last executing test programs: 6.677267824s ago: executing program 2 (id=2624): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) getdents64(r2, 0x0, 0x0) 6.675156949s ago: executing program 3 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 3.565138531s ago: executing program 2 (id=2628): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x2}, 0xe) listen(r0, 0x0) iopl(0x3) accept4(r0, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.437245188s ago: executing program 0 (id=2629): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, 0x0) 3.264357432s ago: executing program 3 (id=2630): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.233209291s ago: executing program 3 (id=2631): r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x2, 0x284000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0xbbd, 0x0, '\x00', 0x1, &(0x7f0000000140)}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 3.021169009s ago: executing program 1 (id=2634): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x400000}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x80000001, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x53102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x13, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x8080000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0xdddd0000, 0x7}, 0x80010000, 0x0, 0xd000, 0x2024, 0x0, 0x400, 0x3000, [0x9, 0x100000000000201, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.020743628s ago: executing program 1 (id=2635): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r7], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r10], 0x24}}, 0x0) 1.818020563s ago: executing program 3 (id=2637): syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x26600) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) ioctl$EVIOCGNAME(r1, 0x80404506, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x4) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r3, 0x0, 0x0, 0x42054) sendto$inet(r3, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x100, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.800136797s ago: executing program 2 (id=2638): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x4ab, 0x4) 1.797111417s ago: executing program 1 (id=2639): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96", 0xb, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.658006808s ago: executing program 0 (id=2640): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x24004004) 1.609413725s ago: executing program 4 (id=2641): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xee, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) 1.599647619s ago: executing program 1 (id=2642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r7], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32], 0x24}}, 0x0) 1.586576623s ago: executing program 2 (id=2643): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@host}) close_range(r0, 0xffffffffffffffff, 0x0) 1.559538641s ago: executing program 0 (id=2644): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) 1.457506283s ago: executing program 2 (id=2645): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, r2, 0x1000, 0x80000}) 1.376115168s ago: executing program 4 (id=2646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x80000001, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x53102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x13, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x8080000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0xdddd0000, 0x7}, 0x80010000, 0x0, 0xd000, 0x2024, 0x0, 0x400, 0x3000, [0x9, 0x100000000000201, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.324886902s ago: executing program 0 (id=2647): r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x2, 0x284000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0xbbd, 0x0, '\x00', 0x1, &(0x7f0000000140)}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 1.317860984s ago: executing program 1 (id=2648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x4}, {0xffff, 0x7}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.245403439s ago: executing program 4 (id=2649): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.19748685s ago: executing program 0 (id=2650): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, 0x0) 1.180801067s ago: executing program 1 (id=2651): r0 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) close_range(r0, 0xffffffffffffffff, 0x0) 987.468071ms ago: executing program 4 (id=2652): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 956.514469ms ago: executing program 4 (id=2653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setresuid(0xee00, 0xee00, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0xfffffffffffffffe}, {0x3, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff82}}, 0xe4) 535.929093ms ago: executing program 3 (id=2654): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x4ab, 0x4) 28.282768ms ago: executing program 2 (id=2655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}}, 0x20000000) 27.828003ms ago: executing program 3 (id=2656): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(r2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x68040200) open(0x0, 0x600100, 0xd8) socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="020d00696e00050000000400000000000000030005000000000002000000ac1414aa00000000000076116c18f6a874ccd488da195449c85e1529022dd8ce711d71ca77784b2941c11f26eab2ea8c78d999c3bafc73701c33dd24afed1674b5c405e95dda0c6362909f445decd5f21df9ae02069fce559c35df2cf9387a3f730872ccad0a9e8c53fbbaf4229df18581e44ae78987ba9a64c54fd187724600"], 0x28}}, 0x0) 27.389947ms ago: executing program 0 (id=2657): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xee, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) 0s ago: executing program 4 (id=2658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) kernel console output (not intermixed with test programs): interface 0 altsetting 0: 129, using maximum allowed: 30 [ 274.528875][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 274.699893][ T8693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.720402][ T5804] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 274.750067][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.791402][ T5804] usb 2-1: config 0 descriptor?? [ 274.834669][ T5804] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 277.216178][ T5810] usb 2-1: USB disconnect, device number 8 [ 277.325308][ T8728] NILFS (nbd3): device size too small [ 277.492737][ T5804] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 278.308526][ T5804] usb 3-1: device descriptor read/64, error -71 [ 278.629378][ T8732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.821264][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 278.821297][ T29] audit: type=1400 audit(1784288405.601:809): avc: denied { read } for pid=8734 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.846908][ T5804] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 279.092575][ T5804] usb 3-1: device descriptor read/64, error -71 [ 279.595974][ T8742] xt_hashlimit: size too large, truncated to 1048576 [ 279.600310][ T5804] usb usb3-port1: attempt power cycle [ 280.762774][ T5804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 281.177011][ T5804] usb 3-1: device not accepting address 11, error -71 [ 282.690018][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.922'. [ 283.797595][ T29] audit: type=1400 audit(1784288410.591:810): avc: denied { mount } for pid=8805 comm="syz.1.925" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 284.615717][ T8820] NILFS (nbd1): device size too small [ 285.995361][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.926'. [ 286.998512][ T8853] macvlan1: entered promiscuous mode [ 287.005174][ T8853] syz_tun: entered promiscuous mode [ 287.011206][ T8853] debugfs: 'hsr1' already exists in 'hsr' [ 287.017393][ T8853] Cannot create hsr debugfs directory [ 287.968883][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.734759][ T8878] netlink: 504 bytes leftover after parsing attributes in process `syz.2.946'. [ 293.100514][ T29] audit: type=1400 audit(1784288419.891:811): avc: denied { mounton } for pid=8908 comm="syz.2.957" path="/proc/520/task" dev="proc" ino=21180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 293.220104][ T8919] netlink: 512 bytes leftover after parsing attributes in process `syz.2.960'. [ 293.302223][ T8924] fuse: Bad value for 'fd' [ 293.446483][ T8931] netlink: 72 bytes leftover after parsing attributes in process `syz.2.963'. [ 294.494786][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.967'. [ 296.387792][ T8964] netlink: 512 bytes leftover after parsing attributes in process `syz.1.974'. [ 297.266519][ T8965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.578552][ T8978] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 298.592903][ T8978] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 298.627927][ T8978] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 298.979360][ T8978] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 299.395430][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'. [ 300.787371][ T29] audit: type=1400 audit(1784288427.581:812): avc: denied { create } for pid=9012 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.655575][ T9021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.533202][ T29] audit: type=1400 audit(1784288429.321:813): avc: denied { mount } for pid=9039 comm="syz.1.996" name="/" dev="ramfs" ino=22015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.317633][ T9047] [U]  [ 304.532027][ T9066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.120558][ T9082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.321822][ T9102] fuse: Bad value for 'fd' [ 307.961600][ T9108] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1022'. [ 308.769299][ T29] audit: type=1400 audit(1784288435.561:814): avc: denied { map } for pid=9117 comm="syz.0.1025" path="/dev/usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 308.861016][ T29] audit: type=1400 audit(1784288435.591:815): avc: denied { execute } for pid=9117 comm="syz.0.1025" path="/dev/usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 311.538830][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.788117][ T29] audit: type=1400 audit(1784288440.581:816): avc: denied { read write } for pid=9156 comm="syz.1.1032" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 313.876055][ T29] audit: type=1400 audit(1784288440.581:817): avc: denied { open } for pid=9156 comm="syz.1.1032" path="/222/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 314.574367][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.656095][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.674152][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.841192][ T29] audit: type=1400 audit(1784288441.621:818): avc: denied { open } for pid=9173 comm="syz.3.1044" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 315.820564][ T9178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1047'. [ 317.999722][ T9213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.128808][ T9213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.817516][ T9236] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1067'. [ 319.904015][ T9241] can: request_module (can-proto-3) failed. [ 319.913591][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 321.316167][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 321.400295][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 321.411428][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.421219][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 321.434248][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 321.443312][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.453512][ T24] usb 3-1: config 0 descriptor?? [ 321.461461][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 322.468075][ T9262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.553261][ T9262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.652591][ T9267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.737938][ T42] usb 3-1: USB disconnect, device number 13 [ 325.478184][ T29] audit: type=1400 audit(1784288452.231:819): avc: denied { append } for pid=9291 comm="syz.1.1082" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 325.662802][ T42] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 326.412543][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 327.286464][ T42] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 327.296175][ T42] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.306007][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.315793][ T42] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.325786][ T42] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.339129][ T42] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.351895][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.518817][ T9312] ntfs3(loop3): try to read out of volume at offset 0x0 [ 327.572381][ T42] usb 3-1: usb_control_msg returned -32 [ 327.585410][ T42] usbtmc 3-1:16.0: can't read capabilities [ 327.654202][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1084'. [ 327.708733][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.757697][ T29] audit: type=1400 audit(1784288454.551:820): avc: denied { ioctl } for pid=9311 comm="syz.3.1090" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 327.918194][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 327.987564][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 327.991806][ T9] usb 3-1: USB disconnect, device number 14 [ 328.015689][ T9294] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 328.051922][ T9328] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 328.056601][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.084611][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 328.101817][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 328.125088][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.414151][ T24] usb 1-1: config 0 descriptor?? [ 328.471684][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 328.792527][ T9] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 328.954001][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 328.972617][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 328.990766][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.012744][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 329.023771][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.038109][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 329.047835][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.065147][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 330.349692][ T805] usb 3-1: USB disconnect, device number 15 [ 330.425533][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1105'. [ 330.465290][ T9] usb 1-1: USB disconnect, device number 8 [ 330.576597][ T9387] binder: 9386:9387 ioctl c0306201 200000000080 returned -14 [ 330.783718][ T9391] bridge2: entered promiscuous mode [ 331.752162][ T9408] ALSA: mixer_oss: invalid OSS volume 'P' [ 332.300141][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 333.268207][ T9453] netlink: 'syz.0.1122': attribute type 4 has an invalid length. [ 334.062869][ T29] audit: type=1400 audit(1784288460.501:821): avc: denied { mount } for pid=9462 comm="syz.2.1127" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 334.287433][ T29] audit: type=1400 audit(1784288461.081:822): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 334.614531][ T9485] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 334.646938][ T9489] capability: warning: `syz.3.1130' uses 32-bit capabilities (legacy support in use) [ 334.661196][ T29] audit: type=1400 audit(1784288461.451:823): avc: denied { ioctl } for pid=9481 comm="syz.3.1130" path="socket:[23813]" dev="sockfs" ino=23813 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.922528][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 337.072723][ T42] usb 2-1: device descriptor read/64, error -71 [ 337.205398][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1143'. [ 337.322792][ T42] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 338.323892][ T42] usb 2-1: device descriptor read/64, error -71 [ 338.442898][ T42] usb usb2-port1: attempt power cycle [ 338.814238][ T42] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 339.124510][ T29] audit: type=1400 audit(1784288465.921:824): avc: denied { write } for pid=9552 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 339.144531][ T42] usb 2-1: device descriptor read/8, error -71 [ 339.472506][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 339.573788][ T42] usb 2-1: device descriptor read/8, error -71 [ 339.773847][ T42] usb usb2-port1: unable to enumerate USB device [ 341.102491][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 341.284323][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 341.309441][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 341.345908][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 341.371757][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.410554][ T24] usb 3-1: Product: syz [ 341.443012][ T24] usb 3-1: Manufacturer: syz [ 341.455598][ T24] usb 3-1: SerialNumber: syz [ 342.370847][ T24] usb 3-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 342.583794][ T5627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 343.986846][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 344.075071][ T24] usb 3-1: USB disconnect, device number 16 [ 344.118586][ T9599] fuse: Bad value for 'fd' [ 344.163881][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.191766][ T9601] overlayfs: failed to resolve './file0': -2 [ 344.655780][ T9608] binfmt_misc: register: failed to install interpreter file ./file0 [ 346.651500][ T29] audit: type=1400 audit(1784288473.441:825): avc: denied { append } for pid=9622 comm="syz.3.1179" name="event1" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 348.432495][ T805] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 348.647805][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 348.659026][ T805] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 348.659054][ T805] usb 2-1: config 0 has no interface number 0 [ 348.659088][ T805] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 348.659111][ T805] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.659132][ T805] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 348.669711][ T805] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 348.669731][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.669743][ T805] usb 2-1: Product: syz [ 348.669752][ T805] usb 2-1: Manufacturer: syz [ 348.669761][ T805] usb 2-1: SerialNumber: syz [ 348.671295][ T805] usb 2-1: config 0 descriptor?? [ 348.672586][ T9635] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 348.879160][ T805] usb-storage 2-1:0.20: USB Mass Storage device detected [ 348.918217][ T805] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 348.949430][ T9652] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1187'. [ 348.963503][ T805] scsi host1: usb-storage 2-1:0.20 [ 349.037933][ T805] usb 2-1: USB disconnect, device number 13 [ 349.781065][ T29] audit: type=1400 audit(1784288476.571:826): avc: denied { wake_alarm } for pid=9660 comm="syz.3.1190" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.081418][ T29] audit: type=1400 audit(3931772124.867:827): avc: denied { connect } for pid=9668 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.126855][ T29] audit: type=1400 audit(3931772124.897:828): avc: denied { getopt } for pid=9668 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.175769][ T9672] Illegal XDP return value 4294967274 on prog (id 76) dev syz_tun, expect packet loss! [ 350.202525][ T29] audit: type=1400 audit(3931772124.987:829): avc: denied { map } for pid=9668 comm="syz.1.1193" path="socket:[23145]" dev="sockfs" ino=23145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 350.249554][ T29] audit: type=1400 audit(3931772124.987:830): avc: denied { read } for pid=9668 comm="syz.1.1193" path="socket:[23145]" dev="sockfs" ino=23145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 350.631222][ T29] audit: type=1326 audit(3931772125.407:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.3.1190" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362239de99 code=0x7fc00000 [ 350.984661][ T29] audit: type=1326 audit(3931772125.407:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.3.1190" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f362239de99 code=0x7fc00000 [ 351.011304][ T29] audit: type=1326 audit(3931772125.407:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.3.1190" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362239de99 code=0x7fc00000 [ 351.041003][ T29] audit: type=1326 audit(3931772125.407:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.3.1190" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362239de99 code=0x7fc00000 [ 351.081166][ T9669] input: syz1 as /devices/virtual/input/input19 [ 353.441427][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 353.441442][ T29] audit: type=1400 audit(3931772128.227:897): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 354.121860][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 355.699802][ T9782] fuse: Bad value for 'fd' [ 356.072543][ T29] audit: type=1400 audit(3931772130.847:898): avc: denied { create } for pid=9785 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 356.164943][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 356.264325][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 356.275930][ T29] audit: type=1400 audit(3931772130.847:899): avc: denied { connect } for pid=9785 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 356.490720][ T29] audit: type=1400 audit(3931772130.907:900): avc: denied { write } for pid=9785 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.496623][ T9828] fuse: Invalid rootmode [ 357.812615][ T805] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 357.994749][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 358.060389][ T805] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 358.079744][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 358.095844][ T805] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 358.117692][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.134340][ T805] usb 3-1: Product: syz [ 358.142640][ T805] usb 3-1: Manufacturer: syz [ 358.232454][ T805] usb 3-1: SerialNumber: syz [ 358.244828][ T805] usb 3-1: config 0 descriptor?? [ 358.275268][ T805] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 358.292535][ T805] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 358.787255][ T9857] fuse: Invalid rootmode [ 358.903085][ T805] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 358.918258][ T805] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 359.678829][ T5804] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 359.686527][ T805] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 359.843131][ T5804] usb 4-1: no configurations [ 359.850587][ T5804] usb 4-1: can't read configurations, error -22 [ 360.002508][ T5804] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 360.184905][ T5804] usb 4-1: no configurations [ 360.191159][ T5804] usb 4-1: can't read configurations, error -22 [ 360.208993][ T5804] usb usb4-port1: attempt power cycle [ 360.304263][ T805] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 360.327225][ T805] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 360.339333][ T805] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 360.352850][ T805] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 360.374457][ T805] usb 3-1: USB disconnect, device number 17 [ 360.449408][ T9892] fuse: Invalid rootmode [ 360.562469][ T5804] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 360.593609][ T5804] usb 4-1: no configurations [ 360.605770][ T5804] usb 4-1: can't read configurations, error -22 [ 360.754573][ T5804] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 360.805536][ T5804] usb 4-1: no configurations [ 360.815656][ T5804] usb 4-1: can't read configurations, error -22 [ 360.836341][ T5804] usb usb4-port1: unable to enumerate USB device [ 361.190881][ T9929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.585766][ T9934] fuse: Bad value for 'fd' [ 361.822519][ T5810] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 361.970602][ T9944] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1281'. [ 361.986881][ T9944] gretap0: entered promiscuous mode [ 361.993595][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 362.021327][ T5810] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 362.051535][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.076675][ T5810] usb 2-1: config 0 descriptor?? [ 362.107797][ T5810] as10x_usb: device has been detected [ 362.123491][ T5810] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 362.282773][ T5810] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 363.398641][ T9963] [U]  [ 363.482826][ T5810] as10x_usb: error during firmware upload part1 [ 363.518332][ T5810] Registered device nBox DVB-T Dongle [ 363.539352][ T5810] usb 2-1: USB disconnect, device number 14 [ 363.695399][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 363.728192][ T5810] Unregistered device nBox DVB-T Dongle [ 363.731252][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 363.734736][ T5810] as10x_usb: device has been disconnected [ 366.314291][T10004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.278417][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 368.294380][T10034] siw: device registration error -23 [ 368.307293][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 370.385561][T10051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.448733][T10059] binder: 10058:10059 ioctl c0306201 0 returned -14 [ 372.883432][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1329'. [ 372.912600][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1329'. [ 372.973776][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.452151][T10107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.555187][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.600850][T10107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.437179][T10118] binder: 10117:10118 ioctl c0306201 0 returned -14 [ 375.498004][T10112] lo speed is unknown, defaulting to 1000 [ 375.656876][T10126] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1346'. [ 376.211892][ T29] audit: type=1400 audit(3931772150.997:901): avc: denied { create } for pid=10134 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 376.468462][T10138] nvme_fabrics: missing parameter 'transport=%s' [ 376.476379][T10138] nvme_fabrics: missing parameter 'nqn=%s' [ 377.356700][T10162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.418558][T10162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.456844][T10162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.472610][T10164] fuse: Bad value for 'fd' [ 379.283796][T10196] xt_socket: unknown flags 0x50 [ 380.265285][T10210] Bluetooth: MGMT ver 1.23 [ 381.787752][ T29] audit: type=1400 audit(3931772156.547:902): avc: denied { bind } for pid=10214 comm="syz.4.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 381.951983][T10221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.810781][T10221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.846795][T10221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.920731][T10230] syzkaller0: entered promiscuous mode [ 382.933266][T10232] fuse: Bad value for 'fd' [ 382.936734][T10230] syzkaller0: entered allmulticast mode [ 383.387845][T10245] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1382'. [ 383.506341][T10247] fuse: Bad value for 'group_id' [ 383.511582][T10247] fuse: Bad value for 'group_id' [ 384.441966][T10263] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 384.459888][T10261] fuse: Bad value for 'fd' [ 384.593199][ T29] audit: type=1400 audit(3931772159.387:903): avc: denied { append } for pid=10266 comm="syz.3.1391" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.725866][ T29] audit: type=1400 audit(3931772159.517:904): avc: denied { connect } for pid=10266 comm="syz.3.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 384.784517][ T29] audit: type=1400 audit(3931772159.567:905): avc: denied { ioctl } for pid=10266 comm="syz.3.1391" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.880869][ T29] audit: type=1400 audit(3931772159.667:906): avc: denied { bind } for pid=10269 comm="syz.4.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.345200][T10284] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1397'. [ 385.357148][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1397'. [ 385.406581][ T29] audit: type=1400 audit(3931772160.197:907): avc: denied { map } for pid=10285 comm="syz.0.1398" path="socket:[26174]" dev="sockfs" ino=26174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 385.502029][ T29] audit: type=1400 audit(3931772160.287:908): avc: denied { setopt } for pid=10285 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.554538][ T5810] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 385.713011][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 385.718461][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.718586][ T5810] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 385.718615][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.412326][ T5810] usb 4-1: config 0 descriptor?? [ 386.419840][ T5810] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 386.547043][T10302] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 386.888141][T10319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1409'. [ 386.975672][ T29] audit: type=1400 audit(3931772161.767:909): avc: denied { execute } for pid=10312 comm="syz.4.1409" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 387.354233][T10324] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1395'. [ 388.408970][ T5810] usb 4-1: USB disconnect, device number 15 [ 389.694556][T10356] overlayfs: missing 'lowerdir' [ 389.736491][T10357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 391.020959][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1427'. [ 391.350324][T10393] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 391.642505][ T5614] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 391.873135][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 391.918088][ T5614] usb 4-1: config 0 has no interfaces? [ 392.007043][ T5614] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 392.093931][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.193762][ T5614] usb 4-1: Product: syz [ 392.211132][T10392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.266661][ T5614] usb 4-1: Manufacturer: syz [ 392.327668][ T5614] usb 4-1: SerialNumber: syz [ 392.516354][ T5614] usb 4-1: config 0 descriptor?? [ 392.868313][ T29] audit: type=1400 audit(3931772167.657:910): avc: denied { bind } for pid=10389 comm="syz.3.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.999655][ T5614] usb 4-1: USB disconnect, device number 16 [ 393.182117][T10409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 393.603622][T10416] syzkaller0: entered promiscuous mode [ 393.616392][T10416] syzkaller0: entered allmulticast mode [ 394.672117][T10439] overlayfs: missing 'lowerdir' [ 395.016858][T10431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.809914][ T29] audit: type=1400 audit(3931772170.577:911): avc: denied { kexec_image_load } for pid=10443 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 396.769498][T10457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 396.884537][ T29] audit: type=1400 audit(3931772171.677:912): avc: denied { bind } for pid=10441 comm="syz.2.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 396.937274][ T29] audit: type=1400 audit(3931772171.697:913): avc: denied { write } for pid=10441 comm="syz.2.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 397.076490][ T29] audit: type=1400 audit(3931772171.867:914): avc: denied { mount } for pid=10464 comm="syz.4.1456" name="/" dev="pstore" ino=3975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 398.230262][T10486] fuse: Bad value for 'fd' [ 398.393591][T10493] comedi comedi0: Minor 32768 is invalid! [ 398.483654][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'. [ 398.793951][T10514] overlayfs: missing 'lowerdir' [ 398.940646][T10521] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 399.022474][ T5810] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 399.061926][T10523] binder: 10522:10523 unknown command 0 [ 399.072548][T10523] binder: 10522:10523 ioctl c0306201 2000000003c0 returned -22 [ 399.098849][T10523] binder: 10522:10523 ioctl c0306201 2000000001c0 returned -14 [ 399.113487][T10523] binder: 10522:10523 ioctl 4090ae82 200000000440 returned -22 [ 399.122449][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 399.182476][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 399.190454][ T5810] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 399.213998][ T5810] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 399.229782][ T5810] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.244847][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.276227][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 399.284342][ T24] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 399.298680][ T24] usb 2-1: config 0 has no interface number 0 [ 399.319049][ T24] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 399.348923][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.394024][ T24] usb 2-1: config 0 descriptor?? [ 399.415873][ T24] gspca_main: spca501-2.14.0 probing 0497:c001 [ 399.704859][ T24] gspca_spca501: reg write: error -71 [ 399.724231][ T24] spca501 2-1:0.125: Reg write failed for 0x02,0x07,0x05 [ 399.741823][ T24] spca501 2-1:0.125: probe with driver spca501 failed with error -22 [ 399.771685][ T24] usb 2-1: USB disconnect, device number 15 [ 400.084138][T10564] overlayfs: missing 'workdir' [ 401.203396][T10569] [U]  [ 401.593764][ T5810] usb 1-1: USB disconnect, device number 9 [ 401.682471][ T42] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 401.952431][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 402.607639][ T42] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 402.618122][ T42] usb 2-1: config 0 has no interface number 0 [ 402.624771][ T42] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 402.635055][ T42] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.645531][ T42] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 402.659468][ T42] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 402.668926][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.677167][ T42] usb 2-1: Product: syz [ 402.688735][ T42] usb 2-1: Manufacturer: syz [ 402.695634][ T42] usb 2-1: SerialNumber: syz [ 402.711247][T10595] fuse: Unknown parameter '0x0000000000000003' [ 402.728489][ T42] usb 2-1: config 0 descriptor?? [ 402.744474][T10583] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 402.963915][ T42] usb-storage 2-1:0.20: USB Mass Storage device detected [ 403.025143][ T42] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 403.080132][ T42] scsi host1: usb-storage 2-1:0.20 [ 403.145302][ T42] usb 2-1: USB disconnect, device number 16 [ 404.068246][T10610] overlayfs: missing 'workdir' [ 404.696378][ T29] audit: type=1400 audit(3931772179.477:915): avc: denied { write } for pid=10606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.927822][ T29] audit: type=1400 audit(3931772179.717:916): avc: denied { write } for pid=10634 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.044427][ T29] audit: type=1400 audit(3931772180.837:917): avc: denied { write } for pid=10643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.892417][ T29] audit: type=1400 audit(3931772182.427:918): avc: denied { write } for pid=10699 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.494421][ T29] audit: type=1400 audit(3931772184.277:919): avc: denied { write } for pid=10713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.753001][T10753] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1533'. [ 409.797333][ T29] audit: type=1400 audit(3931772184.587:920): avc: denied { write } for pid=10749 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.152555][ T805] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 410.985048][ T805] usb 3-1: Using ep0 maxpacket: 8 [ 411.011066][ T805] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 411.059975][ T805] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.094234][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.210827][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.249118][ T805] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.298687][ T805] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 411.321907][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.469307][ T29] audit: type=1400 audit(3931772186.257:921): avc: denied { write } for pid=10760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.610498][ T805] usb 3-1: usb_control_msg returned -32 [ 411.631980][ T805] usbtmc 3-1:16.0: can't read capabilities [ 411.722434][ T29] audit: type=1400 audit(3931772186.507:922): avc: denied { write } for pid=10793 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.912133][T10758] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 411.912162][ T5747] usb 3-1: USB disconnect, device number 18 [ 411.972079][T10796] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 412.272573][ T29] audit: type=1400 audit(3931772187.057:923): avc: denied { write } for pid=10798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.550097][ T29] audit: type=1800 audit(3931772187.337:924): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1550" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 412.733550][ T29] audit: type=1400 audit(3931772187.527:925): avc: denied { write } for pid=10816 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.082536][ T805] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 413.357860][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 413.469940][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.555173][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 413.612458][ T805] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 413.647668][ T29] audit: type=1400 audit(3931772188.417:926): avc: denied { create } for pid=10827 comm="syz.4.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 413.681019][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.737711][ T805] usb 2-1: config 0 descriptor?? [ 413.864445][ T805] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 414.244903][ T5810] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 414.331405][ T29] audit: type=1400 audit(3931772189.117:927): avc: denied { write } for pid=10831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.422590][ T5810] usb 4-1: device descriptor read/64, error -71 [ 414.549191][ T29] audit: type=1400 audit(3931772189.337:928): avc: denied { write } for pid=10859 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.133358][ T5810] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 416.136621][ T5810] usb 4-1: device descriptor read/64, error -71 [ 416.205603][ T805] usb 2-1: USB disconnect, device number 17 [ 416.253989][ T5810] usb usb4-port1: attempt power cycle [ 416.732456][ T5810] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 417.282473][ T5810] usb 4-1: device descriptor read/8, error -71 [ 419.922642][ T5810] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 420.072576][ T5810] usb 2-1: device descriptor read/64, error -71 [ 420.336560][ T5810] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 420.484724][ T5810] usb 2-1: device descriptor read/64, error -71 [ 420.612734][ T5810] usb usb2-port1: attempt power cycle [ 420.735732][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.850114][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.972539][ T5810] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 421.053757][ T5810] usb 2-1: device descriptor read/8, error -71 [ 421.197463][T10938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.290534][T10938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.363393][ T5810] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 421.445171][ T5810] usb 2-1: device descriptor read/8, error -71 [ 421.572798][ T5810] usb usb2-port1: unable to enumerate USB device [ 422.715035][ T805] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 422.944399][ T805] usb 1-1: no configurations [ 422.955980][ T805] usb 1-1: can't read configurations, error -22 [ 423.103604][ T805] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 423.283504][ T805] usb 1-1: no configurations [ 423.293249][ T805] usb 1-1: can't read configurations, error -22 [ 423.307501][ T805] usb usb1-port1: attempt power cycle [ 424.162510][ T805] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 424.204064][ T805] usb 1-1: no configurations [ 424.219378][ T805] usb 1-1: can't read configurations, error -22 [ 424.352478][ T42] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 424.363810][ T805] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 424.414674][ T805] usb 1-1: no configurations [ 424.421678][ T805] usb 1-1: can't read configurations, error -22 [ 424.438403][ T805] usb usb1-port1: unable to enumerate USB device [ 424.512626][ T42] usb 3-1: device descriptor read/64, error -71 [ 424.772457][ T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 424.838365][T11010] evm: overlay not supported [ 424.921878][ T42] usb 3-1: device descriptor read/64, error -71 [ 425.089307][ T42] usb usb3-port1: attempt power cycle [ 426.349301][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 426.885604][ T42] usb 3-1: device descriptor read/8, error -71 [ 427.102587][ T5747] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 427.125906][ T42] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 427.176304][ T42] usb 3-1: device descriptor read/8, error -71 [ 427.244168][ T29] audit: type=1400 audit(3931772202.037:929): avc: denied { create } for pid=11046 comm="syz.2.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 427.296007][ T5747] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.312516][ T42] usb usb3-port1: unable to enumerate USB device [ 427.320455][ T5747] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.278786][ T5747] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.288324][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.432407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 428.572405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 428.872404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 429.103532][ T5747] usb 4-1: usb_control_msg returned -32 [ 429.133682][ T5747] usbtmc 4-1:16.0: can't read capabilities [ 430.708591][ T5747] usb 4-1: USB disconnect, device number 21 [ 430.731108][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1631'. [ 430.740513][ T5810] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 430.892509][ T5810] usb 1-1: device descriptor read/64, error -71 [ 432.322948][ T5810] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 432.397185][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 432.484629][ T5810] usb 1-1: device descriptor read/64, error -71 [ 432.606233][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 432.625124][ T5810] usb usb1-port1: attempt power cycle [ 432.650848][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.691502][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 432.747874][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 432.770175][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 432.800147][ T9] usb 2-1: Manufacturer: syz [ 432.874556][ T9] usb 2-1: config 0 descriptor?? [ 432.992636][ T5810] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 433.041229][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 433.053850][ T5810] usb 1-1: device descriptor read/8, error -71 [ 433.342897][ T5810] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 433.360840][ T29] audit: type=1400 audit(3931772208.147:930): avc: denied { shutdown } for pid=11106 comm="syz.4.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 433.382425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 433.424111][ T5810] usb 1-1: device descriptor read/8, error -71 [ 433.553448][ T5810] usb usb1-port1: unable to enumerate USB device [ 434.317393][T11127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.413510][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.068560][ T9] usb 2-1: USB disconnect, device number 22 [ 435.753621][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 435.913574][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 435.922604][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 435.929145][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 435.941107][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.964498][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.981013][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 436.003959][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 436.035449][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.059796][ T9] usb 1-1: config 0 descriptor?? [ 436.140714][T11188] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1679'. [ 436.522332][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000C/input/input20 [ 437.479273][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000C/input/input21 [ 437.597905][ T9] kye 0003:0458:5013.000C: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 437.641792][T11204] fuse: Bad value for 'fd' [ 437.667501][ T9] usb 1-1: USB disconnect, device number 18 [ 438.029262][T11206] fido_id[11206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 440.782855][ T5747] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 441.042440][ T5747] usb 1-1: Using ep0 maxpacket: 16 [ 441.066828][ T5747] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 441.134463][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.200275][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.234695][ T5747] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 441.437606][ T5747] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 441.505498][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.543221][ T5747] usb 1-1: config 0 descriptor?? [ 441.842559][ T42] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 441.978740][ T5747] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000D/input/input22 [ 442.017532][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 442.039012][ T42] usb 3-1: not running at top speed; connect to a high speed hub [ 442.058594][ T42] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 442.078884][ T42] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 442.097635][ T5747] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000D/input/input23 [ 442.112198][ T42] usb 3-1: config 14 has no interface number 0 [ 442.118895][ T42] usb 3-1: config 14 has no interface number 1 [ 442.129441][ T42] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 442.143956][ T42] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 442.170229][ T5747] kye 0003:0458:5013.000D: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 442.197480][ T42] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 442.226003][ T42] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.242843][ T5747] usb 1-1: USB disconnect, device number 19 [ 442.311977][ T42] usb 3-1: config 14 interface 57 has no altsetting 0 [ 442.336956][ T42] usb 3-1: config 14 interface 228 has no altsetting 0 [ 442.369954][ T42] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 442.391861][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.269660][T11289] fido_id[11289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 443.285014][ T42] usb 3-1: Product: syz [ 443.289280][ T42] usb 3-1: Manufacturer: syz [ 443.301876][ T42] usb 3-1: SerialNumber: syz [ 443.801616][ T42] legousbtower 3-1:14.57: interrupt endpoints not found [ 443.920671][ T29] audit: type=1400 audit(3931772218.707:931): avc: denied { write } for pid=11302 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 444.200200][ T42] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 444.237782][ T42] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 445.457469][ C0] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 445.469039][ T9] usb 3-1: USB disconnect, device number 23 [ 445.494741][ T9] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 445.729803][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1722'. [ 446.511000][T11343] md: md2 stopped. [ 446.512275][T11349] syzkaller0: entered promiscuous mode [ 446.522234][T11349] syzkaller0: entered allmulticast mode [ 446.791632][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 446.810184][T11359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1729'. [ 446.907485][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1728'. [ 448.801688][T11393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1732'. [ 451.568686][T11416] binder: 11415:11416 ioctl c0306201 200000000080 returned -14 [ 452.971443][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1748'. [ 453.972129][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 454.164166][ T29] audit: type=1400 audit(3931772228.957:932): avc: denied { create } for pid=11457 comm="syz.2.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 456.730307][T11492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'. [ 456.936500][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1767'. [ 457.042488][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 457.066751][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'. [ 457.214136][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 457.271201][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.332129][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.385628][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 457.469974][ T42] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 457.517293][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.612536][ T42] usb 3-1: config 0 descriptor?? [ 458.043713][T11523] [U]  [ 458.762393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 458.982380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 459.224960][T11535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 459.324610][T11496] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1758'. [ 459.335893][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 459.349746][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 459.362669][ T42] usb 3-1: USB disconnect, device number 24 [ 459.412462][ T5810] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 460.010217][T11545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1780'. [ 460.196975][ T5810] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 460.346005][ T5810] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 460.366632][ T5810] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 460.387112][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.412774][T11532] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 460.432191][ T5810] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.806849][ T5810] usb 1-1: USB disconnect, device number 20 [ 462.155460][T11586] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1790'. [ 462.434433][ T5747] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 462.986400][ T5747] usb 2-1: Using ep0 maxpacket: 8 [ 463.155206][ T5747] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 463.155249][ T5747] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.155263][ T5747] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.155281][ T5747] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.155295][ T5747] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.155317][ T5747] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.155336][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.689384][ T5747] usb 2-1: usb_control_msg returned -32 [ 463.689422][ T5747] usbtmc 2-1:16.0: can't read capabilities [ 463.721370][ T5747] usb 2-1: USB disconnect, device number 23 [ 464.931539][T11631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.014454][ T29] audit: type=1400 audit(3931772239.797:933): avc: denied { create } for pid=11634 comm="syz.2.1805" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=blk_file permissive=1 [ 465.022168][T11639] binder: 11637:11639 ioctl c0306201 200000000080 returned -14 [ 466.514954][T11660] fuse: Bad value for 'fd' [ 467.559126][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1815'. [ 467.728953][T11674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 467.762597][T11674] block device autoloading is deprecated and will be removed. [ 468.571903][ T29] audit: type=1326 audit(3931772243.357:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 468.653365][ T29] audit: type=1326 audit(3931772243.397:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 468.708182][ T29] audit: type=1326 audit(3931772243.397:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 468.786661][ T29] audit: type=1326 audit(3931772243.407:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 468.863900][ T29] audit: type=1326 audit(3931772243.407:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 468.899094][T11695] fuse: Bad value for 'fd' [ 468.936792][ T29] audit: type=1326 audit(3931772243.407:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 468.992589][ T29] audit: type=1326 audit(3931772243.407:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 469.060516][ T29] audit: type=1326 audit(3931772243.417:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 469.124373][T11698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.142496][ T29] audit: type=1326 audit(3931772243.427:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.2.1820" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a299de99 code=0x7ffc0000 [ 469.801844][T11709] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1826'. [ 470.002927][ T5810] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 470.163475][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.176585][ T5810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 470.184966][ T5810] usb 1-1: not running at top speed; connect to a high speed hub [ 470.193414][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.204110][ T5810] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 470.212688][ T5810] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 470.221183][ T5810] usb 1-1: config 14 has no interface number 0 [ 470.227488][ T5810] usb 1-1: config 14 has no interface number 1 [ 470.236568][ T5810] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 470.247488][ T5810] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 470.262854][ T5810] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 470.274168][ T5810] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.287326][ T5810] usb 1-1: config 14 interface 57 has no altsetting 0 [ 470.294183][ T5810] usb 1-1: config 14 interface 228 has no altsetting 0 [ 470.302923][ T5810] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 470.312093][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.320282][ T5810] usb 1-1: Product: syz [ 470.324487][ T5810] usb 1-1: Manufacturer: syz [ 470.329072][ T5810] usb 1-1: SerialNumber: syz [ 470.741840][ T5810] legousbtower 1-1:14.57: interrupt endpoints not found [ 470.801107][T11748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.147880][ T5810] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 471.171485][ T5810] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 471.322632][ T5747] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 471.523320][ T5747] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 471.541563][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.562215][ T5747] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.581134][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.593070][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.605349][ T5747] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 471.618367][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.629629][ T5747] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.641404][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.655301][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.669138][ T5747] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 471.677034][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.687913][ T5747] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.699851][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.725686][ T5747] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.742850][ T5747] usb 2-1: string descriptor 0 read error: -22 [ 471.749230][ T5747] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 471.758787][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.775334][ T5747] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 471.943634][ T5810] usb 1-1: USB disconnect, device number 21 [ 471.955160][ T5810] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 471.986383][ T5747] usb 2-1: USB disconnect, device number 24 [ 472.795420][T11807] gretap0: left promiscuous mode [ 472.832064][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 472.832080][ T29] audit: type=1400 audit(3931772247.617:954): avc: denied { bind } for pid=11810 comm="syz.1.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 472.970333][T11807] bridge0: port 3(syz_tun) entered disabled state [ 473.005983][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.013260][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.462504][T11798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.789109][T11807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.863691][T11807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.945777][ T29] audit: type=1400 audit(3931772248.737:955): avc: denied { map } for pid=11815 comm="syz.3.1859" path="socket:[31771]" dev="sockfs" ino=31771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 474.608323][ T29] audit: type=1400 audit(3931772249.397:956): avc: denied { write } for pid=11830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.838378][ T29] audit: type=1400 audit(3931772249.627:957): avc: denied { write } for pid=11856 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.047530][T11885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.214029][ T29] audit: type=1400 audit(3931772251.997:958): avc: denied { write } for pid=11882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.356908][ T29] audit: type=1400 audit(3931772252.147:959): avc: denied { write } for pid=11906 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.588725][T11918] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1884'. [ 477.987748][ T29] audit: type=1400 audit(3931772252.777:960): avc: denied { write } for pid=11911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.190041][ T29] audit: type=1400 audit(3931772252.977:961): avc: denied { write } for pid=11952 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.458940][T11960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.339086][T11969] fuse: Bad value for 'rootmode' [ 481.308595][T12008] fuse: Bad value for 'fd' [ 481.484432][T11997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.686184][ T29] audit: type=1400 audit(3931772256.477:962): avc: denied { ioctl } for pid=12013 comm="syz.1.1919" path="socket:[32156]" dev="sockfs" ino=32156 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 483.899272][T12051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.542764][ T5715] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 484.704120][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 484.726324][ T5715] usb 2-1: not running at top speed; connect to a high speed hub [ 484.749086][ T5715] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 484.772639][ T5715] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 484.793332][ T5715] usb 2-1: config 14 has no interface number 0 [ 484.808334][ T5715] usb 2-1: config 14 has no interface number 1 [ 484.824169][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 484.852426][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 484.864706][ T5715] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 484.877666][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.896140][ T5715] usb 2-1: config 14 interface 57 has no altsetting 0 [ 484.912411][ T5715] usb 2-1: config 14 interface 228 has no altsetting 0 [ 484.929274][ T5715] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 484.948631][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.974757][ T5715] usb 2-1: Product: syz [ 484.984943][ T5715] usb 2-1: Manufacturer: syz [ 484.997449][ T5715] usb 2-1: SerialNumber: syz [ 485.808305][ T5715] legousbtower 2-1:14.57: interrupt endpoints not found [ 486.434012][ T5715] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 486.459157][ T5715] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 486.714823][ T5715] usb 2-1: USB disconnect, device number 25 [ 486.759207][ T5715] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 486.781410][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1944'. [ 487.496049][T12102] overlayfs: failed to resolve './bus': -2 [ 487.858409][T12093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.540455][T12113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 488.547396][T12113] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 488.555873][T12113] vhci_hcd vhci_hcd.0: Device attached [ 489.617966][T12115] vhci_hcd: connection closed [ 489.702805][ T5715] usb 36-1: SetAddress Request (2) to port 0 [ 489.761688][ T5715] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 489.814456][ T5954] vhci_hcd vhci_hcd.1: stop threads [ 489.847644][ T5954] vhci_hcd vhci_hcd.1: release socket [ 489.911847][ T5954] vhci_hcd vhci_hcd.1: disconnect device [ 490.172143][T12118] syzkaller0: entered promiscuous mode [ 490.179737][T12118] syzkaller0: entered allmulticast mode [ 490.690630][T12108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.324904][T12166] fuse: Bad value for 'fd' [ 493.468685][T12175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.073067][T12185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1979'. [ 494.732517][ T5810] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 494.892657][ T5715] usb 36-1: device descriptor read/8, error -110 [ 494.905499][ T5810] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.929505][ T5810] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 494.940120][ T5810] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.949448][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.961886][T12202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 494.982679][ T5810] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.033277][ T29] audit: type=1400 audit(3931772269.817:963): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 495.193267][ T5810] usb 4-1: USB disconnect, device number 22 [ 495.285212][ T5715] usb usb36-port1: attempt power cycle [ 495.472539][ T5734] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 495.632422][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 495.638743][ T5734] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 495.647296][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.657524][ T5734] usb 2-1: config 0 has no interface number 0 [ 495.663656][ T5734] usb 2-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.678664][ T5734] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 495.688030][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.696135][ T5734] usb 2-1: Product: syz [ 495.700365][ T5734] usb 2-1: Manufacturer: syz [ 495.705003][ T5734] usb 2-1: SerialNumber: syz [ 495.711996][ T5734] usb 2-1: config 0 descriptor?? [ 495.843369][ T5715] usb usb36-port1: unable to enumerate USB device [ 495.853896][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.922565][ T5734] usb-storage 2-1:0.20: USB Mass Storage device detected [ 495.935350][ T5734] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 496.025876][T12223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.461647][ T5734] usb 2-1: USB disconnect, device number 26 [ 496.715034][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1992'. [ 497.503590][T12194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.669926][T12243] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1997'. [ 497.729669][ T5734] IPVS: starting estimator thread 0... [ 497.982421][T12248] IPVS: using max 55 ests per chain, 132000 per kthread [ 498.878887][ T29] audit: type=1400 audit(3931772273.667:964): avc: denied { write } for pid=12244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.098861][ T29] audit: type=1400 audit(3931772273.887:965): avc: denied { write } for pid=12275 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.233635][T12284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.556358][ T29] audit: type=1400 audit(3931772274.347:966): avc: denied { write } for pid=12287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.666357][ T29] audit: type=1400 audit(3931772274.417:967): avc: denied { write } for pid=12306 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.991729][T12328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.240937][T12348] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2022'. [ 502.399594][T12295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.967055][T12356] binfmt_misc: register: failed to install interpreter file ./file0 [ 503.676442][T12350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.312040][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 505.590532][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 506.344649][T12412] fuse: Bad value for 'fd' [ 506.857794][T12428] fuse: Unknown parameter 'user_id00000000000000000000' [ 507.032826][T12432] 9pnet_virtio: no channels available for device syz [ 507.043706][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 507.057531][T12432] SET target dimension over the limit! [ 508.047736][T12445] fuse: Bad value for 'fd' [ 508.266421][T12455] fuse: Bad value for 'fd' [ 508.432675][T12391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.985935][T12472] syzkaller0: entered promiscuous mode [ 509.003992][T12472] syzkaller0: entered allmulticast mode [ 509.041057][T12472] tipc: Enabled bearer , priority 0 [ 509.083051][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 509.094150][T12471] tipc: Resetting bearer [ 509.151373][T12471] tipc: Disabling bearer [ 509.356023][T12494] fuse: Bad value for 'fd' [ 509.387961][T12495] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 510.072048][T12499] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2069'. [ 510.225826][T12503] binder: 12500:12503 ioctl c0306201 2000000003c0 returned -14 [ 510.781599][T12520] tipc: Enabling of bearer rejected, failed to enable media [ 511.278093][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.651955][ T29] audit: type=1400 audit(3931772287.437:968): avc: denied { setopt } for pid=12557 comm="syz.0.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 512.707448][T12559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2090'. [ 512.753101][T12559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2090'. [ 512.777331][T12556] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2091'. [ 512.780046][T12559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2090'. [ 514.675321][T12598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 514.695336][T12595] syzkaller0: entered promiscuous mode [ 514.706896][T12595] syzkaller0: entered allmulticast mode [ 514.810918][T12595] tipc: Started in network mode [ 514.827830][T12595] tipc: Node identity f2673b5e38db, cluster identity 4711 [ 514.839608][T12595] tipc: Enabled bearer , priority 0 [ 514.921416][T12594] tipc: Resetting bearer [ 515.119699][T12594] tipc: Disabling bearer [ 516.052713][T12616] syzkaller0: entered promiscuous mode [ 516.075489][T12616] syzkaller0: entered allmulticast mode [ 517.438091][T12632] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 517.950898][T12638] tipc: Enabling of bearer rejected, failed to enable media [ 518.154430][T12645] input: syz1 as /devices/virtual/input/input24 [ 518.324272][ T29] audit: type=1400 audit(3931772293.117:969): avc: denied { ioctl } for pid=12642 comm="syz.3.2121" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 518.355568][T12648] random: crng reseeded on system resumption [ 518.692624][ T5715] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 518.883880][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 518.898987][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.927771][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.965680][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 519.015408][ T5715] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 519.052502][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.070659][ T29] audit: type=1400 audit(3931772293.857:970): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 519.104975][ T5715] usb 3-1: config 0 descriptor?? [ 519.129650][T12670] syzkaller0: entered promiscuous mode [ 519.151163][T12670] syzkaller0: entered allmulticast mode [ 519.304907][T12674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.857014][ T5715] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 519.873972][ T5715] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 519.890368][ T5715] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 519.905804][ T5715] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 519.925353][ T5715] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 519.981446][ T5715] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 520.107473][ T29] audit: type=1400 audit(3931772294.877:971): avc: denied { name_bind } for pid=12679 comm="syz.0.2132" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 520.162113][ T5715] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 520.182946][ T5715] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 520.255150][ T5714] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 520.268192][ T5715] usb 3-1: USB disconnect, device number 25 [ 520.280904][ T5714] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 520.307807][ T5714] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 520.332931][ T5714] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 521.286519][T12715] syzkaller0: entered promiscuous mode [ 521.310332][T12715] syzkaller0: entered allmulticast mode [ 521.352459][ T5810] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 521.445125][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2143'. [ 521.513096][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 521.536897][ T5810] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 521.563569][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'. [ 521.566139][ T5810] usb 4-1: config 0 has no interface number 0 [ 521.599731][ T5810] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 521.630383][ T5810] usb 4-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.664732][ T5810] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 521.680749][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.699707][ T5810] usb 4-1: Product: syz [ 521.723366][ T5810] usb 4-1: Manufacturer: syz [ 521.734669][ T5810] usb 4-1: SerialNumber: syz [ 521.764823][ T5810] usb 4-1: config 0 descriptor?? [ 521.780500][T12713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 521.921105][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'. [ 522.001193][T12732] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2147'. [ 522.050896][ T5810] usb-storage 4-1:0.20: USB Mass Storage device detected [ 522.086274][T12737] fuse: Bad value for 'fd' [ 522.109604][ T5810] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 522.194227][T12740] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 522.275539][ T5810] usb 4-1: USB disconnect, device number 23 [ 522.569558][T12752] overlayfs: failed lookup in lower (newroot/442, name='file0', err=-40): overlapping layers [ 522.776693][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 524.766220][ T29] audit: type=1400 audit(3931772299.557:972): avc: denied { set_context_mgr } for pid=12778 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 524.786267][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2158'. [ 524.817329][T12781] binder: 12778:12781 ioctl c0306201 2000000003c0 returned -14 [ 526.122417][ T5714] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 526.272440][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 526.279507][ T5714] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 526.288167][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.298631][ T5714] usb 2-1: config 0 has no interfaces? [ 526.304311][ T5714] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 526.313778][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.483523][ T5714] usb 2-1: config 0 descriptor?? [ 527.548560][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.604173][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.637943][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.675328][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.724126][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.764758][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.805492][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.842594][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.872616][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.895206][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 527.940479][ T5810] usb 2-1: USB disconnect, device number 27 [ 528.203560][T12819] syzkaller0: entered promiscuous mode [ 528.215063][T12819] syzkaller0: entered allmulticast mode [ 528.482612][ T29] audit: type=1400 audit(3931772303.277:973): avc: denied { append } for pid=12830 comm="syz.1.2182" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 530.499617][T12846] fuse: Unknown parameter 'fd0x0000000000000003' [ 530.686427][T12854] fuse: Bad value for 'fd' [ 530.832113][T12856] hugetlbfs: Bad value '%' for mount option 'size' [ 530.832113][T12856] [ 530.842513][ T29] audit: type=1400 audit(3931772305.617:974): avc: denied { remount } for pid=12855 comm="syz.0.2192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 532.624696][T12871] fuse: Bad value for 'fd' [ 532.867524][T12879] __nla_validate_parse: 12 callbacks suppressed [ 532.867542][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 533.659579][T12896] tipc: Started in network mode [ 533.675720][T12896] tipc: Node identity c24727aabae5, cluster identity 4711 [ 533.698709][T12896] tipc: Enabled bearer , priority 0 [ 533.715823][T12894] tipc: Disabling bearer [ 533.942441][T12901] syzkaller0: entered promiscuous mode [ 533.948157][T12901] syzkaller0: entered allmulticast mode [ 534.515437][T12922] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 534.652488][T12922] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 534.662883][T12922] overlayfs: failed to look up (tracing) for ino (-66) [ 534.706242][ T29] audit: type=1400 audit(3931772309.297:975): avc: denied { mounton } for pid=12916 comm="syz.0.2211" path="/414/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 535.195322][T12926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2212'. [ 535.234972][T12926] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2212'. [ 535.677468][ T29] audit: type=1400 audit(3931772310.467:976): avc: denied { name_bind } for pid=12927 comm="syz.3.2214" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 536.547152][ T29] audit: type=1400 audit(3931772311.327:977): avc: denied { remount } for pid=12937 comm="syz.0.2216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 541.760631][T13003] syzkaller0: entered promiscuous mode [ 541.782523][T13003] syzkaller0: entered allmulticast mode [ 542.011929][T13018] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2239'. [ 542.033088][ T5715] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 542.091894][T13021] fuse: Bad value for 'fd' [ 542.230142][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 542.247132][ T5715] usb 2-1: not running at top speed; connect to a high speed hub [ 542.280812][ T5715] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 542.286076][T13023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2243'. [ 542.304195][ T5715] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 542.321542][ T5715] usb 2-1: config 14 has no interface number 0 [ 542.345802][ T5715] usb 2-1: config 14 has no interface number 1 [ 542.432544][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 542.481829][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 542.537584][ T5715] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 542.582368][ T5715] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.615716][ T5715] usb 2-1: config 14 interface 57 has no altsetting 0 [ 542.623764][ T5715] usb 2-1: config 14 interface 228 has no altsetting 0 [ 542.632872][ T5715] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 542.642452][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.661518][ T5715] usb 2-1: Product: syz [ 542.670736][ T5715] usb 2-1: Manufacturer: syz [ 542.679236][ T5715] usb 2-1: SerialNumber: syz [ 543.141516][ T5715] legousbtower 2-1:14.57: interrupt endpoints not found [ 543.357766][ T5715] legousbtower 2-1:14.228: get version request failed: -71 [ 543.376684][ T5715] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 543.411037][ T5715] usb 2-1: USB disconnect, device number 28 [ 546.212030][T13026] syzkaller0: entered promiscuous mode [ 546.217874][T13026] syzkaller0: entered allmulticast mode [ 546.480817][T13060] fuse: Bad value for 'fd' [ 546.551731][T13062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2254'. [ 546.591472][T13068] fuse: Bad value for 'fd' [ 546.949592][ T5810] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 547.621705][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 547.678254][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 547.690089][ T5810] usb 4-1: not running at top speed; connect to a high speed hub [ 547.709715][ T5810] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 547.732246][ T5810] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 547.771633][ T5810] usb 4-1: config 14 has no interface number 0 [ 547.779107][ T5810] usb 4-1: config 14 has no interface number 1 [ 547.793596][ T5810] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 547.822480][ T5810] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 547.841705][ T5810] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 547.853984][ T5810] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.867404][ T5810] usb 4-1: config 14 interface 57 has no altsetting 0 [ 547.874516][ T5810] usb 4-1: config 14 interface 228 has no altsetting 0 [ 547.896003][ T5810] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 547.902303][T13098] fuse: Bad value for 'fd' [ 547.912482][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 547.920118][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.934283][ T5810] usb 4-1: Product: syz [ 547.943175][ T5810] usb 4-1: Manufacturer: syz [ 547.947962][ T5810] usb 4-1: SerialNumber: syz [ 548.041099][T13105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2270'. [ 548.092630][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 548.664706][ T5810] legousbtower 4-1:14.57: interrupt endpoints not found [ 548.669932][T13112] qrtr: Invalid version 0 [ 548.941756][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 548.953040][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.962912][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.973147][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.979008][T13114] syzkaller1: entered promiscuous mode [ 548.983148][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.001790][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 549.012396][ T5810] legousbtower 4-1:14.228: get version request failed: -71 [ 549.019658][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.027308][T13114] syzkaller1: entered allmulticast mode [ 549.027806][ T5810] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 549.058038][ T5810] usb 4-1: USB disconnect, device number 24 [ 549.160181][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 549.250191][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 549.261959][ T10] usbtmc 3-1:16.0: can't read capabilities [ 549.332137][T13123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2277'. [ 549.490129][T13087] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 549.500909][ T5810] usb 3-1: USB disconnect, device number 26 [ 549.517961][T13135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.985280][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 552.464879][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2295'. [ 552.496473][T13190] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2294'. [ 552.795347][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 553.458737][T13228] binder: BINDER_SET_CONTEXT_MGR already set [ 553.483328][T13228] binder: 13227:13228 ioctl 4018620d 200000004a80 returned -16 [ 553.556132][ T29] audit: type=1400 audit(3931772328.347:978): avc: denied { call } for pid=13231 comm="syz.2.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 553.579562][T13232] binder_alloc: 13231: binder_alloc_buf, no vma [ 555.162579][T13259] binder: BINDER_SET_CONTEXT_MGR already set [ 555.199122][T13259] binder: 13258:13259 ioctl 4018620d 200000004a80 returned -16 [ 555.404024][T13266] binder_alloc: 13265: binder_alloc_buf, no vma [ 556.233655][ T5714] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 556.477940][ T5714] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.486510][ T5714] usb 1-1: config 0 has no interface number 0 [ 556.497287][ T5714] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 556.507135][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.516705][ T5714] usb 1-1: Product: syz [ 556.521000][ T5714] usb 1-1: Manufacturer: syz [ 556.525974][ T5714] usb 1-1: SerialNumber: syz [ 556.535679][ T5714] usb 1-1: config 0 descriptor?? [ 556.551205][ T5714] usb 1-1: selecting invalid altsetting 1 [ 556.561235][ T5714] dvb_ttusb_budget: ttusb_init_controller: error [ 556.569222][ T5714] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 556.679018][ T5714] DVB: Unable to find symbol stv0299_attach() [ 556.784873][ T5714] DVB: Unable to find symbol tda8083_attach() [ 556.799921][ T5714] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 556.857867][ T5714] usb 1-1: USB disconnect, device number 22 [ 557.297985][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.543003][T13362] binder: 13361:13362 ioctl c0306201 2000000003c0 returned -14 [ 561.283829][T13398] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 561.973114][ T29] audit: type=1400 audit(3931772336.767:979): avc: denied { mount } for pid=13411 comm="syz.0.2385" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 562.467986][T13445] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 563.380740][ T29] audit: type=1400 audit(3931772338.167:980): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 563.441624][ T29] audit: type=1326 audit(3931772338.227:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.0.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd18259de99 code=0x0 [ 563.772727][ T5714] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 564.181518][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 565.357241][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 565.368592][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 565.381880][ T5714] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 565.391234][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.399465][ T5714] usb 1-1: Product: syz [ 565.403837][ T5714] usb 1-1: Manufacturer: syz [ 565.412382][ T5714] usb 1-1: SerialNumber: syz [ 565.420505][ T5714] usb 1-1: config 0 descriptor?? [ 565.426480][T13461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.513244][ T5714] rc_core: IR keymap rc-streamzap not found [ 565.529386][ T5714] Registered IR keymap rc-empty [ 565.543711][ T5714] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 565.566653][ T5714] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 565.670034][T13490] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 566.019092][T13495] md: md2 stopped. [ 566.762203][ T10] usb 1-1: USB disconnect, device number 23 [ 568.235103][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2427'. [ 568.608946][ T29] audit: type=1400 audit(3931772343.397:982): avc: denied { mounton } for pid=13552 comm="syz.0.2434" path="/449/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 568.619137][T13553] overlay: filesystem on ./bus not supported as upperdir [ 568.709502][T13555] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 568.717847][T13555] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2431'. [ 568.727889][T13555] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 570.400078][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'. [ 570.513573][T13586] fuse: Bad value for 'group_id' [ 570.531023][T13586] fuse: Bad value for 'group_id' [ 570.693013][ T5810] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 570.868762][ T5810] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.895040][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.916975][ T5810] usb 1-1: Product: syz [ 570.927132][ T5810] usb 1-1: Manufacturer: syz [ 570.940196][ T5810] usb 1-1: SerialNumber: syz [ 571.885094][ T5810] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 571.899607][ T5810] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 571.900020][ T5810] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 571.900094][ T5810] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 571.900985][ T5810] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 571.954065][ T5810] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 571.971220][ T5810] usb 1-1: USB disconnect, device number 24 [ 571.986471][T13610] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 572.914974][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 573.230687][T13630] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 574.455790][T13635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 574.470969][T13635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 574.479128][T13635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 574.489680][T13635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 574.497336][T13635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 574.649222][T13638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2464'. [ 574.823807][ T6115] syz_tun (unregistering): left allmulticast mode [ 574.830256][ T6115] syz_tun (unregistering): left promiscuous mode [ 574.836943][ T6115] bridge0: port 3(syz_tun) entered disabled state [ 574.918867][T13641] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 574.945160][T13641] block device autoloading is deprecated and will be removed. [ 575.522081][T13633] lo speed is unknown, defaulting to 1000 [ 576.573735][T13635] Bluetooth: hci5: command tx timeout [ 576.723306][ T29] audit: type=1400 audit(3931772351.507:983): avc: denied { ioctl } for pid=13672 comm="syz.2.2471" path="/457/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 576.763430][T13633] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.797780][T13633] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.833484][T13633] bridge_slave_0: entered allmulticast mode [ 576.858540][T13633] bridge_slave_0: entered promiscuous mode [ 576.896118][T13633] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.915991][T13633] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.941903][T13633] bridge_slave_1: entered allmulticast mode [ 576.963122][T13633] bridge_slave_1: entered promiscuous mode [ 577.991989][T13633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.036634][T13633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.153207][T13633] team0: Port device team_slave_0 added [ 578.169062][T13633] team0: Port device team_slave_1 added [ 578.222425][ T5715] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 578.257426][T13633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.277998][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.342033][T13633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.379378][T13633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.392408][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 578.418680][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.459444][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.473838][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.493595][T13633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.506843][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 578.531336][ T5715] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 578.553340][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.652461][T13635] Bluetooth: hci5: command tx timeout [ 578.671904][ T5715] usb 2-1: config 0 descriptor?? [ 579.248175][T13633] hsr_slave_0: entered promiscuous mode [ 579.303133][T13633] hsr_slave_1: entered promiscuous mode [ 579.303675][ T5715] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 579.309289][T13633] debugfs: 'hsr0' already exists in 'hsr' [ 579.323674][T13633] Cannot create hsr debugfs directory [ 579.373859][ T5715] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 579.415493][ T5715] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 579.447990][ T5715] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 579.485840][ T5715] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 579.528571][ T5715] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 579.534010][T13702] ubi: refuse attaching mtd1 - zero erasesize flash is not supported [ 579.707104][ T5715] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 579.735908][ T5715] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 579.823099][T11814] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 579.848297][ T5715] usb 2-1: USB disconnect, device number 29 [ 579.859516][T11814] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 579.902696][T11814] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 579.954646][T11814] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 580.315367][T13714] binder: BINDER_SET_CONTEXT_MGR already set [ 580.393594][T13714] binder: 13712:13714 ioctl 4018620d 200000004a80 returned -16 [ 580.673280][T13633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 580.720735][T13633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.738247][T13635] Bluetooth: hci5: command tx timeout [ 580.753172][T13633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 580.807931][T13633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.838760][T13633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 580.885119][T13633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.909213][T13633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 580.960741][T13633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.982227][T13723] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2488'. [ 581.280045][T13633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.330854][T13735] tipc: Enabled bearer , priority 0 [ 581.402260][T13633] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.441095][T13735] tipc: Resetting bearer [ 581.480495][T13734] tipc: Disabling bearer [ 581.538299][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.545415][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.624347][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.631429][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.669966][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2502'. [ 582.782174][T13633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.812511][T13635] Bluetooth: hci5: command tx timeout [ 582.900681][T13776] md: md2 stopped. [ 584.641303][T13633] veth0_vlan: entered promiscuous mode [ 584.650803][T13633] veth1_vlan: entered promiscuous mode [ 584.671843][T13633] veth0_macvtap: entered promiscuous mode [ 584.680776][T13633] veth1_macvtap: entered promiscuous mode [ 584.692291][T13633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.701517][T13633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.723893][ T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 584.764711][ T1015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.796043][ T1015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.821459][ T1015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.848477][ T1015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.927256][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 584.939769][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.992886][ T10] usb 3-1: config 0 has no interface number 0 [ 585.010882][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 585.031022][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.051164][ T5954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.064296][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 585.081654][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.085641][ T5954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.133153][ T10] usb 3-1: config 0 descriptor?? [ 585.157902][ T10] ldusb 3-1:0.55: Interrupt in endpoint not found [ 585.175096][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.184726][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.222609][ T29] audit: type=1400 audit(3931772360.007:984): avc: denied { mounton } for pid=13633 comm="syz-executor" path="/root/syzkaller.Ja2VBR/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 585.288586][ T29] audit: type=1400 audit(3931772360.047:985): avc: denied { mounton } for pid=13633 comm="syz-executor" path="/root/syzkaller.Ja2VBR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 585.317437][T13802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2508'. [ 585.369700][ T29] audit: type=1400 audit(3931772360.057:986): avc: denied { mounton } for pid=13633 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 585.371887][ T10] usb 3-1: USB disconnect, device number 27 [ 585.404602][T13804] fuse: Unknown parameter 'grou00000000000000000000' [ 586.440511][T13832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2520'. [ 587.165986][T13859] netlink: 'syz.3.2531': attribute type 10 has an invalid length. [ 587.271196][ T29] audit: type=1400 audit(3931772362.057:987): avc: denied { read write } for pid=13860 comm="syz.1.2532" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 587.313073][T13861] binder: 13860:13861 ioctl c00c6211 0 returned -14 [ 587.621906][ T29] audit: type=1400 audit(3931772362.097:988): avc: denied { open } for pid=13860 comm="syz.1.2532" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 588.233617][T13868] syz_tun: entered allmulticast mode [ 588.383196][ T29] audit: type=1400 audit(3931772363.177:989): avc: denied { sys_module } for pid=13862 comm="syz.3.2533" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 588.419297][T13872] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2533'. [ 588.519987][T13878] sctp: [Deprecated]: syz.2.2536 (pid 13878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.519987][T13878] Use struct sctp_sack_info instead [ 588.684838][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 588.924315][ T10] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 588.944869][ T10] usb 5-1: config 0 has no interface number 1 [ 588.965173][ T10] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 588.984148][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.999368][ T10] usb 5-1: config 0 interface 199 has no altsetting 0 [ 589.015309][ T10] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 589.024925][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 589.035375][ T10] usb 5-1: SerialNumber: syz [ 589.061367][ T10] usb 5-1: config 0 descriptor?? [ 589.083302][ T10] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 589.096876][ T10] uvcvideo 5-1:0.199: No valid video chain found. [ 589.248533][T13902] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.257307][ T29] audit: type=1400 audit(3931772364.037:990): avc: denied { write } for pid=13900 comm="syz.3.2544" path="socket:[39811]" dev="sockfs" ino=39811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 589.302509][T11814] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 589.354715][ T5715] usb 5-1: USB disconnect, device number 4 [ 589.430757][T13867] syz_tun: left allmulticast mode [ 589.472721][T11814] usb 2-1: Using ep0 maxpacket: 16 [ 589.595376][T11814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.607061][T11814] usb 2-1: no configurations [ 589.618366][T11814] usb 2-1: can't read configurations, error -22 [ 589.946329][ T5715] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 590.047469][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2552'. [ 590.061717][T13924] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2552'. [ 590.162388][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 590.172149][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.203151][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.241077][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 590.279733][ T5715] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 590.301844][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.334494][ T5715] usb 4-1: config 0 descriptor?? [ 591.618679][ T5715] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 591.618710][ T5715] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 591.618731][ T5715] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 591.618752][ T5715] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 591.618773][ T5715] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 591.644337][ T5715] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 591.681662][ T5715] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 591.681778][ T5715] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 591.833548][T11814] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 591.833701][ T805] usb 4-1: USB disconnect, device number 25 [ 591.835288][T11814] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 591.835344][T11814] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 591.835394][T11814] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 592.222480][T11814] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 592.373939][T11814] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 592.373984][T11814] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 592.374026][T11814] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.374047][T11814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.379206][T11814] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.561014][T11814] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 592.633589][T11814] usb 3-1: USB disconnect, device number 28 [ 592.812009][T13974] fuse: Unknown parameter 'grou00000000000000000000' [ 593.172486][T11814] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 593.846732][T13978] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 594.064589][T11814] usb 4-1: Using ep0 maxpacket: 16 [ 594.774262][T13986] tmpfs: Bad value for 'nr_blocks' [ 594.890130][T13978] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 595.054048][ T5627] Bluetooth: hci5: command 0x0c1a tx timeout [ 595.063257][T13978] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 595.114109][T11814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.136695][T11814] usb 4-1: no configurations [ 595.159091][T11814] usb 4-1: can't read configurations, error -22 [ 595.773423][T14021] syzkaller0: entered promiscuous mode [ 595.778968][T14021] syzkaller0: entered allmulticast mode [ 595.820228][T14023] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2584'. [ 595.858114][T14025] fuse: Unknown parameter 'group_i00000000000000000000' [ 595.927866][T14029] syzkaller0: entered promiscuous mode [ 595.945245][T14029] syzkaller0: entered allmulticast mode [ 596.068858][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 596.415168][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 597.153426][ T5627] Bluetooth: hci5: command 0x0c1a tx timeout [ 597.530227][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 597.558745][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.567944][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.596847][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.660781][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 597.999659][T11814] usb 5-1: USB disconnect, device number 5 [ 598.621485][T14056] fuse: Unknown parameter 'group_i00000000000000000000' [ 599.212453][ T5627] Bluetooth: hci5: command 0x0c1a tx timeout [ 599.448179][T14071] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 599.456571][T14071] overlayfs: overlapping lowerdir path [ 600.862378][ T805] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 601.034051][ T805] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 601.045374][ T805] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 601.055919][ T805] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 601.064986][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.075725][T14091] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.088552][ T805] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.153053][T11814] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 601.289712][ T10] usb 2-1: USB disconnect, device number 32 [ 601.323409][T11814] usb 5-1: Using ep0 maxpacket: 16 [ 601.331334][T11814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.344007][T11814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.355527][T11814] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 601.368853][T11814] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 601.379677][T11814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.389550][T11814] usb 5-1: config 0 descriptor?? [ 601.803870][T11814] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 601.828616][T11814] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 601.851589][T11814] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 601.867900][T11814] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 601.886475][T11814] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 601.950726][T11814] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 602.141312][T11814] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 602.152003][T11814] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 602.341529][T11814] usb 5-1: USB disconnect, device number 6 [ 602.347568][ T805] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 602.376985][ T805] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 603.177927][ T5954] thermal thermal_zone0: Temperature check failed (-19) [ 603.347315][ T805] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 603.358464][ T805] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 607.204654][ T29] audit: type=1400 audit(3931772381.887:991): avc: denied { append } for pid=14187 comm="syz.3.2637" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 607.357605][T14205] syz_tun: entered allmulticast mode [ 607.440502][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2642'. [ 607.461009][T14204] syz_tun: left allmulticast mode [ 607.952489][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 608.133531][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 608.171362][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.220793][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 608.255670][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.469314][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.943492][T14238] nbd3: detected capacity change from 0 to 63 [ 608.950355][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 608.967071][ T10] usb 2-1: USB disconnect, device number 33 [ 608.992656][ T2484] [ 608.995007][ T2484] ====================================================== [ 609.002010][ T2484] WARNING: possible circular locking dependency detected [ 609.009009][ T2484] syzkaller #0 Tainted: G L [ 609.014956][ T2484] ------------------------------------------------------ [ 609.021939][ T2484] kworker/0:1H/2484 is trying to acquire lock: [ 609.028062][ T2484] ffff88807c1ed268 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 609.037073][ T2484] [ 609.037073][ T2484] but task is already holding lock: [ 609.044404][ T2484] ffff888027f27178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 609.052890][ T2484] [ 609.052890][ T2484] which lock already depends on the new lock. [ 609.052890][ T2484] [ 609.063264][ T2484] [ 609.063264][ T2484] the existing dependency chain (in reverse order) is: [ 609.072255][ T2484] [ 609.072255][ T2484] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 609.079435][ T2484] lock_acquire+0x1b9/0x370 [ 609.084432][ T2484] __mutex_lock+0x1a4/0x1bd0 [ 609.089524][ T2484] nbd_queue_rq+0xba/0x1080 [ 609.094519][ T2484] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 609.100560][ T2484] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 609.107383][ T2484] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 609.113859][ T2484] blk_mq_run_work_fn+0x135/0x380 [ 609.119383][ T2484] process_one_work+0xa23/0x1940 [ 609.124808][ T2484] worker_thread+0x5ef/0xe50 [ 609.129888][ T2484] kthread+0x370/0x450 [ 609.134456][ T2484] ret_from_fork+0x72b/0xd50 [ 609.139552][ T2484] ret_from_fork_asm+0x1a/0x30 [ 609.144818][ T2484] [ 609.144818][ T2484] -> #5 (set->srcu){.+.+}-{0:0}: [ 609.151916][ T2484] lock_sync+0x9d/0x110 [ 609.156561][ T2484] __synchronize_srcu+0xa2/0x300 [ 609.161998][ T2484] blk_mq_quiesce_queue+0x149/0x1c0 [ 609.167694][ T2484] elevator_switch+0x17b/0x7e0 [ 609.172961][ T2484] elevator_change+0x352/0x530 [ 609.178215][ T2484] elevator_set_default+0x29e/0x360 [ 609.183912][ T2484] blk_register_queue+0x48e/0x630 [ 609.189431][ T2484] __add_disk+0x73f/0xe40 [ 609.194263][ T2484] add_disk_fwnode+0x118/0x480 [ 609.199530][ T2484] nbd_dev_add+0x77a/0xb10 [ 609.204443][ T2484] nbd_init+0x291/0x2b0 [ 609.209102][ T2484] do_one_initcall+0x11d/0x700 [ 609.214365][ T2484] kernel_init_freeable+0x6ea/0x7b0 [ 609.220079][ T2484] kernel_init+0x1f/0x1e0 [ 609.224956][ T2484] ret_from_fork+0x72b/0xd50 [ 609.230062][ T2484] ret_from_fork_asm+0x1a/0x30 [ 609.235344][ T2484] [ 609.235344][ T2484] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 609.243152][ T2484] lock_acquire+0x1b9/0x370 [ 609.248163][ T2484] __mutex_lock+0x1a4/0x1bd0 [ 609.253267][ T2484] elevator_change+0x1bc/0x530 [ 609.258547][ T2484] elevator_set_none+0x92/0xf0 [ 609.263820][ T2484] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 609.270141][ T2484] nbd_start_device+0x1a6/0xbd0 [ 609.275503][ T2484] nbd_genl_connect+0xff2/0x1a40 [ 609.280966][ T2484] genl_family_rcv_msg_doit+0x214/0x300 [ 609.287032][ T2484] genl_rcv_msg+0x560/0x800 [ 609.292041][ T2484] netlink_rcv_skb+0x159/0x420 [ 609.297318][ T2484] genl_rcv+0x28/0x40 [ 609.301816][ T2484] netlink_unicast+0x585/0x850 [ 609.307093][ T2484] netlink_sendmsg+0x8b0/0xda0 [ 609.312371][ T2484] ____sys_sendmsg+0xa4d/0xbe0 [ 609.317647][ T2484] ___sys_sendmsg+0x190/0x1e0 [ 609.322836][ T2484] __sys_sendmsg+0x160/0x210 [ 609.327946][ T2484] do_syscall_64+0x115/0x870 [ 609.333053][ T2484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.339453][ T2484] [ 609.339453][ T2484] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 609.348050][ T2484] lock_acquire+0x1b9/0x370 [ 609.353064][ T2484] blk_alloc_queue+0x610/0x790 [ 609.358340][ T2484] blk_mq_alloc_queue+0x174/0x290 [ 609.363878][ T2484] __blk_mq_alloc_disk+0x29/0x120 [ 609.369416][ T2484] nbd_dev_add+0x492/0xb10 [ 609.374340][ T2484] nbd_init+0x291/0x2b0 [ 609.379003][ T2484] do_one_initcall+0x11d/0x700 [ 609.384284][ T2484] kernel_init_freeable+0x6ea/0x7b0 [ 609.389992][ T2484] kernel_init+0x1f/0x1e0 [ 609.394827][ T2484] ret_from_fork+0x72b/0xd50 [ 609.399930][ T2484] ret_from_fork_asm+0x1a/0x30 [ 609.405208][ T2484] [ 609.405208][ T2484] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 609.412410][ T2484] lock_acquire+0x1b9/0x370 [ 609.417425][ T2484] fs_reclaim_acquire+0xc4/0x100 [ 609.422874][ T2484] __kmalloc_noprof+0xce/0x820 [ 609.428146][ T2484] tls_sw_sendmsg+0x10f4/0x2b10 [ 609.433511][ T2484] inet6_sendmsg+0x11c/0x140 [ 609.438621][ T2484] sock_sendmsg+0x28c/0x410 [ 609.443636][ T2484] splice_to_socket+0xb3c/0x11a0 [ 609.449083][ T2484] direct_splice_actor+0x192/0x690 [ 609.454700][ T2484] splice_direct_to_actor+0x345/0xa30 [ 609.460578][ T2484] do_splice_direct+0x174/0x240 [ 609.465938][ T2484] do_sendfile+0xadc/0xe20 [ 609.470865][ T2484] __x64_sys_sendfile64+0x1d8/0x220 [ 609.476569][ T2484] do_syscall_64+0x115/0x870 [ 609.481673][ T2484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.488076][ T2484] [ 609.488076][ T2484] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 609.496143][ T2484] lock_acquire+0x1b9/0x370 [ 609.501154][ T2484] lock_sock_nested+0x41/0xf0 [ 609.506351][ T2484] inet_shutdown+0x67/0x410 [ 609.511369][ T2484] nbd_mark_nsock_dead+0xae/0x5c0 [ 609.516908][ T2484] recv_work+0x5fb/0x8c0 [ 609.521659][ T2484] process_one_work+0xa23/0x1940 [ 609.527102][ T2484] worker_thread+0x5ef/0xe50 [ 609.532199][ T2484] kthread+0x370/0x450 [ 609.536786][ T2484] ret_from_fork+0x72b/0xd50 [ 609.541887][ T2484] ret_from_fork_asm+0x1a/0x30 [ 609.547166][ T2484] [ 609.547166][ T2484] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 609.554798][ T2484] check_prev_add+0xeb/0xe60 [ 609.559898][ T2484] __lock_acquire+0x136c/0x1a40 [ 609.565259][ T2484] lock_acquire+0x1b9/0x370 [ 609.570271][ T2484] __mutex_lock+0x1a4/0x1bd0 [ 609.575376][ T2484] nbd_queue_rq+0x428/0x1080 [ 609.580475][ T2484] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 609.586540][ T2484] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 609.593379][ T2484] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 609.599870][ T2484] blk_mq_run_work_fn+0x135/0x380 [ 609.605404][ T2484] process_one_work+0xa23/0x1940 [ 609.610848][ T2484] worker_thread+0x5ef/0xe50 [ 609.615946][ T2484] kthread+0x370/0x450 [ 609.620533][ T2484] ret_from_fork+0x72b/0xd50 [ 609.625637][ T2484] ret_from_fork_asm+0x1a/0x30 [ 609.630918][ T2484] [ 609.630918][ T2484] other info that might help us debug this: [ 609.630918][ T2484] [ 609.641126][ T2484] Chain exists of: [ 609.641126][ T2484] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 609.641126][ T2484] [ 609.653195][ T2484] Possible unsafe locking scenario: [ 609.653195][ T2484] [ 609.660626][ T2484] CPU0 CPU1 [ 609.665972][ T2484] ---- ---- [ 609.671318][ T2484] lock(&cmd->lock); [ 609.675286][ T2484] lock(set->srcu); [ 609.681694][ T2484] lock(&cmd->lock); [ 609.688180][ T2484] lock(&nsock->tx_lock); [ 609.692582][ T2484] [ 609.692582][ T2484] *** DEADLOCK *** [ 609.692582][ T2484] [ 609.700712][ T2484] 4 locks held by kworker/0:1H/2484: [ 609.705979][ T2484] #0: ffff88801f6e8940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 609.716502][ T2484] #1: ffffc90009537d08 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 609.728780][ T2484] #2: ffff888027762718 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x127/0x380 [ 609.738182][ T2484] #3: ffff888027f27178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 609.747152][ T2484] [ 609.747152][ T2484] stack backtrace: [ 609.753030][ T2484] CPU: 0 UID: 0 PID: 2484 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 609.753056][ T2484] Tainted: [L]=SOFTLOCKUP [ 609.753062][ T2484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 609.753073][ T2484] Workqueue: kblockd blk_mq_run_work_fn [ 609.753094][ T2484] Call Trace: [ 609.753102][ T2484] [ 609.753109][ T2484] dump_stack_lvl+0x100/0x190 [ 609.753131][ T2484] print_circular_bug.cold+0x178/0x1c7 [ 609.753159][ T2484] check_noncircular+0x146/0x160 [ 609.753181][ T2484] check_prev_add+0xeb/0xe60 [ 609.753198][ T2484] ? lockdep_hardirqs_on+0x78/0x100 [ 609.753226][ T2484] __lock_acquire+0x136c/0x1a40 [ 609.753249][ T2484] lock_acquire+0x1b9/0x370 [ 609.753267][ T2484] ? nbd_queue_rq+0x428/0x1080 [ 609.753288][ T2484] ? __pfx___might_resched+0x10/0x10 [ 609.753308][ T2484] __mutex_lock+0x1a4/0x1bd0 [ 609.753334][ T2484] ? nbd_queue_rq+0x428/0x1080 [ 609.753355][ T2484] ? nbd_queue_rq+0x428/0x1080 [ 609.753376][ T2484] ? unwind_next_frame+0x3c8/0x2090 [ 609.753403][ T2484] ? __pfx___mutex_lock+0x10/0x10 [ 609.753429][ T2484] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 609.753452][ T2484] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 609.753482][ T2484] ? ret_from_fork_asm+0x1a/0x30 [ 609.753509][ T2484] ? nbd_queue_rq+0x428/0x1080 [ 609.753529][ T2484] nbd_queue_rq+0x428/0x1080 [ 609.753554][ T2484] ? __pfx_nbd_queue_rq+0x10/0x10 [ 609.753579][ T2484] ? check_prev_add+0x354/0xe60 [ 609.753597][ T2484] ? do_raw_spin_lock+0x128/0x260 [ 609.753619][ T2484] ? lockdep_unlock+0x5a/0xc0 [ 609.753643][ T2484] ? __lock_acquire+0xd5b/0x1a40 [ 609.753663][ T2484] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 609.753692][ T2484] ? sbitmap_get+0x1d7/0x360 [ 609.753718][ T2484] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 609.753743][ T2484] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 609.753768][ T2484] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 609.753793][ T2484] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 609.753822][ T2484] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 609.753845][ T2484] blk_mq_run_work_fn+0x135/0x380 [ 609.753864][ T2484] ? blk_mq_run_work_fn+0x127/0x380 [ 609.753885][ T2484] process_one_work+0xa23/0x1940 [ 609.753906][ T2484] ? __pfx_process_one_work+0x10/0x10 [ 609.753925][ T2484] ? __pfx_blk_mq_run_work_fn+0x10/0x10 [ 609.753947][ T2484] worker_thread+0x5ef/0xe50 [ 609.753966][ T2484] ? __pfx_worker_thread+0x10/0x10 [ 609.753983][ T2484] ? kthread+0x13a/0x450 [ 609.754007][ T2484] ? __pfx_worker_thread+0x10/0x10 [ 609.754023][ T2484] kthread+0x370/0x450 [ 609.754047][ T2484] ? __pfx_kthread+0x10/0x10 [ 609.754074][ T2484] ret_from_fork+0x72b/0xd50 [ 609.754096][ T2484] ? __pfx_ret_from_fork+0x10/0x10 [ 609.754118][ T2484] ? __switch_to+0x800/0x10f0 [ 609.754144][ T2484] ? __pfx_kthread+0x10/0x10 [ 609.754169][ T2484] ret_from_fork_asm+0x1a/0x30 [ 609.754199][ T2484] [ 610.101290][T14244] lo speed is unknown, defaulting to 1000 [ 610.129286][ T2484] block nbd3: Send control failed (result -32) [ 610.131790][ T5627] block nbd3: Receive control failed (result -32) [ 610.135475][ T2484] block nbd3: Request send failed, requeueing [ 610.148230][T10200] block nbd3: Dead connection, failed to find a fallback [ 610.155272][T10200] block nbd3: shutting down sockets [ 610.160459][T10200] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 610.169554][T10200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 610.177522][T10200] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 610.187439][T10200] Buffer I/O error on dev nbd3, logical block 1, async page read [ 610.195218][T10200] Buffer I/O error on dev nbd3, logical block 2, async page read [ 610.202984][T10200] Buffer I/O error on dev nbd3, logical block 3, async page read [ 610.211829][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 610.221053][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 610.229667][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 610.238377][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 610.246912][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 610.254976][ T2484] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 610.264163][ T2484] Buffer I/O error on dev nbd3, logical block 0, async page read [ 610.271903][ T2484] Buffer I/O error on dev nbd3, logical block 1, async page read [ 610.280479][ T2484] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 610.289810][ T2484] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 610.299400][ T2484] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 610.308628][ T2484] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 610.318135][ T2484] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 610.327423][T11757] ldm_validate_partition_table(): Disk read failed. [ 610.334325][ T2484] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 610.344104][T11757] Dev nbd3: unable to read RDB block 0 [ 610.351182][T11757] nbd3: unable to read partition table [ 610.360854][T11757] ldm_validate_partition_table(): Disk read failed. [ 610.368788][T11757] Dev nbd3: unable to read RDB block 0 [ 610.375591][T11757] nbd3: unable to read partition table [ 618.733703][ T1314] ieee802154 phy1 wpan1: encryption failed: -22