10322] submit_bio_noacct+0xd18/0x2000 [ 407.731657][T10322] submit_bh_wbc+0x681/0x890 [ 407.736747][T10322] block_read_full_folio+0x264/0x8e0 [ 407.742530][T10322] filemap_read_folio+0xfc/0x3b0 [ 407.747971][T10322] do_read_cache_folio+0x2d7/0x6b0 [ 407.753588][T10322] read_part_sector+0xd1/0x370 [ 407.758852][T10322] adfspart_check_ICS+0x91/0x7d0 [ 407.764290][T10322] bdev_disk_changed+0x7a3/0x1250 [ 407.769812][T10322] blkdev_get_whole+0x187/0x290 [ 407.775162][T10322] bdev_open+0x2c7/0xe40 [ 407.779904][T10322] blkdev_open+0x34e/0x4f0 [ 407.784823][T10322] do_dentry_open+0x6ab/0x14d0 [ 407.790089][T10322] vfs_open+0x82/0x3f0 [ 407.794664][T10322] path_openat+0x208c/0x31a0 [ 407.799755][T10322] do_file_open+0x20e/0x430 [ 407.804760][T10322] do_sys_openat2+0x10d/0x1e0 [ 407.809938][T10322] __x64_sys_openat+0x12d/0x210 [ 407.815294][T10322] do_syscall_64+0x115/0x870 [ 407.820387][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.826778][T10322] [ 407.826778][T10322] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 407.833962][T10322] __mutex_lock+0x1a4/0x1b10 [ 407.839052][T10322] nbd_queue_rq+0xba/0x1080 [ 407.844060][T10322] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 407.850109][T10322] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 407.856938][T10322] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 407.863417][T10322] blk_mq_run_hw_queue+0x23c/0x670 [ 407.869027][T10322] blk_mq_dispatch_list+0x51d/0x1360 [ 407.874816][T10322] blk_mq_flush_plug_list+0x130/0x600 [ 407.880706][T10322] __blk_flush_plug+0x2c4/0x4b0 [ 407.886056][T10322] __submit_bio+0x584/0x6c0 [ 407.891058][T10322] submit_bio_noacct_nocheck+0x543/0xbf0 [ 407.897194][T10322] submit_bio_noacct+0xd18/0x2000 [ 407.902720][T10322] submit_bh_wbc+0x681/0x890 [ 407.907806][T10322] block_read_full_folio+0x264/0x8e0 [ 407.913589][T10322] filemap_read_folio+0xfc/0x3b0 [ 407.919029][T10322] do_read_cache_folio+0x2d7/0x6b0 [ 407.924644][T10322] read_part_sector+0xd1/0x370 [ 407.929908][T10322] adfspart_check_ICS+0x91/0x7d0 [ 407.935344][T10322] bdev_disk_changed+0x7a3/0x1250 [ 407.940880][T10322] blkdev_get_whole+0x187/0x290 [ 407.946238][T10322] bdev_open+0x2c7/0xe40 [ 407.950983][T10322] blkdev_open+0x34e/0x4f0 [ 407.955906][T10322] do_dentry_open+0x6ab/0x14d0 [ 407.961180][T10322] vfs_open+0x82/0x3f0 [ 407.965750][T10322] path_openat+0x208c/0x31a0 [ 407.970840][T10322] do_file_open+0x20e/0x430 [ 407.975842][T10322] do_sys_openat2+0x10d/0x1e0 [ 407.981022][T10322] __x64_sys_openat+0x12d/0x210 [ 407.986381][T10322] do_syscall_64+0x115/0x870 [ 407.991472][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.997866][T10322] [ 407.997866][T10322] -> #0 (set->srcu){.+.+}-{0:0}: [ 408.004972][T10322] __lock_acquire+0x14b8/0x2630 [ 408.010330][T10322] lock_sync+0x9d/0x110 [ 408.014991][T10322] __synchronize_srcu+0xa2/0x300 [ 408.020453][T10322] blk_mq_quiesce_queue+0x149/0x1c0 [ 408.026158][T10322] elevator_switch+0x353/0x7e0 [ 408.031426][T10322] elevator_change+0x352/0x530 [ 408.036699][T10322] elevator_set_none+0x92/0xf0 [ 408.041966][T10322] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 408.048277][T10322] nbd_start_device+0x1a6/0xbd0 [ 408.053635][T10322] nbd_genl_connect+0xff2/0x1a40 [ 408.059078][T10322] genl_family_rcv_msg_doit+0x214/0x300 [ 408.065138][T10322] genl_rcv_msg+0x560/0x800 [ 408.070142][T10322] netlink_rcv_skb+0x159/0x420 [ 408.075405][T10322] genl_rcv+0x28/0x40 [ 408.079887][T10322] netlink_unicast+0x585/0x850 [ 408.085149][T10322] netlink_sendmsg+0x8b0/0xda0 [ 408.090409][T10322] ____sys_sendmsg+0x9e1/0xb70 [ 408.095674][T10322] ___sys_sendmsg+0x190/0x1e0 [ 408.100854][T10322] __sys_sendmsg+0x170/0x220 [ 408.105946][T10322] do_syscall_64+0x115/0x870 [ 408.111039][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.117427][T10322] [ 408.117427][T10322] other info that might help us debug this: [ 408.117427][T10322] [ 408.127628][T10322] Chain exists of: [ 408.127628][T10322] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 408.127628][T10322] [ 408.141248][T10322] Possible unsafe locking scenario: [ 408.141248][T10322] [ 408.148669][T10322] CPU0 CPU1 [ 408.154005][T10322] ---- ---- [ 408.159341][T10322] lock(&q->elevator_lock); [ 408.163905][T10322] lock(&q->q_usage_counter(io)#50); [ 408.171774][T10322] lock(&q->elevator_lock); [ 408.178860][T10322] sync(set->srcu); [ 408.182731][T10322] [ 408.182731][T10322] *** DEADLOCK *** [ 408.182731][T10322] [ 408.190849][T10322] 7 locks held by syz.3.1187/10322: [ 408.196017][T10322] #0: ffffffff906b1c08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 408.204174][T10322] #1: ffffffff906b1cc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 408.213110][T10322] #2: ffff888027a781c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x9d/0x15f0 [ 408.224482][T10322] #3: ffff888027a780d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb0/0x15f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.235418][T10322] #4: ffff888027a83840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 408.247056][T10322] #5: ffff888027a83878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 408.258950][T10322] #6: ffff888027a83d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 408.268755][T10322] [ 408.268755][T10322] stack backtrace: [ 408.274619][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.3.1187 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.274639][T10322] Tainted: [L]=SOFTLOCKUP [ 408.274644][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.274653][T10322] Call Trace: [ 408.274658][T10322] [ 408.274663][T10322] dump_stack_lvl+0x100/0x190 [ 408.274679][T10322] print_circular_bug.cold+0x178/0x1c7 [ 408.274702][T10322] check_noncircular+0x146/0x160 [ 408.274716][T10322] ? lockdep_hardirqs_on+0x78/0x100 [ 408.274737][T10322] __lock_acquire+0x14b8/0x2630 [ 408.274756][T10322] ? __synchronize_srcu+0x1c/0x300 [ 408.274773][T10322] lock_sync+0x9d/0x110 [ 408.274789][T10322] ? __synchronize_srcu+0x1c/0x300 [ 408.274807][T10322] __synchronize_srcu+0xa2/0x300 [ 408.274824][T10322] ? __pfx___synchronize_srcu+0x10/0x10 [ 408.274848][T10322] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 408.274864][T10322] ? synchronize_srcu+0xa8/0x380 [ 408.274882][T10322] blk_mq_quiesce_queue+0x149/0x1c0 [ 408.274898][T10322] elevator_switch+0x353/0x7e0 [ 408.274914][T10322] elevator_change+0x352/0x530 [ 408.274930][T10322] elevator_set_none+0x92/0xf0 [ 408.274946][T10322] ? __pfx_elevator_set_none+0x10/0x10 [ 408.274963][T10322] ? blk_mq_unregister_hctx.part.0+0x1ba/0x230 [ 408.274983][T10322] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 408.275004][T10322] ? nbd_start_device+0x107/0xbd0 [ 408.275026][T10322] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 408.275045][T10322] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 408.275069][T10322] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 408.275087][T10322] nbd_start_device+0x1a6/0xbd0 [ 408.275109][T10322] nbd_genl_connect+0xff2/0x1a40 [ 408.275130][T10322] ? __pfx_nbd_genl_connect+0x10/0x10 [ 408.275151][T10322] ? __nla_parse+0x40/0x60 [ 408.275164][T10322] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 408.275184][T10322] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 408.275205][T10322] genl_family_rcv_msg_doit+0x214/0x300 [ 408.275224][T10322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.275243][T10322] ? genl_get_cmd+0x3e7/0x760 [ 408.275262][T10322] ? __alloc_skb+0x185/0x710 [ 408.275280][T10322] ? netlink_alloc_large_skb+0x69/0x150 [ 408.275296][T10322] ? __radix_tree_lookup+0x217/0x2b0 [ 408.275312][T10322] genl_rcv_msg+0x560/0x800 [ 408.275331][T10322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.275349][T10322] ? __pfx_nbd_genl_connect+0x10/0x10 [ 408.275371][T10322] ? __lock_acquire+0x4a5/0x2630 [ 408.275388][T10322] netlink_rcv_skb+0x159/0x420 [ 408.275404][T10322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.275422][T10322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.275442][T10322] ? netlink_deliver_tap+0x1ae/0xcc0 [ 408.275458][T10322] genl_rcv+0x28/0x40 [ 408.275474][T10322] netlink_unicast+0x585/0x850 [ 408.275491][T10322] ? __pfx_netlink_unicast+0x10/0x10 [ 408.275510][T10322] netlink_sendmsg+0x8b0/0xda0 [ 408.275527][T10322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.275542][T10322] ? __pfx___might_fault+0x10/0x10 [ 408.275565][T10322] ____sys_sendmsg+0x9e1/0xb70 [ 408.275581][T10322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.275597][T10322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.275611][T10322] ? preempt_schedule_thunk+0x16/0x30 [ 408.275634][T10322] ? try_to_wake_up+0x5f6/0x1900 [ 408.275656][T10322] ___sys_sendmsg+0x190/0x1e0 [ 408.275673][T10322] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.275689][T10322] ? futex_private_hash_put+0x107/0x1c0 [ 408.275716][T10322] __sys_sendmsg+0x170/0x220 [ 408.275735][T10322] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.275755][T10322] ? __x64_sys_futex+0x34f/0x4d0 [ 408.275777][T10322] ? rcu_is_watching+0x12/0xc0 [ 408.275797][T10322] do_syscall_64+0x115/0x870 [ 408.275814][T10322] ? clear_bhb_loop+0x40/0x90 [ 408.275830][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.275848][T10322] RIP: 0033:0x7fa16cf9ce59 [ 408.275861][T10322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.275874][T10322] RSP: 002b:00007fa16dd7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.275887][T10322] RAX: ffffffffffffffda RBX: 00007fa16d215fa0 RCX: 00007fa16cf9ce59 [ 408.275895][T10322] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 408.275904][T10322] RBP: 00007fa16d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 408.275912][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.275920][T10322] R13: 00007fa16d216038 R14: 00007fa16d215fa0 R15: 00007ffd49a60658 [ 408.275933][T10322] [ 408.277232][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 408.731726][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 408.792889][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.805385][ T5615] block nbd1: Receive control failed (result -32) [ 408.813159][ T5615] block nbd1: Receive control failed (result -32) [ 408.962376][T10308] ceph: No mds server is up or the cluster is laggy [ 408.980776][ T5621] syz_tun (unregistering): left allmulticast mode [ 409.467410][ T7108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.521184][ T5805] usb 2-1: USB disconnect, device number 75 [ 409.536418][ T7108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.572901][ T7108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.640646][ T7108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.713272][ T7108] bridge_slave_1: left allmulticast mode [ 409.719091][ T7108] bridge_slave_1: left promiscuous mode [ 409.724742][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.733267][ T7108] bridge_slave_0: left allmulticast mode [ 409.738916][ T7108] bridge_slave_0: left promiscuous mode [ 409.744508][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.752643][ T7108] macvtap0: left allmulticast mode [ 409.757738][ T7108] veth0_macvtap: left allmulticast mode [ 409.809370][ T7108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.819025][ T7108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.828274][ T7108] bond0 (unregistering): Released all slaves [ 409.835413][ T7108] bond1 (unregistering): Released all slaves [ 409.904161][ T7108] tipc: Left network mode [ 409.966319][ T30] audit: type=1400 audit(1780653861.975:735): avc: denied { write } for pid=10343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.999042][ T30] audit: type=1400 audit(1780653862.015:736): avc: denied { write } for pid=10354 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.048568][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 410.087746][ T7108] hsr_slave_0: left promiscuous mode [ 410.095295][ T7108] hsr_slave_1: left promiscuous mode [ 410.101054][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.108557][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.116074][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.124180][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.135333][ T7108] veth1_macvtap: left promiscuous mode [ 410.144158][ T7108] veth0_macvtap: left promiscuous mode [ 410.150054][ T7108] veth1_vlan: left promiscuous mode [ 410.155286][ T7108] veth0_vlan: left promiscuous mode [ 410.199268][ T30] audit: type=1400 audit(1780653862.216:737): avc: denied { write } for pid=10357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.245119][ T30] audit: type=1400 audit(1780653862.256:738): avc: denied { write } for pid=10368 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.297786][ T7108] team0 (unregistering): Port device team_slave_1 removed [ 410.312402][ T7108] team0 (unregistering): Port device team_slave_0 removed [ 410.345693][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 410.490740][ T30] audit: type=1400 audit(1780653862.506:739): avc: denied { write } for pid=10371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.544158][ T30] audit: type=1400 audit(1780653862.556:740): avc: denied { write } for pid=10382 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.586355][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 410.692872][ T30] audit: type=1400 audit(1780653862.706:741): avc: denied { write } for pid=10385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.737872][ T30] audit: type=1400 audit(1780653862.746:742): avc: denied { write } for pid=10396 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.782644][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 410.863273][ T7108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.901921][ T7108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.977030][ T7108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.992750][ T30] audit: type=1400 audit(1780653863.006:743): avc: denied { write } for pid=10403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.022690][ T30] audit: type=1400 audit(1780653863.036:744): avc: denied { write } for pid=10414 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.065570][ T7108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.077178][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 411.152923][ T7108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.202209][ T7108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.258740][ T7108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.274046][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 411.308890][ T7108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.401689][ T7108] bridge_slave_1: left allmulticast mode [ 411.409813][ T7108] bridge_slave_1: left promiscuous mode [ 411.415505][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.424690][ T7108] bridge_slave_0: left allmulticast mode [ 411.430482][ T7108] bridge_slave_0: left promiscuous mode [ 411.436128][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.445532][ T7108] bridge_slave_1: left allmulticast mode [ 411.451250][ T7108] bridge_slave_1: left promiscuous mode [ 411.456877][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.464939][ T7108] bridge_slave_0: left allmulticast mode [ 411.470930][ T7108] bridge_slave_0: left promiscuous mode [ 411.476579][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.486809][ T7108] macvtap0: left allmulticast mode [ 411.493835][ T7108] veth0_macvtap: left allmulticast mode [ 411.583699][ T7108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.593702][ T7108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.603385][ T7108] bond0 (unregistering): Released all slaves [ 411.729551][ T7108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.739039][ T7108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.748227][ T7108] bond0 (unregistering): Released all slaves [ 411.769557][ T7108] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 411.816096][ T7108] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 411.824553][ T7108] bridge1 (unregistering): left promiscuous mode [ 411.949601][ T7108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.959091][ T7108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.968340][ T7108] bond0 (unregistering): Released all slaves [ 411.975654][ T7108] bond1 (unregistering): Released all slaves [ 411.983911][ T7108] bond2 (unregistering): Released all slaves [ 411.992319][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 412.049781][ T7108] tipc: Left network mode [ 412.211825][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 412.387549][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 412.432492][ T7108] hsr_slave_0: left promiscuous mode [ 412.438326][ T7108] hsr_slave_1: left promiscuous mode [ 412.443956][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.451702][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.461319][ T7108] hsr_slave_0: left promiscuous mode [ 412.466981][ T7108] hsr_slave_1: left promiscuous mode [ 412.472747][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.480172][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.489961][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.497779][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.507909][ T7108] hsr_slave_0: left promiscuous mode [ 412.513551][ T7108] hsr_slave_1: left promiscuous mode [ 412.519263][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.526750][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.534516][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.542146][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.556395][ T7108] veth1_macvtap: left promiscuous mode [ 412.562187][ T7108] veth0_macvtap: left promiscuous mode [ 412.567754][ T7108] veth1_vlan: left promiscuous mode [ 412.572978][ T7108] veth0_vlan: left promiscuous mode [ 412.578870][ T7108] veth1_macvtap: left allmulticast mode [ 412.584438][ T7108] veth1_macvtap: left promiscuous mode [ 412.590014][ T7108] veth0_macvtap: left promiscuous mode [ 412.595619][ T7108] veth1_vlan: left promiscuous mode [ 412.601423][ T7108] veth0_vlan: left promiscuous mode [ 412.699476][ T7108] team0 (unregistering): Port device team_slave_1 removed [ 412.710573][ T7108] team0 (unregistering): Port device team_slave_0 removed [ 412.785550][ T7108] team0 (unregistering): Port device team_slave_1 removed [ 412.794808][ T7108] team0 (unregistering): Port device team_slave_0 removed [ 412.902008][ T7108] team0 (unregistering): Port device team_slave_1 removed [ 412.911902][ T7108] team0 (unregistering): Port device team_slave_0 removed [ 412.956690][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 412.957384][ T13] smbdirect: ib_dev[syz0] removed [ 412.964578][ T5805] lo speed is unknown, defaulting to 1000 [ 412.976922][ T5805] infiniband syz0: ib_query_port failed (-19) [ 413.139284][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 413.322388][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 413.513900][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 413.711099][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 413.856098][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 414.006131][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 416.751385][ T4982] udevd[4982]: worker [6287] /devices/virtual/block/nbd4 is taking a long time