last executing test programs: 5m7.775989199s ago: executing program 2 (id=3926): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0x10}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000000c0)}, 0x20) 5m7.604234366s ago: executing program 2 (id=3929): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 5m7.432200767s ago: executing program 2 (id=3934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="2318e7") 5m4.98808644s ago: executing program 2 (id=3975): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 5m4.924720963s ago: executing program 2 (id=3976): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m4.824168704s ago: executing program 2 (id=3978): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x8', 0x3) 4m49.701707453s ago: executing program 32 (id=3978): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x8', 0x3) 1m54.872109119s ago: executing program 5 (id=6863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0500330002000000080032000700000008003100"], 0x44}}, 0x80) 1m54.730822522s ago: executing program 5 (id=6866): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 1m54.654445985s ago: executing program 5 (id=6868): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {0x6, 0x1, 0x6, 0x2}, 0x2e, [0xb, 0x77e, 0x9, 0x9, 0x7fffffff, 0x8, 0xa, 0xfffff801, 0x8000, 0x7, 0x7, 0x2, 0x10, 0x9, 0xfffffff8, 0x1, 0x8, 0x2, 0x7, 0x5, 0x2, 0x8000, 0x3, 0x5b8, 0x0, 0x6, 0x2, 0x1, 0x2, 0x7, 0x5, 0xfffffff3, 0x3, 0x4f, 0x1, 0x2, 0xf, 0x2, 0x4, 0x2, 0x4, 0x54, 0x6, 0xf, 0x9, 0xe015, 0x9, 0xae63, 0xf, 0x4, 0x2c, 0x8, 0x3, 0x0, 0xf8000000, 0xc529, 0x2, 0x10, 0x7f, 0x2, 0x8080, 0x593, 0x5, 0x8], [0x0, 0x0, 0x3, 0xf898, 0x1000, 0x10800, 0xfffffffe, 0x4, 0xf, 0x3, 0x8, 0x0, 0x0, 0xd4, 0x101, 0x800, 0x1, 0x6, 0x1000, 0x9, 0xffffffff, 0x23e, 0x5, 0xc, 0x4, 0x2, 0x7fff, 0xc, 0x0, 0x101, 0x9, 0x8, 0xf, 0xe, 0x80, 0xafd, 0x7, 0xe9, 0x82, 0x4, 0x10, 0xb, 0x1ff, 0x8, 0x7, 0x0, 0xfffffff1, 0xd, 0x3, 0x1, 0x5, 0x3, 0x7ff, 0x1, 0x3, 0x80000000, 0x1, 0x6, 0x9, 0x10, 0xfffffffe, 0xa7, 0xd, 0x4], [0x6, 0x1, 0x7, 0x1ff, 0x4, 0x8, 0xfffffffe, 0x5, 0xa0000000, 0x8, 0x80000000, 0x2, 0x7, 0x5, 0x3, 0xc, 0x11, 0x5, 0x4, 0x8000, 0x3, 0x9, 0x0, 0x9, 0x7, 0x7ff, 0x6, 0x7, 0x4, 0xff, 0x5, 0x2a, 0x40, 0x3, 0x2, 0x2, 0x9, 0x3, 0x8, 0x8, 0x80000001, 0x1ff, 0x440, 0xee5, 0x4, 0x2, 0x4, 0x8001, 0xa0a3, 0x0, 0x3, 0x401, 0x2, 0x95b, 0x7a5, 0x8, 0xe676, 0x1c, 0x0, 0xe7ca, 0x9, 0x9, 0x1, 0x8], [0xc5, 0x6, 0x8001, 0x7, 0x0, 0x5, 0x6, 0x0, 0x7ff, 0xffffff5d, 0x2, 0x3, 0x8, 0x2, 0xb47a, 0x5, 0xfe6, 0x10000, 0x65c, 0x1, 0x100, 0x9, 0x9, 0x3, 0xfffffff7, 0x2, 0xfffff000, 0x4, 0x1, 0x1000, 0x200, 0xfffffffd, 0x2, 0x0, 0xfffffff8, 0x80000000, 0xba, 0x7fffffff, 0xffffffff, 0xa, 0x6, 0x0, 0x0, 0x10001, 0x2, 0x200, 0x1, 0x9, 0xf79, 0x3, 0xffff, 0xdb, 0x7, 0x0, 0x0, 0xff, 0x6, 0x1, 0x4, 0x0, 0x3, 0x7, 0x5, 0x3]}, 0x45c) 1m54.602560853s ago: executing program 5 (id=6870): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x4) 1m54.513939551s ago: executing program 5 (id=6872): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="522db49c", 0x4) 1m53.971728523s ago: executing program 5 (id=6877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x40884) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x300000000000000, 0x20044000}, 0x0) 1m53.880542152s ago: executing program 33 (id=6877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x40884) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x300000000000000, 0x20044000}, 0x0) 1m45.751142451s ago: executing program 0 (id=6985): r0 = mq_open(&(0x7f0000001300)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000001340)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000001400)=""/202, 0xca, 0x200000200009, 0x0) 1m45.538250914s ago: executing program 0 (id=6990): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x100) mount(0x0, &(0x7f00000014c0)='./sys\x00', &(0x7f0000001500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x0, 0xa4) read(r0, &(0x7f0000001580), 0x64) 1m45.439615285s ago: executing program 0 (id=6993): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x20, 0x10, 0x3, 0x1d, 0xa, 0x929, 0x2, 0xe6, 0xffffffffffffffff}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2f, 0x1c, 0x7, 0x11, 0xb, 0x80a9, 0x8, 0x6, 0x1}) 1m45.287925441s ago: executing program 1 (id=6996): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x1, 0x200088d0) 1m45.226833538s ago: executing program 0 (id=6997): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x24, &(0x7f0000000d80)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000dc0), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000e00)={0x1, 0x81, 0x0, 0x0}) 1m45.225411383s ago: executing program 1 (id=6998): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chmod(0x0, 0x257) 1m44.812924103s ago: executing program 4 (id=7005): mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1m44.716845154s ago: executing program 4 (id=7007): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000000c0)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) 1m44.685136205s ago: executing program 6 (id=7008): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setuid(0xee01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) 1m44.622360642s ago: executing program 6 (id=7009): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 1m44.622021438s ago: executing program 4 (id=7010): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) signalfd(0xffffffffffffffff, 0x0, 0x0) 1m44.532376394s ago: executing program 6 (id=7012): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002380)={&(0x7f0000000380)={0x1d, 0x0, 0x1, {0x2, 0xff, 0x4}, 0xfe}, 0x18, &(0x7f0000002340)={0x0}, 0x1, 0x0, 0x0, 0x40084}, 0x3da04f7396d64e8) 1m44.527147452s ago: executing program 1 (id=7013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a32"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m44.235501223s ago: executing program 1 (id=7015): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='syz_tun\x00', 0x8) connect$inet6(r0, &(0x7f0000001640)={0xa, 0x4e22, 0x0, @remote}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001680)) 1m44.018974517s ago: executing program 6 (id=7016): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readahead(0xffffffffffffffff, 0x2, 0x6) 1m43.938459807s ago: executing program 3 (id=7017): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94ce3377526beb5ab2c7b9ca5fa07558139ed03dc06270ee042", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) 1m43.808745499s ago: executing program 3 (id=7018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000) 1m43.807211095s ago: executing program 4 (id=7019): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x9, 0x0, 0x0) 1m43.673348538s ago: executing program 3 (id=7020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1m43.5683388s ago: executing program 0 (id=7021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@flushpolicy={0x18, 0x12, 0x105, 0x70bd28, 0x25dfdc01, "", [@proto={0x5, 0x19, 0x6c}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040044) 1m43.505148106s ago: executing program 3 (id=7022): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xf9406000) 1m43.414599296s ago: executing program 0 (id=7023): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 1m43.337743157s ago: executing program 3 (id=7024): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="616c676f3d947376642022", 0xb) 1m43.299571254s ago: executing program 6 (id=7025): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) 1m43.252323068s ago: executing program 4 (id=7026): creat(&(0x7f00000001c0)='./file0\x00', 0x4c) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000001480)={0x0, 0x1000, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) 1m43.215699295s ago: executing program 1 (id=7027): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="10", 0x1, 0x4004, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m43.15638439s ago: executing program 4 (id=7028): r0 = socket$inet(0xa, 0x801, 0x84) shutdown(r0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 1m43.136496507s ago: executing program 3 (id=7029): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) 1m43.112380475s ago: executing program 6 (id=7030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.54484023s ago: executing program 1 (id=7031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="97452a300c00"/17, 0x11}, {&(0x7f00000005c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) 1m12.156890861s ago: executing program 34 (id=7023): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 55.323384374s ago: executing program 35 (id=7030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.618313288s ago: executing program 36 (id=7029): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) 22.903449269s ago: executing program 37 (id=7028): r0 = socket$inet(0xa, 0x801, 0x84) shutdown(r0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 0s ago: executing program 38 (id=7031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="97452a300c00"/17, 0x11}, {&(0x7f00000005c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) kernel console output (not intermixed with test programs): 45E:07DA.004B: unknown main item tag 0x0 [ 431.071425][ T9] microsoft 0003:045E:07DA.004B: unknown main item tag 0x0 [ 431.071452][ T9] microsoft 0003:045E:07DA.004B: unknown main item tag 0x0 [ 431.071479][ T9] microsoft 0003:045E:07DA.004B: unknown main item tag 0x0 [ 431.088670][T19229] loop6: detected capacity change from 0 to 7 [ 431.100623][T19229] buffer_io_error: 28 callbacks suppressed [ 431.100643][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100676][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100708][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100736][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100783][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100823][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100851][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100867][T19229] ldm_validate_partition_table(): Disk read failed. [ 431.100892][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100920][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100947][T19229] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.100976][T19229] Dev loop6: unable to read RDB block 0 [ 431.101031][T19229] loop6: unable to read partition table [ 431.101196][T19229] loop6: partition table beyond EOD, truncated [ 431.101213][T19229] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 431.272059][ T986] tipc: Node number set to 0 [ 431.272146][ T986] tipc: Failed to bind to 0,0,0 [ 431.273840][T19229] ldm_validate_partition_table(): Disk read failed. [ 431.273913][T19229] Dev loop6: unable to read RDB block 0 [ 431.273971][T19229] loop6: unable to read partition table [ 431.274152][T19229] loop6: partition table beyond EOD, truncated [ 431.316554][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.004B/input/input87 [ 431.377718][ T9] microsoft 0003:045E:07DA.004B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 431.397127][ T9] usb 4-1: USB disconnect, device number 40 [ 431.422544][ T5715] tipc: Node number set to 0 [ 431.422632][ T5715] tipc: Failed to bind to 0,0,0 [ 431.563353][ T986] tipc: Node number set to 0 [ 431.563474][ T986] tipc: Failed to bind to 0,0,0 [ 431.596582][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 431.690999][T19240] fido_id[19240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 431.706439][ T986] tipc: Node number set to 0 [ 431.706525][ T986] tipc: Failed to bind to 0,0,0 [ 431.808364][T19253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.842253][ T9] tipc: Node number set to 0 [ 431.842552][ T9] tipc: Failed to bind to 0,0,0 [ 431.981941][ T986] tipc: Node number set to 0 [ 431.982029][ T986] tipc: Failed to bind to 0,0,0 [ 432.022030][ T5701] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 432.072085][ T5694] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 432.072290][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 432.122199][ T986] tipc: Node number set to 0 [ 432.122295][ T986] tipc: Failed to bind to 0,0,0 [ 432.173560][ T5701] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 432.177679][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.177716][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.177754][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.183924][ T5701] usb 5-1: config 0 descriptor?? [ 432.245986][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 432.246035][ T5694] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 432.247575][ T5694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.247602][ T5694] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.252300][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.252326][ T5694] usb 1-1: Product: syz [ 432.252362][ T5694] usb 1-1: Manufacturer: syz [ 432.252379][ T5694] usb 1-1: SerialNumber: syz [ 432.269020][ T986] tipc: Node number set to 0 [ 432.269101][ T986] tipc: Failed to bind to 0,0,0 [ 432.287236][ T5694] usb 1-1: selecting invalid altsetting 1 [ 432.288002][ T5694] usb 1-1: unit 6 not found! [ 432.402013][ T986] tipc: Node number set to 0 [ 432.402095][ T986] tipc: Failed to bind to 0,0,0 [ 432.542184][ T986] tipc: Node number set to 0 [ 432.542261][ T986] tipc: Failed to bind to 0,0,0 [ 432.614021][ T5701] hid_parser_main: 7 callbacks suppressed [ 432.614038][ T5701] hid-steam 0003:28DE:1142.004C: unknown main item tag 0x0 [ 432.614472][ T5701] hid-steam 0003:28DE:1142.004C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 432.614492][ T5701] hid-steam 0003:28DE:1142.004C: Steam wireless receiver connected [ 432.614503][ T5701] hid-steam 0003:28DE:1142.004C: No HID_FEATURE_REPORT present for ID 0 [ 432.614514][ T5701] hid-steam 0003:28DE:1142.004C: steam_probe:steam_get_conn_status failed with error -22 [ 432.624480][T19279] ip_tables: iptables: counters copy to user failed while replacing table [ 432.634441][ T5701] hid-steam 0003:28DE:1142.004D: unknown main item tag 0x0 [ 432.657704][ T5701] hid-steam 0003:28DE:1142.004D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 432.705123][ T9] tipc: Node number set to 0 [ 432.705205][ T9] tipc: Failed to bind to 0,0,0 [ 432.827089][ T9] tipc: Node number set to 0 [ 432.827512][ T9] tipc: Failed to bind to 0,0,0 [ 432.863446][ T5701] usb 5-1: USB disconnect, device number 49 [ 432.898040][ T5694] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 432.949266][ T5701] hid-steam 0003:28DE:1142.004C: Steam wireless receiver disconnected [ 432.962091][ T9] tipc: Node number set to 0 [ 432.962179][ T9] tipc: Failed to bind to 0,0,0 [ 433.045377][ T5694] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 433.051218][ T5694] usb 1-1: USB disconnect, device number 47 [ 433.087753][ T7009] udevd[7009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.107860][ T9] tipc: Node number set to 0 [ 433.107948][ T9] tipc: Failed to bind to 0,0,0 [ 433.241951][ T9] tipc: Node number set to 0 [ 433.242040][ T9] tipc: Failed to bind to 0,0,0 [ 433.381926][ T9] tipc: Node number set to 0 [ 433.382013][ T9] tipc: Failed to bind to 0,0,0 [ 433.522226][ T9] tipc: Node number set to 0 [ 433.525595][ T9] tipc: Failed to bind to 0,0,0 [ 433.556576][ T30] audit: type=1400 audit(2000000337.790:1407): avc: denied { bind } for pid=19299 comm="syz.4.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 433.573294][ T30] audit: type=1400 audit(2000000337.800:1408): avc: denied { listen } for pid=19299 comm="syz.4.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 433.661954][ T9] tipc: Node number set to 0 [ 433.662041][ T9] tipc: Failed to bind to 0,0,0 [ 433.743540][ T30] audit: type=1800 audit(2000000337.980:1409): pid=19309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5962" name="bus" dev="tmpfs" ino=1683 res=0 errno=0 [ 433.801966][ T986] tipc: Node number set to 0 [ 433.802055][ T986] tipc: Failed to bind to 0,0,0 [ 433.914273][T19314] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 433.942207][ T986] tipc: Node number set to 0 [ 433.942291][ T986] tipc: Failed to bind to 0,0,0 [ 434.082421][ T986] tipc: Node number set to 0 [ 434.082501][ T986] tipc: Failed to bind to 0,0,0 [ 434.155804][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5973'. [ 434.222165][ T986] tipc: Node number set to 0 [ 434.223177][ T986] tipc: Failed to bind to 0,0,0 [ 434.361956][ T986] tipc: Node number set to 0 [ 434.362043][ T986] tipc: Failed to bind to 0,0,0 [ 434.501956][ T986] tipc: Node number set to 0 [ 434.502040][ T986] tipc: Failed to bind to 0,0,0 [ 434.641999][ T986] tipc: Node number set to 0 [ 434.642087][ T986] tipc: Failed to bind to 0,0,0 [ 434.791968][ T986] tipc: Node number set to 0 [ 434.792057][ T986] tipc: Failed to bind to 0,0,0 [ 434.931958][ T986] tipc: Node number set to 0 [ 434.932041][ T986] tipc: Failed to bind to 0,0,0 [ 435.072602][ T986] tipc: Node number set to 0 [ 435.072693][ T986] tipc: Failed to bind to 0,0,0 [ 435.211974][ T986] tipc: Node number set to 0 [ 435.212106][ T986] tipc: Failed to bind to 0,0,0 [ 435.362119][ T986] tipc: Node number set to 0 [ 435.362208][ T986] tipc: Failed to bind to 0,0,0 [ 435.472476][ T5603] block nbd6: Receive control failed (result -32) [ 435.502001][ T986] tipc: Node number set to 0 [ 435.502088][ T986] tipc: Failed to bind to 0,0,0 [ 435.615846][ T30] audit: type=1400 audit(2000000339.850:1410): avc: denied { write } for pid=19383 comm="syz.4.5999" path="socket:[71570]" dev="sockfs" ino=71570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.646502][ T9] tipc: Node number set to 0 [ 435.646587][ T9] tipc: Failed to bind to 0,0,0 [ 435.654686][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6000'. [ 435.654722][T19386] netlink: 'syz.5.6000': attribute type 30 has an invalid length. [ 435.654740][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6000'. [ 435.712857][ T5701] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 435.784202][ T9] tipc: Node number set to 0 [ 435.784284][ T9] tipc: Failed to bind to 0,0,0 [ 435.864549][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 435.865696][ T5701] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.866649][ T5701] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 435.866681][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.870489][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.870515][ T5701] usb 1-1: Product: syz [ 435.870532][ T5701] usb 1-1: Manufacturer: syz [ 435.870550][ T5701] usb 1-1: SerialNumber: syz [ 435.878684][ T5701] usb 1-1: config 0 descriptor?? [ 435.891422][ T5701] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 435.891461][ T5701] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 435.922267][ T9] tipc: Node number set to 0 [ 435.922372][ T9] tipc: Failed to bind to 0,0,0 [ 436.054327][T19403] netlink: 'syz.1.6018': attribute type 1 has an invalid length. [ 436.054352][T19403] netlink: 'syz.1.6018': attribute type 1 has an invalid length. [ 436.054470][T19403] iwpm_send_hello: Unable to send a nlmsg [ 436.061995][ T9] tipc: Node number set to 0 [ 436.062083][ T9] tipc: Failed to bind to 0,0,0 [ 436.204070][ T986] tipc: Node number set to 0 [ 436.204157][ T986] tipc: Failed to bind to 0,0,0 [ 436.341953][ T9] tipc: Node number set to 0 [ 436.342038][ T9] tipc: Failed to bind to 0,0,0 [ 436.483716][ T9] tipc: Node number set to 0 [ 436.483804][ T9] tipc: Failed to bind to 0,0,0 [ 436.536970][ T5701] em28xx 1-1:0.0: chip ID is em2874 [ 436.548391][ T986] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 436.622005][ T5715] tipc: Node number set to 0 [ 436.622093][ T5715] tipc: Failed to bind to 0,0,0 [ 436.666091][T19429] netlink: 'syz.1.6020': attribute type 10 has an invalid length. [ 436.666114][T19429] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6020'. [ 436.702640][ T986] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 436.703681][ T986] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024 [ 436.703715][ T986] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 436.705516][ T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 436.705542][ T986] usb 6-1: Product: syz [ 436.705560][ T986] usb 6-1: Manufacturer: syz [ 436.710748][T19414] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 436.780209][ T986] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 436.790036][ T986] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 436.794699][ T5701] usb 1-1: USB disconnect, device number 48 [ 436.796031][ T5701] em28xx 1-1:0.0: Disconnecting em28xx [ 436.810675][ T5715] tipc: Node number set to 0 [ 436.810768][ T5715] tipc: Failed to bind to 0,0,0 [ 436.848993][ T30] audit: type=1400 audit(2000000341.080:1411): avc: denied { watch watch_reads } for pid=19434 comm="syz.1.6023" path="/syzcgroup/net/syz1/devices.allow" dev="cgroup" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 436.901938][ T5715] tipc: Node number set to 0 [ 436.902024][ T5715] tipc: Failed to bind to 0,0,0 [ 436.904167][ T5701] em28xx: Freeing device [ 437.041929][ T5715] tipc: Node number set to 0 [ 437.042013][ T5715] tipc: Failed to bind to 0,0,0 [ 437.163344][ T5603] Bluetooth: hci2: link tx timeout [ 437.163361][ T5603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.187131][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6030'. [ 437.192036][ T5715] tipc: Node number set to 0 [ 437.192120][ T5715] tipc: Failed to bind to 0,0,0 [ 437.247915][ T1045] IPVS: starting estimator thread 0... [ 437.321043][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6035'. [ 437.332007][T19454] IPVS: using max 47 ests per chain, 112800 per kthread [ 437.332063][ T5715] tipc: Node number set to 0 [ 437.332139][ T5715] tipc: Failed to bind to 0,0,0 [ 437.350396][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6035'. [ 437.472196][ T5715] tipc: Node number set to 0 [ 437.473157][ T5715] tipc: Failed to bind to 0,0,0 [ 437.615674][ T5715] tipc: Node number set to 0 [ 437.615765][ T5715] tipc: Failed to bind to 0,0,0 [ 437.751996][ T986] tipc: Node number set to 0 [ 437.752078][ T986] tipc: Failed to bind to 0,0,0 [ 437.892216][ T986] tipc: Node number set to 0 [ 437.892453][ T986] tipc: Failed to bind to 0,0,0 [ 437.970743][ T30] audit: type=1400 audit(2000000342.200:1412): avc: denied { write } for pid=19492 comm="syz.4.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.032122][ T5715] tipc: Node number set to 0 [ 438.032212][ T5715] tipc: Failed to bind to 0,0,0 [ 438.084676][ T5715] usb 6-1: USB disconnect, device number 13 [ 438.102901][ T5715] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 438.104731][ T5715] iuu_phoenix 6-1:1.0: device disconnected [ 438.171972][ T986] tipc: Node number set to 0 [ 438.172074][ T986] tipc: Failed to bind to 0,0,0 [ 438.236813][ T986] kernel write not supported for file /input/event0 (pid: 986 comm: kworker/0:3) [ 438.324423][ T5715] tipc: Node number set to 0 [ 438.324512][ T5715] tipc: Failed to bind to 0,0,0 [ 438.452031][T19512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.462074][ T5715] tipc: Node number set to 0 [ 438.462162][ T5715] tipc: Failed to bind to 0,0,0 [ 438.602065][ T5715] tipc: Node number set to 0 [ 438.602153][ T5715] tipc: Failed to bind to 0,0,0 [ 438.753198][ T5715] tipc: Node number set to 0 [ 438.753287][ T5715] tipc: Failed to bind to 0,0,0 [ 438.894359][ T5715] tipc: Node number set to 0 [ 438.894602][ T5715] tipc: Failed to bind to 0,0,0 [ 438.983348][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 439.028634][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6073'. [ 439.081421][ T5715] tipc: Node number set to 0 [ 439.081510][ T5715] tipc: Failed to bind to 0,0,0 [ 439.134862][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 439.135811][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.144996][ T9] usb 6-1: config 0 descriptor?? [ 439.173002][ T986] tipc: Node number set to 0 [ 439.173090][ T986] tipc: Failed to bind to 0,0,0 [ 439.192055][ T5603] Bluetooth: hci2: command 0x0405 tx timeout [ 439.311981][ T986] tipc: Node number set to 0 [ 439.312100][ T986] tipc: Failed to bind to 0,0,0 [ 439.380515][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 439.452556][ T986] tipc: Node number set to 0 [ 439.452660][ T986] tipc: Failed to bind to 0,0,0 [ 439.644665][ T986] tipc: Node number set to 0 [ 439.644765][ T986] tipc: Failed to bind to 0,0,0 [ 439.692953][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 439.692985][ T9] [drm] Initialized udl on minor 1 [ 439.732040][ T5715] tipc: Node number set to 0 [ 439.732132][ T5715] tipc: Failed to bind to 0,0,0 [ 439.872058][ T5715] tipc: Node number set to 0 [ 439.872193][ T5715] tipc: Failed to bind to 0,0,0 [ 439.990045][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 440.012324][ T986] tipc: Node number set to 0 [ 440.012415][ T986] tipc: Failed to bind to 0,0,0 [ 440.016951][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 440.058816][ T9] usb 6-1: USB disconnect, device number 14 [ 440.134348][T19545] ceph: No mds server is up or the cluster is laggy [ 440.152649][ T986] tipc: Node number set to 0 [ 440.152741][ T986] tipc: Failed to bind to 0,0,0 [ 440.306139][ T986] tipc: Node number set to 0 [ 440.306227][ T986] tipc: Failed to bind to 0,0,0 [ 440.442762][ T986] tipc: Node number set to 0 [ 440.442847][ T986] tipc: Failed to bind to 0,0,0 [ 440.582939][ T9] tipc: Node number set to 0 [ 440.583050][ T9] tipc: Failed to bind to 0,0,0 [ 440.722467][ T9] tipc: Node number set to 0 [ 440.722546][ T9] tipc: Failed to bind to 0,0,0 [ 440.862229][ T986] tipc: Node number set to 0 [ 440.863331][ T986] tipc: Failed to bind to 0,0,0 [ 440.994666][T19594] trusted_key: encrypted_key: key user:syz not found [ 441.002425][ T986] tipc: Node number set to 0 [ 441.003352][ T986] tipc: Failed to bind to 0,0,0 [ 441.133068][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6100'. [ 441.142956][ T986] tipc: Node number set to 0 [ 441.143039][ T986] tipc: Failed to bind to 0,0,0 [ 441.304558][ T986] tipc: Node number set to 0 [ 441.304648][ T986] tipc: Failed to bind to 0,0,0 [ 441.399307][T19613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.442680][ T9] tipc: Node number set to 0 [ 441.442771][ T9] tipc: Failed to bind to 0,0,0 [ 441.528291][ T9] kernel write not supported for file /media4 (pid: 9 comm: kworker/0:0) [ 441.543005][ T30] audit: type=1326 audit(2000000345.780:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.543134][ T30] audit: type=1326 audit(2000000345.780:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.550072][ T30] audit: type=1326 audit(2000000345.780:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.550182][ T30] audit: type=1326 audit(2000000345.780:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.578560][ T30] audit: type=1326 audit(2000000345.790:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.578622][ T30] audit: type=1326 audit(2000000345.790:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.578668][ T30] audit: type=1326 audit(2000000345.790:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.578716][ T30] audit: type=1326 audit(2000000345.790:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.578762][ T30] audit: type=1326 audit(2000000345.790:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.578816][ T30] audit: type=1326 audit(2000000345.790:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19618 comm="syz.0.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f0c0bf9f559 code=0x7ffc0000 [ 441.612530][ T9] tipc: Node number set to 0 [ 441.612624][ T9] tipc: Failed to bind to 0,0,0 [ 441.752234][ T986] tipc: Node number set to 0 [ 441.752327][ T986] tipc: Failed to bind to 0,0,0 [ 441.784141][T19628] netlink: 'syz.5.6114': attribute type 2 has an invalid length. [ 441.834853][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 441.892840][ T986] tipc: Node number set to 0 [ 441.892928][ T986] tipc: Failed to bind to 0,0,0 [ 442.032713][ T986] tipc: Node number set to 0 [ 442.032807][ T986] tipc: Failed to bind to 0,0,0 [ 442.149194][T19640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.172141][ T986] tipc: Node number set to 0 [ 442.172227][ T986] tipc: Failed to bind to 0,0,0 [ 442.314630][ T986] tipc: Node number set to 0 [ 442.314748][ T986] tipc: Failed to bind to 0,0,0 [ 442.453218][ T9] tipc: Node number set to 0 [ 442.453310][ T9] tipc: Failed to bind to 0,0,0 [ 442.582628][ T986] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 442.592030][ T9] tipc: Node number set to 0 [ 442.592110][ T9] tipc: Failed to bind to 0,0,0 [ 442.732691][ T9] tipc: Node number set to 0 [ 442.732777][ T9] tipc: Failed to bind to 0,0,0 [ 442.735567][ T986] usb 1-1: Using ep0 maxpacket: 8 [ 442.737478][ T986] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 442.739665][ T986] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.739691][ T986] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.739737][ T986] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 442.739767][ T986] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 442.739806][ T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.759594][ T986] hub 1-1:1.0: bad descriptor, ignoring hub [ 442.759623][ T986] hub 1-1:1.0: probe with driver hub failed with error -5 [ 442.760074][ T986] cdc_wdm 1-1:1.0: skipping garbage [ 442.760089][ T986] cdc_wdm 1-1:1.0: skipping garbage [ 442.783684][ T986] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 442.783706][ T986] cdc_wdm 1-1:1.0: Unknown control protocol [ 442.862108][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6132'. [ 442.874292][ T986] tipc: Node number set to 0 [ 442.874378][ T986] tipc: Failed to bind to 0,0,0 [ 442.915854][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6132'. [ 442.978992][T19664] block device autoloading is deprecated and will be removed. [ 443.023334][ T986] tipc: Node number set to 0 [ 443.023416][ T986] tipc: Failed to bind to 0,0,0 [ 443.163736][ T9] tipc: Node number set to 0 [ 443.164204][ T9] tipc: Failed to bind to 0,0,0 [ 443.241180][T19683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.303284][ T9] tipc: Node number set to 0 [ 443.303341][ T9] tipc: Failed to bind to 0,0,0 [ 443.441996][ T986] tipc: Node number set to 0 [ 443.442084][ T986] tipc: Failed to bind to 0,0,0 [ 443.516062][ T9] usb 1-1: USB disconnect, device number 49 [ 443.565812][T19696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6145'. [ 443.582018][ T986] tipc: Node number set to 0 [ 443.582104][ T986] tipc: Failed to bind to 0,0,0 [ 443.725252][ T9] tipc: Node number set to 0 [ 443.725338][ T9] tipc: Failed to bind to 0,0,0 [ 443.862046][ T986] tipc: Node number set to 0 [ 443.862135][ T986] tipc: Failed to bind to 0,0,0 [ 444.002054][ T986] tipc: Node number set to 0 [ 444.002140][ T986] tipc: Failed to bind to 0,0,0 [ 444.204494][ T9] tipc: Node number set to 0 [ 444.204587][ T9] tipc: Failed to bind to 0,0,0 [ 444.299533][ T9] tipc: Node number set to 0 [ 444.299621][ T9] tipc: Failed to bind to 0,0,0 [ 444.434577][ T986] tipc: Node number set to 0 [ 444.434668][ T986] tipc: Failed to bind to 0,0,0 [ 444.573131][ T9] tipc: Node number set to 0 [ 444.573220][ T9] tipc: Failed to bind to 0,0,0 [ 444.720154][ T9] tipc: Node number set to 0 [ 444.720244][ T9] tipc: Failed to bind to 0,0,0 [ 444.852010][ T986] tipc: Node number set to 0 [ 444.852099][ T986] tipc: Failed to bind to 0,0,0 [ 445.002522][ T986] tipc: Node number set to 0 [ 445.002609][ T986] tipc: Failed to bind to 0,0,0 [ 445.026054][T19773] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6181'. [ 445.142806][ T986] tipc: Node number set to 0 [ 445.142893][ T986] tipc: Failed to bind to 0,0,0 [ 445.285608][ T9] tipc: Node number set to 0 [ 445.285689][ T9] tipc: Failed to bind to 0,0,0 [ 445.448251][ T986] tipc: Node number set to 0 [ 445.448338][ T986] tipc: Failed to bind to 0,0,0 [ 445.512390][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 445.584230][ T5715] tipc: Node number set to 0 [ 445.584322][ T5715] tipc: Failed to bind to 0,0,0 [ 445.662055][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 445.663857][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 445.668605][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 445.668638][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.680707][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.680734][ T9] usb 6-1: Product: syz [ 445.680750][ T9] usb 6-1: Manufacturer: syz [ 445.680766][ T9] usb 6-1: SerialNumber: syz [ 445.690995][ T9] usb 6-1: config 0 descriptor?? [ 445.709282][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 445.709320][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 445.727469][ T5715] tipc: Node number set to 0 [ 445.727574][ T5715] tipc: Failed to bind to 0,0,0 [ 445.872099][ T5715] tipc: Node number set to 0 [ 445.872203][ T5715] tipc: Failed to bind to 0,0,0 [ 446.012526][ T5701] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 446.013712][ T5715] tipc: Node number set to 0 [ 446.013805][ T5715] tipc: Failed to bind to 0,0,0 [ 446.162424][ T5715] tipc: Node number set to 0 [ 446.162504][ T5715] tipc: Failed to bind to 0,0,0 [ 446.167581][ T5701] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 446.183994][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 446.184030][ T5701] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 446.184076][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.263338][ T5701] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 446.278678][ T5701] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 446.291981][ T986] tipc: Node number set to 0 [ 446.292067][ T986] tipc: Failed to bind to 0,0,0 [ 446.374704][ T9] em28xx 6-1:0.0: chip ID is em2874 [ 446.432048][ T9] tipc: Node number set to 0 [ 446.432138][ T9] tipc: Failed to bind to 0,0,0 [ 446.572084][ T9] tipc: Node number set to 0 [ 446.572187][ T9] tipc: Failed to bind to 0,0,0 [ 446.618921][ T9] usb 6-1: USB disconnect, device number 15 [ 446.633733][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 446.658769][ T5701] usb 4-1: USB disconnect, device number 41 [ 446.665688][ T9] em28xx: Freeing device [ 446.681149][ T5701] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 446.681720][ T5701] spcp8x5 4-1:1.0: device disconnected [ 446.717923][ T5715] tipc: Node number set to 0 [ 446.718003][ T5715] tipc: Failed to bind to 0,0,0 [ 446.854075][ T5715] tipc: Node number set to 0 [ 446.854158][ T5715] tipc: Failed to bind to 0,0,0 [ 446.991979][ T5715] tipc: Node number set to 0 [ 446.992068][ T5715] tipc: Failed to bind to 0,0,0 [ 447.100130][T19848] syz_tun: entered allmulticast mode [ 447.101471][T19847] syz_tun: left allmulticast mode [ 447.122151][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 447.132395][ T5715] tipc: Node number set to 0 [ 447.132492][ T5715] tipc: Failed to bind to 0,0,0 [ 447.151568][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 447.151587][ T30] audit: type=1326 audit(2000000351.380:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.151713][ T30] audit: type=1326 audit(2000000351.380:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187010][ T30] audit: type=1326 audit(2000000351.390:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187068][ T30] audit: type=1326 audit(2000000351.390:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187115][ T30] audit: type=1326 audit(2000000351.390:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187160][ T30] audit: type=1326 audit(2000000351.390:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187203][ T30] audit: type=1326 audit(2000000351.390:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187247][ T30] audit: type=1326 audit(2000000351.390:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187293][ T30] audit: type=1326 audit(2000000351.390:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.187336][ T30] audit: type=1326 audit(2000000351.390:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19849 comm="syz.4.6215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff793f9f559 code=0x7ffc0000 [ 447.272328][ T5715] tipc: Node number set to 0 [ 447.272434][ T5715] tipc: Failed to bind to 0,0,0 [ 447.304483][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 447.305377][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 447.306438][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 447.306464][ T9] usb 1-1: config 0 has no interface number 0 [ 447.306502][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 447.308259][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.316555][ T9] usb 1-1: Product: syz [ 447.316580][ T9] usb 1-1: Manufacturer: syz [ 447.316597][ T9] usb 1-1: SerialNumber: syz [ 447.324643][ T9] usb 1-1: config 0 descriptor?? [ 447.412905][ T5715] tipc: Node number set to 0 [ 447.413009][ T5715] tipc: Failed to bind to 0,0,0 [ 447.564016][ T5715] tipc: Node number set to 0 [ 447.564104][ T5715] tipc: Failed to bind to 0,0,0 [ 447.623907][T19862] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 447.656343][T19862] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 447.657070][T19862] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 447.705520][ T5715] tipc: Node number set to 0 [ 447.705671][ T5715] tipc: Failed to bind to 0,0,0 [ 447.842177][ T986] tipc: Node number set to 0 [ 447.842264][ T986] tipc: Failed to bind to 0,0,0 [ 447.884544][T19862] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 447.884569][T19862] pci 0000:00:05.0: vgaarb: bridge control possible [ 447.884587][T19862] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 447.889410][T19862] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 447.982014][ T986] tipc: Node number set to 0 [ 447.982181][ T986] tipc: Failed to bind to 0,0,0 [ 448.122021][ T986] tipc: Node number set to 0 [ 448.122105][ T986] tipc: Failed to bind to 0,0,0 [ 448.171414][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 448.171460][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 448.173739][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 448.173771][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 448.173805][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 448.173830][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 448.174087][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 448.190279][ T9] usb 1-1: USB disconnect, device number 50 [ 448.261988][ T986] tipc: Node number set to 0 [ 448.262080][ T986] tipc: Failed to bind to 0,0,0 [ 448.401979][ T9] tipc: Node number set to 0 [ 448.402066][ T9] tipc: Failed to bind to 0,0,0 [ 448.546519][ T9] tipc: Node number set to 0 [ 448.546609][ T9] tipc: Failed to bind to 0,0,0 [ 448.681964][ T986] tipc: Node number set to 0 [ 448.682061][ T986] tipc: Failed to bind to 0,0,0 [ 448.835506][ T986] tipc: Node number set to 0 [ 448.835944][ T986] tipc: Failed to bind to 0,0,0 [ 448.981975][ T986] tipc: Node number set to 0 [ 448.982059][ T986] tipc: Failed to bind to 0,0,0 [ 449.039213][T19916] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 449.039246][T19916] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 449.039387][T19916] overlayfs: failed to get uuid (185/file2, err=-13); falling back to uuid=null. [ 449.054338][ T5694] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 449.122037][ T986] tipc: Node number set to 0 [ 449.122122][ T986] tipc: Failed to bind to 0,0,0 [ 449.234750][ T5694] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.235833][ T5694] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 449.235864][ T5694] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 449.235887][ T5694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 449.235929][ T5694] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.237777][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.237802][ T5694] usb 4-1: Product: syz [ 449.237818][ T5694] usb 4-1: Manufacturer: syz [ 449.272205][ T986] tipc: Node number set to 0 [ 449.272289][ T986] tipc: Failed to bind to 0,0,0 [ 449.327626][ T5694] cdc_wdm 4-1:1.0: skipping garbage [ 449.327649][ T5694] cdc_wdm 4-1:1.0: skipping garbage [ 449.327664][ T5694] cdc_wdm 4-1:1.0: skipping garbage [ 449.327686][ T5694] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 449.336664][T19930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6251'. [ 449.401973][ T986] tipc: Node number set to 0 [ 449.402062][ T986] tipc: Failed to bind to 0,0,0 [ 449.438911][T19935] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 449.542402][ T986] tipc: Node number set to 0 [ 449.542489][ T986] tipc: Failed to bind to 0,0,0 [ 449.682069][ T9] tipc: Node number set to 0 [ 449.682158][ T9] tipc: Failed to bind to 0,0,0 [ 449.822748][ T9] tipc: Node number set to 0 [ 449.822836][ T9] tipc: Failed to bind to 0,0,0 [ 449.922205][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6265'. [ 449.922234][T19960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6265'. [ 449.954791][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6265'. [ 449.954814][T19960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6265'. [ 449.982088][ T986] tipc: Node number set to 0 [ 449.982180][ T986] tipc: Failed to bind to 0,0,0 [ 450.058455][ T986] usb 4-1: USB disconnect, device number 42 [ 450.101999][ T5715] tipc: Node number set to 0 [ 450.102092][ T5715] tipc: Failed to bind to 0,0,0 [ 450.253013][ T9] tipc: Node number set to 0 [ 450.253095][ T9] tipc: Failed to bind to 0,0,0 [ 450.393554][ T986] tipc: Node number set to 0 [ 450.393637][ T986] tipc: Failed to bind to 0,0,0 [ 450.399413][T19989] random: crng reseeded on system resumption [ 450.542391][ T986] tipc: Node number set to 0 [ 450.542490][ T986] tipc: Failed to bind to 0,0,0 [ 450.556898][ T5694] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 450.682229][ T986] tipc: Node number set to 0 [ 450.682316][ T986] tipc: Failed to bind to 0,0,0 [ 450.721905][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 450.722689][ T5694] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.724925][ T5694] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 450.724957][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 450.728674][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.728699][ T5694] usb 4-1: Product: syz [ 450.728715][ T5694] usb 4-1: Manufacturer: syz [ 450.728732][ T5694] usb 4-1: SerialNumber: syz [ 450.748711][ T5694] usb 4-1: config 0 descriptor?? [ 450.748944][ T5701] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 450.812888][ T5694] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 450.812925][ T5694] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 450.831978][ T9] tipc: Node number set to 0 [ 450.832063][ T9] tipc: Failed to bind to 0,0,0 [ 450.951967][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 450.953521][ T5701] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 450.955680][ T5701] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 450.955708][ T5701] usb 2-1: config 0 has no interface number 0 [ 450.958831][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.958857][ T5701] usb 2-1: Product: syz [ 450.958875][ T5701] usb 2-1: Manufacturer: syz [ 450.958891][ T5701] usb 2-1: SerialNumber: syz [ 450.962043][ T9] tipc: Node number set to 0 [ 450.962128][ T9] tipc: Failed to bind to 0,0,0 [ 450.977822][ T5701] usb 2-1: config 0 descriptor?? [ 451.035734][T20008] sctp: [Deprecated]: syz.4.6286 (pid 20008) Use of int in max_burst socket option deprecated. [ 451.035734][T20008] Use struct sctp_assoc_value instead [ 451.035845][ T5701] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 451.102965][ T9] tipc: Node number set to 0 [ 451.103055][ T9] tipc: Failed to bind to 0,0,0 [ 451.207812][ T5701] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 451.225747][ T5701] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 451.252364][ T9] tipc: Node number set to 0 [ 451.252452][ T9] tipc: Failed to bind to 0,0,0 [ 451.280188][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6290'. [ 451.392252][ T986] tipc: Node number set to 0 [ 451.392344][ T986] tipc: Failed to bind to 0,0,0 [ 451.426965][ T5694] em28xx 4-1:0.0: chip ID is em2874 [ 451.457315][T20023] netlink: 'syz.0.6293': attribute type 2 has an invalid length. [ 451.471399][T20023] : entered promiscuous mode [ 451.532349][ T986] tipc: Node number set to 0 [ 451.534644][ T986] tipc: Failed to bind to 0,0,0 [ 451.612604][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 451.612943][ T986] usb 2-1: USB disconnect, device number 48 [ 451.619413][ T986] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 451.653415][ T986] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 451.654090][ T986] quatech2 2-1:0.51: device disconnected [ 451.681035][ T9] tipc: Node number set to 0 [ 451.683631][ T9] tipc: Failed to bind to 0,0,0 [ 451.699802][ T5701] usb 4-1: USB disconnect, device number 43 [ 451.700634][ T5701] em28xx 4-1:0.0: Disconnecting em28xx [ 451.769448][ T5701] em28xx: Freeing device [ 451.811933][ T9] tipc: Node number set to 0 [ 451.812020][ T9] tipc: Failed to bind to 0,0,0 [ 451.940712][T20043] binder: 20042:20043 ioctl c00c620f 200000000540 returned -22 [ 451.953067][ T986] tipc: Node number set to 0 [ 451.954515][ T986] tipc: Failed to bind to 0,0,0 [ 452.039679][T20050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6305'. [ 452.092026][ T986] tipc: Node number set to 0 [ 452.092109][ T986] tipc: Failed to bind to 0,0,0 [ 452.232188][ T986] tipc: Node number set to 0 [ 452.232271][ T986] tipc: Failed to bind to 0,0,0 [ 452.371923][ T986] tipc: Node number set to 0 [ 452.372009][ T986] tipc: Failed to bind to 0,0,0 [ 452.511979][ T986] tipc: Node number set to 0 [ 452.512068][ T986] tipc: Failed to bind to 0,0,0 [ 452.632281][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6314'. [ 452.632307][T20071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6314'. [ 452.677617][ T986] tipc: Node number set to 0 [ 452.677704][ T986] tipc: Failed to bind to 0,0,0 [ 452.703493][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6314'. [ 452.792026][ T986] tipc: Node number set to 0 [ 452.792186][ T986] tipc: Failed to bind to 0,0,0 [ 452.931921][ T986] tipc: Node number set to 0 [ 452.932008][ T986] tipc: Failed to bind to 0,0,0 [ 453.071939][ T986] tipc: Node number set to 0 [ 453.072025][ T986] tipc: Failed to bind to 0,0,0 [ 453.222714][ T9] tipc: Node number set to 0 [ 453.222808][ T9] tipc: Failed to bind to 0,0,0 [ 453.362208][ T9] tipc: Node number set to 0 [ 453.362284][ T9] tipc: Failed to bind to 0,0,0 [ 453.514233][ T9] tipc: Node number set to 0 [ 453.514311][ T9] tipc: Failed to bind to 0,0,0 [ 453.654356][ T986] tipc: Node number set to 0 [ 453.654448][ T986] tipc: Failed to bind to 0,0,0 [ 453.802926][ T986] tipc: Node number set to 0 [ 453.803013][ T986] tipc: Failed to bind to 0,0,0 [ 453.941945][ T9] tipc: Node number set to 0 [ 453.942033][ T9] tipc: Failed to bind to 0,0,0 [ 454.080905][T20118] input: syz0 as /devices/virtual/input/input90 [ 454.082084][ T9] tipc: Node number set to 0 [ 454.082164][ T9] tipc: Failed to bind to 0,0,0 [ 454.222003][ T986] tipc: Node number set to 0 [ 454.222089][ T986] tipc: Failed to bind to 0,0,0 [ 454.363204][ T986] tipc: Node number set to 0 [ 454.363284][ T986] tipc: Failed to bind to 0,0,0 [ 454.467183][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 454.512302][ T986] tipc: Node number set to 0 [ 454.512378][ T986] tipc: Failed to bind to 0,0,0 [ 454.594800][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 454.594824][ T30] audit: type=1400 audit(2000000358.820:1453): avc: denied { ioctl } for pid=20134 comm="syz.4.6343" path="socket:[76520]" dev="sockfs" ino=76520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.661996][ T986] tipc: Node number set to 0 [ 454.662092][ T986] tipc: Failed to bind to 0,0,0 [ 454.662147][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 454.662808][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 454.668503][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 454.668531][ T9] usb 4-1: config 179 has no interface number 0 [ 454.668568][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 454.668613][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 454.668647][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 454.668680][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 454.668715][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 454.668766][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.772352][T20126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 454.802387][ T9] tipc: Node number set to 0 [ 454.802489][ T9] tipc: Failed to bind to 0,0,0 [ 454.942163][ T9] tipc: Node number set to 0 [ 454.942234][ T9] tipc: Failed to bind to 0,0,0 [ 455.082106][ T9] tipc: Node number set to 0 [ 455.082209][ T9] tipc: Failed to bind to 0,0,0 [ 455.151269][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input91 [ 455.222046][ T9] tipc: Node number set to 0 [ 455.222331][ T9] tipc: Failed to bind to 0,0,0 [ 455.362073][ T9] tipc: Node number set to 0 [ 455.362170][ T9] tipc: Failed to bind to 0,0,0 [ 455.369430][ T5701] usb 4-1: USB disconnect, device number 44 [ 455.369502][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 455.369558][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 455.502431][ T9] tipc: Node number set to 0 [ 455.502518][ T9] tipc: Failed to bind to 0,0,0 [ 455.573039][T20164] __nla_validate_parse: 1 callbacks suppressed [ 455.573062][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6354'. [ 455.573093][T20164] netlink: 'syz.1.6354': attribute type 10 has an invalid length. [ 455.573109][T20164] netlink: 'syz.1.6354': attribute type 5 has an invalid length. [ 455.573123][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6354'. [ 455.605080][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6356'. [ 455.615268][T20167] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.615334][T20167] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 455.652770][T20164] geneve2: entered promiscuous mode [ 455.652795][T20164] geneve2: entered allmulticast mode [ 455.654891][T19816] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 58846 - 0 [ 455.655112][T19816] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 58846 - 0 [ 455.655309][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 58846 - 0 [ 455.655418][ T5839] tipc: Node number set to 0 [ 455.655502][ T5839] tipc: Failed to bind to 0,0,0 [ 455.672471][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 58846 - 0 [ 455.783086][ T9] tipc: Node number set to 0 [ 455.784102][ T9] tipc: Failed to bind to 0,0,0 [ 455.833702][ T5603] Bluetooth: hci2: command 0x0405 tx timeout [ 455.921921][ T5839] tipc: Node number set to 0 [ 455.922009][ T5839] tipc: Failed to bind to 0,0,0 [ 455.963403][T20184] MTRR 0 not used [ 456.064188][ T5839] tipc: Node number set to 0 [ 456.064278][ T5839] tipc: Failed to bind to 0,0,0 [ 456.085971][T20188] SELinux: ebitmap: truncated map [ 456.086122][T20188] SELinux: invalid class [ 456.107810][T20188] SELinux: failed to load policy [ 456.202591][ T5839] tipc: Node number set to 0 [ 456.202676][ T5839] tipc: Failed to bind to 0,0,0 [ 456.341948][ T5839] tipc: Node number set to 0 [ 456.342056][ T5839] tipc: Failed to bind to 0,0,0 [ 456.481944][ T5839] tipc: Node number set to 0 [ 456.482028][ T5839] tipc: Failed to bind to 0,0,0 [ 456.607388][ T30] audit: type=1400 audit(2000000360.840:1454): avc: denied { create } for pid=20217 comm="syz.0.6381" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 456.628259][ T30] audit: type=1400 audit(2000000360.860:1455): avc: denied { mounton } for pid=20217 comm="syz.0.6381" path="/220/file0" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 456.634064][ T9] tipc: Node number set to 0 [ 456.634151][ T9] tipc: Failed to bind to 0,0,0 [ 456.771980][ T5839] tipc: Node number set to 0 [ 456.772060][ T5839] tipc: Failed to bind to 0,0,0 [ 456.934494][ T5839] tipc: Node number set to 0 [ 456.934580][ T5839] tipc: Failed to bind to 0,0,0 [ 457.052027][ T5715] tipc: Node number set to 0 [ 457.052116][ T5715] tipc: Failed to bind to 0,0,0 [ 457.191985][ T5715] tipc: Node number set to 0 [ 457.192072][ T5715] tipc: Failed to bind to 0,0,0 [ 457.287018][T20249] zero sized request [ 457.332003][ T5715] tipc: Node number set to 0 [ 457.332090][ T5715] tipc: Failed to bind to 0,0,0 [ 457.473943][ T5715] tipc: Node number set to 0 [ 457.474031][ T5715] tipc: Failed to bind to 0,0,0 [ 457.498974][T20257] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 457.499520][T20257] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 457.544529][T20257] CIFS: VFS: Error connecting to socket. Aborting operation. [ 457.544779][T20257] CIFS: VFS: cifs_mount failed w/return code = -111 [ 457.624673][T20259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.649037][ T5715] tipc: Node number set to 0 [ 457.649120][ T5715] tipc: Failed to bind to 0,0,0 [ 457.649312][T20265] : renamed from vlan0 (while UP) [ 457.763500][ T5715] tipc: Node number set to 0 [ 457.763586][ T5715] tipc: Failed to bind to 0,0,0 [ 457.892071][ T5715] tipc: Node number set to 0 [ 457.892152][ T5715] tipc: Failed to bind to 0,0,0 [ 458.032946][ T5715] tipc: Node number set to 0 [ 458.033034][ T5715] tipc: Failed to bind to 0,0,0 [ 458.171939][ T5715] tipc: Node number set to 0 [ 458.172027][ T5715] tipc: Failed to bind to 0,0,0 [ 458.312036][ T5715] tipc: Node number set to 0 [ 458.312124][ T5715] tipc: Failed to bind to 0,0,0 [ 458.344710][T17591] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 458.407461][T20302] bond1: ARP target 9.0.0.0 is already present [ 458.407490][T20302] bond1: option arp_ip_target: invalid value (9) [ 458.409470][T20302] bond1 (unregistering): Released all slaves [ 458.459833][ T9] tipc: Node number set to 0 [ 458.459917][ T9] tipc: Failed to bind to 0,0,0 [ 458.494990][T17591] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 458.496097][T17591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 458.496127][T17591] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 458.496168][T17591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.509382][T17591] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 458.536720][T17591] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 458.592533][ T5715] tipc: Node number set to 0 [ 458.592619][ T5715] tipc: Failed to bind to 0,0,0 [ 458.731955][ T5715] tipc: Node number set to 0 [ 458.732039][ T5715] tipc: Failed to bind to 0,0,0 [ 458.872114][ T5715] tipc: Node number set to 0 [ 458.872443][ T5715] tipc: Failed to bind to 0,0,0 [ 458.898338][ T5701] usb 2-1: USB disconnect, device number 49 [ 458.916887][ T5701] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 458.917499][ T5701] spcp8x5 2-1:1.0: device disconnected [ 459.011965][ T5715] tipc: Node number set to 0 [ 459.012069][ T5715] tipc: Failed to bind to 0,0,0 [ 459.151983][ T5715] tipc: Node number set to 0 [ 459.152085][ T5715] tipc: Failed to bind to 0,0,0 [ 459.291923][ T5715] tipc: Node number set to 0 [ 459.292020][ T5715] tipc: Failed to bind to 0,0,0 [ 459.432860][ T5715] tipc: Node number set to 0 [ 459.432948][ T5715] tipc: Failed to bind to 0,0,0 [ 459.572040][ T5715] tipc: Node number set to 0 [ 459.572120][ T5715] tipc: Failed to bind to 0,0,0 [ 459.681365][T20348] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input92 [ 459.713220][ T5715] tipc: Node number set to 0 [ 459.713528][ T5715] tipc: Failed to bind to 0,0,0 [ 459.727361][T20352] bonding: bond0 is being created... [ 459.804086][T20352] bonding: bond0 already exists [ 459.851948][ T5715] tipc: Node number set to 0 [ 459.852034][ T5715] tipc: Failed to bind to 0,0,0 [ 459.993754][ T5715] tipc: Node number set to 0 [ 459.995154][ T5715] tipc: Failed to bind to 0,0,0 [ 460.034826][T20358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 460.034895][T20358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.132009][ T5715] tipc: Node number set to 0 [ 460.132094][ T5715] tipc: Failed to bind to 0,0,0 [ 460.208600][T20371] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 460.272578][ T5715] tipc: Node number set to 0 [ 460.281193][ T5715] tipc: Failed to bind to 0,0,0 [ 460.411957][ T5715] tipc: Node number set to 0 [ 460.412039][ T5715] tipc: Failed to bind to 0,0,0 [ 460.552270][ T5715] tipc: Node number set to 0 [ 460.553389][ T5715] tipc: Failed to bind to 0,0,0 [ 460.692027][ T5715] tipc: Node number set to 0 [ 460.692115][ T5715] tipc: Failed to bind to 0,0,0 [ 460.833461][ T5715] tipc: Node number set to 0 [ 460.833552][ T5715] tipc: Failed to bind to 0,0,0 [ 460.975038][ T5715] tipc: Node number set to 0 [ 460.975148][ T5715] tipc: Failed to bind to 0,0,0 [ 461.002787][T20402] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6465'. [ 461.113384][ T5715] tipc: Node number set to 0 [ 461.113472][ T5715] tipc: Failed to bind to 0,0,0 [ 461.238589][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.238734][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.238873][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.239002][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.239130][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.239247][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.239374][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.239492][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.239609][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.239721][T20408] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 461.252865][ T5839] tipc: Node number set to 0 [ 461.252953][ T5839] tipc: Failed to bind to 0,0,0 [ 461.392886][ T5839] tipc: Node number set to 0 [ 461.392974][ T5839] tipc: Failed to bind to 0,0,0 [ 461.531970][ T5839] tipc: Node number set to 0 [ 461.532060][ T5839] tipc: Failed to bind to 0,0,0 [ 461.656080][T20426] ima: policy update failed [ 461.656264][ T30] audit: type=1802 audit(2000000365.890:1456): pid=20426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.6477" res=0 errno=0 [ 461.687156][ T5839] tipc: Node number set to 0 [ 461.687240][ T5839] tipc: Failed to bind to 0,0,0 [ 461.821973][ T5839] tipc: Node number set to 0 [ 461.822056][ T5839] tipc: Failed to bind to 0,0,0 [ 461.921212][T20435] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 461.921263][T20435] SELinux: failed to load policy [ 461.962112][ T5715] tipc: Node number set to 0 [ 461.962194][ T5715] tipc: Failed to bind to 0,0,0 [ 462.101926][ T5839] tipc: Node number set to 0 [ 462.102006][ T5839] tipc: Failed to bind to 0,0,0 [ 462.233594][T17591] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 462.249251][ T5839] tipc: Node number set to 0 [ 462.249646][ T5839] tipc: Failed to bind to 0,0,0 [ 462.358190][T20467] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6494'. [ 462.381979][ T5839] tipc: Node number set to 0 [ 462.382067][ T5839] tipc: Failed to bind to 0,0,0 [ 462.383222][T17591] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 462.386395][T17591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 462.386425][T17591] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 462.388194][T17591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 462.388220][T17591] usb 2-1: Product: syz [ 462.388237][T17591] usb 2-1: Manufacturer: syz [ 462.403493][T17591] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 462.420961][T17591] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 462.521955][ T5839] tipc: Node number set to 0 [ 462.522037][ T5839] tipc: Failed to bind to 0,0,0 [ 462.661936][ T5839] tipc: Node number set to 0 [ 462.662024][ T5839] tipc: Failed to bind to 0,0,0 [ 462.801989][ T5839] tipc: Node number set to 0 [ 462.802072][ T5839] tipc: Failed to bind to 0,0,0 [ 462.947610][T20482] SELinux: ebitmap: truncated map [ 462.947741][T20482] SELinux: invalid class [ 462.951918][ T5839] tipc: Node number set to 0 [ 462.951997][ T5839] tipc: Failed to bind to 0,0,0 [ 462.970962][T20482] SELinux: failed to load policy [ 463.082385][ T5715] tipc: Node number set to 0 [ 463.082532][ T5715] tipc: Failed to bind to 0,0,0 [ 463.173029][ T30] audit: type=1807 audit(2000000367.410:1457): action=appraise UNKNOWN=f res=0 [ 463.173072][ T30] audit: type=1802 audit(2000000367.410:1458): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.6509" res=0 errno=0 [ 463.176827][T20495] ima: policy update failed [ 463.177234][ T30] audit: type=1802 audit(2000000367.410:1459): pid=20495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.6509" res=0 errno=0 [ 463.233410][ T5715] tipc: Node number set to 0 [ 463.235280][ T5715] tipc: Failed to bind to 0,0,0 [ 463.372175][ T5839] tipc: Node number set to 0 [ 463.372316][ T5839] tipc: Failed to bind to 0,0,0 [ 463.464248][ T30] audit: type=1400 audit(2000000367.700:1460): avc: denied { watch watch_reads } for pid=20508 comm="syz.3.6515" path="/proc/2847" dev="proc" ino=77363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 463.512166][ T5839] tipc: Node number set to 0 [ 463.512254][ T5839] tipc: Failed to bind to 0,0,0 [ 463.554757][ T5839] kernel read not supported for file /radio0 (pid: 5839 comm: kworker/0:6) [ 463.661986][ T5839] tipc: Node number set to 0 [ 463.662110][ T5839] tipc: Failed to bind to 0,0,0 [ 463.676354][T20446] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 463.678216][ T5694] usb 2-1: USB disconnect, device number 50 [ 463.702555][ T5694] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 463.712508][ T5694] iuu_phoenix 2-1:1.0: device disconnected [ 463.801976][ T5839] tipc: Node number set to 0 [ 463.802062][ T5839] tipc: Failed to bind to 0,0,0 [ 463.941927][ T5839] tipc: Node number set to 0 [ 463.942015][ T5839] tipc: Failed to bind to 0,0,0 [ 464.073637][T19816] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.092204][ T5839] tipc: Node number set to 0 [ 464.092292][ T5839] tipc: Failed to bind to 0,0,0 [ 464.221933][ T5839] tipc: Node number set to 0 [ 464.222025][ T5839] tipc: Failed to bind to 0,0,0 [ 464.362258][ T5715] tipc: Node number set to 0 [ 464.362345][ T5715] tipc: Failed to bind to 0,0,0 [ 464.474696][T20525] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 464.512007][ T5715] tipc: Node number set to 0 [ 464.512094][ T5715] tipc: Failed to bind to 0,0,0 [ 464.535534][T20525] CIFS: VFS: Error connecting to socket. Aborting operation. [ 464.535581][T20525] CIFS: VFS: cifs_mount failed w/return code = -111 [ 464.651992][ T5715] tipc: Node number set to 0 [ 464.652081][ T5715] tipc: Failed to bind to 0,0,0 [ 464.716497][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.793216][ T5839] tipc: Node number set to 0 [ 464.793302][ T5839] tipc: Failed to bind to 0,0,0 [ 464.932238][ T5839] tipc: Node number set to 0 [ 464.932383][ T5839] tipc: Failed to bind to 0,0,0 [ 464.991948][ T5715] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 465.071948][ T9] tipc: Node number set to 0 [ 465.072032][ T9] tipc: Failed to bind to 0,0,0 [ 465.097078][T20546] Bluetooth: hci0: load_link_keys: too big key_count value 10756 [ 465.152809][ T5715] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 465.154600][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.158054][ T5715] usb 2-1: config 0 descriptor?? [ 465.166709][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6534'. [ 465.166736][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6534'. [ 465.211994][ T9] tipc: Node number set to 0 [ 465.212094][ T9] tipc: Failed to bind to 0,0,0 [ 465.352877][ T9] tipc: Node number set to 0 [ 465.353325][ T9] tipc: Failed to bind to 0,0,0 [ 465.402655][ T5715] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 465.492204][ T9] tipc: Node number set to 0 [ 465.492294][ T9] tipc: Failed to bind to 0,0,0 [ 465.614625][T20571] netlink: 3560 bytes leftover after parsing attributes in process `syz.3.6543'. [ 465.644096][ T9] tipc: Node number set to 0 [ 465.644182][ T9] tipc: Failed to bind to 0,0,0 [ 465.644836][T20571] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.6543'. [ 465.674909][ T5715] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 465.674938][ T5715] [drm] Initialized udl on minor 1 [ 465.771978][ T9] tipc: Node number set to 0 [ 465.772077][ T9] tipc: Failed to bind to 0,0,0 [ 465.807807][ T5715] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 465.808249][ T5715] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 465.912065][ T9] tipc: Node number set to 0 [ 465.912164][ T9] tipc: Failed to bind to 0,0,0 [ 466.034842][ T9] usb 2-1: USB disconnect, device number 51 [ 466.043291][ T5715] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 466.065712][ T5839] tipc: Node number set to 0 [ 466.065800][ T5839] tipc: Failed to bind to 0,0,0 [ 466.192135][ T5715] tipc: Node number set to 0 [ 466.192271][ T5715] tipc: Failed to bind to 0,0,0 [ 466.331925][ T5715] tipc: Node number set to 0 [ 466.332009][ T5715] tipc: Failed to bind to 0,0,0 [ 466.472407][ T9] tipc: Node number set to 0 [ 466.473338][ T9] tipc: Failed to bind to 0,0,0 [ 466.611940][ T9] tipc: Node number set to 0 [ 466.612026][ T9] tipc: Failed to bind to 0,0,0 [ 466.751942][ T9] tipc: Node number set to 0 [ 466.752030][ T9] tipc: Failed to bind to 0,0,0 [ 466.893238][ T9] tipc: Node number set to 0 [ 466.893321][ T9] tipc: Failed to bind to 0,0,0 [ 467.032113][ T9] tipc: Node number set to 0 [ 467.032380][ T9] tipc: Failed to bind to 0,0,0 [ 467.078977][T20617] SELinux: ebitmap: truncated map [ 467.079110][T20617] SELinux: invalid class [ 467.091494][T20620] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.6563'. [ 467.091527][T20620] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.6563'. [ 467.112748][T20617] SELinux: failed to load policy [ 467.171969][ T9] tipc: Node number set to 0 [ 467.172052][ T9] tipc: Failed to bind to 0,0,0 [ 467.289362][T20628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6565'. [ 467.289401][T20628] netlink: 'syz.5.6565': attribute type 10 has an invalid length. [ 467.289418][T20628] netlink: 'syz.5.6565': attribute type 5 has an invalid length. [ 467.289433][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6565'. [ 467.341109][T20628] geneve2: entered promiscuous mode [ 467.341134][T20628] geneve2: entered allmulticast mode [ 467.352983][ T9] tipc: Node number set to 0 [ 467.353067][ T9] tipc: Failed to bind to 0,0,0 [ 467.362085][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 44775 - 0 [ 467.363646][ T1045] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 44775 - 0 [ 467.363817][ T1045] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 44775 - 0 [ 467.364410][ T1045] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 44775 - 0 [ 467.451920][ T9] tipc: Node number set to 0 [ 467.452010][ T9] tipc: Failed to bind to 0,0,0 [ 467.592084][ T9] tipc: Node number set to 0 [ 467.592172][ T9] tipc: Failed to bind to 0,0,0 [ 467.731917][ T9] tipc: Node number set to 0 [ 467.732004][ T9] tipc: Failed to bind to 0,0,0 [ 467.823507][T17591] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 467.881923][ T9] tipc: Node number set to 0 [ 467.882005][ T9] tipc: Failed to bind to 0,0,0 [ 467.972020][T17591] usb 6-1: Using ep0 maxpacket: 32 [ 467.972730][T17591] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 467.980852][T17591] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 467.993269][T17591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.993297][T17591] usb 6-1: Product: syz [ 467.993314][T17591] usb 6-1: Manufacturer: syz [ 467.993330][T17591] usb 6-1: SerialNumber: syz [ 468.004491][T17591] usb 6-1: config 0 descriptor?? [ 468.023533][ T9] tipc: Node number set to 0 [ 468.023618][ T9] tipc: Failed to bind to 0,0,0 [ 468.025397][T17591] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 468.025450][T17591] dvb-usb: bulk message failed: -22 (2/0) [ 468.040324][T17591] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 468.046958][T17591] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 468.047009][T17591] usb 6-1: media controller created [ 468.090856][T20649] SELinux: ebitmap: truncated map [ 468.090991][T20649] SELinux: invalid class [ 468.096868][T17591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.127023][T20649] SELinux: failed to load policy [ 468.161946][ T5715] tipc: Node number set to 0 [ 468.162032][ T5715] tipc: Failed to bind to 0,0,0 [ 468.170673][T17591] usb 6-1: selecting invalid altsetting 7 [ 468.170701][T17591] cxusb: set interface failed [ 468.170713][T17591] dvb-usb: bulk message failed: -22 (1/0) [ 468.265034][T20639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.269713][T20639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.301943][ T5715] tipc: Node number set to 0 [ 468.302025][ T5715] tipc: Failed to bind to 0,0,0 [ 468.326580][T17591] DVB: Unable to find symbol lgdt330x_attach() [ 468.326597][T17591] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 468.406580][T20658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6582'. [ 468.411977][T17591] rc_core: IR keymap rc-dvico-portable not found [ 468.411994][T17591] Registered IR keymap rc-empty [ 468.413006][T17591] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 468.419412][T17591] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input93 [ 468.452077][ T5715] tipc: Node number set to 0 [ 468.452164][ T5715] tipc: Failed to bind to 0,0,0 [ 468.561793][T20660] bonding: no command found in bonding_masters - use +ifname or -ifname [ 468.591988][ T9] tipc: Node number set to 0 [ 468.592080][ T9] tipc: Failed to bind to 0,0,0 [ 468.650218][T17591] dvb-usb: schedule remote query interval to 100 msecs. [ 468.650245][T17591] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 468.671423][T17591] usb 6-1: USB disconnect, device number 16 [ 468.731955][ T9] tipc: Node number set to 0 [ 468.732042][ T9] tipc: Failed to bind to 0,0,0 [ 468.770212][T20667] netlink: 'syz.3.6583': attribute type 8 has an invalid length. [ 468.873039][ T9] tipc: Node number set to 0 [ 468.875069][ T9] tipc: Failed to bind to 0,0,0 [ 468.876601][T17591] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 469.012223][ T9] tipc: Node number set to 0 [ 469.012307][ T9] tipc: Failed to bind to 0,0,0 [ 469.151936][ T9] tipc: Node number set to 0 [ 469.152021][ T9] tipc: Failed to bind to 0,0,0 [ 469.291943][ T5715] tipc: Node number set to 0 [ 469.292032][ T5715] tipc: Failed to bind to 0,0,0 [ 469.431959][ T9] tipc: Node number set to 0 [ 469.432071][ T9] tipc: Failed to bind to 0,0,0 [ 469.573925][ T5715] tipc: Node number set to 0 [ 469.574015][ T5715] tipc: Failed to bind to 0,0,0 [ 469.711957][ T5715] tipc: Node number set to 0 [ 469.712045][ T5715] tipc: Failed to bind to 0,0,0 [ 469.853273][ T9] tipc: Node number set to 0 [ 469.853365][ T9] tipc: Failed to bind to 0,0,0 [ 469.992617][ T5715] tipc: Node number set to 0 [ 469.992771][ T5715] tipc: Failed to bind to 0,0,0 [ 469.997562][T20728] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.137031][ T5715] tipc: Node number set to 0 [ 470.137113][ T5715] tipc: Failed to bind to 0,0,0 [ 470.263386][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 470.279611][ T5715] tipc: Node number set to 0 [ 470.279694][ T5715] tipc: Failed to bind to 0,0,0 [ 470.412452][ T5839] tipc: Node number set to 0 [ 470.412543][ T5839] tipc: Failed to bind to 0,0,0 [ 470.412596][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 470.413295][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 470.425010][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.425044][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.425068][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.425109][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.484928][ T9] usb 1-1: config 0 descriptor?? [ 470.552034][ T5715] tipc: Node number set to 0 [ 470.552120][ T5715] tipc: Failed to bind to 0,0,0 [ 470.655430][T20746] Falling back ldisc for ttyS3. [ 470.692028][ T5715] tipc: Node number set to 0 [ 470.692111][ T5715] tipc: Failed to bind to 0,0,0 [ 470.703317][T20748] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6622'. [ 470.834417][ T5715] tipc: Node number set to 0 [ 470.834518][ T5715] tipc: Failed to bind to 0,0,0 [ 470.899941][T20760] net_ratelimit: 44 callbacks suppressed [ 470.899965][T20760] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.900036][T20760] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 470.964410][ T9] microsoft 0003:045E:07DA.004E: ignoring exceeding usage max [ 470.969297][ T9] microsoft 0003:045E:07DA.004E: unsupported Resolution Multiplier 0 [ 470.989319][ T5715] tipc: Node number set to 0 [ 470.989414][ T5715] tipc: Failed to bind to 0,0,0 [ 471.112071][ T5715] tipc: Node number set to 0 [ 471.112174][ T5715] tipc: Failed to bind to 0,0,0 [ 471.163520][ T9] microsoft 0003:045E:07DA.004E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 471.171215][ T9] usb 1-1: USB disconnect, device number 51 [ 471.252175][ T5715] tipc: Node number set to 0 [ 471.252365][ T5715] tipc: Failed to bind to 0,0,0 [ 471.389325][T20780] fido_id[20780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 471.407804][ T9] tipc: Node number set to 0 [ 471.408420][ T9] tipc: Failed to bind to 0,0,0 [ 471.531946][ T5839] tipc: Node number set to 0 [ 471.532029][ T5839] tipc: Failed to bind to 0,0,0 [ 471.624365][T20801] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 471.682001][ T5839] tipc: Node number set to 0 [ 471.682092][ T5839] tipc: Failed to bind to 0,0,0 [ 471.709224][T19816] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 471.819653][T20801] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 471.833714][ T9] tipc: Node number set to 0 [ 471.833794][ T9] tipc: Failed to bind to 0,0,0 [ 471.973050][ T5839] tipc: Node number set to 0 [ 471.973134][ T5839] tipc: Failed to bind to 0,0,0 [ 472.102046][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6651'. [ 472.120865][ T5839] tipc: Node number set to 0 [ 472.120955][ T5839] tipc: Failed to bind to 0,0,0 [ 472.251944][ T9] tipc: Node number set to 0 [ 472.252028][ T9] tipc: Failed to bind to 0,0,0 [ 472.394998][ T9] tipc: Node number set to 0 [ 472.395086][ T9] tipc: Failed to bind to 0,0,0 [ 472.412145][ T5839] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 472.531927][ T5715] tipc: Node number set to 0 [ 472.532013][ T5715] tipc: Failed to bind to 0,0,0 [ 472.572750][ T5839] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 472.573761][ T5839] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 472.577490][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.577517][ T5839] usb 5-1: Product: syz [ 472.577534][ T5839] usb 5-1: Manufacturer: syz [ 472.577551][ T5839] usb 5-1: SerialNumber: syz [ 472.673254][ T9] tipc: Node number set to 0 [ 472.674153][ T9] tipc: Failed to bind to 0,0,0 [ 472.812296][ T9] tipc: Node number set to 0 [ 472.812378][ T9] tipc: Failed to bind to 0,0,0 [ 472.897325][ T5839] rtl8150 5-1:1.0: couldn't reset the device [ 472.897608][ T5839] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 472.927946][ T5839] usb 5-1: USB disconnect, device number 50 [ 472.952037][ T9] tipc: Node number set to 0 [ 472.952124][ T9] tipc: Failed to bind to 0,0,0 [ 472.960695][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6672'. [ 473.104254][ T5715] tipc: Node number set to 0 [ 473.104342][ T5715] tipc: Failed to bind to 0,0,0 [ 473.194132][T20875] jffs2: notice: (20875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 473.232783][ T5715] tipc: Node number set to 0 [ 473.232868][ T5715] tipc: Failed to bind to 0,0,0 [ 473.239000][ T30] audit: type=1400 audit(2000000377.470:1461): avc: denied { write } for pid=20874 comm="syz.1.6682" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.372074][ T5839] tipc: Node number set to 0 [ 473.372163][ T5839] tipc: Failed to bind to 0,0,0 [ 473.512141][ T5839] tipc: Node number set to 0 [ 473.512262][ T5839] tipc: Failed to bind to 0,0,0 [ 473.666198][ T5839] tipc: Node number set to 0 [ 473.666264][ T5839] tipc: Failed to bind to 0,0,0 [ 473.802880][ T5839] tipc: Node number set to 0 [ 473.802941][ T5839] tipc: Failed to bind to 0,0,0 [ 473.941940][ T5839] tipc: Node number set to 0 [ 473.942026][ T5839] tipc: Failed to bind to 0,0,0 [ 474.081951][ T5839] tipc: Node number set to 0 [ 474.082034][ T5839] tipc: Failed to bind to 0,0,0 [ 474.221966][ T5839] tipc: Node number set to 0 [ 474.222053][ T5839] tipc: Failed to bind to 0,0,0 [ 474.361913][ T5839] tipc: Node number set to 0 [ 474.361993][ T5839] tipc: Failed to bind to 0,0,0 [ 474.487896][T20927] sd 0:0:1:0: PR command failed: 1026 [ 474.487961][T20927] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 474.488006][T20927] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 474.504898][ T5715] tipc: Node number set to 0 [ 474.504986][ T5715] tipc: Failed to bind to 0,0,0 [ 474.642732][ T5715] tipc: Node number set to 0 [ 474.642820][ T5715] tipc: Failed to bind to 0,0,0 [ 474.782018][ T5715] tipc: Node number set to 0 [ 474.782109][ T5715] tipc: Failed to bind to 0,0,0 [ 474.881965][T20945] input: syz0 as /devices/virtual/input/input95 [ 474.920750][ T7009] udevd[7009]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 474.920845][ T7009] udevd[7009]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 474.932474][ T5715] tipc: Node number set to 0 [ 474.932562][ T5715] tipc: Failed to bind to 0,0,0 [ 475.048652][T20952] vxcan0: tx address claim with dest, not broadcast [ 475.061949][ T5715] tipc: Node number set to 0 [ 475.062047][ T5715] tipc: Failed to bind to 0,0,0 [ 475.213149][ T5715] tipc: Node number set to 0 [ 475.216324][ T5715] tipc: Failed to bind to 0,0,0 [ 475.238419][T20970] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 475.305230][T20973] batman_adv: batadv0: Adding interface: macvtap1 [ 475.305258][T20973] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.305286][T20973] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 475.356558][ T5839] tipc: Node number set to 0 [ 475.356638][ T5839] tipc: Failed to bind to 0,0,0 [ 475.372420][ T5701] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 475.471924][ T5715] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 475.492045][ T9] tipc: Node number set to 0 [ 475.492132][ T9] tipc: Failed to bind to 0,0,0 [ 475.523054][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 475.528538][ T5701] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 475.529658][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.529682][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 475.529723][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 475.529755][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 475.529818][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.538721][ T5701] hub 5-1:1.0: bad descriptor, ignoring hub [ 475.538748][ T5701] hub 5-1:1.0: probe with driver hub failed with error -5 [ 475.539251][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 475.539267][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 475.540819][ T5701] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 475.540839][ T5701] cdc_wdm 5-1:1.0: Unknown control protocol [ 475.632758][ T9] tipc: Node number set to 0 [ 475.632997][ T9] tipc: Failed to bind to 0,0,0 [ 475.673582][T20986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6733'. [ 475.691679][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 475.699445][ T5715] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 475.714169][ T5715] usb 6-1: config 32 has an invalid interface number: 85 but max is 0 [ 475.714199][ T5715] usb 6-1: config 32 has no interface number 0 [ 475.714239][ T5715] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.714268][ T5715] usb 6-1: config 32 interface 85 has no altsetting 0 [ 475.718275][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.718302][ T5715] usb 6-1: Product: syz [ 475.718319][ T5715] usb 6-1: Manufacturer: syz [ 475.718336][ T5715] usb 6-1: SerialNumber: syz [ 475.775356][ T9] tipc: Node number set to 0 [ 475.775443][ T9] tipc: Failed to bind to 0,0,0 [ 475.912385][ T5839] tipc: Node number set to 0 [ 475.912509][ T5839] tipc: Failed to bind to 0,0,0 [ 476.019254][T20998] loop4: detected capacity change from 0 to 7 [ 476.028650][ C1] blk_print_req_error: 11 callbacks suppressed [ 476.028688][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.028774][ C1] buffer_io_error: 28 callbacks suppressed [ 476.028811][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.040025][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.040107][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.041098][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.041182][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.041368][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.041430][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.041606][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.041666][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.041804][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.041927][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.044589][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.044663][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.044721][T20998] ldm_validate_partition_table(): Disk read failed. [ 476.044838][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.044906][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.045005][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.045066][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.045154][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.045213][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.045362][T20998] Dev loop4: unable to read RDB block 0 [ 476.045974][T20998] loop4: unable to read partition table [ 476.046151][T20998] loop4: partition table beyond EOD, truncated [ 476.047736][T20998] loop_reread_partitions: partition scan of loop4 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 476.055831][ T5839] tipc: Node number set to 0 [ 476.055904][ T5839] tipc: Failed to bind to 0,0,0 [ 476.066718][ T5701] usb 5-1: USB disconnect, device number 51 [ 476.194623][ T5839] tipc: Node number set to 0 [ 476.194717][ T5839] tipc: Failed to bind to 0,0,0 [ 476.332174][ T5839] tipc: Node number set to 0 [ 476.332277][ T5839] tipc: Failed to bind to 0,0,0 [ 476.472434][ T9] tipc: Node number set to 0 [ 476.473203][ T9] tipc: Failed to bind to 0,0,0 [ 476.487648][ T30] audit: type=1400 audit(2000000380.720:1462): avc: denied { ioctl } for pid=21007 comm="syz.3.6743" path="socket:[80744]" dev="sockfs" ino=80744 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 476.555464][ T5715] appletouch 6-1:32.85: Geyser mode initialized. [ 476.558945][ T5715] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.85/input/input96 [ 476.560887][ C1] appletouch 6-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 476.612234][ T5715] tipc: Node number set to 0 [ 476.612330][ T5715] tipc: Failed to bind to 0,0,0 [ 476.751955][ T5715] tipc: Node number set to 0 [ 476.752042][ T5715] tipc: Failed to bind to 0,0,0 [ 476.788669][ T5715] usb 6-1: USB disconnect, device number 17 [ 476.826635][ T5715] appletouch 6-1:32.85: input: appletouch disconnected [ 476.893844][ T5839] tipc: Node number set to 0 [ 476.894456][ T5839] tipc: Failed to bind to 0,0,0 [ 477.004010][T17591] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 477.031980][ T5715] tipc: Node number set to 0 [ 477.032065][ T5715] tipc: Failed to bind to 0,0,0 [ 477.081014][T21030] jffs2: notice: (21030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 477.089457][ T30] audit: type=1400 audit(2000000381.320:1463): avc: denied { write } for pid=21028 comm="syz.3.6752" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 477.153662][T17591] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 477.154620][T17591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.160174][T17591] usb 5-1: config 0 descriptor?? [ 477.189055][ T5715] tipc: Node number set to 0 [ 477.189142][ T5715] tipc: Failed to bind to 0,0,0 [ 477.212028][ T5701] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 477.274313][ T5603] Bluetooth: hci2: unexpected event 0x0e length: 1 < 3 [ 477.312013][ T5715] tipc: Node number set to 0 [ 477.312099][ T5715] tipc: Failed to bind to 0,0,0 [ 477.363243][ T5701] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 477.364434][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 477.364463][ T5701] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 477.367858][ T5701] usb 2-1: string descriptor 0 read error: -22 [ 477.367993][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.369747][T17591] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 477.382935][ T5701] etas_es58x 2-1:1.0: Starting (null) (null) (Serial Number (null)) [ 477.383176][ T5701] etas_es58x 2-1:1.0: could not retrieve the product info string [ 477.484597][ T5715] tipc: Node number set to 0 [ 477.484681][ T5715] tipc: Failed to bind to 0,0,0 [ 477.602615][ T9] tipc: Node number set to 0 [ 477.602963][ T9] tipc: Failed to bind to 0,0,0 [ 477.624371][T17591] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 477.624406][T17591] [drm] Initialized udl on minor 1 [ 477.661058][T21024] etas_es58x 2-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 477.661908][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 477.678913][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 477.679165][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 477.679395][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 477.679623][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 477.679724][T21024] etas_es58x 2-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 477.704876][ T5701] usb 2-1: USB disconnect, device number 52 [ 477.715161][ T5701] etas_es58x 2-1:1.0: Disconnecting (null) (null) [ 477.723579][ T5839] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 477.766914][ T9] tipc: Node number set to 0 [ 477.767000][ T9] tipc: Failed to bind to 0,0,0 [ 477.782976][T17591] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 477.783188][T17591] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 477.882941][ T9] tipc: Node number set to 0 [ 477.883027][ T9] tipc: Failed to bind to 0,0,0 [ 477.890822][T21055] ip6gretap1: entered allmulticast mode [ 477.892135][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 477.897352][ T5839] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.908806][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 477.908856][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.948285][ T5839] usb 6-1: config 0 descriptor?? [ 477.948810][T21055] batman_adv: batadv0: Adding interface: ip6gretap1 [ 477.948826][T21055] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.948861][T21055] batman_adv: batadv0: Interface activated: ip6gretap1 [ 478.022110][ T9] tipc: Node number set to 0 [ 478.022234][ T9] tipc: Failed to bind to 0,0,0 [ 478.045989][ T5694] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 478.117073][ T5701] usb 5-1: USB disconnect, device number 52 [ 478.154455][ T5694] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 478.169065][ T9] tipc: Node number set to 0 [ 478.169179][ T9] tipc: Failed to bind to 0,0,0 [ 478.178238][ T5694] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 478.201998][ T5839] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 478.312192][ T5839] tipc: Node number set to 0 [ 478.312279][ T5839] tipc: Failed to bind to 0,0,0 [ 478.356482][T21065] jffs2: notice: (21065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 478.378526][ T30] audit: type=1400 audit(2000000382.610:1464): avc: denied { write } for pid=21064 comm="syz.0.6765" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.414173][ T5694] usb 6-1: USB disconnect, device number 18 [ 478.452318][ T5839] tipc: Node number set to 0 [ 478.455281][ T5839] tipc: Failed to bind to 0,0,0 [ 478.500756][ T30] audit: type=1400 audit(2000000382.730:1465): avc: denied { write } for pid=21051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.592786][ T5839] tipc: Node number set to 0 [ 478.592877][ T5839] tipc: Failed to bind to 0,0,0 [ 478.700450][ T30] audit: type=1400 audit(2000000382.920:1466): avc: denied { write } for pid=21077 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.731923][ T9] tipc: Node number set to 0 [ 478.732009][ T9] tipc: Failed to bind to 0,0,0 [ 478.873199][ T9] tipc: Node number set to 0 [ 478.873296][ T9] tipc: Failed to bind to 0,0,0 [ 478.915108][ T5839] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 479.012035][ T5715] tipc: Node number set to 0 [ 479.012554][ T5715] tipc: Failed to bind to 0,0,0 [ 479.109301][ T5839] usb 2-1: not running at top speed; connect to a high speed hub [ 479.109338][ T5839] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 479.133721][ T5839] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 479.133757][ T5839] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 479.156298][ T5715] tipc: Node number set to 0 [ 479.156382][ T5715] tipc: Failed to bind to 0,0,0 [ 479.180476][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.180507][ T5839] usb 2-1: Product: syz [ 479.180525][ T5839] usb 2-1: Manufacturer: syz [ 479.180542][ T5839] usb 2-1: SerialNumber: syz [ 479.200508][T21081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 479.213680][ T5839] oti6858 2-1:1.0: oti6858 converter detected [ 479.219082][ T5839] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 479.296728][ T5839] tipc: Node number set to 0 [ 479.296811][ T5839] tipc: Failed to bind to 0,0,0 [ 479.439403][ T5839] tipc: Node number set to 0 [ 479.446819][ T5839] tipc: Failed to bind to 0,0,0 [ 479.574399][ T5839] tipc: Node number set to 0 [ 479.574482][ T5839] tipc: Failed to bind to 0,0,0 [ 479.629137][ T30] audit: type=1400 audit(2000000383.860:1467): avc: denied { write } for pid=21089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.711994][ T5839] tipc: Node number set to 0 [ 479.712082][ T5839] tipc: Failed to bind to 0,0,0 [ 479.749127][ T24] usb 2-1: USB disconnect, device number 53 [ 479.780591][ T24] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 479.781252][ T24] oti6858 2-1:1.0: device disconnected [ 479.804680][ T30] audit: type=1400 audit(2000000384.040:1468): avc: denied { setopt } for pid=21116 comm="syz.0.6781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 479.851932][ T5839] tipc: Node number set to 0 [ 479.852011][ T5839] tipc: Failed to bind to 0,0,0 [ 479.992053][ T5839] tipc: Node number set to 0 [ 479.992144][ T5839] tipc: Failed to bind to 0,0,0 [ 480.028091][ T30] audit: type=1400 audit(2000000384.260:1469): avc: denied { write } for pid=21121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.132265][ T5839] tipc: Node number set to 0 [ 480.132342][ T5839] tipc: Failed to bind to 0,0,0 [ 480.271959][ T5839] tipc: Node number set to 0 [ 480.272045][ T5839] tipc: Failed to bind to 0,0,0 [ 480.389494][ T30] audit: type=1400 audit(2000000384.620:1470): avc: denied { getopt } for pid=21141 comm="syz.5.6791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 480.413092][ T5839] tipc: Node number set to 0 [ 480.413181][ T5839] tipc: Failed to bind to 0,0,0 [ 480.553253][ T5839] tipc: Node number set to 0 [ 480.554285][ T5839] tipc: Failed to bind to 0,0,0 [ 480.695392][ T5839] tipc: Node number set to 0 [ 480.695497][ T5839] tipc: Failed to bind to 0,0,0 [ 480.810428][ T30] audit: type=1400 audit(2000000385.040:1471): avc: denied { ioctl } for pid=21158 comm="syz.5.6800" path="socket:[82052]" dev="sockfs" ino=82052 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 480.838422][ T5839] tipc: Node number set to 0 [ 480.844809][ T5839] tipc: Failed to bind to 0,0,0 [ 480.973129][ T5839] tipc: Node number set to 0 [ 480.973218][ T5839] tipc: Failed to bind to 0,0,0 [ 481.112972][ T5839] tipc: Node number set to 0 [ 481.113059][ T5839] tipc: Failed to bind to 0,0,0 [ 481.252786][ T5839] tipc: Node number set to 0 [ 481.252961][ T5839] tipc: Failed to bind to 0,0,0 [ 481.341574][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.341650][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.363070][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.363938][T21190] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 481.363975][T21190] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 481.364025][T21190] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 481.406744][ T5839] tipc: Node number set to 0 [ 481.407169][ T5839] tipc: Failed to bind to 0,0,0 [ 481.419859][ T30] audit: type=1400 audit(2000000385.650:1472): avc: denied { mounton } for pid=21192 comm="syz.5.6815" path="/proc/983/ns/cgroup" dev="proc" ino=81102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 481.461720][T21190] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 481.478633][T21190] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 481.542105][ T5839] tipc: Node number set to 0 [ 481.542616][ T5839] tipc: Failed to bind to 0,0,0 [ 481.584321][ T5839] kernel read not supported for file /vga_arbiter (pid: 5839 comm: kworker/0:6) [ 481.620352][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.633332][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.635726][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.649847][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.656581][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.667343][T21190] wlan1 speed is unknown, defaulting to 1000 [ 481.682323][ T5715] tipc: Node number set to 0 [ 481.682700][ T5715] tipc: Failed to bind to 0,0,0 [ 481.697964][T21200] cpuidle: using governor menu [ 481.821946][ T5715] tipc: Node number set to 0 [ 481.822041][ T5715] tipc: Failed to bind to 0,0,0 [ 481.962322][ T5715] tipc: Node number set to 0 [ 481.962407][ T5715] tipc: Failed to bind to 0,0,0 [ 481.989160][T21220] loop9: detected capacity change from 0 to 7 [ 481.990558][ C0] blk_print_req_error: 11 callbacks suppressed [ 481.990580][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.990650][ C0] buffer_io_error: 11 callbacks suppressed [ 481.990664][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.990844][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.990909][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.991046][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.991107][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.991233][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.991295][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.991444][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.991509][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.991641][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.991699][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.991988][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.992058][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 482.107254][T21220] ldm_validate_partition_table(): Disk read failed. [ 482.107443][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.107517][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 482.107669][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.107730][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 482.107859][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.107919][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 482.108071][T21220] Dev loop9: unable to read RDB block 0 [ 482.108857][T21220] loop9: unable to read partition table [ 482.109023][T21220] loop9: partition table beyond EOD, truncated [ 482.109052][T21220] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 482.109191][ T5839] tipc: Node number set to 0 [ 482.109265][ T5839] tipc: Failed to bind to 0,0,0 [ 482.241950][ T5839] tipc: Node number set to 0 [ 482.242032][ T5839] tipc: Failed to bind to 0,0,0 [ 482.381935][ T5839] tipc: Node number set to 0 [ 482.382026][ T5839] tipc: Failed to bind to 0,0,0 [ 482.395537][ T30] audit: type=1400 audit(2000000386.630:1473): avc: denied { read } for pid=21230 comm="syz.4.6831" path="socket:[81226]" dev="sockfs" ino=81226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 482.538883][ T5839] tipc: Node number set to 0 [ 482.539007][ T5839] tipc: Failed to bind to 0,0,0 [ 482.661966][ T5839] tipc: Node number set to 0 [ 482.662054][ T5839] tipc: Failed to bind to 0,0,0 [ 482.816723][ T5839] tipc: Node number set to 0 [ 482.816811][ T5839] tipc: Failed to bind to 0,0,0 [ 482.951970][ T5839] tipc: Node number set to 0 [ 482.952053][ T5839] tipc: Failed to bind to 0,0,0 [ 483.092527][ T5715] tipc: Node number set to 0 [ 483.092762][ T5715] tipc: Failed to bind to 0,0,0 [ 483.233851][ T5715] tipc: Node number set to 0 [ 483.233940][ T5715] tipc: Failed to bind to 0,0,0 [ 483.291915][ T5839] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 483.372250][ T9] tipc: Node number set to 0 [ 483.372797][ T9] tipc: Failed to bind to 0,0,0 [ 483.454023][ T5839] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 483.455164][ T5839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 483.455204][ T5839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 483.458806][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.458833][ T5839] usb 5-1: Product: syz [ 483.458850][ T5839] usb 5-1: Manufacturer: syz [ 483.458865][ T5839] usb 5-1: SerialNumber: syz [ 483.482611][ T5839] usb 5-1: config 0 descriptor?? [ 483.493237][T21261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.493376][T21261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.507083][T21279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 483.512259][ T9] tipc: Node number set to 0 [ 483.512390][ T9] tipc: Failed to bind to 0,0,0 [ 483.568125][ T30] audit: type=1400 audit(2000000387.800:1474): avc: denied { mount } for pid=21281 comm="syz.1.6856" name="/" dev="hugetlbfs" ino=82277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 483.652209][ T5715] tipc: Node number set to 0 [ 483.652516][ T5715] tipc: Failed to bind to 0,0,0 [ 483.757874][T21261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.757986][T21261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.792236][ T5715] tipc: Node number set to 0 [ 483.792324][ T5715] tipc: Failed to bind to 0,0,0 [ 483.813960][T21294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6862'. [ 483.848399][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6863'. [ 483.932010][ T5715] tipc: Node number set to 0 [ 483.932128][ T5715] tipc: Failed to bind to 0,0,0 [ 484.072245][ T9] tipc: Node number set to 0 [ 484.072644][ T9] tipc: Failed to bind to 0,0,0 [ 484.166552][ T5839] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 484.211937][ T5715] tipc: Node number set to 0 [ 484.212042][ T5715] tipc: Failed to bind to 0,0,0 [ 484.351968][ T5715] tipc: Node number set to 0 [ 484.352084][ T5715] tipc: Failed to bind to 0,0,0 [ 484.373125][ T5839] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 484.388344][ T5839] usb 5-1: USB disconnect, device number 53 [ 484.480117][T18212] tipc: Resetting bearer [ 484.528885][T18212] tipc: Disabling bearer [ 484.584660][ T5701] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 484.733043][ T5701] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 484.736769][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.736838][ T5701] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 484.736867][ T5701] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 484.736892][ T5701] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 484.736917][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 484.736939][ T5701] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 484.736962][ T5701] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 484.741807][ T5701] usb 4-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 484.742235][ T5701] usb 4-1: Product: syz [ 484.742254][ T5701] usb 4-1: Manufacturer: syz [ 484.742271][ T5701] usb 4-1: SerialNumber: syz [ 484.774059][T21317] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 484.774191][T21317] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 484.774286][T21317] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 484.779887][ T5701] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 484.780401][ T5701] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 484.786938][ T5701] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 484.787039][ T5701] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 484.791008][ T5701] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 485.019956][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 485.034076][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 485.035161][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 485.043023][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 485.058334][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.255743][ T5839] usb 4-1: USB disconnect, device number 45 [ 485.286539][ T5839] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 485.287403][ T5839] keyspan 4-1:1.0: device disconnected [ 485.526232][T21341] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6883'. [ 485.527603][T21343] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 485.609228][ T5839] kernel write not supported for file /729/attr/prev (pid: 5839 comm: kworker/0:6) [ 485.818532][T21326] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.901672][ T30] audit: type=1400 audit(2000000390.130:1475): avc: denied { watch watch_reads } for pid=21361 comm="syz.1.6892" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.901723][ T30] audit: type=1400 audit(2000000390.130:1476): avc: denied { getattr } for pid=21361 comm="syz.1.6892" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 485.957132][T21366] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 485.957171][T21366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.121614][T21326] wlan1 speed is unknown, defaulting to 1000 [ 486.122034][ T5839] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 486.277687][T21379] MTRR 2 not used [ 486.298352][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 486.298398][ T5839] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=e5.b4 [ 486.299169][ T5839] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 486.299202][ T5839] usb 1-1: can't read configurations, error -71 [ 486.395977][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 486.542245][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 486.542922][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 486.543857][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 486.543894][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 486.543932][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 486.543963][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 486.543991][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 486.545833][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 486.545861][ T9] usb 2-1: Product: syz [ 486.545877][ T9] usb 2-1: Manufacturer: syz [ 486.545894][ T9] usb 2-1: SerialNumber: syz [ 486.550617][ T9] usb 2-1: config 0 descriptor?? [ 486.653033][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 486.657125][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 486.737778][T21326] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.737911][T21326] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.738204][T21326] bridge_slave_0: entered allmulticast mode [ 486.739785][T21326] bridge_slave_0: entered promiscuous mode [ 486.742465][T21326] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.742600][T21326] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.742717][T21326] bridge_slave_1: entered allmulticast mode [ 486.744144][T21326] bridge_slave_1: entered promiscuous mode [ 486.782281][ T5715] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 486.786521][T21326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.813564][T21326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.846093][ T5701] usb 2-1: USB disconnect, device number 54 [ 486.865092][T21373] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 486.865740][ T5701] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 486.869288][T21326] team0: Port device team_slave_0 added [ 486.899914][T21326] team0: Port device team_slave_1 added [ 486.932793][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 486.934416][ T5715] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 486.935478][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 486.935525][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.939165][ T5715] usb 4-1: config 0 descriptor?? [ 486.988961][ T30] audit: type=1400 audit(2000000391.220:1477): avc: denied { append } for pid=21403 comm="syz.0.6908" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 487.017289][T21326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.017305][T21326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.017339][T21326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.019383][T21326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.019398][T21326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.019424][T21326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.195159][ T5603] Bluetooth: hci3: command tx timeout [ 487.208188][T21326] hsr_slave_0: entered promiscuous mode [ 487.210516][T21326] hsr_slave_1: entered promiscuous mode [ 487.211167][T21326] debugfs: 'hsr0' already exists in 'hsr' [ 487.211187][T21326] Cannot create hsr debugfs directory [ 487.468174][ T30] audit: type=1807 audit(2000000391.700:1478): action=measure func=F res=0 [ 487.470953][ T30] audit: type=1802 audit(2000000391.700:1479): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.6914" res=0 errno=0 [ 487.503533][T21416] ima: policy update failed [ 487.503879][ T30] audit: type=1802 audit(2000000391.740:1480): pid=21416 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.6914" res=0 errno=0 [ 487.611298][ T24] usb 4-1: USB disconnect, device number 46 [ 487.670281][T21326] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.684867][T21422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6916'. [ 487.702010][T21326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.721497][T21326] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.739434][T21326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.742021][T21326] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.760726][T21326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.770277][T21326] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.786484][T21326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.871001][T21431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6918'. [ 487.935303][T21326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.959654][T21436] phram: illegal start address [ 487.972593][T21326] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.978303][T19821] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.978388][T19821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.011535][T19819] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.011707][T19819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.195667][T21442] netlink: 'syz.0.6922': attribute type 1 has an invalid length. [ 488.195691][T21442] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6922'. [ 488.195734][T21442] netlink: 'syz.0.6922': attribute type 1 has an invalid length. [ 488.661906][ T5701] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 488.768246][T21473] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 488.813156][ T5701] usb 4-1: not running at top speed; connect to a high speed hub [ 488.813192][ T5701] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 488.814808][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 488.814838][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 488.816583][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.816611][ T5701] usb 4-1: Product: syz [ 488.816627][ T5701] usb 4-1: Manufacturer: syz [ 488.816637][ T5701] usb 4-1: SerialNumber: syz [ 488.821543][T21454] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.844662][ T5701] oti6858 4-1:1.0: oti6858 converter detected [ 488.851953][ T5694] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 488.863359][ T5701] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 488.898723][T21326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.003250][ T5694] usb 1-1: Using ep0 maxpacket: 16 [ 489.005205][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.005251][ T5694] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 489.006192][ T5694] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 489.008218][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.008244][ T5694] usb 1-1: Product: syz [ 489.008261][ T5694] usb 1-1: Manufacturer: syz [ 489.008277][ T5694] usb 1-1: SerialNumber: syz [ 489.191252][T21326] veth0_vlan: entered promiscuous mode [ 489.214306][T21326] veth1_vlan: entered promiscuous mode [ 489.258293][T21326] veth0_macvtap: entered promiscuous mode [ 489.261547][ T5694] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 489.264891][ T5694] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 489.276496][ T5603] Bluetooth: hci3: command tx timeout [ 489.277220][T21326] veth1_macvtap: entered promiscuous mode [ 489.305330][ T9] usb 4-1: USB disconnect, device number 47 [ 489.318837][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 489.319507][ T9] oti6858 4-1:1.0: device disconnected [ 489.344745][T21326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.363794][T21326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.402462][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.423954][T19819] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.424028][T19819] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.424169][T19819] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.679266][ T5694] usb 1-1: USB disconnect, device number 54 [ 489.712943][ T7009] udevd[7009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.792454][ T5603] Bluetooth: hci1: command 0x0405 tx timeout [ 490.792491][ T5603] Bluetooth: hci4: command 0x0c1a tx timeout [ 490.814317][T21473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 490.814424][T21473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 490.835466][T21473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.836007][T21473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 490.838423][T21473] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 490.838484][T21473] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 490.859412][T21473] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 490.936185][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.936207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.037089][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.037108][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.122021][ T5694] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 491.131147][T21524] device-mapper: table: 248:10: crypt: Error decoding and setting key (-EINVAL) [ 491.131177][T21524] device-mapper: ioctl: error adding target to table [ 491.272055][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 491.272899][ T5694] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 491.273907][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.273948][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.273973][ T5694] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 491.274013][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.277422][ T5694] usb 4-1: config 0 descriptor?? [ 491.754965][ T5694] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0050/input/input99 [ 491.781755][T21553] input: syz0 as /devices/virtual/input/input101 [ 491.796373][ T5694] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0050/input/input100 [ 491.866050][ T5694] kye 0003:0458:5011.0050: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 491.971328][T21564] input: syz0 as /devices/virtual/input/input102 [ 491.994457][ T5694] usb 4-1: USB disconnect, device number 48 [ 492.052401][ T30] audit: type=1400 audit(2000000396.280:1481): avc: denied { execute } for pid=21565 comm="syz.0.6967" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 492.299560][T21567] fido_id[21567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 492.491117][ T30] audit: type=1400 audit(2000000396.720:1482): avc: denied { name_connect } for pid=21580 comm="syz.1.6973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 492.730212][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6979'. [ 492.872974][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 492.873029][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 492.873056][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 493.045083][ T30] audit: type=1400 audit(2000000397.280:1483): avc: denied { nlmsg_read } for pid=21615 comm="syz.6.6989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 493.179092][ T30] audit: type=1400 audit(2000000397.410:1484): avc: denied { write } for pid=21624 comm="syz.6.6991" name="usb_gadget" dev="configfs" ino=1365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 493.212461][ T30] audit: type=1400 audit(2000000397.450:1485): avc: denied { write } for pid=21624 comm="syz.6.6991" name="usb_gadget" dev="configfs" ino=1365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 493.297967][T21628] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 493.309585][T21627] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 493.443588][ T5715] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 493.443799][ T5715] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 493.443997][ T5715] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 493.444193][ T5715] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 493.444211][ T5715] rtc rtc0: __rtc_set_alarm: err=-22 [ 493.692885][T17591] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 493.843340][T17591] usb 1-1: Using ep0 maxpacket: 32 [ 493.843912][T17591] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 493.844849][T17591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.855659][T17591] usb 1-1: config 0 descriptor?? [ 494.093257][T17591] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 494.116093][T17591] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 494.117047][T17591] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 494.117095][T17591] usb 1-1: media controller created [ 494.185275][T17591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.298937][T17591] az6027: usb out operation failed. (-71) [ 494.300750][T17591] az6027: usb out operation failed. (-71) [ 494.300769][T17591] stb0899_attach: Driver disabled by Kconfig [ 494.300800][T17591] az6027: no front-end attached [ 494.300800][T17591] [ 494.302362][T17591] az6027: usb out operation failed. (-71) [ 494.302378][T17591] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 494.310632][T17591] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input103 [ 494.316545][T17591] dvb-usb: schedule remote query interval to 400 msecs. [ 494.316566][T17591] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 494.337769][T17591] usb 1-1: USB disconnect, device number 55 [ 494.571295][T17591] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 494.954738][T21515] Bluetooth: hci2: command 0x0405 tx timeout [ 494.954776][T21515] Bluetooth: hci1: command 0x0405 tx timeout [ 494.954802][T21515] Bluetooth: hci3: command 0x0419 tx timeout [ 495.200229][ T30] audit: type=1400 audit(2000000399.430:1486): avc: denied { execute } for pid=21694 comm="syz.3.7022" path="/1438/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 496.391563][ T1045] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 497.046829][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 499.186216][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 532.282726][ T3367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 565.886110][T21720] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 598.485118][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.078380][T21721] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 633.056055][T21720] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.877626][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.677568][T21515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 657.737906][T21515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 657.764983][T21515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 657.907446][T21515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 658.179500][T21515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 659.274832][ T32] INFO: task kworker/0:7:21487 blocked for more than 143 seconds. [ 659.274877][ T32] Tainted: G L syzkaller #0 [ 659.274900][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.274919][ T32] task:kworker/0:7 state:D stack:28088 pid:21487 tgid:21487 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 659.275016][ T32] Workqueue: events_power_efficient crda_timeout_work [ 659.275122][ T32] Call Trace: [ 659.275142][ T32] [ 659.275337][ T32] __schedule+0x125e/0x6990 [ 659.279746][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 659.279932][ T32] ? __pfx___schedule+0x10/0x10 [ 659.279991][ T32] ? find_held_lock+0x2b/0x80 [ 659.280150][ T32] ? schedule+0x225/0x2c0 [ 659.400239][ T32] schedule+0xdd/0x2c0 [ 659.400553][ T32] schedule_preempt_disabled+0x13/0x30 [ 659.400704][ T32] __mutex_lock+0xcca/0x1c10 [ 659.400980][ T32] ? crda_timeout_work+0x16/0x70 [ 659.401142][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 659.401351][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 659.401611][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 659.587593][ T32] ? process_one_work+0xa2c/0x1b10 [ 659.587811][ T32] ? process_one_work+0x906/0x1b10 [ 659.588054][ T32] ? crda_timeout_work+0x16/0x70 [ 659.588118][ T32] crda_timeout_work+0x16/0x70 [ 659.588239][ T32] process_one_work+0xac7/0x1b10 [ 659.714714][ T32] ? __pfx_process_one_work+0x10/0x10 [ 659.715375][ T32] ? lock_acquire+0x1d1/0x380 [ 659.716018][ T32] ? __pfx_crda_timeout_work+0x10/0x10 [ 659.716304][ T32] worker_thread+0x5ef/0xe50 [ 660.063983][ T32] ? kthread+0x13a/0x450 [ 660.064083][ T32] ? __pfx_worker_thread+0x10/0x10 [ 660.064180][ T32] kthread+0x373/0x450 [ 660.064335][ T32] ? __pfx_kthread+0x10/0x10 [ 660.064675][ T32] ret_from_fork+0x730/0xd60 [ 660.065034][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 660.065348][ T32] ? __switch_to+0x800/0x10e0 [ 660.391497][ T32] ? __pfx_kthread+0x10/0x10 [ 660.391700][ T32] ret_from_fork_asm+0x1a/0x30 [ 660.392922][ T32] [ 660.393022][ T32] INFO: task kworker/0:8:21488 blocked for more than 144 seconds. [ 660.393053][ T32] Tainted: G L syzkaller #0 [ 660.393094][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.393114][ T32] task:kworker/0:8 state:D stack:26568 pid:21488 tgid:21488 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 660.393207][ T32] Workqueue: events reg_todo [ 660.621070][ T32] Call Trace: [ 660.621099][ T32] [ 660.621192][ T32] __schedule+0x125e/0x6990 [ 660.621650][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 660.622464][ T32] ? __pfx___schedule+0x10/0x10 [ 660.622511][ T32] ? find_held_lock+0x2b/0x80 [ 660.622632][ T32] ? schedule+0x225/0x2c0 [ 660.798515][ T32] schedule+0xdd/0x2c0 [ 660.798614][ T32] schedule_preempt_disabled+0x13/0x30 [ 660.798673][ T32] __mutex_lock+0xcca/0x1c10 [ 660.798784][ T32] ? reg_process_self_managed_hints+0x95/0x180 [ 660.799224][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 660.799580][ T32] ? reg_query_database+0x10f/0x510 [ 660.800383][ T32] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 660.800635][ T32] ? reg_process_self_managed_hints+0x95/0x180 [ 660.800708][ T32] ? rtnl_is_locked+0x15/0x20 [ 660.800774][ T32] reg_process_self_managed_hints+0x95/0x180 [ 661.009151][ T32] reg_todo+0x5cf/0x800 [ 661.009256][ T32] ? process_one_work+0x906/0x1b10 [ 661.009330][ T32] ? process_one_work+0x906/0x1b10 [ 661.009638][ T32] process_one_work+0xac7/0x1b10 [ 661.010640][ T32] ? __pfx_process_one_work+0x10/0x10 [ 661.037699][T21515] Bluetooth: hci5: command tx timeout [ 661.077431][ T32] ? lock_acquire+0x1d1/0x380 [ 661.078198][ T32] ? __pfx_reg_todo+0x10/0x10 [ 661.078673][ T32] worker_thread+0x5ef/0xe50 [ 661.079026][ T32] ? __pfx_worker_thread+0x10/0x10 [ 661.113397][ T32] ? kthread+0x13a/0x450 [ 661.113507][ T32] ? __pfx_worker_thread+0x10/0x10 [ 661.113755][ T32] kthread+0x373/0x450 [ 661.113948][ T32] ? __pfx_kthread+0x10/0x10 [ 661.114328][ T32] ret_from_fork+0x730/0xd60 [ 661.114432][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 661.114581][ T32] ? __switch_to+0x800/0x10e0 [ 661.114731][ T32] ? __pfx_kthread+0x10/0x10 [ 661.227560][ T32] ret_from_fork_asm+0x1a/0x30 [ 661.228492][ T32] [ 661.228548][ T32] INFO: task kworker/u8:21:21719 blocked for more than 145 seconds. [ 661.228583][ T32] Tainted: G L syzkaller #0 [ 661.228610][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.228634][ T32] task:kworker/u8:21 state:D stack:29408 pid:21719 tgid:21719 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 661.228741][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 661.228836][ T32] Call Trace: [ 661.228858][ T32] [ 661.229150][ T32] __schedule+0x125e/0x6990 [ 661.432499][ T32] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 661.433265][ T32] ? __pfx___schedule+0x10/0x10 [ 661.433376][ T32] ? find_held_lock+0x2b/0x80 [ 661.433678][ T32] ? schedule+0x225/0x2c0 [ 661.433919][ T32] schedule+0xdd/0x2c0 [ 661.713686][ T32] schedule_preempt_disabled+0x13/0x30 [ 661.713787][ T32] __mutex_lock+0xcca/0x1c10 [ 661.713862][ T32] ? addrconf_verify_work+0x12/0x30 [ 661.714023][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 661.714223][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 661.714475][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 661.715039][ T32] ? process_one_work+0xa2c/0x1b10 [ 661.715441][ T32] ? process_one_work+0x906/0x1b10 [ 661.715778][ T32] ? addrconf_verify_work+0x12/0x30 [ 661.715836][ T32] addrconf_verify_work+0x12/0x30 [ 661.715929][ T32] process_one_work+0xac7/0x1b10 [ 662.034266][ T32] ? __pfx_process_one_work+0x10/0x10 [ 662.034642][ T32] ? lock_acquire+0x1d1/0x380 [ 662.034993][ T32] ? __pfx_addrconf_verify_work+0x10/0x10 [ 662.157791][ T32] worker_thread+0x5ef/0xe50 [ 662.158627][ T32] ? __pfx_worker_thread+0x10/0x10 [ 662.158740][ T32] ? kthread+0x13a/0x450 [ 662.158795][ T32] ? __pfx_worker_thread+0x10/0x10 [ 662.158856][ T32] kthread+0x373/0x450 [ 662.158958][ T32] ? __pfx_kthread+0x10/0x10 [ 662.159178][ T32] ret_from_fork+0x730/0xd60 [ 662.159428][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 662.314828][ T32] ? __switch_to+0x800/0x10e0 [ 662.314983][ T32] ? __pfx_kthread+0x10/0x10 [ 662.315204][ T32] ret_from_fork_asm+0x1a/0x30 [ 662.395859][ T32] [ 662.396020][ T32] [ 662.396020][ T32] Showing all locks held in the system: [ 662.396085][ T32] locks held by init/1: 2, last CPU#0: [ 662.396106][ T32] #0: ffffffff909121b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_unix_entry+0xb9/0x640 [ 662.396209][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 662.396338][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 662.396365][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 662.396513][ T32] #1: ffffc90000117d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 662.396681][ T32] #2: ffff88805c040800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 662.396866][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 662.396904][ T32] #0: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 662.397116][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 662.397152][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 662.745564][ T32] #1: ffffc90000b37d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 662.745772][ T32] #2: ffff888056d20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 662.745888][ T32] locks held by kworker/u8:4/59: 3, last CPU#0: [ 662.745914][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 662.746052][ T32] #1: ffffc9000200fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 662.746209][ T32] #2: ffff888052e60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 662.746397][ T32] locks held by kworker/u8:7/1045: 3, last CPU#0: [ 662.746430][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 662.746631][ T32] #1: ffffc90004ec7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 662.746852][ T32] #2: ffff888057640800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 662.747094][ T32] locks held by kworker/u8:8/1462: 3, last CPU#0: [ 662.747161][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 662.747441][ T32] #1: ffffc90005be7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 662.747734][ T32] #2: ffff88805785c258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 662.748063][ T32] locks held by syslogd/4941: 1, last CPU#0: [ 662.748084][ T32] #0: ffff88807d44b8f8 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x298/0xd40 [ 662.748197][ T32] locks held by udevd/4959: 4, last CPU#0: [ 662.748221][ T32] #0: ffffffff8ff3d690 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x79fc/0x84c0 [ 662.748348][ T32] #1: ffff88807c6ac080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 662.748500][ T32] #2: ffff88807c5de540 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 663.028664][ T32] #3: ffff8880b823c2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 663.028843][ T32] locks held by dhcpcd/5254: 4, last CPU#0: [ 663.028877][ T32] #0: ffffffff8ff3d690 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x79fc/0x84c0 [ 663.029070][ T32] #1: ffff888036694080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 663.029295][ T32] #2: ffff88807c5db440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 663.029575][ T32] #3: ffffffff8fffce98 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 663.029849][ T32] locks held by kworker/1:5/5694: 4, last CPU#1: [ 663.029894][ T32] #0: ffff88807ee9c540 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 663.030225][ T32] #1: ffffc900026bfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 663.030606][ T32] #2: ffff88807a6a5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 663.030728][ T32] #3: ffffffff8fdeb360 (rcu_read_lock [ 663.154574][T21515] Bluetooth: hci5: command tx timeout [ 663.418356][ T32] ){....}-{1:3}, at: __schedule+0x3a0f/0x6990 [ 663.418476][ T32] locks held by kworker/1:6/5701: 4, last CPU#1: [ 663.418512][ T32] #0: ffff88801d05f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 663.418732][ T32] #1: ffffc90002597d08 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 663.419344][ T32] #2: ffffffff8ffc2320 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 663.419611][ T32] #3: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 663.419710][ T32] locks held by kworker/0:5/5715: 3, last CPU#0: [ 663.419732][ T32] #0: ffff88801d05dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 663.420021][ T32] #1: ffffc9000209fd08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 663.420188][ T32] #2: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x21a/0x1a10 [ 663.420363][ T32] locks held by syz.1.28/5869: 2, last CPU#0: [ 663.420395][ T32] #0: ffff888027f84cc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 663.420598][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 663.421170][ T32] locks held by syz.1.908/7790: 1, last CPU#1: [ 663.421212][ T32] #0: ffff88807c61d900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 663.561257][ T32] locks held by syz.1.2496/11284: 2, last CPU#0: [ 663.561296][ T32] #0: ffff888079a7ccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 663.561492][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 663.561698][ T32] locks held by syz.1.2950/12324: 2, last CPU#0: [ 663.561741][ T32] #0: ffff88807e850340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 663.829475][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 663.829762][ T32] locks held by kworker/0:1/17589: 3, last CPU#0: [ 663.932094][ T32] #0: ffff8880b823c2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 663.932283][ T32] #1: ffff8880b8224828 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b79/0x6990 [ 663.932475][ T32] #2: ffff8880b823c2a0 (&rq->__lock){-.-.}-{2:2}, at: finish_task_switch.isra.0+0x149/0x10d0 [ 663.932688][ T32] locks held by kworker/1:1/17591: 2, last CPU#1: [ 663.932731][ T32] #0: ffff88801d05dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 663.935378][ T32] #1: ffffc9000f427d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 663.935505][ T32] locks held by syz.1.5237/17687: 2, last CPU#1: [ 663.935531][ T32] #0: ffff88802d5df180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 663.935681][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 664.255434][ T32] locks held by syz.1.5499/18256: 2, last CPU#0: [ 664.255461][ T32] #0: ffff88807640c080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 664.255593][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 664.255746][ T32] locks held by kworker/u8:3/19816: 3, last CPU#0: [ 664.255774][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.255948][ T32] #1: ffffc900030ffd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.256142][ T32] #2: ffff888029070800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 664.256360][ T32] locks held by kworker/u8:5/19817: 3, last CPU#0: [ 664.256398][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.257085][ T32] #1: ffffc900038f7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.257381][ T32] #2: ffff88804f7d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 664.514321][ T32] locks held by kworker/u8:6/19818: 3, last CPU#1: [ 664.514347][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.514477][ T32] #1: ffffc900038e7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.514645][ T32] #2: ffff888036e94258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 664.515073][ T32] locks held by kworker/u8:10/19819: 3, last CPU#1: [ 664.515114][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.515326][ T32] #1: ffffc900037a7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.515557][ T32] #2: ffff88805c010800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 664.516201][ T32] locks held by kworker/u8:11/19820: 6, last CPU#1: [ 664.516247][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.579554][ T32] #1: ffffc90003af7d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.579836][ T32] #2: ffffffff8fc7b810 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 664.580098][ T32] #3: ffffffff8ff40ce0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 664.580378][ T32] #4: ffffffff8fc9b1c0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 664.580542][ T32] #5: ffff8880b833c2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 664.580647][ T32] locks held by kworker/u8:12/19821: 3, last CPU#1: [ 664.580672][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.580993][ T32] #1: ffffc900030efd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.581177][ T32] #2: ffff888052950800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 664.581375][ T32] locks held by kworker/u8:13/19822: 3, last CPU#1: [ 664.581409][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.581627][ T32] #1: ffffc9000403fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.736673][ T32] #2: ffff888055350800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 664.737172][ T32] locks held by kworker/u8:14/20096: 3, last CPU#1: [ 664.737196][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.737313][ T32] #1: ffffc90000a57d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.737447][ T32] #2: ffff888038100800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 664.737597][ T32] locks held by syz.1.6592/20688: 1, last CPU#1: [ 664.737625][ T32] #0: ffff88801d08c080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 664.738054][ T32] locks held by syz.0.6750/21027: 1, last CPU#1: [ 664.738089][ T32] #0: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 664.847956][ T32] locks held by syz-executor/21326: 1, last CPU#1: [ 664.847985][ T32] #0: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 664.848148][ T32] locks held by kworker/0:4/21486: 3, on CPU#0: [ 664.848177][ T32] #0: ffff88801d05f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.848355][ T32] #1: ffffc90003667d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.848549][ T32] #2: ffffffff91cdd140 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 664.848763][ T32] locks held by kworker/0:7/21487: 3, on CPU#0: [ 664.849135][ T32] #0: ffff88801d05dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.849396][ T32] #1: ffffc90003eafd08 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.849677][ T32] #2: ffffffff91cdd140 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x70 [ 664.849900][ T32] locks held by kworker/0:8/21488: 4, on CPU#0: [ 664.849926][ T32] #0: ffff88801d05f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 664.850070][ T32] #1: ffffc90003eefd08 (reg_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 664.850232][ T32] #2: ffffffff91cdd140 ( [ 665.207526][T21515] Bluetooth: hci5: command tx timeout [ 665.208504][ T32] rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x800 [ 665.208658][ T32] #3: ffff88805c040800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x95/0x180 [ 665.208944][ T32] locks held by kworker/u8:15/21713: 3, last CPU#0: [ 665.208986][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.209247][ T32] #1: ffffc90003ecfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.209525][ T32] #2: ffff888074d6b258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 665.209678][ T32] locks held by kworker/u8:16/21714: 3, last CPU#0: [ 665.209700][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.209978][ T32] #1: ffffc90003ebfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.210142][ T32] #2: ffff88805785c258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 665.210345][ T32] locks held by kworker/u8:17/21715: 3, last CPU#1: [ 665.210378][ T32] #0: ffff88807e00d140 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.210588][ T32] #1: ffffc90003e4fd08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.211150][ T32] #2: ffff888073ef9280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 665.416960][ T32] locks held by kworker/u8:18/21716: 3, last CPU#1: [ 665.416991][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.417138][ T32] #1: ffffc90003e9fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.417290][ T32] #2: ffff888036e94258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 665.417486][ T32] locks held by kworker/u8:19/21717: 3, last CPU#1: [ 665.417518][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.417711][ T32] #1: ffffc900043bfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.417931][ T32] #2: ffff88807ecbc258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 665.418201][ T32] locks held by kworker/u8:20/21718: 4, last CPU#1: [ 665.418241][ T32] #0: ffff88802b790140 ((wq_completion)krds_cp_wq#8/0){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.418498][ T32] #1: ffffc90003f0fd08 ((work_completion)(&cp->cp_down_w)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.418771][ T32] #2: ffff8880563e2338 (&id_priv->qp_mutex){+.+.}-{4:4}, at: rdma_destroy_qp+0x8c/0x2a0 [ 665.419059][ T32] #3: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 665.930554][ T32] locks held by kworker/u8:21/21719: 3, on CPU#0: [ 665.930601][ T32] #0: ffff888035798140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.930893][ T32] #1: ffffc90003e27d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.931031][ T32] #2: ffffffff91cdd140 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 665.931189][ T32] locks held by kworker/u8:23/21721: 6, last CPU#1: [ 665.931218][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 665.931397][ T32] #1: ffffc90003727d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 665.931593][ T32] #2: ffffffff8fc7b810 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 666.175005][ T32] #3: ffffffff8ff40ce0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 666.175115][ T32] #4: ffffffff8fc9b1c0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 666.175227][ T32] #5: ffff8880b833c2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 666.175361][ T32] locks held by kworker/u8:25/21724: 3, last CPU#0: [ 666.175389][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 666.175547][ T32] #1: ffffc90003707d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 666.175729][ T32] #2: ffff88807ed0a258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 666.176027][ T32] locks held by syz-executor/21726: 1, last CPU#1: [ 666.176065][ T32] #0: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 666.176308][ T32] locks held by syz-executor/21729: 4, last CPU#1: [ 666.176347][ T32] #0: ffffffff8ff3d690 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x79fc/0x84c0 [ 666.176597][ T32] #1: ffff888028e24cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 666.176991][ T32] #2: ffff88807c5d8f80 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 666.177129][ T32] #3: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 666.369983][ T32] locks held by syz-executor/21738: 1, last CPU#1: [ 666.370028][ T32] #0: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 666.370308][ T32] locks held by syz-executor/21745: 2, last CPU#1: [ 666.370352][ T32] #0: ffff88803071c0e8 (&type->s_umount_key#25/1){+.+.}-{4:4}, at: sget_fc+0x3c6/0x1f60 [ 666.370509][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 666.370628][ T32] locks held by dhcpcd/21746: 1, last CPU#1: [ 666.370652][ T32] #0: ffff88807c6ad900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 666.370995][ T32] locks held by dhcpcd/21747: 2, on CPU#0: [ 666.371026][ T32] #0: ffff88802b41c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 666.371214][ T32] #1: ffffffff8fdf7868 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 666.371411][ T32] locks held by udevd/21749: 2, last CPU#1: [ 666.371446][ T32] #0: ffff88807540da88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 666.371677][ T32] #1: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830 [ 666.587635][ T32] locks held by init/21750: 1, last CPU#1: [ 666.587663][ T32] #0: ffffffff8fdeb360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 666.588396][ T32] [ 666.588423][ T32] ============================================= [ 666.588423][ T32] [ 666.588476][ T32] NMI backtrace for cpu 1 [ 666.588529][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 666.588582][ T32] Tainted: [L]=SOFTLOCKUP [ 666.588613][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 666.588650][ T32] Call Trace: [ 666.588727][ T32] [ 666.588810][ T32] dump_stack_lvl+0x100/0x190 [ 666.589210][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 666.589537][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 666.589607][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 666.589772][ T32] sys_info+0x141/0x190 [ 666.589922][ T32] watchdog+0xcb1/0x1030 [ 666.590412][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 666.590592][ T32] ? __pfx_watchdog+0x10/0x10 [ 666.590900][ T32] ? __kthread_parkme+0x18f/0x230 [ 666.591441][ T32] ? kthread+0x13a/0x450 [ 666.591482][ T32] ? __pfx_watchdog+0x10/0x10 [ 666.591526][ T32] kthread+0x373/0x450 [ 666.591597][ T32] ? __pfx_kthread+0x10/0x10 [ 666.591762][ T32] ret_from_fork+0x730/0xd60 [ 666.591959][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 666.592214][ T32] ? __switch_to+0x800/0x10e0 [ 666.592439][ T32] ? __pfx_kthread+0x10/0x10 [ 666.592781][ T32] ret_from_fork_asm+0x1a/0x30 [ 666.593630][ T32] [ 666.595182][ T32] Sending NMI from CPU 1 to CPUs 0: [ 666.595253][ C0] NMI backtrace for cpu 0 [ 666.595290][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.595339][ C0] Tainted: [L]=SOFTLOCKUP [ 666.595369][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 666.595407][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 666.595502][ C0] Code: 38 57 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 d8 89 cb fc eb a2 e8 61 8a [ 666.595545][ C0] RSP: 0000:ffffc90000a77950 EFLAGS: 00000002 [ 666.595612][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 666.595649][ C0] RDX: 00000000000003fd RSI: ffffffff85b54f00 RDI: ffffffff9cc9be80 [ 666.595686][ C0] RBP: ffffffff9cc9be40 R08: 0000000000000001 R09: 000000000000001f [ 666.595724][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 666.595761][ C0] R13: 0000000000000020 R14: fffffbfff3993825 R15: dffffc0000000000 [ 666.595802][ C0] FS: 0000000000000000(0000) GS:ffff88812292a000(0000) knlGS:0000000000000000 [ 666.595851][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.595894][ C0] CR2: 0000556c1bb5d098 CR3: 000000007d671000 CR4: 00000000003526f0 [ 666.595936][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 666.595978][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 666.596020][ C0] Call Trace: [ 666.596084][ C0] [ 666.596264][ C0] wait_for_lsr+0x13a/0x210 [ 666.596516][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 666.596749][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 666.596846][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 666.597365][ C0] serial8250_console_write+0x1108/0x14f0 [ 666.597961][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 666.598123][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 666.598239][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 666.598724][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 666.599242][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 666.599468][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 666.599640][ C0] ? do_raw_spin_lock+0x30/0x260 [ 666.600167][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 666.600275][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 666.600577][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 666.600752][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 666.601574][ C0] nbcon_kthread_func+0x5ef/0x7f0 [ 666.601943][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 666.602320][ C0] ? __kthread_parkme+0x18f/0x230 [ 666.602734][ C0] ? kthread+0x13a/0x450 [ 666.602830][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 666.602923][ C0] kthread+0x373/0x450 [ 666.603108][ C0] ? __pfx_kthread+0x10/0x10 [ 666.603513][ C0] ret_from_fork+0x730/0xd60 [ 666.603748][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 666.603876][ C0] ? __switch_to+0x800/0x10e0 [ 666.604008][ C0] ? __pfx_kthread+0x10/0x10 [ 666.604227][ C0] ret_from_fork_asm+0x1a/0x30 [ 666.605487][ C0] [ 667.062220][T21713] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 667.274689][T21515] Bluetooth: hci5: command tx timeout [ 668.736953][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 668.743864][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 668.754651][ T32] Tainted: [L]=SOFTLOCKUP [ 668.759155][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 668.769235][ T32] Call Trace: [ 668.772555][ T32] [ 668.775528][ T32] dump_stack_lvl+0x100/0x190 [ 668.780441][ T32] vpanic+0x553/0x970 [ 668.784569][ T32] ? __pfx_vpanic+0x10/0x10 [ 668.789881][ T32] panic+0xd1/0xe0 [ 668.793762][ T32] ? __pfx_panic+0x10/0x10 [ 668.798385][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 668.804646][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 668.810857][ T32] ? watchdog.cold+0x1ec/0x234 [ 668.815921][ T32] watchdog.cold+0x1fd/0x234 [ 668.821130][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 668.827138][ T32] ? __pfx_watchdog+0x10/0x10 [ 668.831986][ T32] ? __kthread_parkme+0x18f/0x230 [ 668.837168][ T32] ? kthread+0x13a/0x450 [ 668.841458][ T32] ? __pfx_watchdog+0x10/0x10 [ 668.846221][ T32] kthread+0x373/0x450 [ 668.850398][ T32] ? __pfx_kthread+0x10/0x10 [ 668.855217][ T32] ret_from_fork+0x730/0xd60 [ 668.860062][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 668.865503][ T32] ? __switch_to+0x800/0x10e0 [ 668.870447][ T32] ? __pfx_kthread+0x10/0x10 [ 668.875347][ T32] ret_from_fork_asm+0x1a/0x30 [ 668.880775][ T32] [ 668.883848][ T32] Kernel Offset: disabled [ 668.888208][ T32] task:init state:D stack:19080 pid:1 tgid:1 ppid:0 task_flags:0x400100 flags:0x00080800 [ 668.900195][ T32] Call Trace: [ 668.903501][ T32] [ 668.906748][ T32] __schedule+0x125e/0x6990 [ 668.912235][ T32] ? __pfx___schedule+0x10/0x10 [ 668.917190][ T32] ? find_held_lock+0x2b/0x80 [ 668.922104][ T32] ? schedule+0x225/0x2c0 [ 668.927001][ T32] schedule+0xdd/0x2c0 [ 668.931368][ T32] schedule_timeout+0x1b2/0x280 [ 668.936380][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 668.942024][ T32] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 668.949687][ T32] ? rcu_is_watching+0x13/0xc0 [ 668.954901][ T32] __wait_for_common+0x2e6/0x500 [ 668.960004][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 668.965995][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 668.971623][ T32] ? rcu_is_watching+0x13/0xc0 [ 668.976465][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.981726][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 668.987166][ T32] wait_for_completion_state+0x1c/0x40 [ 668.992715][ T32] kernel_clone+0x5ec/0x9d0 [ 668.997567][ T32] ? __pfx_kernel_clone+0x10/0x10 [ 669.003648][ T32] __do_sys_vfork+0x9f/0xe0 [ 669.008268][ T32] ? __pfx___ia32_sys_vfork+0x10/0x10 [ 669.015065][ T32] ? do_syscall_64+0xae/0x790 [ 669.019854][ T32] do_syscall_64+0x123/0x790 [ 669.024680][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.030674][ T32] RIP: 0033:0x7f95d3943a88 [ 669.035208][ T32] RSP: 002b:00007fff1107f700 EFLAGS: 00000246 ORIG_RAX: 000000000000003a [ 669.043671][ T32] RAX: ffffffffffffffda RBX: 0000562b74d83a40 RCX: 00007f95d3943a88 [ 669.051669][ T32] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00007f95d3abe1ca [ 669.059695][ T32] RBP: 00007f95d3adde89 R08: 0000000000000000 R09: 0000000000000000 [ 669.067754][ T32] R10: 00007fff1107f740 R11: 0000000000000246 R12: 00007f95d3af8490 [ 669.075743][ T32] R13: 0000000000000018 R14: 00007f95d3b38000 R15: 0000562b49fcfd98 [ 669.084568][ T32] [ 669.087580][ T32] task:kthreadd state:R running task stack:24488 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00080000 [ 669.101086][ T32] Call Trace: [ 669.104355][ T32] [ 669.107356][ T32] __schedule+0x125e/0x6990 [ 669.112818][ T32] ? __pfx___schedule+0x10/0x10 [ 669.117723][ T32] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 669.123738][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 669.129886][ T32] preempt_schedule_notrace+0x57/0xd0 [ 669.135348][ T32] preempt_schedule_notrace_thunk+0x16/0x30 [ 669.141474][ T32] ? trace_event_buffer_commit+0x20a/0xa80 [ 669.147388][ T32] trace_event_raw_event_lock+0x239/0x2b0 [ 669.153282][ T32] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 669.159630][ T32] ? lock_acquire+0x1d1/0x380 [ 669.164829][ T32] ? lock_acquire+0x1d1/0x380 [ 669.169530][ T32] ? unwind_next_frame+0xbd/0x2090 [ 669.174732][ T32] ? unwind_next_frame+0x3be/0x2090 [ 669.180044][ T32] lock_release+0x218/0x310 [ 669.184793][ T32] unwind_next_frame+0x3c3/0x2090 [ 669.189903][ T32] ? kernel_clone+0x176/0x9d0 [ 669.194995][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.201404][ T32] arch_stack_walk+0x94/0xf0 [ 669.206362][ T32] ? kernel_thread+0xdb/0x120 [ 669.211224][ T32] stack_trace_save+0x8e/0xc0 [ 669.215981][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 669.221868][ T32] kasan_save_stack+0x30/0x50 [ 669.226663][ T32] ? kasan_save_stack+0x30/0x50 [ 669.231568][ T32] ? kasan_save_track+0x14/0x30 [ 669.236477][ T32] ? __kasan_slab_alloc+0x89/0x90 [ 669.241559][ T32] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 669.247256][ T32] ? prepare_creds+0x2c/0x950 [ 669.252002][ T32] ? copy_creds+0xa7/0xa50 [ 669.256434][ T32] ? copy_process+0x144f/0x84c0 [ 669.261286][ T32] ? kernel_clone+0x176/0x9d0 [ 669.268073][ T32] kasan_save_track+0x14/0x30 [ 669.272855][ T32] __kasan_slab_alloc+0x89/0x90 [ 669.277937][ T32] kmem_cache_alloc_noprof+0x269/0x6a0 [ 669.283575][ T32] ? prepare_creds+0x2c/0x950 [ 669.288707][ T32] prepare_creds+0x2c/0x950 [ 669.293407][ T32] copy_creds+0xa7/0xa50 [ 669.297817][ T32] copy_process+0x144f/0x84c0 [ 669.302526][ T32] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 669.309701][ T32] ? __pfx_copy_process+0x10/0x10 [ 669.314921][ T32] ? rb_commit+0x129/0x9d0 [ 669.319617][ T32] kernel_clone+0x176/0x9d0 [ 669.324371][ T32] ? __pfx_kernel_clone+0x10/0x10 [ 669.330008][ T32] ? trace_event_buffer_commit+0x20a/0xa80