last executing test programs: 17.691503934s ago: executing program 1 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80800002c0001002bbd30005823a475624f94434ae8000000000000000000000000000000000001fe80000000000000000040000000000f000000000000000065d1f5fc1a4e48084bc656385c1a37a7b7dbd4d3c9a10c96033810cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001010000"], 0xb8}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1000005, 0x180931, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) r2 = userfaultfd(0x80001) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, 0x0, 0x4040040) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) 15.387825628s ago: executing program 1 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 15.276407974s ago: executing program 1 (id=1068): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x35e6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000e00)='gfs2meta\x00', 0x20c400, 0x0) mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000e40)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000f00)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r5, &(0x7f0000001000)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r4, 0x6}, 0x50) connect$netlink(r4, &(0x7f00000010c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000011c0)={0x13, 0x10, 0xfa00, {&(0x7f0000001200), r7, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 11.607906066s ago: executing program 1 (id=1076): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 10.674831804s ago: executing program 3 (id=1078): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f00000006c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000a40)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0xfc}}, 0x4040000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000d80)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 8.953738536s ago: executing program 3 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x101001, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7ffc, 0xd) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @remote}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r7, &(0x7f00000002c0)='e:mygroup/myevent sched.sched_switch', 0x24) open(&(0x7f0000000580)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) 6.908315106s ago: executing program 3 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00200038f79bc8000000f9ff000000733a3c15000000000000000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x101001, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffc, 0xd) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @remote}, 0x8) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r7, &(0x7f00000002c0)='e:mygroup/myevent sched.sched_switch', 0x24) 6.778265497s ago: executing program 2 (id=1094): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/igmp6\x00') sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000140)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$make_it_fail(r2, &(0x7f00000000c0)='0\x00', 0x2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x12) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffd90, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 5.845915895s ago: executing program 0 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x16, 0x3, "4ec849704f7ab6ee5bcc8b71ed5070ce8003"}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 5.741597784s ago: executing program 3 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00200038f79bc8000000f9ff000000733a3c15000000000000000000"], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x101001, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7ffc, 0xd) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @remote}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='e:mygroup/myevent sched.sched_switch', 0x24) open(&(0x7f0000000580)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x1f, &(0x7f0000000700)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xde, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x94) 5.308183398s ago: executing program 4 (id=1098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="04", 0xffffff91}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 4.728362131s ago: executing program 1 (id=1099): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x35e6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000e00)='gfs2meta\x00', 0x20c400, 0x0) mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000e40)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000f00)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r5, &(0x7f0000001000)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r4, 0x6}, 0x50) connect$netlink(r4, &(0x7f00000010c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000011c0)={0x13, 0x10, 0xfa00, {&(0x7f0000001200), r7, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 4.695289625s ago: executing program 0 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x0, 0x0, 0x81000, 0x0, 0x0, 0xfffffffd}) setpriority(0x2, 0x0, 0xa7ab) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x2, 0x12c) write(r0, &(0x7f0000000940)='27', 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38000000031401002dbd7800fcdbdf250900020073797a320000000008004100727865001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) 4.519210925s ago: executing program 2 (id=1101): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000300), &(0x7f0000000340)=@udp6=r1}, 0x20) 3.584983833s ago: executing program 3 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00') lseek(r4, 0x2000, 0x1) write$P9_RGETATTR(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000200)={0x2, {0x2, 0xfff8, 0x880}}) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, &(0x7f0000000200)) 3.519707302s ago: executing program 4 (id=1103): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) eventfd2(0x80, 0x801) r3 = eventfd2(0x7e, 0x80800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x2f, 0x8000000, 0x1, r3, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.421225524s ago: executing program 2 (id=1104): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 3.357193847s ago: executing program 0 (id=1105): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x4008054) write$nci(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB='p\x00\t'], 0xc) 3.134329629s ago: executing program 0 (id=1106): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x2000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x90], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.905072911s ago: executing program 0 (id=1107): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x2400c800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) 2.466288775s ago: executing program 2 (id=1108): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f00000006c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000a40)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0xfc}}, 0x4040000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000d80)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 2.439653159s ago: executing program 1 (id=1109): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sendto(r3, &(0x7f0000000400)="8401fe", 0x3, 0x4085, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 2.312479236s ago: executing program 4 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2.202169143s ago: executing program 4 (id=1111): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000007800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000007840)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000007880)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000078c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000007940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000079c0), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000007a00)=0x2) recvmmsg(r3, &(0x7f0000007a40), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007a80)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007ac0)={0x11, 0xa, &(0x7f0000007b80)=ANY=[], &(0x7f0000007bc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000007c00)='./file2\x00', 0x81c0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000007c40)={0x0, 0x2, 0xe98, 0x0, 0x100}) openat$comedi(0xffffffffffffff9c, &(0x7f0000007c80)='/dev/comedi3\x00', 0x400, 0x0) prctl$PR_MCE_KILL_GET(0x22) symlinkat(&(0x7f0000007dc0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000007e00)='./file0\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0xff}, 0x18) 1.256083805s ago: executing program 0 (id=1112): syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x21c0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @broadcast}]}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x9b00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x8000017) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x141102) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) eventfd2(0x2, 0x0) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000840)='testdomain / 2147483647\n', 0x18) close(r5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) 1.254384155s ago: executing program 2 (id=1113): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x2000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x90], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) eventfd2(0x80, 0x801) r2 = eventfd2(0x7e, 0x80800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x2f, 0x8000000, 0x1, r2, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.109107314s ago: executing program 4 (id=1114): ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000003140)=ANY=[@ANYBLOB="18000000000000000020"]) 41.219611ms ago: executing program 3 (id=1115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80800002c0001002bbd30005823a475624f94434ae8000000000000000000000000000000000001fe80000000000000000040000000000f000000000000000065d1f5fc1a4e48084bc656385c1a37a7b7dbd4d3c9a10c96033810cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001010000"], 0xb8}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1000005, 0x180931, 0xffffffffffffffff, 0x20000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, 0x0, 0x4040040) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) listen(r0, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) 1.703947ms ago: executing program 4 (id=1116): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480), 0x404, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003480)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) lstat(0x0, &(0x7f0000003540)) syz_fuse_handle_req(r0, &(0x7f00000035c0)="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", 0x2000, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005680)={0x90, 0x0, 0xd941, {0x3, 0x2, 0xf38b, 0x6, 0x0, 0x3, {0x6, 0x0, 0x7, 0x8, 0xffff, 0x10000, 0x0, 0x9, 0x6, 0x6000, 0xfffffff9, r2, r3, 0x3, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00200038f79bc8000000f9ff000000733a3c15000000000000000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x101001, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffc, 0xd) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @remote}, 0x8) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r7, &(0x7f00000002c0)='e:mygroup/myevent sched.sched_switch', 0x24) open(&(0x7f0000000580)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x1f, &(0x7f0000000700)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xde, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): ew USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.091044][ T7165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.170846][ T5722] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.983272][ T7189] FAULT_INJECTION: forcing a failure. [ 135.983272][ T7189] name failslab, interval 1, probability 0, space 0, times 0 [ 135.983296][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.2.525 Not tainted syzkaller #0 PREEMPT(full) [ 135.983311][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 135.983322][ T7189] Call Trace: [ 135.983326][ T7189] [ 135.983331][ T7189] dump_stack_lvl+0x100/0x190 [ 135.983360][ T7189] should_fail_ex.cold+0x5/0xa [ 135.983380][ T7189] should_failslab+0xc2/0x120 [ 135.983395][ T7189] __kmalloc_cache_noprof+0x91/0x6d0 [ 135.983413][ T7189] ? mctp_rtm_newneigh+0x3a5/0x910 [ 135.983435][ T7189] mctp_rtm_newneigh+0x3a5/0x910 [ 135.983462][ T7189] ? __pfx_mctp_rtm_newneigh+0x10/0x10 [ 135.983495][ T7189] ? __pfx_mctp_rtm_newneigh+0x10/0x10 [ 135.983516][ T7189] rtnetlink_rcv_msg+0x3c9/0xe90 [ 135.983535][ T7189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.983562][ T7189] netlink_rcv_skb+0x159/0x420 [ 135.983577][ T7189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.983594][ T7189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.983607][ T7189] ? __asan_memcpy+0x3c/0x60 [ 135.983629][ T7189] ? netlink_deliver_tap+0x1ae/0xb50 [ 135.983646][ T7189] netlink_unicast+0x668/0x950 [ 135.983664][ T7189] ? __pfx_netlink_unicast+0x10/0x10 [ 135.983684][ T7189] netlink_sendmsg+0x9ac/0x10c0 [ 135.983702][ T7189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.983720][ T7189] ? selinux_socket_sendmsg+0x198/0x2f0 [ 135.983739][ T7189] ? sock_write_iter+0x560/0x5d0 [ 135.983755][ T7189] sock_write_iter+0x560/0x5d0 [ 135.983771][ T7189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.983785][ T7189] ? __pfx_sock_write_iter+0x10/0x10 [ 135.983806][ T7189] ? bpf_lsm_file_permission+0x9/0x10 [ 135.983823][ T7189] ? security_file_permission+0x76/0x210 [ 135.983843][ T7189] ? rw_verify_area+0xce/0x6d0 [ 135.983862][ T7189] vfs_write+0x6af/0x1050 [ 135.983874][ T7189] ? __pfx_sock_write_iter+0x10/0x10 [ 135.983892][ T7189] ? __pfx_vfs_write+0x10/0x10 [ 135.983901][ T7189] ? find_held_lock+0x2b/0x80 [ 135.983925][ T7189] ksys_write+0x1f8/0x250 [ 135.983936][ T7189] ? __pfx_ksys_write+0x10/0x10 [ 135.983952][ T7189] do_syscall_64+0x123/0x790 [ 135.983965][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.983978][ T7189] RIP: 0033:0x7efced99f559 [ 135.983989][ T7189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.984001][ T7189] RSP: 002b:00007efcee81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.984013][ T7189] RAX: ffffffffffffffda RBX: 00007efcedc25fa0 RCX: 00007efced99f559 [ 135.984021][ T7189] RDX: 00000000000001c7 RSI: 0000200000000300 RDI: 0000000000000004 [ 135.984028][ T7189] RBP: 00007efceda36b50 R08: 0000000000000000 R09: 0000000000000000 [ 135.984035][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.984042][ T7189] R13: 00007efcedc26038 R14: 00007efcedc25fa0 R15: 00007ffe94103a08 [ 135.984058][ T7189] [ 137.100163][ T4937] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.100196][ T4937] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.100246][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.100267][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.128513][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 137.128524][ T30] audit: type=1400 audit(1793594717.310:368): avc: denied { read } for pid=7191 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.176506][ T30] audit: type=1400 audit(1793594717.350:369): avc: denied { open } for pid=7191 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.209139][ T982] IPVS: starting estimator thread 0... [ 137.292534][ T7196] IPVS: using max 73 ests per chain, 175200 per kthread [ 137.397808][ T5722] usb 1-1: USB disconnect, device number 5 [ 137.421875][ T53] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 137.675841][ T30] audit: type=1400 audit(1793594717.860:370): avc: denied { write } for pid=7183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.708100][ T30] audit: type=1400 audit(1793594717.890:371): avc: denied { add_name } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.730935][ T30] audit: type=1400 audit(1793594717.910:372): avc: denied { create } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.756345][ T30] audit: type=1400 audit(1793594717.940:373): avc: denied { write } for pid=7183 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=2430 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.756525][ T30] audit: type=1400 audit(1793594717.940:374): avc: denied { append } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2430 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.989970][ T30] audit: type=1400 audit(1793594718.170:375): avc: denied { write } for pid=7212 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.017492][ T30] audit: type=1400 audit(1793594718.200:376): avc: denied { unlink } for pid=7212 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2430 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.446819][ T30] audit: type=1400 audit(1793594718.630:377): avc: denied { write } for pid=7219 comm="syz.1.528" name="functions" dev="configfs" ino=10565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.680635][ T7200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.680738][ T7200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.680804][ T7200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.680865][ T7200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.680929][ T7200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.696029][ T7208] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 138.962722][ T5722] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 139.112940][ T5722] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 139.113732][ T5722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.113758][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.113772][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 139.113785][ T5722] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.113808][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.278708][ T7228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.278764][ T7228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.460241][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.486010][ T5753] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.532516][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.638254][ T5722] pl2303 2-1:1.0: required interrupt-in endpoint missing [ 139.734407][ T9] usb 1-1: device descriptor read/64, error -71 [ 139.889639][ T5753] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.975603][ T5753] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.975627][ T5753] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.975642][ T5753] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.125114][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.125133][ T5753] usb 5-1: Product: syz [ 140.125142][ T5753] usb 5-1: Manufacturer: syz [ 140.125151][ T5753] usb 5-1: SerialNumber: syz [ 140.159935][ T5753] usb 5-1: config 0 descriptor?? [ 140.180014][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.193309][ T5753] usb 5-1: selecting invalid altsetting 0 [ 140.246323][ T7260] block nbd2: shutting down sockets [ 140.312850][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.422681][ T9] usb usb1-port1: attempt power cycle [ 140.519339][ T5753] usb 5-1: USB disconnect, device number 9 [ 140.532539][ T5722] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.684120][ T5722] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.684911][ T5722] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.684945][ T5722] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.684966][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.688206][ T7268] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 140.736341][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.736364][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.736400][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.736420][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.793306][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.794858][ T5722] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.819642][ T9] usb 1-1: device descriptor read/8, error -71 [ 140.830555][ T5618] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 140.954614][ T7279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.954716][ T7279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.954782][ T7279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.954847][ T7279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.954917][ T7279] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.960888][ T5722] usb 3-1: USB disconnect, device number 5 [ 141.054990][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.073832][ T9] usb 1-1: device descriptor read/8, error -71 [ 141.182902][ T9] usb usb1-port1: unable to enumerate USB device [ 141.442607][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.593385][ T9] usb 5-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 141.594269][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.594297][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.594321][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.650103][ T5722] usb 2-1: USB disconnect, device number 15 [ 142.102117][ T5618] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 142.151384][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 142.177176][ T7325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.177303][ T7325] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.177378][ T7325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.177456][ T7325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.177520][ T7325] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.352509][ T5722] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 142.505437][ T5722] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 142.508066][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 142.508101][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 142.508115][ T5722] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.508148][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.512310][ T7327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.512366][ T7327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.556275][ T5722] pl2303 2-1:1.0: required interrupt-in endpoint missing [ 142.691002][ T7340] loop0: detected capacity change from 0 to 6 [ 142.724137][ T7340] ldm_validate_privheads(): Disk read failed. [ 142.724169][ T7340] loop0: [ 142.724179][ T7340] loop0: partition table partially beyond EOD, truncated [ 142.804752][ T9] rtsx_usb 5-1:1.0: probe with driver rtsx_usb failed with error -71 [ 142.838033][ T9] usb 5-1: USB disconnect, device number 10 [ 143.060206][ T9] usb 2-1: USB disconnect, device number 16 [ 143.892193][ T5722] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.032682][ T5722] usb 3-1: device descriptor read/64, error -71 [ 144.088662][ T5618] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 144.138025][ T7368] loop0: detected capacity change from 0 to 6 [ 144.164975][ T7368] ldm_validate_privheads(): Disk read failed. [ 144.165008][ T7368] loop0: [ 144.165017][ T7368] loop0: partition table partially beyond EOD, truncated [ 144.195363][ T7366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.195478][ T7366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.195545][ T7366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.195609][ T7366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.195674][ T7366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.273454][ T5722] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.412803][ T5722] usb 3-1: device descriptor read/64, error -71 [ 144.530810][ T5722] usb usb3-port1: attempt power cycle [ 144.585543][ T7388] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 144.619062][ T7388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.671177][ T7388] bond1: (slave geneve2): making interface the new active one [ 144.672398][ T7388] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 144.862631][ T5722] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.886148][ T5722] usb 3-1: device descriptor read/8, error -71 [ 145.123095][ T5722] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.142947][ T5722] usb 3-1: device descriptor read/8, error -71 [ 145.192527][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 145.253655][ T5722] usb usb3-port1: unable to enumerate USB device [ 145.341655][ T7407] loop0: detected capacity change from 0 to 6 [ 145.349960][ T9] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 145.365177][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 145.365197][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 145.365211][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.365230][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.417742][ T7403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.417798][ T7403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.420313][ T9] pl2303 2-1:1.0: required interrupt-in endpoint missing [ 145.448978][ T7407] ldm_validate_privheads(): Disk read failed. [ 145.449011][ T7407] loop0: [ 145.449020][ T7407] loop0: partition table partially beyond EOD, truncated [ 145.592052][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 145.592065][ T30] audit: type=1400 audit(1793594725.770:386): avc: denied { bind } for pid=7408 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.685693][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'. [ 145.859236][ T5753] usb 2-1: USB disconnect, device number 17 [ 145.885788][ T7423] syzkaller0: entered promiscuous mode [ 145.885804][ T7423] syzkaller0: entered allmulticast mode [ 146.028482][ T53] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 146.123409][ T7426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.123511][ T7426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.123579][ T7426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.123646][ T7426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.123710][ T7426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.178460][ T30] audit: type=1400 audit(1793594726.360:387): avc: denied { ioctl } for pid=7432 comm="syz.2.603" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.281887][ T7443] loop0: detected capacity change from 0 to 3904 [ 146.303760][ T7443] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 146.303779][ T7443] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 146.303787][ T7443] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 146.303818][ T7443] loop0: [ 147.218719][ T7449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.243698][ T2379] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.394704][ T30] audit: type=1400 audit(1793594727.580:388): avc: denied { mount } for pid=7451 comm="syz.2.610" name="/" dev="autofs" ino=15225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 147.418109][ T2379] usb 4-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 147.418841][ T2379] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.418860][ T2379] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.453338][ T2379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.453356][ T2379] usb 4-1: Product: syz [ 147.453365][ T2379] usb 4-1: Manufacturer: syz [ 147.453374][ T2379] usb 4-1: SerialNumber: syz [ 147.483931][ T2379] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 147.515631][ T30] audit: type=1400 audit(1793594727.700:389): avc: denied { read append } for pid=7451 comm="syz.2.610" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 147.515835][ T30] audit: type=1400 audit(1793594727.700:390): avc: denied { open } for pid=7451 comm="syz.2.610" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 147.565436][ T30] audit: type=1400 audit(1793594727.750:391): avc: denied { ioctl } for pid=7451 comm="syz.2.610" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0xc0189378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 147.598594][ T2379] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 147.598885][ T2379] input input6: usb_submit_urb failed [ 147.614983][ T7456] syzkaller0: entered promiscuous mode [ 147.614998][ T7456] syzkaller0: entered allmulticast mode [ 147.651218][ T2379] input: failed to attach handler kbd to device input6, error: -5 [ 147.662878][ T4972] input input6: usb_submit_urb failed [ 147.686197][ T2379] scsi host1: usb-storage 4-1:1.0 [ 147.703096][ T4972] input input6: usb_submit_urb failed [ 147.733125][ T2379] usb 4-1: USB disconnect, device number 8 [ 148.774836][ T30] audit: type=1400 audit(1793594728.950:392): avc: denied { lock } for pid=7463 comm="syz.0.615" path="socket:[15269]" dev="sockfs" ino=15269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 148.774938][ T4937] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.774960][ T4937] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.774976][ T4937] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.775010][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 148.775030][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.933409][ T7474] loop0: detected capacity change from 0 to 3904 [ 148.955083][ T7474] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 148.955104][ T7474] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 148.955112][ T7474] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 148.955139][ T7474] loop0: [ 149.489451][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.627797][ T7489] syzkaller0: entered promiscuous mode [ 149.627813][ T7489] syzkaller0: entered allmulticast mode [ 149.655012][ T9] usb 1-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 149.657314][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 149.657335][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 149.657349][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.657367][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.659515][ T7476] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.659569][ T7476] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.673415][ T9] pl2303 1-1:1.0: required interrupt-in endpoint missing [ 150.659447][ T7491] Set syz1 is full, maxelem 65536 reached [ 150.909308][ T2379] usb 1-1: USB disconnect, device number 10 [ 150.973265][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 151.102523][ T5753] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.102621][ T9] usb 2-1: device descriptor read/64, error -71 [ 151.253146][ T5753] usb 3-1: Using ep0 maxpacket: 32 [ 151.253608][ T5753] usb 3-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 151.254602][ T5753] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 151.254616][ T5753] usb 3-1: config 0 has no interface number 0 [ 151.254637][ T5753] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 151.256054][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.256068][ T5753] usb 3-1: Product: syz [ 151.256076][ T5753] usb 3-1: Manufacturer: syz [ 151.256084][ T5753] usb 3-1: SerialNumber: syz [ 151.259394][ T5753] usb 3-1: config 0 descriptor?? [ 151.261167][ T7503] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 151.372040][ T7515] FAULT_INJECTION: forcing a failure. [ 151.372040][ T7515] name failslab, interval 1, probability 0, space 0, times 0 [ 151.372061][ T7515] CPU: 0 UID: 0 PID: 7515 Comm: syz.4.634 Not tainted syzkaller #0 PREEMPT(full) [ 151.372077][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 151.372085][ T7515] Call Trace: [ 151.372090][ T7515] [ 151.372095][ T7515] dump_stack_lvl+0x100/0x190 [ 151.372122][ T7515] should_fail_ex.cold+0x5/0xa [ 151.372140][ T7515] should_failslab+0xc2/0x120 [ 151.372155][ T7515] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 151.372175][ T7515] ? xas_split_alloc+0x182/0x530 [ 151.372192][ T7515] xas_split_alloc+0x182/0x530 [ 151.372208][ T7515] __folio_split+0x126b/0x27b0 [ 151.372233][ T7515] ? folio_alloc_swap+0xd7f/0x1ef0 [ 151.372246][ T7515] ? folio_alloc_swap+0xd7f/0x1ef0 [ 151.372258][ T7515] ? __pfx___folio_split+0x10/0x10 [ 151.372286][ T7515] ? folio_alloc_swap+0x9a0/0x1ef0 [ 151.372300][ T7515] shmem_writeout+0x8ef/0x1a50 [ 151.372316][ T7515] ? __pfx_shmem_writeout+0x10/0x10 [ 151.372331][ T7515] ? inode_to_bdi+0x9e/0x160 [ 151.372345][ T7515] ? folio_clear_dirty_for_io+0x178/0x970 [ 151.372362][ T7515] shrink_folio_list+0x3a43/0x59c0 [ 151.372387][ T7515] ? __pfx_shrink_folio_list+0x10/0x10 [ 151.372404][ T7515] ? rcu_is_watching+0x13/0xc0 [ 151.372419][ T7515] ? __kasan_check_byte+0x13/0x50 [ 151.372432][ T7515] ? is_bpf_text_address+0x8a/0x1a0 [ 151.372448][ T7515] ? is_bpf_text_address+0x8a/0x1a0 [ 151.372463][ T7515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 151.372481][ T7515] ? is_bpf_text_address+0x94/0x1a0 [ 151.372495][ T7515] ? kernel_text_address+0x8d/0x100 [ 151.372509][ T7515] ? __kernel_text_address+0xd/0x30 [ 151.372535][ T7515] ? check_noncircular+0x97/0x160 [ 151.372554][ T7515] reclaim_folio_list+0xe9/0x5e0 [ 151.372571][ T7515] ? check_prev_add+0x354/0xe60 [ 151.372588][ T7515] ? __pfx_reclaim_folio_list+0x10/0x10 [ 151.372611][ T7515] ? irqentry_exit+0x202/0xab0 [ 151.372622][ T7515] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.372640][ T7515] reclaim_pages+0x428/0x5e0 [ 151.372659][ T7515] ? __pfx_reclaim_pages+0x10/0x10 [ 151.372676][ T7515] ? madvise_cold_or_pageout_pte_range+0x216a/0x2600 [ 151.372696][ T7515] madvise_cold_or_pageout_pte_range+0x171c/0x2600 [ 151.372713][ T7515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 151.372730][ T7515] ? is_bpf_text_address+0x94/0x1a0 [ 151.372745][ T7515] ? kernel_text_address+0x8d/0x100 [ 151.372758][ T7515] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 151.372775][ T7515] ? __lock_acquire+0x5c0/0x1f40 [ 151.372794][ T7515] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 151.372810][ T7515] walk_pgd_range+0xbef/0x1e00 [ 151.372830][ T7515] ? ima_match_policy+0x8be/0x23f0 [ 151.372851][ T7515] ? __pfx_walk_pgd_range+0x10/0x10 [ 151.372871][ T7515] __walk_page_range+0x171/0x850 [ 151.372886][ T7515] ? __lock_acquire+0x5c0/0x1f40 [ 151.372909][ T7515] walk_page_range_vma_unsafe+0x209/0x8f0 [ 151.372928][ T7515] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 151.372947][ T7515] ? find_held_lock+0x2b/0x80 [ 151.372960][ T7515] ? mlock_drain_local+0x254/0x4e0 [ 151.372974][ T7515] ? mlock_drain_local+0x254/0x4e0 [ 151.372991][ T7515] walk_page_range_vma+0x63/0x90 [ 151.373009][ T7515] madvise_pageout+0x29e/0x5b0 [ 151.373023][ T7515] ? __pfx_madvise_pageout+0x10/0x10 [ 151.373049][ T7515] madvise_vma_behavior+0x41f/0x2170 [ 151.373064][ T7515] ? __pfx_mas_prev+0x10/0x10 [ 151.373081][ T7515] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 151.373097][ T7515] ? find_vma_prev+0xd8/0x150 [ 151.373115][ T7515] ? __pfx_find_vma_prev+0x10/0x10 [ 151.373132][ T7515] ? lock_acquire+0x1d1/0x380 [ 151.373156][ T7515] madvise_walk_vmas+0x30e/0xf00 [ 151.373173][ T7515] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 151.373188][ T7515] ? __pfx_futex_wake_mark+0x10/0x10 [ 151.373208][ T7515] ? lock_acquire+0x1d1/0x380 [ 151.373226][ T7515] madvise_do_behavior+0x1ea/0x510 [ 151.373242][ T7515] ? __pfx_madvise_do_behavior+0x10/0x10 [ 151.373257][ T7515] ? down_read+0x136/0x4c0 [ 151.373285][ T7515] do_madvise+0x238/0x290 [ 151.373299][ T7515] ? __pfx_do_madvise+0x10/0x10 [ 151.373314][ T7515] ? do_futex+0x190/0x440 [ 151.373332][ T7515] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.373360][ T7515] __x64_sys_madvise+0xa9/0x110 [ 151.373375][ T7515] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.373388][ T7515] do_syscall_64+0x123/0x790 [ 151.373402][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.373414][ T7515] RIP: 0033:0x7f72d339f559 [ 151.373425][ T7515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.373437][ T7515] RSP: 002b:00007f72d4275028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 151.373450][ T7515] RAX: ffffffffffffffda RBX: 00007f72d3625fa0 RCX: 00007f72d339f559 [ 151.373458][ T7515] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 151.373465][ T7515] RBP: 00007f72d3436b50 R08: 0000000000000000 R09: 0000000000000000 [ 151.373472][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.373479][ T7515] R13: 00007f72d3626038 R14: 00007f72d3625fa0 R15: 00007ffc79d1ec98 [ 151.373496][ T7515] [ 151.386732][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 151.536381][ T9] usb 2-1: device descriptor read/64, error -71 [ 151.644675][ T9] usb usb2-port1: attempt power cycle [ 151.781795][ T7503] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.073007][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 152.094335][ T9] usb 2-1: device descriptor read/8, error -71 [ 152.230591][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 152.231922][ T7525] hsr_slave_0: left promiscuous mode [ 152.251568][ T7525] hsr_slave_1: left promiscuous mode [ 152.316514][ T7527] tipc: Resetting bearer [ 152.332596][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 152.356980][ T9] usb 2-1: device descriptor read/8, error -71 [ 152.445757][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 152.464111][ T9] usb usb2-port1: unable to enumerate USB device [ 152.472224][ T7535] loop0: detected capacity change from 0 to 3904 [ 152.495200][ T7535] loop0: [ 152.784479][ T30] audit: type=1400 audit(1793594732.970:393): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 152.853184][ T7553] warning: `syz.0.648' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.932942][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 153.036887][ T30] audit: type=1400 audit(1793594733.220:394): avc: denied { ioctl } for pid=7562 comm="syz.3.653" path="/dev/sg0" dev="devtmpfs" ino=1035 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.070739][ T5845] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.093258][ T9] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 153.094017][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.094050][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 153.094065][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.094081][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 153.094101][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.097503][ T7546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.097586][ T7546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.183880][ T9] pl2303 5-1:1.0: pl2303 converter detected [ 153.190956][ T9] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 153.254355][ T7565] fuse: Unknown parameter '0x0000000000000004' [ 154.309183][ T5742] usb 5-1: USB disconnect, device number 11 [ 154.345764][ T5742] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 154.346115][ T5742] pl2303 5-1:1.0: device disconnected [ 154.440446][ T5753] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 154.440466][ T5753] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 154.440732][ T5753] asix 3-1:0.188: probe with driver asix failed with error -71 [ 154.482135][ T5753] usb 3-1: USB disconnect, device number 10 [ 154.686272][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 154.844582][ T9] usb 1-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.846593][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.846615][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.846635][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.850284][ T7571] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 154.918775][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.105624][ T9] usb 1-1: USB disconnect, device number 11 [ 155.238624][ T30] audit: type=1400 audit(1793594735.420:395): avc: denied { read write } for pid=7588 comm="syz.2.664" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.264692][ T30] audit: type=1400 audit(1793594735.450:396): avc: denied { open } for pid=7588 comm="syz.2.664" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.310253][ T30] audit: type=1400 audit(1793594735.490:397): avc: denied { ioctl } for pid=7588 comm="syz.2.664" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.494577][ T7597] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 155.543685][ T7597] bond2: entered promiscuous mode [ 155.545996][ T7597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.581724][ T7603] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.581743][ T7603] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 155.581753][ T7603] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 155.750662][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.673'. [ 156.435997][ T5753] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.596420][ T5753] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 156.597417][ T5753] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 156.597436][ T5753] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 156.597854][ T5753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.597871][ T5753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.597891][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.613134][ T7607] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.613201][ T7607] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.683433][ T5753] pl2303 4-1:1.0: pl2303 converter detected [ 156.701437][ T5753] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 156.779179][ T30] audit: type=1400 audit(1793594736.960:398): avc: denied { bind } for pid=7621 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.830103][ T7624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.830281][ T7624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.830347][ T7624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.830409][ T7624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.830471][ T7624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.838664][ T5742] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.954415][ T30] audit: type=1400 audit(1793594737.140:399): avc: denied { ioctl } for pid=7621 comm="syz.2.678" path="socket:[15983]" dev="sockfs" ino=15983 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.982572][ T5742] usb 5-1: device descriptor read/64, error -71 [ 157.126395][ T9] usb 4-1: USB disconnect, device number 9 [ 157.146638][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 157.146954][ T9] pl2303 4-1:1.0: device disconnected [ 157.225582][ T5742] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.362525][ T5742] usb 5-1: device descriptor read/64, error -71 [ 157.495920][ T5742] usb usb5-port1: attempt power cycle [ 158.122625][ T5742] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 158.165628][ T5742] usb 5-1: device descriptor read/8, error -71 [ 158.214147][ T7638] block nbd2: shutting down sockets [ 158.256606][ T53] Bluetooth: hci0: SCO packet for unknown connection handle 2304 [ 158.403500][ T5742] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 158.425151][ T5742] usb 5-1: device descriptor read/8, error -71 [ 158.473438][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.538388][ T5742] usb usb5-port1: unable to enumerate USB device [ 158.633417][ T9] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.634238][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.634257][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.634278][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.684838][ T7637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.702093][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.893095][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 158.893121][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.893136][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.893150][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.893164][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.047735][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.681'. [ 159.061566][ T9] usb 3-1: USB disconnect, device number 11 [ 159.075852][ T30] audit: type=1400 audit(1793594739.260:400): avc: denied { append } for pid=7647 comm="syz.0.681" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.110008][ T30] audit: type=1400 audit(1793594739.290:401): avc: denied { write } for pid=7657 comm="syz.1.693" name="functions" dev="configfs" ino=10565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.110859][ T7658] FAULT_INJECTION: forcing a failure. [ 159.110859][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 159.110878][ T7658] CPU: 0 UID: 0 PID: 7658 Comm: syz.1.693 Not tainted syzkaller #0 PREEMPT(full) [ 159.110894][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.110902][ T7658] Call Trace: [ 159.110906][ T7658] [ 159.110912][ T7658] dump_stack_lvl+0x100/0x190 [ 159.110936][ T7658] should_fail_ex.cold+0x5/0xa [ 159.110955][ T7658] should_failslab+0xc2/0x120 [ 159.110970][ T7658] __kmalloc_cache_noprof+0x91/0x6d0 [ 159.110987][ T7658] ? tty_register_device_attr+0x221/0x810 [ 159.111011][ T7658] tty_register_device_attr+0x221/0x810 [ 159.111033][ T7658] ? __pfx_tty_register_device_attr+0x10/0x10 [ 159.111066][ T7658] ? lockdep_init_map_type+0x5c/0x250 [ 159.111086][ T7658] ? timer_init_key+0x150/0x310 [ 159.111108][ T7658] gserial_alloc_line_no_console+0x4cb/0x710 [ 159.111131][ T7658] gserial_alloc_line+0x16/0xa0 [ 159.111150][ T7658] gser_alloc_inst+0x86/0x100 [ 159.111162][ T7658] try_get_usb_function_instance+0x136/0x1f0 [ 159.111181][ T7658] usb_get_function_instance+0x16/0x70 [ 159.111199][ T7658] function_make+0x18c/0x3f0 [ 159.111215][ T7658] ? __pfx_function_make+0x10/0x10 [ 159.111232][ T7658] ? configfs_mkdir+0x2e2/0xd40 [ 159.111246][ T7658] ? configfs_mkdir+0x2e2/0xd40 [ 159.111263][ T7658] ? __pfx_function_make+0x10/0x10 [ 159.111277][ T7658] configfs_mkdir+0x525/0xd40 [ 159.111290][ T7658] ? may_create+0x280/0x430 [ 159.111312][ T7658] ? __pfx_configfs_mkdir+0x10/0x10 [ 159.111333][ T7658] vfs_mkdir+0x36d/0x8a0 [ 159.111355][ T7658] filename_mkdirat+0x4c4/0x630 [ 159.111371][ T7658] ? __pfx_filename_mkdirat+0x10/0x10 [ 159.111387][ T7658] ? strncpy_from_user+0x19d/0x2d0 [ 159.111406][ T7658] ? do_getname+0x191/0x390 [ 159.111424][ T7658] __x64_sys_mkdirat+0x89/0xc0 [ 159.111440][ T7658] do_syscall_64+0x123/0x790 [ 159.111454][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.111466][ T7658] RIP: 0033:0x7fbfa799f559 [ 159.111477][ T7658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.111489][ T7658] RSP: 002b:00007fbfa8804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 159.111502][ T7658] RAX: ffffffffffffffda RBX: 00007fbfa7c25fa0 RCX: 00007fbfa799f559 [ 159.111510][ T7658] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 159.111518][ T7658] RBP: 00007fbfa7a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 159.111526][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.111533][ T7658] R13: 00007fbfa7c26038 R14: 00007fbfa7c25fa0 R15: 00007ffcdaad0198 [ 159.111550][ T7658] [ 159.223595][ T7658] gserial_alloc_line_no_console: failed to register tty for port 0, err -12 [ 159.464231][ T30] audit: type=1326 audit(1793594739.630:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7647 comm="syz.0.681" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c539f559 code=0x7ffc0000 [ 159.464263][ T30] audit: type=1326 audit(1793594739.650:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7647 comm="syz.0.681" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c539f559 code=0x7ffc0000 [ 159.912676][ T5735] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 160.065198][ T5735] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 160.066015][ T5735] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 160.066034][ T5735] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 160.066054][ T5735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.066069][ T5735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 160.066087][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.138722][ T7668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.138780][ T7668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.142023][ T5735] pl2303 2-1:1.0: pl2303 converter detected [ 160.190652][ T5735] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 160.239852][ T7694] netlink: 176 bytes leftover after parsing attributes in process `syz.2.709'. [ 160.298402][ T30] audit: type=1400 audit(1793594740.480:404): avc: denied { write } for pid=7689 comm="syz.3.707" name="functions" dev="configfs" ino=10565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.298744][ T7691] FAULT_INJECTION: forcing a failure. [ 160.298744][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 160.298763][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz.3.707 Not tainted syzkaller #0 PREEMPT(full) [ 160.298779][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 160.298787][ T7691] Call Trace: [ 160.298791][ T7691] [ 160.298796][ T7691] dump_stack_lvl+0x100/0x190 [ 160.298822][ T7691] should_fail_ex.cold+0x5/0xa [ 160.298842][ T7691] should_failslab+0xc2/0x120 [ 160.298857][ T7691] __kmalloc_cache_noprof+0x91/0x6d0 [ 160.298874][ T7691] ? tty_register_device_attr+0x221/0x810 [ 160.298897][ T7691] tty_register_device_attr+0x221/0x810 [ 160.298921][ T7691] ? __pfx_tty_register_device_attr+0x10/0x10 [ 160.298944][ T7691] ? lockdep_init_map_type+0x5c/0x250 [ 160.298963][ T7691] ? timer_init_key+0x150/0x310 [ 160.298985][ T7691] gserial_alloc_line_no_console+0x4cb/0x710 [ 160.299009][ T7691] gserial_alloc_line+0x16/0xa0 [ 160.299027][ T7691] gser_alloc_inst+0x86/0x100 [ 160.299039][ T7691] try_get_usb_function_instance+0x136/0x1f0 [ 160.299067][ T7691] usb_get_function_instance+0x16/0x70 [ 160.299087][ T7691] function_make+0x18c/0x3f0 [ 160.299103][ T7691] ? __pfx_function_make+0x10/0x10 [ 160.299122][ T7691] ? configfs_mkdir+0x2e2/0xd40 [ 160.299136][ T7691] ? configfs_mkdir+0x2e2/0xd40 [ 160.299154][ T7691] ? __pfx_function_make+0x10/0x10 [ 160.299169][ T7691] configfs_mkdir+0x525/0xd40 [ 160.299182][ T7691] ? may_create+0x280/0x430 [ 160.299204][ T7691] ? __pfx_configfs_mkdir+0x10/0x10 [ 160.299225][ T7691] vfs_mkdir+0x36d/0x8a0 [ 160.299247][ T7691] filename_mkdirat+0x4c4/0x630 [ 160.299263][ T7691] ? __pfx_filename_mkdirat+0x10/0x10 [ 160.299280][ T7691] ? strncpy_from_user+0x19d/0x2d0 [ 160.299299][ T7691] ? do_getname+0x191/0x390 [ 160.299317][ T7691] __x64_sys_mkdirat+0x89/0xc0 [ 160.299332][ T7691] do_syscall_64+0x123/0x790 [ 160.299346][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.299358][ T7691] RIP: 0033:0x7f172919f559 [ 160.299369][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.299380][ T7691] RSP: 002b:00007f1729fc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 160.299393][ T7691] RAX: ffffffffffffffda RBX: 00007f1729425fa0 RCX: 00007f172919f559 [ 160.299401][ T7691] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 160.299408][ T7691] RBP: 00007f1729236b50 R08: 0000000000000000 R09: 0000000000000000 [ 160.299415][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.299422][ T7691] R13: 00007f1729426038 R14: 00007f1729425fa0 R15: 00007ffd585e8478 [ 160.299438][ T7691] [ 160.397640][ T7691] gserial_alloc_line_no_console: failed to register tty for port 0, err -12 [ 160.998286][ T7706] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 160.998300][ T7706] netlink: 244 bytes leftover after parsing attributes in process `syz.0.711'. [ 161.638967][ T30] audit: type=1326 audit(1793594741.710:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7697 comm="syz.0.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c539f559 code=0x7ffc0000 [ 161.639003][ T30] audit: type=1326 audit(1793594741.710:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7697 comm="syz.0.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c539f559 code=0x7ffc0000 [ 161.639027][ T30] audit: type=1326 audit(1793594741.710:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7697 comm="syz.0.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c539f559 code=0x7ffc0000 [ 161.639049][ T30] audit: type=1326 audit(1793594741.710:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7697 comm="syz.0.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c539f559 code=0x7ffc0000 [ 161.639072][ T30] audit: type=1326 audit(1793594741.710:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7697 comm="syz.0.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ff3c539f559 code=0x7ffc0000 [ 161.920712][ T5735] usb 2-1: USB disconnect, device number 22 [ 161.949629][ T5735] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 161.949930][ T5735] pl2303 2-1:1.0: device disconnected [ 163.027488][ T7726] loop0: detected capacity change from 0 to 3904 [ 163.083975][ T7726] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 163.083993][ T7726] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 163.084028][ T7726] loop0: [ 164.142590][ T5735] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 164.293057][ T5735] usb 5-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 164.293769][ T5735] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.293794][ T5735] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.293816][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.503257][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.656435][ T9] usb 1-1: New USB device found: idVendor=05ac, idProduct=8501, bcdDevice=dd.83 [ 164.673164][ T9] usb 1-1: config 15 has an invalid interface number: 10 but max is 0 [ 164.673182][ T9] usb 1-1: config 15 has no interface number 0 [ 164.673203][ T9] usb 1-1: config 15 interface 10 has no altsetting 0 [ 164.702312][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.702332][ T9] usb 1-1: Product: syz [ 164.702341][ T9] usb 1-1: Manufacturer: syz [ 164.702350][ T9] usb 1-1: SerialNumber: syz [ 164.786750][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 164.786762][ T30] audit: type=1400 audit(1793594744.970:475): avc: denied { name_bind } for pid=7747 comm="syz.2.731" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 164.824263][ T7749] ip_tables: iptables: counters copy to user failed while replacing table [ 164.967489][ T9] uvcvideo 1-1:15.10: Found UVC 0.00 device syz (05ac:8501) [ 164.967525][ T9] uvcvideo 1-1:15.10: No valid video chain found. [ 165.000561][ T9] usb 1-1: USB disconnect, device number 12 [ 165.333307][ T5742] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.487105][ T5742] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 165.488689][ T5742] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 165.488708][ T5742] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 165.488723][ T5742] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.488744][ T5742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.492364][ T7758] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 165.492419][ T7758] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 165.564207][ T5742] pl2303 4-1:1.0: pl2303 converter detected [ 165.572182][ T5742] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 165.587661][ T7766] loop0: detected capacity change from 0 to 3904 [ 165.657119][ T7766] loop0: [ 165.711977][ T5735] usb 5-1: USB disconnect, device number 16 [ 165.794930][ T30] audit: type=1400 audit(1793594745.980:476): avc: denied { create } for pid=7769 comm="syz.0.738" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.828257][ T30] audit: type=1400 audit(1793594746.010:477): avc: denied { read write } for pid=7771 comm="syz.2.739" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.857037][ T30] audit: type=1400 audit(1793594746.040:478): avc: denied { open } for pid=7771 comm="syz.2.739" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.940222][ T30] audit: type=1400 audit(1793594746.120:479): avc: denied { unlink } for pid=5616 comm="syz-executor" name="file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.476235][ T5735] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 166.902509][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 166.912403][ T5735] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.060518][ T5735] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 167.060549][ T5735] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.060575][ T5735] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.060590][ T5735] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.060604][ T5735] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.060626][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.363223][ T5735] usb 5-1: usb_control_msg returned -32 [ 167.363257][ T5735] usbtmc 5-1:16.0: can't read capabilities [ 167.405946][ T7800] loop0: detected capacity change from 0 to 3904 [ 167.423675][ T7800] loop0: [ 167.568351][ T5735] usb 5-1: USB disconnect, device number 17 [ 167.593042][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 167.680196][ T30] audit: type=1400 audit(1793594747.860:480): avc: denied { read } for pid=7809 comm="syz.2.755" path="socket:[16848]" dev="sockfs" ino=16848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.803079][ T9] usb 1-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.803945][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.803966][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.803986][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.805671][ T7798] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 167.809664][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.126890][ T5735] usb 4-1: USB disconnect, device number 10 [ 168.150251][ T9] usb 1-1: USB disconnect, device number 13 [ 168.161422][ T5735] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 168.161804][ T5735] pl2303 4-1:1.0: device disconnected [ 169.575622][ T30] audit: type=1400 audit(1793594749.760:481): avc: denied { bind } for pid=7832 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.838762][ T30] audit: type=1400 audit(1793594750.020:482): avc: denied { mount } for pid=7853 comm="syz.2.770" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 169.840632][ T7854] syzkaller0: entered promiscuous mode [ 169.840646][ T7854] syzkaller0: entered allmulticast mode [ 169.912162][ T30] audit: type=1400 audit(1793594750.090:483): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 169.957109][ T30] audit: type=1400 audit(1793594750.140:484): avc: denied { create } for pid=7856 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 169.960039][ T30] audit: type=1400 audit(1793594750.140:485): avc: denied { write } for pid=7856 comm="syz.1.771" path="socket:[17116]" dev="sockfs" ino=17116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 169.980673][ T5753] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 170.765939][ T5753] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 170.780903][ T5753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 170.780925][ T5753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 170.780940][ T5753] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.780962][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.823843][ T7847] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.823920][ T7847] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.847377][ T5753] pl2303 5-1:1.0: pl2303 converter detected [ 170.867720][ T5753] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 171.312510][ T5735] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.514270][ T5735] usb 3-1: Using ep0 maxpacket: 8 [ 171.540209][ T5735] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.026652][ T5735] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 172.026711][ T5735] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.026725][ T5735] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.026739][ T5735] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.026753][ T5735] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.026776][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.365992][ T7870] block nbd3: shutting down sockets [ 172.494831][ T5735] usb 3-1: usb_control_msg returned -32 [ 172.494858][ T5735] usbtmc 3-1:16.0: can't read capabilities [ 172.601923][ T5735] usb 5-1: USB disconnect, device number 18 [ 172.613722][ T5753] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.636922][ T5735] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 172.637301][ T5735] pl2303 5-1:1.0: device disconnected [ 172.699532][ T9] usb 3-1: USB disconnect, device number 12 [ 172.814520][ T5753] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.815352][ T5753] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.815372][ T5753] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.815392][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.819526][ T7868] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 172.890532][ T5753] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.971144][ T7880] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 174.650844][ T9] usb 4-1: USB disconnect, device number 11 [ 175.040774][ T30] audit: type=1400 audit(1793594755.220:486): avc: denied { bind } for pid=7878 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.078117][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 175.078136][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 175.078147][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x7b28 instead [ 175.078159][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6b4d instead [ 175.078169][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 175.078178][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 175.078188][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 175.078200][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 175.078219][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 175.078238][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 175.078248][ T7893] jffs2: Further such events for this erase block will not be printed [ 175.078464][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 175.078474][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 175.078484][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x7b28 instead [ 175.078495][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6b4d instead [ 175.078504][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 175.078513][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 175.078522][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 175.078533][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 175.078551][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 175.078569][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 175.078578][ T7893] jffs2: Further such events for this erase block will not be printed [ 175.078788][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 175.078797][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 175.078807][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x7b28 instead [ 175.078817][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x6b4d instead [ 175.078844][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 175.078853][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 175.078863][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x7b28 instead [ 175.078874][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x6b4d instead [ 175.078900][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 175.078910][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 175.078919][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x7b28 instead [ 175.078930][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x6b4d instead [ 176.305976][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 176.305993][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 176.306004][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x7b28 instead [ 176.306016][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x6b4d instead [ 176.306045][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 176.306055][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 176.306066][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x7b28 instead [ 176.306077][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x6b4d instead [ 176.306105][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 176.306114][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 176.306124][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x7b28 instead [ 176.306135][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x6b4d instead [ 176.306162][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 176.306172][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 176.306181][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x7b28 instead [ 176.306192][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x6b4d instead [ 176.306219][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 176.306229][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 176.306239][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x7b28 instead [ 176.306249][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x6b4d instead [ 176.306276][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 176.306285][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 176.306295][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x7b28 instead [ 176.306306][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x6b4d instead [ 176.306332][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 176.306341][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 176.306351][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x7b28 instead [ 176.306362][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x6b4d instead [ 176.306388][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 176.306397][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 176.306407][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x7b28 instead [ 176.306418][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x6b4d instead [ 176.306444][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 176.306453][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 176.306464][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x7b28 instead [ 176.306474][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x6b4d instead [ 176.306500][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 176.306510][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 176.306520][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x7b28 instead [ 176.306531][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x6b4d instead [ 176.306557][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 176.306566][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 176.306576][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x7b28 instead [ 176.306586][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x6b4d instead [ 176.306613][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 176.306623][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 176.306633][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x7b28 instead [ 176.306644][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x6b4d instead [ 176.306671][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 176.306680][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 176.306689][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x7b28 instead [ 176.306700][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x6b4d instead [ 176.306728][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 176.306737][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 176.306747][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x7b28 instead [ 176.306758][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x6b4d instead [ 176.306784][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 176.306793][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 176.306802][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x7b28 instead [ 176.306813][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x6b4d instead [ 176.306843][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 176.306860][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 176.306870][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x7b28 instead [ 176.306881][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x6b4d instead [ 177.044073][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 177.044088][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 177.044099][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x7b28 instead [ 177.044112][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x6b4d instead [ 177.044143][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 177.044154][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 177.044165][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x7b28 instead [ 177.044185][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x6b4d instead [ 177.044213][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 177.044223][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 177.044234][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x7b28 instead [ 177.044244][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x6b4d instead [ 177.044277][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 177.044287][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 177.044296][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x7b28 instead [ 177.044307][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x6b4d instead [ 177.044333][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 177.044343][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 177.044354][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x7b28 instead [ 177.044366][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x6b4d instead [ 177.044393][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 177.044403][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 177.044414][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x7b28 instead [ 177.044426][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x6b4d instead [ 177.044453][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 177.044464][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 177.044475][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x7b28 instead [ 177.044486][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x6b4d instead [ 177.044512][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 177.044522][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 177.044532][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x7b28 instead [ 177.044543][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x6b4d instead [ 177.044570][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 177.044579][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 177.044589][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x7b28 instead [ 177.044600][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x6b4d instead [ 177.044626][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 177.044635][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 177.044645][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x7b28 instead [ 177.044656][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x6b4d instead [ 177.044682][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 177.044692][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 177.044701][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x7b28 instead [ 177.044712][ T7893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x6b4d instead [ 177.044734][ T7893] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 177.044739][ T7893] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 177.605136][ T7901] loop0: detected capacity change from 0 to 3904 [ 177.708421][ T7905] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.784950][ T5618] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 178.810602][ T7914] loop2: detected capacity change from 0 to 7 [ 178.824494][ T7914] Dev loop2: unable to read RDB block 7 [ 178.824518][ T7914] loop2: unable to read partition table [ 178.824614][ T7914] loop2: partition table beyond EOD, truncated [ 178.824630][ T7914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 178.860557][ T7911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.860774][ T7911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.861203][ T7911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.861304][ T7911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.861846][ T7911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.953304][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 179.142612][ T5735] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 179.143118][ T9] usb 1-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 179.218036][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 179.218057][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 179.218085][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.218108][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.641309][ T7910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.641381][ T7910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.736195][ T9] pl2303 1-1:1.0: pl2303 converter detected [ 179.914309][ T5735] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.914338][ T5735] usb 5-1: New USB device found: idVendor=0499, idProduct=5008, bcdDevice=0.40 [ 179.957637][ T9] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 179.966985][ T5735] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 179.985071][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.985088][ T5735] usb 5-1: Product: syz [ 179.985097][ T5735] usb 5-1: Manufacturer: syz [ 179.985106][ T5735] usb 5-1: SerialNumber: syz [ 180.070327][ T7920] block nbd2: shutting down sockets [ 180.227035][ T5735] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.319835][ T5735] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 180.322887][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 180.342302][ T5735] usb 5-1: USB disconnect, device number 19 [ 180.380208][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.474451][ T7930] xt_connbytes: Forcing CT accounting to be enabled [ 180.475307][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 180.499455][ T9] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.511406][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.511428][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.511449][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.545153][ T2379] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 180.559857][ T7919] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 180.573107][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.702877][ T2379] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 180.703682][ T2379] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.703707][ T2379] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 180.703723][ T2379] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 180.703746][ T2379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.892915][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.892941][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.892956][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.892988][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.893002][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.896838][ T9] usb 3-1: USB disconnect, device number 13 [ 180.982726][ T30] audit: type=1400 audit(1793594761.160:487): avc: denied { create } for pid=7927 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 181.045911][ T7930] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 181.142519][ T7935] xt_connbytes: Forcing CT accounting to be enabled [ 181.143504][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 181.227636][ T30] audit: type=1400 audit(1793594761.410:488): avc: denied { ioctl } for pid=7927 comm="syz.3.794" path="socket:[17331]" dev="sockfs" ino=17331 ioctlcmd=0x400261f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 181.269664][ T9] usb 1-1: USB disconnect, device number 14 [ 181.309250][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 181.309609][ T9] pl2303 1-1:1.0: device disconnected [ 181.366294][ T2379] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 181.366331][ T2379] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 181.366339][ T2379] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 181.399290][ T2379] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 181.425367][ T2379] usb 4-1: USB disconnect, device number 12 [ 181.528751][ T30] audit: type=1400 audit(1793594761.710:489): avc: denied { create } for pid=7936 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.555160][ T30] audit: type=1400 audit(1793594761.740:490): avc: denied { connect } for pid=7936 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.590664][ T30] audit: type=1400 audit(1793594761.770:491): avc: denied { ioctl } for pid=7936 comm="syz.0.797" path="socket:[17420]" dev="sockfs" ino=17420 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.683647][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.143439][ T30] audit: type=1400 audit(1793594763.330:492): avc: denied { create } for pid=7955 comm="syz.3.804" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 183.170179][ T30] audit: type=1400 audit(1793594763.330:493): avc: denied { mounton } for pid=7955 comm="syz.3.804" path="/170/file0" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 184.274195][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 185.231225][ T7968] block nbd1: shutting down sockets [ 185.277719][ T30] audit: type=1400 audit(1793594765.460:494): avc: denied { connect } for pid=7969 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.309636][ T30] audit: type=1400 audit(1793594765.490:495): avc: denied { shutdown } for pid=7969 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.385243][ T7972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.484186][ T5753] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 185.643196][ T5753] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.644002][ T5753] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.644021][ T5753] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.644041][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.646664][ T7967] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.705878][ T5753] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.782853][ T7979] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 185.982586][ T2379] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.020598][ T5753] usb 2-1: USB disconnect, device number 23 [ 186.145526][ T2379] usb 4-1: Using ep0 maxpacket: 32 [ 186.147735][ T2379] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 186.148487][ T2379] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 186.148502][ T2379] usb 4-1: config 0 has no interface number 0 [ 186.148524][ T2379] usb 4-1: config 0 interface 184 has no altsetting 0 [ 186.151821][ T2379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.151837][ T2379] usb 4-1: Product: syz [ 186.151846][ T2379] usb 4-1: Manufacturer: syz [ 186.151855][ T2379] usb 4-1: SerialNumber: syz [ 186.214115][ T2379] usb 4-1: config 0 descriptor?? [ 186.252685][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.303610][ T9] usb 3-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 187.305125][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.305142][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 187.305161][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.524438][ T9] usb 3-1: USB disconnect, device number 14 [ 188.757012][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 188.757025][ T30] audit: type=1400 audit(1793594768.940:499): avc: denied { listen } for pid=7996 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.885193][ T2379] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 188.885216][ T2379] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 188.885542][ T2379] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 188.885559][ T2379] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 188.885571][ T2379] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 188.885582][ T2379] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 188.885696][ T2379] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 188.913919][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.913950][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.970824][ T2379] usb 4-1: USB disconnect, device number 13 [ 189.105325][ T8014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.638539][ T8023] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 191.710220][ T8033] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.078140][ T2379] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 192.387382][ T8038] block nbd1: shutting down sockets [ 192.555516][ T2379] usb 3-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 192.664925][ T2379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.664959][ T2379] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.664985][ T2379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.831501][ T30] audit: type=1400 audit(1793594773.010:500): avc: denied { create } for pid=8031 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.931708][ T30] audit: type=1400 audit(1793594773.110:501): avc: denied { bind } for pid=8031 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.968757][ T30] audit: type=1400 audit(1793594773.150:502): avc: denied { mounton } for pid=8048 comm="syz.0.833" path="/177/file0" dev="tmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 192.970409][ T8049] fuse: Unknown parameter 'use00000000000000000000' [ 193.124354][ T8057] FAULT_INJECTION: forcing a failure. [ 193.124354][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 193.124379][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.3.837 Not tainted syzkaller #0 PREEMPT(full) [ 193.124397][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 193.124404][ T8057] Call Trace: [ 193.124409][ T8057] [ 193.124415][ T8057] dump_stack_lvl+0x100/0x190 [ 193.124441][ T8057] should_fail_ex.cold+0x5/0xa [ 193.124461][ T8057] should_failslab+0xc2/0x120 [ 193.124478][ T8057] __kmalloc_noprof+0xfc/0x840 [ 193.124497][ T8057] ? lsm_blob_alloc+0x68/0x90 [ 193.124514][ T8057] lsm_blob_alloc+0x68/0x90 [ 193.124527][ T8057] security_sb_alloc+0x25/0x240 [ 193.124542][ T8057] sget_fc+0x3ce/0x1e10 [ 193.124560][ T8057] ? __pfx_ceph_compare_super+0x10/0x10 [ 193.124580][ T8057] ? __pfx_ceph_set_super+0x10/0x10 [ 193.124593][ T8057] ? __pfx_sget_fc+0x10/0x10 [ 193.124611][ T8057] ? lockdep_init_map_type+0x5c/0x250 [ 193.124630][ T8057] ? __raw_spin_lock_init+0x3a/0x110 [ 193.124644][ T8057] ? ceph_mdsc_init+0xee5/0x1270 [ 193.124661][ T8057] ? __pfx_ceph_compare_super+0x10/0x10 [ 193.124677][ T8057] ceph_get_tree+0x6e9/0x2020 [ 193.124691][ T8057] ? security_capable+0x80/0x260 [ 193.124706][ T8057] vfs_get_tree+0x92/0x320 [ 193.124723][ T8057] path_mount+0x7d0/0x2850 [ 193.124743][ T8057] ? __pfx_path_mount+0x10/0x10 [ 193.124760][ T8057] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.124774][ T8057] ? putname+0xb1/0x110 [ 193.124788][ T8057] ? kmem_cache_free+0x127/0x6c0 [ 193.124809][ T8057] ? __x64_sys_mount+0x293/0x310 [ 193.124825][ T8057] __x64_sys_mount+0x293/0x310 [ 193.124843][ T8057] ? __pfx___x64_sys_mount+0x10/0x10 [ 193.124865][ T8057] do_syscall_64+0x123/0x790 [ 193.124879][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.124891][ T8057] RIP: 0033:0x7f172919f559 [ 193.124903][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.124915][ T8057] RSP: 002b:00007f1729fc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.124927][ T8057] RAX: ffffffffffffffda RBX: 00007f1729425fa0 RCX: 00007f172919f559 [ 193.124935][ T8057] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 193.124942][ T8057] RBP: 00007f1729236b50 R08: 0000000000000000 R09: 0000000000000000 [ 193.124949][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.124956][ T8057] R13: 00007f1729426038 R14: 00007f1729425fa0 R15: 00007ffd585e8478 [ 193.124972][ T8057] [ 193.167077][ T5742] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 193.327351][ T5742] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.397272][ T5742] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.397295][ T5742] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.397318][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.457292][ T8034] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.484358][ T5742] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.655601][ T5753] usb 2-1: USB disconnect, device number 24 [ 194.704021][ T2379] usb 3-1: USB disconnect, device number 15 [ 194.734540][ T50] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow! [ 195.008986][ T8076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.120917][ T30] audit: type=1400 audit(1793594775.300:503): avc: denied { name_bind } for pid=8080 comm="syz.0.844" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 195.334298][ T2379] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.553497][ T30] audit: type=1400 audit(1793594775.740:504): avc: denied { getopt } for pid=8085 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.578078][ T8087] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.632956][ T2379] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 195.636182][ T2379] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 195.636202][ T2379] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 195.636217][ T2379] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.636238][ T2379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.088097][ T8078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.088156][ T8078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.474520][ T2379] pl2303 4-1:1.0: pl2303 converter detected [ 196.685942][ T2379] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 197.755578][ T8102] fuse: Unknown parameter 'use00000000000000000000' [ 199.750218][ T9] usb 4-1: USB disconnect, device number 14 [ 199.776853][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 199.777191][ T9] pl2303 4-1:1.0: device disconnected [ 200.940982][ T8125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.021063][ T8127] block nbd3: shutting down sockets [ 202.112949][ T2379] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 202.199944][ T8139] netlink: 6172 bytes leftover after parsing attributes in process `syz.2.860'. [ 202.199963][ T8139] openvswitch: netlink: Flow key attr not present in new flow. [ 202.362961][ T2379] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.363694][ T2379] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.363713][ T2379] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.363733][ T2379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.251280][ T2379] usb 4-1: can't set config #27, error -71 [ 203.262890][ T2379] usb 4-1: USB disconnect, device number 15 [ 203.487405][ T8156] fuse: Unknown parameter 'use00000000000000000000' [ 205.151078][ T8175] tipc: Enabling of bearer rejected, failed to enable media [ 207.204038][ T30] audit: type=1400 audit(1793594787.390:505): avc: denied { accept } for pid=8177 comm="syz.2.873" lport=50526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.244520][ T8191] block nbd4: shutting down sockets [ 207.504893][ T5753] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.653394][ T5753] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.654329][ T5753] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.654349][ T5753] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.654370][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.658395][ T8188] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.721802][ T5753] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.833539][ T8206] fuse: Unknown parameter 'user_i00000000000000000000' [ 207.934966][ T5753] usb 5-1: USB disconnect, device number 20 [ 208.712568][ T8218] tipc: Enabling of bearer rejected, failed to enable media [ 210.093562][ T8225] ptp ptp0: new virtual clock ptp1 [ 210.093589][ T8225] ptp ptp0: guarantee physical clock free running [ 211.179056][ T8244] fuse: Unknown parameter 'user_i00000000000000000000' [ 211.270746][ T8247] tipc: Enabling of bearer rejected, failed to enable media [ 212.394309][ T8249] block nbd3: shutting down sockets [ 212.904794][ T5753] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.753084][ T5753] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.753902][ T5753] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.753924][ T5753] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.753945][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.766662][ T8248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.823063][ T5753] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.949922][ T2379] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 213.994345][ T2379] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 213.996484][ T8253] ptp ptp0: guarantee physical clock free running [ 214.022167][ T2379] usb 4-1: USB disconnect, device number 16 [ 214.082301][ T8260] ceph: No mds server is up or the cluster is laggy [ 214.161099][ T53] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 214.200980][ T8269] syz.0.901 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 214.246531][ T8267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.246639][ T8267] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.246706][ T8267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.246769][ T8267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.246835][ T8267] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.542858][ T5753] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 215.580874][ T30] audit: type=1400 audit(1793594795.760:506): avc: denied { create } for pid=8294 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.743030][ T5753] usb 4-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 215.745158][ T5753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.745176][ T5753] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 216.623304][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.623334][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.623350][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.623366][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.623431][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.669282][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 216.669300][ T5753] usb 4-1: Product: syz [ 216.669309][ T5753] usb 4-1: Manufacturer: syz [ 216.697490][ T30] audit: type=1400 audit(1793594796.880:507): avc: denied { write } for pid=8294 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.809720][ T30] audit: type=1400 audit(1793594796.990:508): avc: denied { accept } for pid=8294 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.902830][ T2379] usb 4-1: USB disconnect, device number 17 [ 217.122899][ T5753] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 217.274161][ T5753] usb 5-1: Using ep0 maxpacket: 32 [ 217.280295][ T5753] usb 5-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 217.292150][ T5753] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 217.292176][ T5753] usb 5-1: config 0 has no interface number 0 [ 217.292197][ T5753] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 217.321593][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.321612][ T5753] usb 5-1: Product: syz [ 217.321621][ T5753] usb 5-1: Manufacturer: syz [ 217.321629][ T5753] usb 5-1: SerialNumber: syz [ 217.347351][ T5753] usb 5-1: config 0 descriptor?? [ 217.347800][ T8303] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.405064][ T2379] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 217.539552][ T30] audit: type=1400 audit(1793594797.720:509): avc: denied { write } for pid=8304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.580258][ T8303] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.588239][ T2379] usb 2-1: Using ep0 maxpacket: 32 [ 217.588659][ T2379] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 217.611965][ T2379] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 217.611985][ T2379] usb 2-1: config 0 has no interface number 0 [ 217.612009][ T2379] usb 2-1: config 0 interface 184 has no altsetting 0 [ 217.640473][ T2379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.640491][ T2379] usb 2-1: Product: syz [ 217.640500][ T2379] usb 2-1: Manufacturer: syz [ 217.640509][ T2379] usb 2-1: SerialNumber: syz [ 217.656303][ T2379] usb 2-1: config 0 descriptor?? [ 217.817715][ T30] audit: type=1400 audit(1793594798.000:510): avc: denied { write } for pid=8328 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.029361][ T5618] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 218.102264][ T8336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.102375][ T8336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.102516][ T8336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.102598][ T8336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.102678][ T8336] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.204551][ T8346] loop0: detected capacity change from 0 to 3904 [ 218.223919][ T8346] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 218.223935][ T8346] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 218.223963][ T8346] loop0: [ 218.357779][ T2379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 218.357802][ T2379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 218.390489][ T8353] loop0: detected capacity change from 0 to 3904 [ 218.413377][ T8353] loop0: [ 218.513866][ T30] audit: type=1400 audit(1793594798.700:511): avc: denied { write } for pid=8332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.768601][ T30] audit: type=1400 audit(1793594798.950:512): avc: denied { write } for pid=8360 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.798769][ T2379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 218.798791][ T2379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 218.798803][ T2379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 218.798927][ T2379] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 218.861520][ T2379] usb 2-1: USB disconnect, device number 25 [ 218.950719][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 219.058859][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.926'. [ 219.342109][ T8385] loop0: detected capacity change from 0 to 3904 [ 219.374544][ T8385] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 219.374559][ T8385] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 219.374587][ T8385] loop0: [ 220.094882][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.126996][ T5753] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.127019][ T5753] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 220.127126][ T5753] asix 5-1:0.188: probe with driver asix failed with error -71 [ 220.191320][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.191349][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.191365][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.191380][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.576753][ T5753] usb 5-1: USB disconnect, device number 21 [ 220.715038][ T8387] ptp ptp0: guarantee physical clock free running [ 221.893639][ T53] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 221.949839][ T8411] tipc: Enabling of bearer rejected, failed to enable media [ 221.991458][ T8406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.991574][ T8406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.991640][ T8406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.991703][ T8406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.991767][ T8406] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.044977][ T8403] ptp ptp0: guarantee physical clock free running [ 224.418436][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 224.418465][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 224.418483][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.418499][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.418515][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.509075][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 224.832508][ T5753] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 225.793914][ T5753] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 225.794648][ T5753] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 225.794667][ T5753] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 225.794681][ T5753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.794702][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.796802][ T8449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.796871][ T8449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.932152][ T5753] pl2303 4-1:1.0: pl2303 converter detected [ 225.949144][ T5753] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 226.148743][ T8454] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 226.181142][ T8473] capability: warning: `syz.1.963' uses deprecated v2 capabilities in a way that may be insecure [ 227.023358][ T30] audit: type=1400 audit(1793594807.210:513): avc: denied { append } for pid=8471 comm="syz.1.963" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.090314][ T8473] loop5: detected capacity change from 0 to 7 [ 227.238223][ T2379] usb 4-1: USB disconnect, device number 18 [ 227.261058][ T2379] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 227.274499][ T2379] pl2303 4-1:1.0: device disconnected [ 227.357868][ T8473] Dev loop5: unable to read RDB block 7 [ 227.357894][ T8473] loop5: unable to read partition table [ 227.358621][ T8473] loop5: partition table beyond EOD, truncated [ 227.359008][ T8473] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.422748][ T8485] fuse: Bad value for 'fd' [ 228.962141][ T8511] fuse: Bad value for 'fd' [ 228.972925][ T30] audit: type=1400 audit(1793594809.160:514): avc: denied { write } for pid=8508 comm="syz.1.974" name="file0" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.972964][ T30] audit: type=1400 audit(1793594809.160:515): avc: denied { open } for pid=8508 comm="syz.1.974" path="/169/file0" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 229.082515][ T2379] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 229.157169][ T8518] loop5: detected capacity change from 0 to 7 [ 229.168413][ T8518] Dev loop5: unable to read RDB block 7 [ 229.168437][ T8518] loop5: unable to read partition table [ 229.168533][ T8518] loop5: partition table beyond EOD, truncated [ 229.168550][ T8518] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.234240][ T2379] usb 4-1: Using ep0 maxpacket: 8 [ 229.235466][ T2379] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.237849][ T2379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.237877][ T2379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.239129][ T2379] usb 4-1: config 0 descriptor?? [ 229.503273][ T2379] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 229.506460][ T2379] usb 4-1: USB disconnect, device number 19 [ 230.092352][ T8538] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.153025][ T2379] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 231.293650][ T8541] ceph: No mds server is up or the cluster is laggy [ 233.646604][ T8566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.993'. [ 233.671885][ T30] audit: type=1326 audit(1793594813.850:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.672244][ T30] audit: type=1326 audit(1793594813.850:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.794936][ T30] audit: type=1326 audit(1793594813.980:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.795083][ T30] audit: type=1326 audit(1793594813.980:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.795284][ T30] audit: type=1326 audit(1793594813.980:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.796384][ T30] audit: type=1326 audit(1793594813.980:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.828643][ T30] audit: type=1326 audit(1793594814.010:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.828677][ T30] audit: type=1326 audit(1793594814.010:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 233.969715][ T30] audit: type=1326 audit(1793594814.150:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 234.037492][ T30] audit: type=1326 audit(1793594814.220:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172919f559 code=0x7ffc0000 [ 234.298606][ T8596] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 241.121693][ T8642] syz.0.1017 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 241.121722][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.0.1017 Not tainted syzkaller #0 PREEMPT(full) [ 241.121737][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 241.121744][ T8642] Call Trace: [ 241.121749][ T8642] [ 241.121754][ T8642] dump_stack_lvl+0x100/0x190 [ 241.121800][ T8642] dump_header+0xfb/0x606 [ 241.121815][ T8642] oom_kill_process.cold+0xd/0x380 [ 241.121831][ T8642] out_of_memory+0x343/0x14c0 [ 241.121854][ T8642] ? __pfx_out_of_memory+0x10/0x10 [ 241.121876][ T8642] mem_cgroup_out_of_memory+0xc6/0x130 [ 241.121895][ T8642] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 241.121914][ T8642] ? find_held_lock+0x2b/0x80 [ 241.121930][ T8642] ? do_raw_spin_unlock+0x145/0x1e0 [ 241.121942][ T8642] ? _raw_spin_unlock+0x28/0x50 [ 241.121962][ T8642] try_charge_memcg+0x779/0xf30 [ 241.121980][ T8642] ? __pfx_try_charge_memcg+0x10/0x10 [ 241.121995][ T8642] ? find_held_lock+0x2b/0x80 [ 241.122007][ T8642] ? rcu_read_unlock+0x17/0x60 [ 241.122022][ T8642] ? rcu_read_unlock+0x17/0x60 [ 241.122042][ T8642] obj_cgroup_charge_pages+0x2b/0x1f0 [ 241.122059][ T8642] __memcg_slab_post_alloc_hook+0x476/0x10b0 [ 241.122080][ T8642] ? kasan_unpoison+0x27/0x60 [ 241.122100][ T8642] __kmalloc_cache_noprof+0x525/0x6d0 [ 241.122116][ T8642] ? kvm_init_irq_routing+0x43/0xf0 [ 241.122132][ T8642] kvm_init_irq_routing+0x43/0xf0 [ 241.122145][ T8642] kvm_dev_ioctl+0x771/0x1ac0 [ 241.122166][ T8642] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 241.122184][ T8642] ? selinux_file_ioctl+0x1e0/0x290 [ 241.122203][ T8642] ? selinux_file_ioctl+0x1e7/0x290 [ 241.122221][ T8642] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 241.122238][ T8642] __x64_sys_ioctl+0x18e/0x210 [ 241.122259][ T8642] do_syscall_64+0x123/0x790 [ 241.122272][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.122285][ T8642] RIP: 0033:0x7ff3c539f559 [ 241.122296][ T8642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.122307][ T8642] RSP: 002b:00007ff3c61b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.122319][ T8642] RAX: ffffffffffffffda RBX: 00007ff3c5625fa0 RCX: 00007ff3c539f559 [ 241.122326][ T8642] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 241.122333][ T8642] RBP: 00007ff3c5436b50 R08: 0000000000000000 R09: 0000000000000000 [ 241.122340][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.122347][ T8642] R13: 00007ff3c5626038 R14: 00007ff3c5625fa0 R15: 00007fff8d723308 [ 241.122362][ T8642] [ 241.122367][ T8642] memory: usage 96kB, limit 96kB, failcnt 81 [ 241.122374][ T8642] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 241.122382][ T8642] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 241.122389][ T8642] Memory cgroup stats for /syz0/test: [ 241.192251][ T8642] cache 0 [ 241.192260][ T8642] rss 0 [ 241.192264][ T8642] rss_huge 0 [ 241.192268][ T8642] shmem 0 [ 241.192272][ T8642] mapped_file 0 [ 241.192277][ T8642] dirty 0 [ 241.192281][ T8642] writeback 0 [ 241.192285][ T8642] workingset_refault_anon 0 [ 241.192290][ T8642] workingset_refault_file 0 [ 241.192294][ T8642] swap 0 [ 241.192298][ T8642] swapcached 0 [ 241.192302][ T8642] pgpgin 0 [ 241.192305][ T8642] pgpgout 0 [ 241.192309][ T8642] pgfault 0 [ 241.192313][ T8642] pgmajfault 0 [ 241.192316][ T8642] inactive_anon 0 [ 241.192320][ T8642] active_anon 0 [ 241.192324][ T8642] inactive_file 0 [ 241.192328][ T8642] active_file 0 [ 241.192332][ T8642] unevictable 0 [ 241.192336][ T8642] hierarchical_memory_limit 98304 [ 241.192340][ T8642] hierarchical_memsw_limit 9223372036854771712 [ 241.192345][ T8642] total_cache 0 [ 241.192349][ T8642] total_rss 0 [ 241.192353][ T8642] total_rss_huge 0 [ 241.192357][ T8642] total_shmem 0 [ 241.192360][ T8642] total_mapped_file 0 [ 241.192364][ T8642] total_dirty 0 [ 241.192368][ T8642] total_writeback 0 [ 241.192372][ T8642] total_workingset_refault_anon 0 [ 241.192377][ T8642] total_workingset_refault_file 0 [ 241.192381][ T8642] total_swap 0 [ 241.192385][ T8642] total_swapcached 0 [ 241.192389][ T8642] total_pgpgin 0 [ 241.192393][ T8642] total_pgpgout 0 [ 241.192397][ T8642] total_pgfault 0 [ 241.529519][ T8642] total_pgmajfault 0 [ 241.529537][ T8642] total_inactive_anon 0 [ 241.529542][ T8642] total_active_anon 0 [ 241.529546][ T8642] total_inactive_file 0 [ 241.529551][ T8642] total_active_file 0 [ 241.529556][ T8642] total_unevictable 0 [ 241.529560][ T8642] anon_cost 0 [ 241.529564][ T8642] file_cost 0 [ 241.529570][ T8642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1017,pid=8641,uid=0 [ 241.530658][ T8642] Memory cgroup out of memory: Killed process 8641 (syz.0.1017) total-vm:200720kB, anon-rss:1448kB, file-rss:21916kB, shmem-rss:5344kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 241.678348][ T8664] loop5: detected capacity change from 0 to 7 [ 241.680012][ T8664] Dev loop5: unable to read RDB block 7 [ 241.680034][ T8664] loop5: unable to read partition table [ 241.680132][ T8664] loop5: partition table beyond EOD, truncated [ 241.681799][ T8664] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.824146][ T8664] wg1 speed is unknown, defaulting to 1000 [ 241.874140][ T8664] wg1 speed is unknown, defaulting to 1000 [ 241.874503][ T8664] wg1 speed is unknown, defaulting to 1000 [ 242.003491][ T8672] fuse: Bad value for 'fd' [ 242.383044][ T8664] infiniband syz2: set active [ 242.383059][ T8664] infiniband syz2: added wg1 [ 242.383474][ T5753] wg1 speed is unknown, defaulting to 1000 [ 242.385431][ T8664] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 243.182261][ T8664] infiniband syz2: Couldn't open port 1 [ 243.182377][ T8664] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 243.182397][ T8664] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 243.232478][ T8664] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 243.408372][ T8664] RDS/IB: syz2: added [ 243.408401][ T8664] smc: adding ib device syz2 with port count 1 [ 243.408413][ T8664] smc: ib device syz2 port 1 has no pnetid [ 243.409757][ T5742] wg1 speed is unknown, defaulting to 1000 [ 243.412022][ T8664] wg1 speed is unknown, defaulting to 1000 [ 243.977156][ T8664] wg1 speed is unknown, defaulting to 1000 [ 244.154810][ T8664] wg1 speed is unknown, defaulting to 1000 [ 244.232482][ T5753] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 244.382708][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 244.383168][ T5753] usb 4-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 244.383930][ T5753] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 244.383944][ T5753] usb 4-1: config 0 has no interface number 0 [ 244.383965][ T5753] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 244.387057][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.387072][ T5753] usb 4-1: Product: syz [ 244.387080][ T5753] usb 4-1: Manufacturer: syz [ 244.387089][ T5753] usb 4-1: SerialNumber: syz [ 244.389504][ T8699] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.416604][ T5753] usb 4-1: config 0 descriptor?? [ 244.417074][ T8695] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.600016][ T8695] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.663790][ T8664] wg1 speed is unknown, defaulting to 1000 [ 245.910870][ T8664] wg1 speed is unknown, defaulting to 1000 [ 248.074404][ T8712] ptp ptp0: guarantee physical clock free running [ 249.293709][ T5753] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 249.293732][ T5753] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 249.293835][ T5753] asix 4-1:0.188: probe with driver asix failed with error -71 [ 249.410761][ T5753] usb 4-1: USB disconnect, device number 20 [ 250.336025][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.336059][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.378363][ T8736] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1048'. [ 250.606216][ T8744] xt_connbytes: Forcing CT accounting to be enabled [ 250.642840][ T5753] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 250.841171][ T5753] usb 4-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 250.965078][ T5753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.965108][ T5753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.965123][ T5753] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 251.008769][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 251.008788][ T5753] usb 4-1: Product: syz [ 251.008797][ T5753] usb 4-1: Manufacturer: syz [ 251.448392][ T5753] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 251.448995][ T5753] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 251.722554][ T5753] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 251.936428][ T5753] usb 4-1: USB disconnect, device number 21 [ 251.937527][ T5753] garmin_gps 4-1:1.0: device disconnected [ 252.014589][ T5742] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 252.284545][ T2379] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 252.378202][ T5742] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 252.580360][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 252.596588][ T5742] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.000017][ T5742] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.000037][ T5742] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.064032][ T2379] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 253.111196][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.111215][ T5742] usb 1-1: Product: syz [ 253.111224][ T5742] usb 1-1: Manufacturer: syz [ 253.111233][ T5742] usb 1-1: SerialNumber: syz [ 253.259574][ T8752] ceph: No mds server is up or the cluster is laggy [ 253.304560][ T5742] usb 1-1: config 0 descriptor?? [ 253.464721][ T8770] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 253.767537][ T5753] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 254.007671][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 254.212376][ T5753] usb 4-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 254.349838][ T5753] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 254.349859][ T5753] usb 4-1: config 0 has no interface number 0 [ 254.349880][ T5753] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 254.531859][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.531882][ T5753] usb 4-1: Product: syz [ 254.531891][ T5753] usb 4-1: Manufacturer: syz [ 254.531901][ T5753] usb 4-1: SerialNumber: syz [ 254.563812][ T5753] usb 4-1: config 0 descriptor?? [ 254.564272][ T8769] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 254.776529][ T8769] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 254.791725][ T8771] ptp ptp0: guarantee physical clock free running [ 255.706196][ T5742] usb 1-1: USB disconnect, device number 15 [ 257.859131][ T5753] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 257.859245][ T5753] asix 4-1:0.188: probe with driver asix failed with error -71 [ 257.899760][ T5753] usb 4-1: USB disconnect, device number 22 [ 258.004190][ T8789] ptp ptp0: guarantee physical clock free running [ 258.202526][ T2379] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 258.848595][ T2379] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 258.896415][ T2379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.896445][ T2379] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.896461][ T2379] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 259.127691][ T2379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 259.127711][ T2379] usb 3-1: Product: syz [ 259.127720][ T2379] usb 3-1: Manufacturer: syz [ 259.155641][ T2379] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 259.158006][ T2379] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 259.184260][ T2379] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 259.251293][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 259.284369][ T8803] ptp ptp0: guarantee physical clock free running [ 259.417493][ T8807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.417606][ T8807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.417675][ T8807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.417740][ T8807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.417803][ T8807] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.257064][ T5735] usb 3-1: USB disconnect, device number 16 [ 260.271196][ T5735] garmin_gps 3-1:1.0: device disconnected [ 261.372575][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 261.452669][ T4937] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.452695][ T4937] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.452724][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.452744][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.545023][ T8817] ptp ptp0: guarantee physical clock free running [ 262.914030][ T8831] ptp ptp0: guarantee physical clock free running [ 267.489588][ T8889] rdma_rxe: rxe_newlink: failed to add wg1 [ 267.762186][ T8903] devtmpfs: Unknown parameter 'ú' [ 268.797907][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1110'. [ 269.889345][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 269.889360][ T30] audit: type=1400 audit(1793594850.070:532): avc: denied { getopt } for pid=8929 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.101733][ T8931] smc: removing ib device rxe0 [ 271.121934][ T8931] smbdirect: ib_dev[rxe0] removed [ 271.597677][ T8931] ------------[ cut here ]------------ [ 271.597687][ T8931] !xa_empty(&pool->xa) [ 271.597691][ T8931] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.0.1112/8931 [ 271.623637][ T8931] Modules linked in: [ 271.627525][ T8931] CPU: 0 UID: 0 PID: 8931 Comm: syz.0.1112 Not tainted syzkaller #0 PREEMPT(full) [ 271.636840][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 271.646911][ T8931] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 271.652845][ T8931] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 e5 fd f8 5b c3 cc cc cc cc e8 eb e5 fd f8 90 <0f> 0b 90 e8 e2 e5 fd f8 5b c3 cc cc cc cc e8 37 c7 77 f9 eb d0 0f [ 271.672532][ T8931] RSP: 0018:ffffc90003f47158 EFLAGS: 00010246 [ 271.678600][ T8931] RAX: 0000000000080000 RBX: ffff888078e693d8 RCX: ffffc90003a19000 [ 271.686582][ T8931] RDX: 0000000000080000 RSI: ffffffff89105ff5 RDI: ffff888078e69458 [ 271.695850][ T8931] RBP: ffffffff890eb4d0 R08: 0000000000000001 R09: 0000000000000002 [ 271.703971][ T8931] R10: ffff888078e687e3 R11: 0000000000000000 R12: ffff888078e686d0 [ 271.711989][ T8931] R13: ffff888078e67fe0 R14: ffff888078e67fe0 R15: ffff888078e69138 [ 271.720002][ T8931] FS: 00007ff3c61b56c0(0000) GS:ffff88812247d000(0000) knlGS:0000000000000000 [ 271.728953][ T8931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.735550][ T8931] CR2: 00007ffc79d1f03c CR3: 000000005be16000 CR4: 00000000003526f0 [ 271.743540][ T8931] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 271.751512][ T8931] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 271.759499][ T8931] Call Trace: [ 271.762799][ T8931] [ 271.765721][ T8931] rxe_dealloc+0x25/0xc0 [ 271.769969][ T8931] ib_dealloc_device+0x49/0x230 [ 271.774835][ T8931] __ib_unregister_device+0x396/0x480 [ 271.780222][ T8931] ib_unregister_device_and_put+0x5a/0x80 [ 271.785958][ T8931] nldev_dellink+0x308/0x450 [ 271.790545][ T8931] ? __pfx_nldev_dellink+0x10/0x10 [ 271.796723][ T8931] ? rcu_is_watching+0x13/0xc0 [ 271.801492][ T8931] ? cap_capable+0x107/0x430 [ 271.806104][ T8931] ? bpf_lsm_capable+0x9/0x10 [ 271.810786][ T8931] ? security_capable+0x80/0x260 [ 271.815728][ T8931] ? ns_capable+0xcd/0xf0 [ 271.820050][ T8931] ? __pfx_nldev_dellink+0x10/0x10 [ 271.825182][ T8931] rdma_nl_rcv_msg+0x392/0x6f0 [ 271.829942][ T8931] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 271.835244][ T8931] ? __lock_acquire+0x5c0/0x1f40 [ 271.840184][ T8931] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 271.846625][ T8931] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 271.853690][ T8931] ? netlink_deliver_tap+0x1ae/0xb50 [ 271.858978][ T8931] netlink_unicast+0x668/0x950 [ 271.863761][ T8931] ? __pfx_netlink_unicast+0x10/0x10 [ 271.869052][ T8931] netlink_sendmsg+0x9ac/0x10c0 [ 271.873908][ T8931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.879195][ T8931] ? selinux_socket_sendmsg+0x198/0x2f0 [ 271.884757][ T8931] ? ____sys_sendmsg+0xa99/0xc30 [ 271.889698][ T8931] ____sys_sendmsg+0xa99/0xc30 [ 271.895495][ T8931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.900790][ T8931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.906105][ T8931] ___sys_sendmsg+0x190/0x1e0 [ 271.910795][ T8931] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.916011][ T8931] ? futex_wait+0x11e/0x370 [ 271.920519][ T8931] ? find_held_lock+0x2b/0x80 [ 271.925228][ T8931] __sys_sendmsg+0x160/0x210 [ 271.929818][ T8931] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.935264][ T8931] do_syscall_64+0x123/0x790 [ 271.939858][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.945768][ T8931] RIP: 0033:0x7ff3c539f559 [ 271.950187][ T8931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.969853][ T8931] RSP: 002b:00007ff3c61b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.978284][ T8931] RAX: ffffffffffffffda RBX: 00007ff3c5625fa0 RCX: 00007ff3c539f559 [ 271.986275][ T8931] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 000000000000000e [ 271.994264][ T8931] RBP: 00007ff3c5436b50 R08: 0000000000000000 R09: 0000000000000000 [ 272.002912][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.011294][ T8931] R13: 00007ff3c5626038 R14: 00007ff3c5625fa0 R15: 00007fff8d723308 [ 272.019683][ T8931] [ 272.022718][ T8931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 272.029970][ T8931] CPU: 0 UID: 0 PID: 8931 Comm: syz.0.1112 Not tainted syzkaller #0 PREEMPT(full) [ 272.039226][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 272.049257][ T8931] Call Trace: [ 272.052507][ T8931] [ 272.055409][ T8931] dump_stack_lvl+0x100/0x190 [ 272.060068][ T8931] vpanic+0x2dc/0x6f8 [ 272.064020][ T8931] panic+0xd1/0xe0 [ 272.067714][ T8931] ? __pfx_panic+0x10/0x10 [ 272.072106][ T8931] check_panic_on_warn.cold+0x19/0x34 [ 272.077449][ T8931] ? rxe_pool_cleanup+0x46/0x60 [ 272.082276][ T8931] __warn.cold+0x191/0x321 [ 272.086663][ T8931] __report_bug+0x30f/0x440 [ 272.091145][ T8931] ? rxe_pool_cleanup+0x46/0x60 [ 272.095975][ T8931] ? __pfx___report_bug+0x10/0x10 [ 272.100975][ T8931] ? __flush_workqueue+0x426/0x1200 [ 272.106146][ T8931] ? rxe_pool_cleanup+0x46/0x60 [ 272.110972][ T8931] report_bug+0xb3/0x220 [ 272.115187][ T8931] ? rxe_pool_cleanup+0x46/0x60 [ 272.120039][ T8931] handle_bug+0x16a/0x2a0 [ 272.124341][ T8931] exc_invalid_op+0x17/0x50 [ 272.128823][ T8931] asm_exc_invalid_op+0x1a/0x20 [ 272.133650][ T8931] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 272.139086][ T8931] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 e5 fd f8 5b c3 cc cc cc cc e8 eb e5 fd f8 90 <0f> 0b 90 e8 e2 e5 fd f8 5b c3 cc cc cc cc e8 37 c7 77 f9 eb d0 0f [ 272.158664][ T8931] RSP: 0018:ffffc90003f47158 EFLAGS: 00010246 [ 272.164701][ T8931] RAX: 0000000000080000 RBX: ffff888078e693d8 RCX: ffffc90003a19000 [ 272.172644][ T8931] RDX: 0000000000080000 RSI: ffffffff89105ff5 RDI: ffff888078e69458 [ 272.180585][ T8931] RBP: ffffffff890eb4d0 R08: 0000000000000001 R09: 0000000000000002 [ 272.188527][ T8931] R10: ffff888078e687e3 R11: 0000000000000000 R12: ffff888078e686d0 [ 272.196469][ T8931] R13: ffff888078e67fe0 R14: ffff888078e67fe0 R15: ffff888078e69138 [ 272.204414][ T8931] ? __pfx_rxe_dealloc+0x10/0x10 [ 272.209338][ T8931] ? rxe_pool_cleanup+0x45/0x60 [ 272.214175][ T8931] ? rxe_pool_cleanup+0x45/0x60 [ 272.219012][ T8931] rxe_dealloc+0x25/0xc0 [ 272.223231][ T8931] ib_dealloc_device+0x49/0x230 [ 272.228059][ T8931] __ib_unregister_device+0x396/0x480 [ 272.233418][ T8931] ib_unregister_device_and_put+0x5a/0x80 [ 272.239123][ T8931] nldev_dellink+0x308/0x450 [ 272.243695][ T8931] ? __pfx_nldev_dellink+0x10/0x10 [ 272.248826][ T8931] ? rcu_is_watching+0x13/0xc0 [ 272.253570][ T8931] ? cap_capable+0x107/0x430 [ 272.258136][ T8931] ? bpf_lsm_capable+0x9/0x10 [ 272.262782][ T8931] ? security_capable+0x80/0x260 [ 272.267695][ T8931] ? ns_capable+0xcd/0xf0 [ 272.271997][ T8931] ? __pfx_nldev_dellink+0x10/0x10 [ 272.277092][ T8931] rdma_nl_rcv_msg+0x392/0x6f0 [ 272.281831][ T8931] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 272.287091][ T8931] ? __lock_acquire+0x5c0/0x1f40 [ 272.292009][ T8931] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 272.298400][ T8931] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 272.305314][ T8931] ? netlink_deliver_tap+0x1ae/0xb50 [ 272.310574][ T8931] netlink_unicast+0x668/0x950 [ 272.315326][ T8931] ? __pfx_netlink_unicast+0x10/0x10 [ 272.320586][ T8931] netlink_sendmsg+0x9ac/0x10c0 [ 272.325413][ T8931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.330673][ T8931] ? selinux_socket_sendmsg+0x198/0x2f0 [ 272.336205][ T8931] ? ____sys_sendmsg+0xa99/0xc30 [ 272.341127][ T8931] ____sys_sendmsg+0xa99/0xc30 [ 272.345865][ T8931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.351134][ T8931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.356400][ T8931] ___sys_sendmsg+0x190/0x1e0 [ 272.361057][ T8931] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.366239][ T8931] ? futex_wait+0x11e/0x370 [ 272.370722][ T8931] ? find_held_lock+0x2b/0x80 [ 272.375381][ T8931] __sys_sendmsg+0x160/0x210 [ 272.379949][ T8931] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.385046][ T8931] do_syscall_64+0x123/0x790 [ 272.389610][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.395473][ T8931] RIP: 0033:0x7ff3c539f559 [ 272.399857][ T8931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.419444][ T8931] RSP: 002b:00007ff3c61b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.427825][ T8931] RAX: ffffffffffffffda RBX: 00007ff3c5625fa0 RCX: 00007ff3c539f559 [ 272.435768][ T8931] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 000000000000000e [ 272.443709][ T8931] RBP: 00007ff3c5436b50 R08: 0000000000000000 R09: 0000000000000000 [ 272.451650][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.459599][ T8931] R13: 00007ff3c5626038 R14: 00007ff3c5625fa0 R15: 00007fff8d723308 [ 272.467548][ T8931] [ 272.470577][ T8931] Kernel Offset: disabled [ 272.474873][ T8931] Rebooting in 86400 seconds..