last executing test programs: 18.207130119s ago: executing program 0 (id=152): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) 17.816789567s ago: executing program 0 (id=155): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000c95d"}) write$input_event(r0, 0x0, 0x0) 15.0903232s ago: executing program 0 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004340)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, &(0x7f0000002e40)=[{0x0}, {0x0}, {&(0x7f0000000640)="6fd47f19f5e26c81878cb1e9e59ffb52669ef8836a1ef68e5ad8e7b310e365a9048f86682d3c4403dce51a2795bb3ccbcc14c98c9e4d0df5f9543457d44b026cfb79849e2e5a3d812d9bfb5f603d7c7c233611bda3d2e59bba8e782b15fb930d4679884db7e0b7c920283505f12846c06b1d5c01632f41e5915d1bfd207ebd5593e53ae02f5b565606cbda7bc57a5ee0afba1c9f4dac189fa6e7650761105582a310c83e07376f96864f5d4429232e29482e7813f010fcba529088142803956e35510ea9d7ad01fc2ad1adde3677da042b4226db12ea62feda24b8834556c7f589b34aafe07968506e629f70eaafda532f", 0xf1}, {&(0x7f0000001e00)="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", 0xd07}, {&(0x7f0000002e00)}], 0x5, &(0x7f0000002ec0)=ANY=[@ANYBLOB="18000000000000008400000007000000ffffffff06e4ffff17000000000000008400000007000000ac14141000000000"], 0x30}, {&(0x7f0000002f00)=@in6={0xa, 0x4e23, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1c, &(0x7f0000004080)=[{&(0x7f0000002f40)="a793cb8f1c3f3020b4fea6aa748b99e3a33d448e0296c050fec47fa8f4228e926df9fcc304ab1ccc9981d096f12a697edc461293f12c199de8e3eabac55f47b8a4590c1227eedea3c8793b12901bb10d42ea34beaab02952750da2cc4a5c406402fb27e8a587e267a98666857b87dab5260e89b9c70a184eb3a85c5368", 0x7d}, {0x0}, {&(0x7f0000003040)="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", 0xfde}, {&(0x7f0000004040)="620224bfb3b72265c52b7603ba9a50c8dd66f26a56aaf13734447f51e46acde6701fe5b283515e161213029bfa", 0x2d}], 0x4, 0x0, 0x0, 0x48014}, {&(0x7f00000040c0)=@in6={0xa, 0x4e21, 0x6, @private2, 0x1000}, 0x1c, &(0x7f0000004300)=[{&(0x7f0000004100)="70225d6295e00a4a1a7e467a993f3e5edd574d58895ae65dd67401447290511e06be978d1f56a3d97fed2f83287c2fbafc7181617f2d9ed9ce2c3d9a67fefd34bc4deba424242d792015958fafe25c3255da0bf429a474159ad25e34fdafbef4", 0x60}, {&(0x7f0000004180)="4f70851b89002486a7caf0ae433757b7bacbf05f7c9e27384e96e13e821f9693c8183a52feb201cc0344176b2539adc8ef907c8d58d588d1803e0b7d1fea624bbe36f19165b1aeaee64a1b4ae02b92f07e842394b561d6edbb7ea4ead08cccf2920dcb49348d45f2fe983239808ee2630d7f9b3eaaf598167a003fd76577e2040fe4dba09f980e56", 0x88}, {&(0x7f0000004240)="e54750d50cccb4c44e848f10a9e0c571c969047a0890a86e126166ae2718d5eb3229a9281036d4b7e91328a83908aa5dd78329f8dac1d4d658686e635854460979237f2a18d17af679c87eea5973b4018807e60e797c007a9de19437d1e36b95d4e0a6fa2d76173521048f627f50ec62090e", 0x72}], 0x3, 0x0, 0x0, 0x4c085}], 0x3, 0x0) r3 = getpid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001d00)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[r3], 0x1}, 0x58) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r4, &(0x7f0000001180)="205055ddf0c8311af320f7f8f083e0ddeb4d40961ddfae27e243814d76a97200f43e27961ecebef9fb5368a47ce6d0662223d0732483c5649324a914fb1387f279c0e25c1d608ab1a5663cb3819e4e0cb43b061da03658c22d735fb05cafb1212323665a95999e6dbcbb05d9411ee3a74059d2eaf67bda7c0cdcbe8cee811d9a17122ccdd22c14787b46f2d4e0953ce8d858416123c973a7821038dbe7cb6b37772c471ff36526", 0xa7, 0x4048810, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13.453169254s ago: executing program 0 (id=165): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000060000000b"], 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x4000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000180)={0x6, @output={0x0, 0x1, {0x1000, 0x9}, 0x7, 0x666a}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x9, 0x80, 0x3e, 0x9}, 'syz0\x00', 0x2d}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x40}, 0x38) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004090054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c2403"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 12.850480019s ago: executing program 2 (id=168): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60000, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x54022, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 12.676673008s ago: executing program 1 (id=170): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60000, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x54022, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 12.37658709s ago: executing program 2 (id=172): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb87", 0xba}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbc", 0x88}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423bce", 0x5b}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e1", 0x44}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba420baf", 0x4f}, {&(0x7f0000000640)="1cc96615eecaacfe", 0x8}], 0x6) write(r3, &(0x7f0000001e00)="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", 0x1cc) 11.65063416s ago: executing program 1 (id=174): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xc, &(0x7f00000003c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x80000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket(0x1e, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 11.312627839s ago: executing program 2 (id=176): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) writev(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffdfc, 0xffffffffffffffff, 0x0, 0x800, 0xffffffff, 0x4, 0x400}, 0x0, &(0x7f0000001340)={0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffb}, 0x0, 0x0) 9.553165433s ago: executing program 1 (id=177): io_setup(0x401, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x24000840) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.253377992s ago: executing program 4 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8.866421981s ago: executing program 3 (id=181): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 8.829060955s ago: executing program 4 (id=182): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x200008a0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) 8.802256424s ago: executing program 3 (id=183): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="7379730000009419c20882310e8f72f225164f9e"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) unshare(0x64000600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) 8.768741963s ago: executing program 2 (id=184): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) mremap(&(0x7f000048b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00003c9000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead35a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000000000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc9634782", 0x149}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3555, &(0x7f0000000140)={0x0, 0x708f, 0x8000, 0x2, 0x4f, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050183fbaf771e25ff09eaa00109012af19ebc8704012930"], 0x0}, 0x0) 8.689944436s ago: executing program 4 (id=185): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="7379730000009419c20882310e8f72f225164f9e"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) unshare(0x64000600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) 7.0471734s ago: executing program 1 (id=186): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb87", 0xba}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbc", 0x88}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423bce", 0x5b}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e1", 0x44}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba420baf", 0x4f}, {&(0x7f0000000640)="1cc96615eecaacfe", 0x8}], 0x6) write(r3, &(0x7f0000001e00)="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", 0x325) 6.195294511s ago: executing program 0 (id=187): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) unshare(0x24060400) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.056438923s ago: executing program 1 (id=188): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404e881) syz_clone3(&(0x7f00000036c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f0000000400)=""/216, 0xd8, 0x0, 0x0}, 0x58) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0xc041) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) dup2(r4, r0) 5.824070446s ago: executing program 1 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0xc580, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$EVIOCGSW(r1, 0x8040451b, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r7 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, 0x0, 0x5, &(0x7f00000002c0), 0x3}}) sendfile(r2, r1, 0x0, 0x23b) r8 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000000)=@ethtool_channels={0x11, 0x2, 0x0, 0x8c80, 0x0, 0x3, 0x100000, 0x0, 0x7}}) socket(0xa, 0x5, 0x0) 5.723469842s ago: executing program 3 (id=190): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x80000}}, 0x20}}, 0x24040045) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000040)="710d7d00b8024cfae93a602116b517353f4f0ef2f1a9af5d7899126e30dd81217673e1a3bd4624cd4837e8397416fb81", 0x30, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4040) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, {0x0, 0xd1, 0x1}}, 0xa) syz_genetlink_get_family_id$fou(0x0, r1) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 5.604306394s ago: executing program 4 (id=191): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 4.975298006s ago: executing program 3 (id=192): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x81}], 0x4, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x8) 4.307431572s ago: executing program 2 (id=193): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb87", 0xba}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbc", 0x88}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423bce", 0x5b}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e1", 0x44}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba420baf", 0x4f}, {&(0x7f0000000640)="1cc96615eecaacfe", 0x8}], 0x6) write(r3, &(0x7f0000001e00)="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", 0x325) 3.277914828s ago: executing program 3 (id=194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.200231709s ago: executing program 2 (id=195): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xc, &(0x7f00000003c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x80000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket(0x1e, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.187966608s ago: executing program 4 (id=196): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xc, &(0x7f00000003c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x80000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket(0x1e, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 267.004952ms ago: executing program 3 (id=197): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="7379730000009419c20882310e8f72f225164f9e"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) unshare(0x64000600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) 124.303059ms ago: executing program 0 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=199): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/15, 0xf}], 0x1) kernel console output (not intermixed with test programs): [ 55.187084][ T31] audit: type=1400 audit(1791088171.221:113): avc: denied { write } for pid=5466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.241439][ T31] audit: type=1400 audit(1791088171.271:114): avc: denied { write } for pid=5477 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.650841][ T31] audit: type=1400 audit(1791088171.681:115): avc: denied { write } for pid=5480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.711728][ T31] audit: type=1400 audit(1791088171.741:116): avc: denied { write } for pid=5491 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.916735][ T31] audit: type=1400 audit(1791088171.951:117): avc: denied { write } for pid=5494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.979246][ T31] audit: type=1400 audit(1791088172.011:118): avc: denied { write } for pid=5505 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.167519][ T31] audit: type=1400 audit(1791088172.201:119): avc: denied { write } for pid=5508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.222902][ T31] audit: type=1400 audit(1791088172.251:120): avc: denied { write } for pid=5519 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.423437][ T31] audit: type=1400 audit(1791088172.451:121): avc: denied { write } for pid=5522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.493625][ T31] audit: type=1400 audit(1791088172.521:122): avc: denied { write } for pid=5533 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 62.195514][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 62.195532][ T31] audit: type=1400 audit(1791088178.221:129): avc: denied { mounton } for pid=5587 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.205152][ T31] audit: type=1400 audit(1791088178.231:130): avc: denied { mount } for pid=5587 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.211373][ T5587] cgroup: Unknown subsys name 'net' [ 62.227818][ T31] audit: type=1400 audit(1791088178.261:131): avc: denied { unmount } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.359122][ T5587] cgroup: Unknown subsys name 'cpuset' [ 62.361577][ T5587] cgroup: Unknown subsys name 'rlimit' [ 62.480020][ T31] audit: type=1400 audit(1791088178.511:132): avc: denied { setattr } for pid=5587 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.480511][ T31] audit: type=1400 audit(1791088178.511:133): avc: denied { create } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.480785][ T31] audit: type=1400 audit(1791088178.511:134): avc: denied { write } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.481035][ T31] audit: type=1400 audit(1791088178.511:135): avc: denied { read } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.545102][ T31] audit: type=1400 audit(1791088178.571:136): avc: denied { mounton } for pid=5587 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.545516][ T31] audit: type=1400 audit(1791088178.571:137): avc: denied { mount } for pid=5587 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 62.633411][ T5591] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 62.633912][ T31] audit: type=1400 audit(1791088178.661:138): avc: denied { relabelto } for pid=5591 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.605984][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.861153][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.862008][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.863186][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.863346][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.864262][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.864432][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.865749][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.866514][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.866984][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.867351][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.867819][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.868833][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.869281][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.870327][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.874824][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.875242][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.875611][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.887933][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.889755][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.898024][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.898691][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.898847][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.912604][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.912765][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.912913][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.409345][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.409429][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.409535][ T5599] bridge_slave_0: entered allmulticast mode [ 67.410980][ T5599] bridge_slave_0: entered promiscuous mode [ 67.470232][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.470312][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.470403][ T5599] bridge_slave_1: entered allmulticast mode [ 67.471745][ T5599] bridge_slave_1: entered promiscuous mode [ 67.494688][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.494771][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.495069][ T5597] bridge_slave_0: entered allmulticast mode [ 67.498274][ T5597] bridge_slave_0: entered promiscuous mode [ 67.501243][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.501322][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.501426][ T5597] bridge_slave_1: entered allmulticast mode [ 67.502766][ T5597] bridge_slave_1: entered promiscuous mode [ 67.583581][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.617360][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.621686][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.621806][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.621994][ T5600] bridge_slave_0: entered allmulticast mode [ 67.622832][ T5600] bridge_slave_0: entered promiscuous mode [ 67.626118][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.628798][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.683379][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.683505][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.684378][ T5600] bridge_slave_1: entered allmulticast mode [ 67.685280][ T5600] bridge_slave_1: entered promiscuous mode [ 67.698172][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.698260][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.698354][ T5608] bridge_slave_0: entered allmulticast mode [ 67.700175][ T5608] bridge_slave_0: entered promiscuous mode [ 67.705170][ T5599] team0: Port device team_slave_0 added [ 67.708544][ T5599] team0: Port device team_slave_1 added [ 67.760755][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.760836][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.760932][ T5608] bridge_slave_1: entered allmulticast mode [ 67.762297][ T5608] bridge_slave_1: entered promiscuous mode [ 67.764379][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.764390][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.764409][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.777587][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.777670][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.778399][ T5598] bridge_slave_0: entered allmulticast mode [ 67.779891][ T5598] bridge_slave_0: entered promiscuous mode [ 67.798844][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.801381][ T5597] team0: Port device team_slave_0 added [ 67.803969][ T5597] team0: Port device team_slave_1 added [ 67.869273][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.869356][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.869452][ T5598] bridge_slave_1: entered allmulticast mode [ 67.871874][ T5598] bridge_slave_1: entered promiscuous mode [ 67.875727][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.887217][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.887231][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.887252][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.889641][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.889654][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.889674][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.906929][ T5609] Bluetooth: hci1: command tx timeout [ 67.934130][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.934146][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.934167][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.937215][ T5600] team0: Port device team_slave_0 added [ 67.965811][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.986929][ T5609] Bluetooth: hci2: command tx timeout [ 67.991796][ T5600] team0: Port device team_slave_1 added [ 67.998807][ T5599] hsr_slave_0: entered promiscuous mode [ 67.999694][ T5599] hsr_slave_1: entered promiscuous mode [ 68.000697][ T4918] Bluetooth: hci3: command tx timeout [ 68.000800][ T5601] Bluetooth: hci4: command tx timeout [ 68.000877][ T5609] Bluetooth: hci0: command tx timeout [ 68.005219][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.009379][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.095680][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.108909][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.108924][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.108945][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.217555][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.217571][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.217592][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.221949][ T5597] hsr_slave_0: entered promiscuous mode [ 68.222499][ T5597] hsr_slave_1: entered promiscuous mode [ 68.222847][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 68.222935][ T5597] Cannot create hsr debugfs directory [ 68.239085][ T5608] team0: Port device team_slave_0 added [ 68.241887][ T5608] team0: Port device team_slave_1 added [ 68.284124][ T5598] team0: Port device team_slave_0 added [ 68.325113][ T5598] team0: Port device team_slave_1 added [ 68.345904][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.345919][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.345938][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.399535][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.399551][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.399570][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.405288][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.405303][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.405322][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.430055][ T5600] hsr_slave_0: entered promiscuous mode [ 68.430906][ T5600] hsr_slave_1: entered promiscuous mode [ 68.431472][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 68.431491][ T5600] Cannot create hsr debugfs directory [ 68.462678][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.462695][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.462716][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.604610][ T5608] hsr_slave_0: entered promiscuous mode [ 68.605169][ T5608] hsr_slave_1: entered promiscuous mode [ 68.605517][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 68.605535][ T5608] Cannot create hsr debugfs directory [ 68.678984][ T5598] hsr_slave_0: entered promiscuous mode [ 68.679676][ T5598] hsr_slave_1: entered promiscuous mode [ 68.680009][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 68.680026][ T5598] Cannot create hsr debugfs directory [ 68.884954][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.897321][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.921055][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.925214][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.962460][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.964578][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.987883][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.990359][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.059572][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.063491][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.064155][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.069040][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.085798][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.093314][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.094156][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.100846][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.201469][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.207257][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.232344][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.238321][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.239288][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.246709][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.250331][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.268336][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.280268][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.301156][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.364645][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.364735][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.370316][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.370408][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.373755][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.385080][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.409659][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.413310][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.414051][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.424457][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.446248][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.449521][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.468162][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.479729][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.501369][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.501423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.502560][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.502611][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.602104][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.605530][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.629914][ T5600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.633595][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.640099][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.642264][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.650644][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.688128][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.692045][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.719826][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 69.719843][ T31] audit: type=1400 audit(1791088185.751:154): avc: denied { sys_module } for pid=5599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.842252][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.892885][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.933896][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.933981][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.977477][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.977563][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.986399][ T5609] Bluetooth: hci1: command tx timeout [ 69.990811][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.054208][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.064351][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.066265][ T5609] Bluetooth: hci4: command tx timeout [ 70.066283][ T5601] Bluetooth: hci0: command tx timeout [ 70.066290][ T5609] Bluetooth: hci3: command tx timeout [ 70.066304][ T5601] Bluetooth: hci2: command tx timeout [ 70.074695][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.074782][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.155167][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.155264][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.200946][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.271434][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.271533][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.292977][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.293071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.510279][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.550397][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.688923][ T5599] veth0_vlan: entered promiscuous mode [ 70.723370][ T5600] veth0_vlan: entered promiscuous mode [ 70.753771][ T5599] veth1_vlan: entered promiscuous mode [ 70.781984][ T5600] veth1_vlan: entered promiscuous mode [ 70.905098][ T5599] veth0_macvtap: entered promiscuous mode [ 70.924492][ T5599] veth1_macvtap: entered promiscuous mode [ 70.945649][ T5600] veth0_macvtap: entered promiscuous mode [ 70.986399][ T5600] veth1_macvtap: entered promiscuous mode [ 71.022152][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.041631][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.053257][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.092882][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.119476][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.187409][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.187752][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.188302][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.188487][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.196989][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197052][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.233573][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.234312][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.234350][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.234383][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.275166][ T5597] veth0_vlan: entered promiscuous mode [ 71.362747][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.381073][ T5597] veth1_vlan: entered promiscuous mode [ 71.514079][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.522632][ T862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.522677][ T862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.588574][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.588594][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.632457][ T5597] veth0_macvtap: entered promiscuous mode [ 71.655284][ T862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.655301][ T862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.669925][ T5597] veth1_macvtap: entered promiscuous mode [ 71.714597][ T31] audit: type=1400 audit(1791088187.741:155): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.OFz0zi/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.715204][ T31] audit: type=1400 audit(1791088187.741:156): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.730013][ T5608] veth0_vlan: entered promiscuous mode [ 71.738279][ T5608] veth1_vlan: entered promiscuous mode [ 71.752539][ T31] audit: type=1400 audit(1791088187.781:157): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.OFz0zi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.754358][ T31] audit: type=1400 audit(1791088187.781:158): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.759506][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.759522][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.763997][ T31] audit: type=1400 audit(1791088187.781:159): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.OFz0zi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.765930][ T31] audit: type=1400 audit(1791088187.781:160): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.OFz0zi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.783673][ T31] audit: type=1400 audit(1791088187.811:161): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.831467][ T31] audit: type=1400 audit(1791088187.861:162): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.845683][ T31] audit: type=1400 audit(1791088187.871:163): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="gadgetfs" ino=7871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.856072][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.910221][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.970984][ T5608] veth0_macvtap: entered promiscuous mode [ 71.994788][ T5599] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.999009][ T986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.008670][ T5608] veth1_macvtap: entered promiscuous mode [ 72.066314][ T5609] Bluetooth: hci1: command tx timeout [ 72.077443][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.146435][ T5609] Bluetooth: hci3: command tx timeout [ 72.146465][ T5609] Bluetooth: hci4: command tx timeout [ 72.147484][ T4918] Bluetooth: hci2: command tx timeout [ 72.147510][ T4918] Bluetooth: hci0: command tx timeout [ 72.163334][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.193743][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.193872][ T5598] veth0_vlan: entered promiscuous mode [ 72.236246][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.236265][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.252938][ T5598] veth1_vlan: entered promiscuous mode [ 72.267743][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.267786][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.310627][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.310646][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.416510][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.568732][ T30] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 72.572659][ T30] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 72.572685][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.572704][ T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.575827][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.575851][ T30] usb 3-1: Product: syz [ 72.575866][ T30] usb 3-1: Manufacturer: syz [ 72.575881][ T30] usb 3-1: SerialNumber: syz [ 72.617247][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.618136][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.618933][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.839232][ T30] usb 3-1: cannot find UAC_HEADER [ 72.904872][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.904887][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.934255][ T5598] veth0_macvtap: entered promiscuous mode [ 73.014242][ T986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.165377][ T5798] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 73.165409][ T5798] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.166298][ T5798] vhci_hcd vhci_hcd.0: Device attached [ 73.173604][ T5598] veth1_macvtap: entered promiscuous mode [ 73.577498][ T25] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 73.657435][ T25] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 73.950008][ T5799] vhci_hcd: connection reset by peer [ 73.977048][ T1045] vhci_hcd vhci_hcd.0: stop threads [ 73.977909][ T1045] vhci_hcd vhci_hcd.0: release socket [ 73.978474][ T1045] vhci_hcd vhci_hcd.0: disconnect device [ 74.150429][ T5609] Bluetooth: hci1: command tx timeout [ 74.156955][ T5707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.226519][ T5609] Bluetooth: hci4: command tx timeout [ 74.226854][ T4918] Bluetooth: hci0: command tx timeout [ 74.226857][ T5601] Bluetooth: hci3: command tx timeout [ 74.226882][ T4918] Bluetooth: hci2: command tx timeout [ 74.378821][ T5707] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 74.401774][ T5707] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 74.401838][ T5707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.401911][ T5707] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.575938][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.576001][ T5707] usb 2-1: Product: syz [ 74.594952][ T5707] usb 2-1: Manufacturer: syz [ 74.595028][ T5707] usb 2-1: SerialNumber: syz [ 74.806473][ T30] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.140284][ T5707] usb 2-1: cannot find UAC_HEADER [ 75.500347][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 75.500364][ T31] audit: type=1400 audit(1791088191.531:192): avc: denied { allowed } for pid=5796 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.538369][ T31] audit: type=1400 audit(1791088191.571:193): avc: denied { create } for pid=5796 comm="syz.1.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.597805][ T31] audit: type=1400 audit(1791088191.631:194): avc: denied { map } for pid=5796 comm="syz.1.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.597853][ T31] audit: type=1400 audit(1791088191.631:195): avc: denied { read write } for pid=5796 comm="syz.1.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.600253][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.729691][ T5604] usb 3-1: USB disconnect, device number 2 [ 75.733556][ T5707] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.764109][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.764129][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.809458][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.885183][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.005455][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.037871][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.106220][ T31] audit: type=1400 audit(1791088192.131:196): avc: denied { read write } for pid=5819 comm="syz.0.7" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.111471][ T31] audit: type=1400 audit(1791088192.141:197): avc: denied { open } for pid=5819 comm="syz.0.7" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.182630][ T31] audit: type=1400 audit(1791088192.211:198): avc: denied { ioctl } for pid=5819 comm="syz.0.7" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.220340][ T5821] input: syz0 as /devices/virtual/input/input5 [ 76.273713][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 76.334112][ T862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.334131][ T862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.447340][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447372][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447392][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.506169][ T31] audit: type=1400 audit(1791088192.531:199): avc: denied { ioctl } for pid=5819 comm="syz.0.7" path="socket:[9376]" dev="sockfs" ino=9376 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.521250][ T5825] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.578841][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.578856][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.754625][ T1841] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.936093][ T1841] usb 4-1: Using ep0 maxpacket: 8 [ 76.937600][ T1841] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.942076][ T1841] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 76.942095][ T1841] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 76.942119][ T1841] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.942132][ T1841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.942145][ T1841] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 76.942167][ T1841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.949637][ T1841] usbtmc 4-1:16.0: bulk endpoints not found [ 77.375255][ T4931] usb 2-1: USB disconnect, device number 2 [ 77.476700][ T31] audit: type=1400 audit(1791088193.501:200): avc: denied { create } for pid=5829 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.481157][ T31] audit: type=1400 audit(1791088193.511:201): avc: denied { connect } for pid=5829 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.611981][ T5834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.612298][ T5834] unsupported nlmsg_type 40 [ 77.667897][ T5822] Zero length message leads to an empty skb [ 78.117026][ T5842] input: syz0 as /devices/virtual/input/input6 [ 78.155091][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 78.856240][ T25] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 79.478054][ T5707] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 79.541992][ T30] usb 4-1: USB disconnect, device number 2 [ 79.640530][ T5860] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 79.640558][ T5860] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.640685][ T5860] vhci_hcd vhci_hcd.0: Device attached [ 79.809146][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 79.823562][ T5707] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 79.912744][ T5707] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 79.969393][ T5707] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 80.067880][ T5851] ceph: No mds server is up or the cluster is laggy [ 80.589180][ T5861] vhci_hcd: connection reset by peer [ 80.618360][ T1167] vhci_hcd vhci_hcd.4: stop threads [ 80.618453][ T1167] vhci_hcd vhci_hcd.4: release socket [ 80.618642][ T1167] vhci_hcd vhci_hcd.4: disconnect device [ 81.286383][ T5873] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 81.286410][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.286873][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 81.562031][ T4931] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 81.645268][ T4931] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 81.904250][ T9] cfg80211: failed to load regulatory.db [ 82.117008][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 82.117030][ T31] audit: type=1400 audit(1791088198.151:217): avc: denied { read } for pid=5879 comm="syz.4.17" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.117216][ T31] audit: type=1400 audit(1791088198.151:218): avc: denied { open } for pid=5879 comm="syz.4.17" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.492524][ T31] audit: type=1400 audit(1791088198.521:219): avc: denied { ioctl } for pid=5879 comm="syz.4.17" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.538136][ T31] audit: type=1400 audit(1791088198.561:220): avc: denied { map } for pid=5879 comm="syz.4.17" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.585777][ T31] audit: type=1400 audit(1791088198.611:221): avc: denied { set_context_mgr } for pid=5879 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.702677][ T5881] binder: 5879:5881 ioctl c0306201 0 returned -14 [ 82.725216][ T5874] vhci_hcd: connection reset by peer [ 82.725430][ T862] vhci_hcd vhci_hcd.0: stop threads [ 82.725457][ T862] vhci_hcd vhci_hcd.0: release socket [ 82.725502][ T862] vhci_hcd vhci_hcd.0: disconnect device [ 83.077056][ T31] audit: type=1400 audit(1791088199.101:222): avc: denied { read write } for pid=5890 comm="syz.1.21" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.077582][ T31] audit: type=1400 audit(1791088199.111:223): avc: denied { open } for pid=5890 comm="syz.1.21" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.236161][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.388253][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 83.392450][ T5817] usb 5-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 83.393405][ T5817] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 83.393439][ T5817] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 83.396999][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.397022][ T5817] usb 5-1: Product: syz [ 83.397037][ T5817] usb 5-1: Manufacturer: syz [ 83.397051][ T5817] usb 5-1: SerialNumber: syz [ 83.594189][ T31] audit: type=1400 audit(1791088199.621:224): avc: denied { create } for pid=5895 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.936797][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.086123][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 84.088540][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 84.088585][ T25] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 84.090553][ T25] usb 1-1: config 4 has an invalid interface number: 86 but max is 0 [ 84.090576][ T25] usb 1-1: config 4 has no interface number 0 [ 84.090612][ T25] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 84.090640][ T25] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.090666][ T25] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 84.090689][ T25] usb 1-1: config 4 interface 86 has no altsetting 0 [ 84.092794][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.092816][ T25] usb 1-1: Product: syz [ 84.092831][ T25] usb 1-1: Manufacturer: syz [ 84.092847][ T25] usb 1-1: SerialNumber: syz [ 84.258192][ T5817] apple-mfi-fastcharge 5-1: USB disconnect, device number 2 [ 84.367220][ T31] audit: type=1400 audit(1791088200.351:225): avc: denied { name_bind } for pid=5907 comm="syz.1.25" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.367469][ T31] audit: type=1400 audit(1791088200.351:226): avc: denied { node_bind } for pid=5907 comm="syz.1.25" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.636072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.886057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.046074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.308144][ T5707] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 86.441549][ T25] cypress_m8 1-1:4.86: DeLorme Earthmate USB converter detected [ 86.481270][ T25] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 86.526979][ T25] usb 1-1: USB disconnect, device number 2 [ 86.568914][ T25] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 86.569591][ T25] cypress_m8 1-1:4.86: device disconnected [ 86.706215][ T5741] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.787892][ T4931] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 86.877680][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 86.879628][ T5741] usb 5-1: unable to get BOS descriptor or descriptor too short [ 86.879669][ T5741] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 86.880618][ T5741] usb 5-1: config 4 has an invalid interface number: 86 but max is 0 [ 86.880638][ T5741] usb 5-1: config 4 has no interface number 0 [ 86.880658][ T5741] usb 5-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 86.880673][ T5741] usb 5-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.880686][ T5741] usb 5-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 86.880697][ T5741] usb 5-1: config 4 interface 86 has no altsetting 0 [ 86.883826][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.883841][ T5741] usb 5-1: Product: syz [ 86.883849][ T5741] usb 5-1: Manufacturer: syz [ 86.883857][ T5741] usb 5-1: SerialNumber: syz [ 87.378343][ T5707] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.102780][ T5707] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.386265][ T5933] ceph: No mds server is up or the cluster is laggy [ 88.686175][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.848351][ T30] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.849334][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.881448][ T30] usb 4-1: config 0 descriptor?? [ 88.900442][ T30] cp210x 4-1:0.0: cp210x converter detected [ 89.546050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.906063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.916067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.926052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.046237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.306056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.449656][ T5741] cypress_m8 5-1:4.86: DeLorme Earthmate USB converter detected [ 90.532141][ T5741] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 90.571986][ T5741] usb 5-1: USB disconnect, device number 3 [ 90.613793][ T30] usb 4-1: cp210x converter now attached to ttyUSB1 [ 90.632158][ T5741] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 90.632688][ T5741] cypress_m8 5-1:4.86: device disconnected [ 90.844061][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 90.844074][ T31] audit: type=1400 audit(1791088206.871:230): avc: denied { ioctl } for pid=5949 comm="syz.0.36" path="socket:[8907]" dev="sockfs" ino=8907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.906716][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 91.166628][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.206138][ T5741] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.317335][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 91.317944][ T30] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 91.319038][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.319059][ T30] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.322806][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.322821][ T30] usb 1-1: Product: syz [ 91.322829][ T30] usb 1-1: Manufacturer: syz [ 91.322837][ T30] usb 1-1: SerialNumber: syz [ 91.369780][ T5741] usb 5-1: Using ep0 maxpacket: 32 [ 91.371444][ T30] usb 1-1: config 0 descriptor?? [ 91.380330][ T5741] usb 5-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 91.397126][ T5741] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 91.397150][ T5741] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 91.435763][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.435794][ T5741] usb 5-1: Product: syz [ 91.435809][ T5741] usb 5-1: Manufacturer: syz [ 91.435823][ T5741] usb 5-1: SerialNumber: syz [ 91.655156][ C0] Unknown status report in ack skb [ 91.703468][ T4931] usb 1-1: USB disconnect, device number 3 [ 91.950816][ T4931] usb 4-1: USB disconnect, device number 3 [ 91.961986][ T4931] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 91.971621][ T4931] cp210x 4-1:0.0: device disconnected [ 92.415202][ T5967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 92.415223][ T5967] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.422845][ T5967] vhci_hcd vhci_hcd.0: Device attached [ 92.756895][ T4931] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 92.816316][ T4931] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 93.250355][ T5969] vhci_hcd: connection reset by peer [ 93.253074][ T13] vhci_hcd vhci_hcd.3: stop threads [ 93.253199][ T13] vhci_hcd vhci_hcd.3: release socket [ 93.254026][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.401228][ T5741] apple-mfi-fastcharge 5-1: USB disconnect, device number 4 [ 96.581686][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.726350][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 96.727002][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 96.727922][ T30] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 96.727944][ T30] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 96.730096][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.730119][ T30] usb 5-1: Product: syz [ 96.730134][ T30] usb 5-1: Manufacturer: syz [ 96.730148][ T30] usb 5-1: SerialNumber: syz [ 97.019698][ T6004] input: syz0 as /devices/virtual/input/input7 [ 97.045396][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 97.265927][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.292638][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.294361][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.325997][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.329363][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.329909][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.364933][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.365457][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.379052][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.381614][ T6001] kvm [6000]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 97.684513][ T6012] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 97.684541][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.685557][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 97.825450][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 97.825479][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 97.900677][ T4931] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 98.006414][ T5741] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 98.068537][ T5741] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 98.489340][ T6013] vhci_hcd: connection reset by peer [ 98.507952][ T3312] vhci_hcd vhci_hcd.1: stop threads [ 98.508134][ T3312] vhci_hcd vhci_hcd.1: release socket [ 98.508342][ T3312] vhci_hcd vhci_hcd.1: disconnect device [ 100.951474][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 101.095949][ T6039] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 101.095975][ T6039] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.102803][ T6039] vhci_hcd vhci_hcd.0: Device attached [ 101.233012][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 101.332872][ T5817] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 101.356282][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.386232][ T5817] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 101.591932][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 101.663790][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 101.836116][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.836173][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.992068][ T6040] vhci_hcd: connection reset by peer [ 101.992645][ T3312] vhci_hcd vhci_hcd.2: stop threads [ 101.992719][ T3312] vhci_hcd vhci_hcd.2: release socket [ 101.992818][ T3312] vhci_hcd vhci_hcd.2: disconnect device [ 102.057564][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.057590][ T25] usb 2-1: Product: syz [ 102.057604][ T25] usb 2-1: Manufacturer: syz [ 102.057617][ T25] usb 2-1: SerialNumber: syz [ 103.198409][ T5741] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 103.219174][ T25] usb 2-1: config 0 descriptor?? [ 103.519235][ T25] usb 2-1: can't set config #0, error -71 [ 103.524042][ T25] usb 2-1: USB disconnect, device number 3 [ 103.557793][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 103.577227][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 104.751975][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 104.802157][ T6045] ceph: No mds server is up or the cluster is laggy [ 106.244325][ T6078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 106.244354][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.253485][ T6078] vhci_hcd vhci_hcd.0: Device attached [ 106.413439][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 106.413469][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 107.176640][ T6079] vhci_hcd: connection reset by peer [ 107.204279][ T43] vhci_hcd vhci_hcd.2: stop threads [ 107.204358][ T43] vhci_hcd vhci_hcd.2: release socket [ 107.205065][ T43] vhci_hcd vhci_hcd.2: disconnect device [ 107.276141][ T5817] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 107.939241][ T31] audit: type=1400 audit(1791088223.971:231): avc: denied { read append } for pid=6088 comm="syz.4.65" name="sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.939450][ T31] audit: type=1400 audit(1791088223.971:232): avc: denied { open } for pid=6088 comm="syz.4.65" path="/dev/sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.970447][ T31] audit: type=1400 audit(1791088223.981:233): avc: denied { map } for pid=6088 comm="syz.4.65" path="/dev/sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.970494][ T31] audit: type=1400 audit(1791088223.981:234): avc: denied { write execute } for pid=6088 comm="syz.4.65" path="/dev/sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.953708][ T31] audit: type=1400 audit(1791088225.981:235): avc: denied { mount } for pid=6110 comm="syz.1.70" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 109.981827][ T31] audit: type=1400 audit(1791088226.011:236): avc: denied { search } for pid=6110 comm="syz.1.70" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.011457][ T31] audit: type=1400 audit(1791088226.041:237): avc: denied { search } for pid=6110 comm="syz.1.70" name="usb_gadget" dev="configfs" ino=3261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.052179][ T31] audit: type=1400 audit(1791088226.081:238): avc: denied { write search } for pid=6110 comm="syz.1.70" name="usb_gadget" dev="configfs" ino=3261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.053957][ T31] audit: type=1400 audit(1791088226.081:239): avc: denied { add_name } for pid=6110 comm="syz.1.70" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.053989][ T31] audit: type=1400 audit(1791088226.081:240): avc: denied { create } for pid=6110 comm="syz.1.70" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 110.135359][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 110.150898][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.151335][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.153626][ T6112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6112 comm=syz.1.70 [ 112.688655][ T6128] netlink: 60 bytes leftover after parsing attributes in process `syz.4.74'. [ 112.997662][ T6131] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 112.997690][ T6131] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.998184][ T6131] vhci_hcd vhci_hcd.0: Device attached [ 113.163131][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 113.279702][ T5817] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 113.336292][ T5817] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 113.544903][ T9] apple-mfi-fastcharge 5-1: USB disconnect, device number 5 [ 113.904321][ T6132] vhci_hcd: connection reset by peer [ 113.923089][ T13] vhci_hcd vhci_hcd.3: stop threads [ 113.923368][ T13] vhci_hcd vhci_hcd.3: release socket [ 113.923538][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 116.417689][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.566632][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 116.568678][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.572546][ T9] usb 5-1: config 0 descriptor?? [ 116.608160][ T9] cp210x 5-1:0.0: cp210x converter detected [ 117.077547][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 117.081077][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 117.081102][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 117.127691][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 117.160698][ T9] usb 5-1: USB disconnect, device number 6 [ 117.165486][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 117.165753][ T9] cp210x 5-1:0.0: device disconnected [ 117.588364][ T6152] netlink: 'syz.3.81': attribute type 20 has an invalid length. [ 117.588380][ T6152] netlink: 'syz.3.81': attribute type 21 has an invalid length. [ 117.946121][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.069529][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'. [ 118.071715][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 118.071727][ T31] audit: type=1400 audit(1791088234.101:245): avc: denied { write } for pid=6154 comm="syz.0.82" name="functions" dev="configfs" ino=11288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.076309][ T30] usb 4-1: device descriptor read/64, error -71 [ 118.266090][ T31] audit: type=1400 audit(1791088234.291:246): avc: denied { write } for pid=6154 comm="syz.0.82" name="dev_addr" dev="configfs" ino=10640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 118.266140][ T31] audit: type=1400 audit(1791088234.291:247): avc: denied { open } for pid=6154 comm="syz.0.82" path="/13/config/usb_gadget/g1/functions/rndis.usb0/dev_addr" dev="configfs" ino=10640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 118.356130][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.456151][ T5817] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 118.488270][ T30] usb 4-1: device descriptor read/64, error -71 [ 118.507502][ T31] audit: type=1400 audit(1791088234.531:248): avc: denied { create } for pid=6159 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.598631][ T30] usb usb4-port1: attempt power cycle [ 118.754516][ T31] audit: type=1400 audit(1791088234.781:249): avc: denied { getopt } for pid=6159 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.950075][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.966575][ T30] usb 4-1: device descriptor read/8, error -71 [ 119.228642][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.254982][ T30] usb 4-1: device descriptor read/8, error -71 [ 119.335494][ T31] audit: type=1400 audit(1791088235.361:250): avc: denied { bind } for pid=6166 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.356332][ T30] usb usb4-port1: unable to enumerate USB device [ 119.636290][ T30] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.736356][ T5817] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.896099][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 119.905308][ T5817] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 120.344007][ T5817] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 120.344025][ T5817] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 120.345187][ T30] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 3.42 [ 120.365399][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.365445][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 120.365472][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.365493][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.381295][ T30] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.381321][ T30] usb 2-1: Manufacturer: syz [ 120.442036][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.442052][ T5817] usb 1-1: Product: syz [ 120.442060][ T5817] usb 1-1: Manufacturer: syz [ 120.442067][ T5817] usb 1-1: SerialNumber: syz [ 120.604781][ T30] usb 2-1: config 0 descriptor?? [ 120.881252][ T31] audit: type=1400 audit(1791088236.911:251): avc: denied { create } for pid=6179 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.968766][ T31] audit: type=1400 audit(1791088236.991:252): avc: denied { write } for pid=6179 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.025888][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.4.92'. [ 121.096147][ T30] rc_core: IR keymap rc-hauppauge not found [ 121.096181][ T30] Registered IR keymap rc-empty [ 121.096552][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.116387][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.154938][ T30] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 121.182234][ T30] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 121.250084][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.268220][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.288733][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.308388][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.327600][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.348650][ T5707] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 121.349842][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.418868][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.663591][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 121.687241][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 122.035186][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 122.048035][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 122.069835][ T30] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 122.137111][ T30] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 122.137129][ T30] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 122.168739][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.212952][ T30] usb 2-1: USB disconnect, device number 4 [ 122.273885][ T31] audit: type=1400 audit(1791088238.301:253): avc: denied { setopt } for pid=6203 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.298996][ T31] audit: type=1400 audit(1791088238.331:254): avc: denied { write } for pid=6203 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.386557][ T6191] ceph: No mds server is up or the cluster is laggy [ 122.736223][ T5707] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.886840][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 122.888329][ T5707] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 122.891027][ T5707] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 122.891050][ T5707] usb 5-1: config 0 has no interface number 0 [ 122.891072][ T5707] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 122.953069][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.953095][ T5707] usb 5-1: Product: syz [ 122.953110][ T5707] usb 5-1: Manufacturer: syz [ 122.953124][ T5707] usb 5-1: SerialNumber: syz [ 122.988633][ T5707] usb 5-1: config 0 descriptor?? [ 122.989418][ T6208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.201000][ T6208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.596263][ T5707] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 124.596727][ T5707] asix 5-1:0.188: probe with driver asix failed with error -61 [ 124.775789][ T6221] netlink: 'syz.1.101': attribute type 20 has an invalid length. [ 124.775810][ T6221] netlink: 'syz.1.101': attribute type 21 has an invalid length. [ 124.792098][ T31] audit: type=1400 audit(1791088240.821:255): avc: denied { connect } for pid=6222 comm="syz.2.100" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.828559][ T31] audit: type=1400 audit(1791088240.861:256): avc: denied { setopt } for pid=6222 comm="syz.2.100" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.841481][ T6223] xt_hashlimit: size too large, truncated to 1048576 [ 124.907772][ T31] audit: type=1400 audit(1791088240.931:257): avc: denied { write } for pid=6222 comm="syz.2.100" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.098456][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.208341][ T6233] futex_wake_op: syz.3.104 tries to shift op by 144; fix this program [ 125.266878][ T30] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 125.270422][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.270445][ T30] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 125.666576][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.666604][ T30] usb 2-1: Product: syz [ 125.666618][ T30] usb 2-1: Manufacturer: syz [ 125.666631][ T30] usb 2-1: SerialNumber: syz [ 126.454441][ T6221] netlink: 'syz.1.101': attribute type 2 has an invalid length. [ 126.454462][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 126.510393][ T6221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=6221 comm=syz.1.101 [ 126.510739][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.101'. [ 126.520759][ T30] usb 2-1: USB disconnect, device number 5 [ 126.615353][ T5707] usb 5-1: USB disconnect, device number 7 [ 126.646110][ T6243] futex_wake_op: syz.3.105 tries to shift op by 144; fix this program [ 127.284372][ T31] audit: type=1400 audit(1791088243.311:258): avc: denied { read write } for pid=6256 comm="syz.4.110" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.284620][ T31] audit: type=1400 audit(1791088243.311:259): avc: denied { open } for pid=6256 comm="syz.4.110" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.294994][ T31] audit: type=1400 audit(1791088243.321:260): avc: denied { map } for pid=6256 comm="syz.4.110" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.295247][ T31] audit: type=1400 audit(1791088243.321:261): avc: denied { execute } for pid=6256 comm="syz.4.110" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.727818][ T5707] apple-mfi-fastcharge 1-1: USB disconnect, device number 4 [ 130.175361][ T31] audit: type=1400 audit(1791088246.201:262): avc: denied { ioctl } for pid=6279 comm="syz.2.117" path="socket:[11969]" dev="sockfs" ino=11969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.195871][ T6281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 130.213515][ T6280] netlink: 108 bytes leftover after parsing attributes in process `syz.2.117'. [ 130.406077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.568177][ T6286] futex_wake_op: syz.4.119 tries to shift op by 144; fix this program [ 131.542674][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 131.576431][ T5707] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.962489][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.988374][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 132.069467][ T5707] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 132.192580][ T5707] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.192613][ T5707] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.192638][ T5707] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.192669][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.212720][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 132.214025][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 132.214937][ T25] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 132.214959][ T25] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 132.217157][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.217179][ T25] usb 3-1: Product: syz [ 132.217193][ T25] usb 3-1: Manufacturer: syz [ 132.217212][ T25] usb 3-1: SerialNumber: syz [ 132.255691][ T5741] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.327519][ T5707] usb 4-1: config 0 descriptor?? [ 132.415585][ T6298] kvm_pr_unimpl_wrmsr: 53 callbacks suppressed [ 132.415605][ T6298] kvm [6297]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 132.422380][ T5741] usb 1-1: Using ep0 maxpacket: 16 [ 132.437752][ T5741] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.437796][ T5741] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 132.441355][ T5741] usb 1-1: config 4 has an invalid interface number: 86 but max is 0 [ 132.441379][ T5741] usb 1-1: config 4 has no interface number 0 [ 132.441416][ T5741] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 132.441442][ T5741] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.441466][ T5741] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 132.441487][ T5741] usb 1-1: config 4 interface 86 has no altsetting 0 [ 132.443981][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.444004][ T5741] usb 1-1: Product: syz [ 132.444019][ T5741] usb 1-1: Manufacturer: syz [ 132.444033][ T5741] usb 1-1: SerialNumber: syz [ 132.546225][ T6303] ceph: No mds server is up or the cluster is laggy [ 132.629017][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.629057][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.436155][ T5817] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.589376][ T5817] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 133.590725][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 133.590742][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 133.590763][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 133.590783][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 133.594785][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.594809][ T5817] usb 2-1: Product: syz [ 133.594823][ T5817] usb 2-1: Manufacturer: syz [ 133.594838][ T5817] usb 2-1: SerialNumber: syz [ 133.679221][ T5817] usb 2-1: config 0 descriptor?? [ 133.693375][ T5817] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 135.731716][ T5817] scsi host1: usb-storage 2-1:0.0 [ 135.842941][ T6331] netlink: 108 bytes leftover after parsing attributes in process `syz.2.129'. [ 135.936801][ T5741] cypress_m8 1-1:4.86: DeLorme Earthmate USB converter detected [ 135.994797][ T5817] usb 2-1: USB disconnect, device number 6 [ 136.004943][ T5741] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 136.037270][ T5741] usb 1-1: USB disconnect, device number 5 [ 136.121142][ T5741] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 136.121681][ T5741] cypress_m8 1-1:4.86: device disconnected [ 136.687244][ T6344] input: syz0 as /devices/virtual/input/input9 [ 136.733236][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 137.019960][ T6354] syz.2.133 uses obsolete (PF_INET,SOCK_PACKET) [ 137.053055][ T6350] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 137.053082][ T6350] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.053382][ T6350] vhci_hcd vhci_hcd.0: Device attached [ 137.087584][ T31] audit: type=1400 audit(1791088253.121:263): avc: denied { ioctl } for pid=6345 comm="syz.2.133" path="socket:[13321]" dev="sockfs" ino=13321 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.141817][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 137.141846][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 137.316367][ T5817] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 137.376269][ T5817] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 137.738870][ T5707] usbhid 4-1:0.0: can't add hid device: -32 [ 137.738980][ T5707] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 137.828368][ T6352] vhci_hcd: connection reset by peer [ 137.854781][ T13] vhci_hcd vhci_hcd.1: stop threads [ 137.854877][ T13] vhci_hcd vhci_hcd.1: release socket [ 137.855101][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 139.295479][ T5754] usb 4-1: USB disconnect, device number 8 [ 139.551299][ T6368] input: syz0 as /devices/virtual/input/input10 [ 139.565510][ T6373] syzkaller0: entered promiscuous mode [ 139.565531][ T6373] syzkaller0: entered allmulticast mode [ 139.575967][ T31] audit: type=1400 audit(1791088255.601:264): avc: denied { create } for pid=6370 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.579890][ T31] audit: type=1400 audit(1791088255.611:265): avc: denied { write } for pid=6370 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.292649][ T5707] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 140.439660][ T31] audit: type=1400 audit(1791088256.471:266): avc: denied { read write } for pid=6339 comm="syz.0.131" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.439698][ T31] audit: type=1400 audit(1791088256.471:267): avc: denied { open } for pid=6339 comm="syz.0.131" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.439721][ T31] audit: type=1400 audit(1791088256.471:268): avc: denied { ioctl } for pid=6339 comm="syz.0.131" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.446131][ T5693] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.478366][ T30] apple-mfi-fastcharge 3-1: USB disconnect, device number 3 [ 140.596557][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 140.638034][ T5693] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.638839][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.641309][ T5693] usb 4-1: config 0 descriptor?? [ 140.643057][ T5693] cp210x 4-1:0.0: cp210x converter detected [ 140.697818][ T5707] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.716917][ T6375] ceph: No mds server is up or the cluster is laggy [ 140.896387][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.896434][ T5707] usb 1-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 140.899180][ T5707] usb 1-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 140.899195][ T5707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.904020][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.904044][ T5707] usb 1-1: Product: syz [ 140.904059][ T5707] usb 1-1: Manufacturer: syz [ 140.904092][ T5707] usb 1-1: SerialNumber: syz [ 141.095505][ T5693] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 141.105406][ T5693] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 141.105454][ T5693] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 141.123317][ T5693] usb 4-1: cp210x converter now attached to ttyUSB0 [ 141.134351][ T5693] usb 4-1: USB disconnect, device number 9 [ 141.148438][ T5693] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.149005][ T5693] cp210x 4-1:0.0: device disconnected [ 141.198493][ T5707] usb 1-1: unit 115 not found! [ 141.198527][ T5707] usb 1-1: unit 255 not found! [ 141.221308][ T5754] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.296590][ T5707] usb 1-1: USB disconnect, device number 6 [ 141.366095][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 141.368268][ T5754] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.368316][ T5754] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 141.395035][ T5754] usb 3-1: config 4 has an invalid interface number: 86 but max is 0 [ 141.395071][ T5754] usb 3-1: config 4 has no interface number 0 [ 141.395108][ T5754] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 141.395134][ T5754] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.395160][ T5754] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 141.395182][ T5754] usb 3-1: config 4 interface 86 has no altsetting 0 [ 141.402680][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.472678][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.472706][ T5754] usb 3-1: Product: syz [ 141.472721][ T5754] usb 3-1: Manufacturer: syz [ 141.472735][ T5754] usb 3-1: SerialNumber: syz [ 142.507884][ T5817] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 143.007545][ T31] audit: type=1400 audit(1791088259.011:269): avc: denied { read } for pid=6382 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.226440][ T5754] cypress_m8 3-1:4.86: DeLorme Earthmate USB converter detected [ 143.234666][ T5754] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 143.247527][ T5754] usb 3-1: USB disconnect, device number 4 [ 143.297214][ T5754] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 143.305169][ T5754] cypress_m8 3-1:4.86: device disconnected [ 144.089764][ T6414] netlink: 108 bytes leftover after parsing attributes in process `syz.4.140'. [ 144.235482][ T6416] tipc: Started in network mode [ 144.235502][ T6416] tipc: Node identity aaf0989bcf08, cluster identity 4711 [ 144.235641][ T6416] tipc: Enabled bearer , priority 0 [ 144.259933][ T6415] tipc: Disabling bearer [ 145.850251][ T6432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.746526][ T6440] input: syz0 as /devices/virtual/input/input11 [ 146.884032][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 146.908652][ T6438] input: syz0 as /devices/virtual/input/input12 [ 147.399524][ T5817] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.107610][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.107644][ T5817] usb 3-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 148.108850][ T5817] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 148.108873][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.111921][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.111944][ T5817] usb 3-1: Product: syz [ 148.111959][ T5817] usb 3-1: Manufacturer: syz [ 148.111973][ T5817] usb 3-1: SerialNumber: syz [ 148.400869][ T5817] usb 3-1: can't set config #1, error -71 [ 148.429644][ T5817] usb 3-1: USB disconnect, device number 5 [ 148.518895][ T6458] input: syz0 as /devices/virtual/input/input13 [ 148.596183][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.160'. [ 148.671993][ T5693] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.848464][ T5693] usb 2-1: Using ep0 maxpacket: 8 [ 148.849220][ T5693] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 148.850284][ T5693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.850306][ T5693] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.852264][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.852287][ T5693] usb 2-1: Product: syz [ 148.852302][ T5693] usb 2-1: Manufacturer: syz [ 148.852317][ T5693] usb 2-1: SerialNumber: syz [ 148.924552][ T6463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.162'. [ 150.362012][ T6465] kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 150.474115][ T31] audit: type=1326 audit(1791088266.501:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ff79e159 code=0x7ffc0000 [ 150.502839][ T31] audit: type=1326 audit(1791088266.511:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ff79e159 code=0x7ffc0000 [ 150.502876][ T31] audit: type=1326 audit(1791088266.511:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ff79e159 code=0x7ffc0000 [ 150.503301][ T31] audit: type=1326 audit(1791088266.531:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ff79e159 code=0x7ffc0000 [ 150.590284][ T31] audit: type=1326 audit(1791088266.621:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f81ff79e159 code=0x7ffc0000 [ 150.590335][ T31] audit: type=1326 audit(1791088266.621:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ff79e159 code=0x7ffc0000 [ 150.590543][ T31] audit: type=1326 audit(1791088266.621:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ff79e159 code=0x7ffc0000 [ 150.811510][ T5693] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 150.837425][ T5693] usb 2-1: USB disconnect, device number 7 [ 150.961070][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.398889][ T6481] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 151.563567][ T6484] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 151.716203][ T25] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 151.878235][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.884655][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.884722][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.884775][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.884895][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.289534][ T25] usb 5-1: config 0 descriptor?? [ 152.657709][ T6497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 152.657738][ T6497] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.666196][ T6497] vhci_hcd vhci_hcd.0: Device attached [ 152.813307][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 152.950542][ T30] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 153.007627][ T30] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 153.229514][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 153.230002][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.539807][ T6498] vhci_hcd: connection reset by peer [ 153.557550][ T25] usb 5-1: USB disconnect, device number 8 [ 153.578590][ T59] vhci_hcd vhci_hcd.1: stop threads [ 153.578619][ T59] vhci_hcd vhci_hcd.1: release socket [ 153.578730][ T59] vhci_hcd vhci_hcd.1: disconnect device [ 154.550649][ T31] audit: type=1400 audit(1791088270.581:277): avc: denied { ioctl } for pid=6510 comm="syz.1.177" path="socket:[13794]" dev="sockfs" ino=13794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.561953][ T6513] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 154.599289][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 154.709982][ T6509] input: syz0 as /devices/virtual/input/input15 [ 154.857805][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.894524][ T6518] tipc: Started in network mode [ 154.894553][ T6518] tipc: Node identity fe36d08819a1, cluster identity 4711 [ 154.894710][ T6518] tipc: Enabled bearer , priority 0 [ 154.943427][ T6517] tipc: Disabling bearer [ 154.975097][ T6520] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 154.986142][ T5754] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.006593][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 155.007264][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 155.008171][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.008194][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.010318][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.010341][ T25] usb 2-1: Product: syz [ 155.010355][ T25] usb 2-1: Manufacturer: syz [ 155.010370][ T25] usb 2-1: SerialNumber: syz [ 155.051356][ T25] usb 2-1: config 0 descriptor?? [ 155.149384][ T5754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.149429][ T5754] usb 1-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 155.150331][ T5754] usb 1-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 155.150354][ T5754] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.152925][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.152949][ T5754] usb 1-1: Product: syz [ 155.152963][ T5754] usb 1-1: Manufacturer: syz [ 155.152976][ T5754] usb 1-1: SerialNumber: syz [ 155.268852][ T5715] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.288570][ T5715] usb 2-1: USB disconnect, device number 8 [ 155.313940][ T5693] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 156.273736][ T5693] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 156.284488][ T5693] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 156.331885][ T5754] usb 1-1: unit 115 not found! [ 156.331910][ T5754] usb 1-1: unit 255 not found! [ 156.342227][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.394679][ T6535] ceph: No mds server is up or the cluster is laggy [ 156.473855][ T6538] ceph: No mds server is up or the cluster is laggy [ 156.556814][ T5754] usb 1-1: USB disconnect, device number 7 [ 156.584645][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 156.600449][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.618745][ T25] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.618776][ T25] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.618801][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.618830][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.648072][ T25] usb 3-1: config 0 descriptor?? [ 158.026407][ T5754] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.136215][ T30] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 158.206101][ T5754] usb 1-1: Using ep0 maxpacket: 8 [ 158.208821][ T5754] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 158.209730][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.243769][ T5754] usb 1-1: config 0 descriptor?? [ 158.254120][ T5754] usb 1-1: probing VID:PID(0424:012C) [ 158.264033][ T5754] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 158.264059][ T5754] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 158.264078][ T5754] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 158.264096][ T5754] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 158.264113][ T5754] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 158.690422][ T5754] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 158.759863][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.914872][ T5754] usb 1-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 158.927508][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.929879][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.948204][ T9] usb 5-1: config 0 descriptor?? [ 158.972863][ T9] cp210x 5-1:0.0: cp210x converter detected [ 159.390529][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 159.395804][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 159.395832][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 159.430956][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 159.456145][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 159.456243][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 159.490917][ T25] usb 3-1: USB disconnect, device number 6 [ 159.603390][ T6571] kvm [6570]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 159.672594][ T30] usb 5-1: USB disconnect, device number 9 [ 159.693226][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.693723][ T30] cp210x 5-1:0.0: device disconnected [ 160.795957][ T9] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-110 [ 160.812215][ T9] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 160.813966][ T9] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 161.114533][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.195'. [ 161.198917][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 161.198995][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 161.683070][ T6586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 161.683098][ T6586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.683277][ T6586] vhci_hcd vhci_hcd.0: Device attached [ 161.929117][ T6592] vhci_hcd: connection closed [ 162.037694][ T1912] vhci_hcd vhci_hcd.4: stop threads [ 162.037803][ T1912] vhci_hcd vhci_hcd.4: release socket [ 162.037875][ T1912] vhci_hcd vhci_hcd.4: disconnect device [ 163.353949][ T6584] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 163.353978][ T6584] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.354047][ T6584] vhci_hcd vhci_hcd.0: Device attached [ 163.686113][ T30] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 163.748671][ T30] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 163.769525][ T5817] usb 1-1: USB disconnect, device number 8 [ 163.967630][ T6591] vhci_hcd: connection reset by peer [ 163.969800][ T50] vhci_hcd vhci_hcd.2: stop threads [ 163.969821][ T50] vhci_hcd vhci_hcd.2: release socket [ 163.970516][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 163.987952][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 164.374691][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 164.643326][ T5817] ------------[ cut here ]------------ [ 164.643361][ T5817] ODEBUG: free active (active state 0) object: ffff88807d7fd270 object type: timer_list hint: vub300_inactivity_timer_expired+0x0/0x550 [ 164.643418][ T5817] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: kworker/0:9/5817 [ 164.673293][ T5817] Modules linked in: [ 164.678136][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 164.687669][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.698432][ T5817] Workqueue: usb_hub_wq hub_event [ 164.703930][ T5817] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 164.709835][ T5817] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 ac 1a 0c 41 56 48 8b 14 ed 40 4c 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 02 06 10 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 164.729532][ T5817] RSP: 0018:ffffc90004ef73c8 EFLAGS: 00010246 [ 164.735631][ T5817] RAX: dffffc0000000000 RBX: ffffc90004ef74b0 RCX: 0000000000000000 [ 164.743644][ T5817] RDX: ffffffff8c624b80 RSI: ffffffff8c624720 RDI: ffffffff91503570 [ 164.751621][ T5817] RBP: 0000000000000003 R08: ffff88807d7fd270 R09: ffffffff8bf312a0 [ 164.759657][ T5817] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c624720 [ 164.767632][ T5817] R13: ffffffff8bf312e0 R14: ffffffff88cb1470 R15: ffffc90004ef74c8 [ 164.775599][ T5817] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 164.784534][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.791138][ T5817] CR2: 0000001b32a22ff8 CR3: 000000005b2dc000 CR4: 00000000003526f0 [ 164.799697][ T5817] Call Trace: [ 164.802957][ T5817] [ 164.805864][ T5817] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 164.812978][ T5817] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 164.818794][ T5817] debug_check_no_obj_freed+0x4da/0x630 [ 164.824332][ T5817] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 164.830399][ T5817] ? ida_free+0x201/0x2f0 [ 164.834707][ T5817] ? wakeup_source_unregister.part.0+0x3a0/0x540 [ 164.841078][ T5817] ? device_release+0xd2/0x270 [ 164.845868][ T5817] ? device_remove_bin_file+0x40/0x40 [ 164.851299][ T5817] kfree+0x3d6/0x6d0 [ 164.855189][ T5817] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 164.861352][ T5817] device_release+0xd2/0x270 [ 164.865925][ T5817] kobject_put+0x1f7/0x640 [ 164.870349][ T5817] put_device+0x1f/0x30 [ 164.874483][ T5817] kref_put.constprop.0.isra.0+0x159/0x1d0 [ 164.880303][ T5817] vub300_disconnect+0x136/0x170 [ 164.885224][ T5817] usb_unbind_interface+0x1dd/0x9e0 [ 164.890433][ T5817] ? __pfx_usb_unbind_interface+0x10/0x10 [ 164.896170][ T5817] device_remove+0x12a/0x180 [ 164.901358][ T5817] device_release_driver_internal+0x44e/0x620 [ 164.907853][ T5817] bus_remove_device+0x2bc/0x560 [ 164.912782][ T5817] ? __pfx_bus_remove_device+0x10/0x10 [ 164.918252][ T5817] ? __pfx_device_remove_attrs+0x10/0x10 [ 164.923893][ T5817] device_del+0x376/0x9b0 [ 164.928267][ T5817] ? __pfx_device_del+0x10/0x10 [ 164.933103][ T5817] ? kobject_put+0xb9/0x640 [ 164.937662][ T5817] usb_disable_device+0x367/0x810 [ 164.942692][ T5817] usb_disconnect+0x2e2/0x9a0 [ 164.947378][ T5817] hub_event+0x1bb1/0x4420 [ 164.951798][ T5817] ? __lock_acquire+0x5c0/0x1f40 [ 164.956733][ T5817] ? __pfx_hub_event+0x10/0x10 [ 164.961471][ T5817] ? __bfs+0x30/0x2a0 [ 164.965428][ T5817] ? lock_acquire+0x1d1/0x380 [ 164.970114][ T5817] ? process_one_work+0xa2c/0x1b10 [ 164.975226][ T5817] ? process_one_work+0x906/0x1b10 [ 164.980337][ T5817] ? process_one_work+0x906/0x1b10 [ 164.985431][ T5817] process_one_work+0xac7/0x1b10 [ 164.990374][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 164.995729][ T5817] ? lock_acquire+0x1d1/0x380 [ 165.000411][ T5817] ? __pfx_hub_event+0x10/0x10 [ 165.005740][ T5817] worker_thread+0x5ef/0xe50 [ 165.010717][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 165.015811][ T5817] ? kthread+0x13a/0x450 [ 165.020058][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 165.025143][ T5817] kthread+0x373/0x450 [ 165.026117][ T6604] ceph: No mds server is up or the cluster is laggy [ 165.035781][ T5817] ? __pfx_kthread+0x10/0x10 [ 165.040375][ T5817] ret_from_fork+0x730/0xd60 [ 165.044946][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 165.050076][ T5817] ? __switch_to+0x800/0x10f0 [ 165.054736][ T5817] ? __pfx_kthread+0x10/0x10 [ 165.059326][ T5817] ret_from_fork_asm+0x1a/0x30 [ 165.064075][ T5817] [ 165.067089][ T5817] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.074356][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 165.083696][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.093729][ T5817] Workqueue: usb_hub_wq hub_event [ 165.098733][ T5817] Call Trace: [ 165.102001][ T5817] [ 165.104920][ T5817] dump_stack_lvl+0x100/0x190 [ 165.109643][ T5817] vpanic+0x553/0x970 [ 165.113616][ T5817] ? __pfx_vpanic+0x10/0x10 [ 165.118123][ T5817] panic+0xd1/0xe0 [ 165.121822][ T5817] ? __pfx_panic+0x10/0x10 [ 165.126221][ T5817] check_panic_on_warn.cold+0x19/0x34 [ 165.131577][ T5817] ? debug_print_object+0x198/0x2b0 [ 165.136770][ T5817] __warn.cold+0x191/0x318 [ 165.141175][ T5817] __report_bug+0x30f/0x440 [ 165.145664][ T5817] ? debug_print_object+0x198/0x2b0 [ 165.150851][ T5817] ? __pfx___report_bug+0x10/0x10 [ 165.155875][ T5817] ? stack_depot_save_flags+0x49a/0x9f0 [ 165.161410][ T5817] report_bug_entry+0xe2/0x290 [ 165.166155][ T5817] ? debug_print_object+0x1a5/0x2b0 [ 165.171351][ T5817] handle_bug+0x1cd/0x2a0 [ 165.175660][ T5817] exc_invalid_op+0x17/0x50 [ 165.180142][ T5817] asm_exc_invalid_op+0x1a/0x20 [ 165.184967][ T5817] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 165.190755][ T5817] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 ac 1a 0c 41 56 48 8b 14 ed 40 4c 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 02 06 10 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 165.210344][ T5817] RSP: 0018:ffffc90004ef73c8 EFLAGS: 00010246 [ 165.216393][ T5817] RAX: dffffc0000000000 RBX: ffffc90004ef74b0 RCX: 0000000000000000 [ 165.224341][ T5817] RDX: ffffffff8c624b80 RSI: ffffffff8c624720 RDI: ffffffff91503570 [ 165.232289][ T5817] RBP: 0000000000000003 R08: ffff88807d7fd270 R09: ffffffff8bf312a0 [ 165.240237][ T5817] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c624720 [ 165.248183][ T5817] R13: ffffffff8bf312e0 R14: ffffffff88cb1470 R15: ffffc90004ef74c8 [ 165.256135][ T5817] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 165.262804][ T5817] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 165.269461][ T5817] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 165.275595][ T5817] debug_check_no_obj_freed+0x4da/0x630 [ 165.281129][ T5817] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 165.287181][ T5817] ? ida_free+0x201/0x2f0 [ 165.291491][ T5817] ? wakeup_source_unregister.part.0+0x3a0/0x540 [ 165.297804][ T5817] ? device_release+0xd2/0x270 [ 165.302546][ T5817] ? device_remove_bin_file+0x40/0x40 [ 165.307890][ T5817] kfree+0x3d6/0x6d0 [ 165.311763][ T5817] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 165.317915][ T5817] device_release+0xd2/0x270 [ 165.322484][ T5817] kobject_put+0x1f7/0x640 [ 165.326889][ T5817] put_device+0x1f/0x30 [ 165.331035][ T5817] kref_put.constprop.0.isra.0+0x159/0x1d0 [ 165.336826][ T5817] vub300_disconnect+0x136/0x170 [ 165.341742][ T5817] usb_unbind_interface+0x1dd/0x9e0 [ 165.346920][ T5817] ? __pfx_usb_unbind_interface+0x10/0x10 [ 165.352615][ T5817] device_remove+0x12a/0x180 [ 165.357184][ T5817] device_release_driver_internal+0x44e/0x620 [ 165.363246][ T5817] bus_remove_device+0x2bc/0x560 [ 165.368159][ T5817] ? __pfx_bus_remove_device+0x10/0x10 [ 165.373593][ T5817] ? __pfx_device_remove_attrs+0x10/0x10 [ 165.379221][ T5817] device_del+0x376/0x9b0 [ 165.383529][ T5817] ? __pfx_device_del+0x10/0x10 [ 165.388354][ T5817] ? kobject_put+0xb9/0x640 [ 165.392843][ T5817] usb_disable_device+0x367/0x810 [ 165.397852][ T5817] usb_disconnect+0x2e2/0x9a0 [ 165.402513][ T5817] hub_event+0x1bb1/0x4420 [ 165.406913][ T5817] ? __lock_acquire+0x5c0/0x1f40 [ 165.411832][ T5817] ? __pfx_hub_event+0x10/0x10 [ 165.416570][ T5817] ? __bfs+0x30/0x2a0 [ 165.420531][ T5817] ? lock_acquire+0x1d1/0x380 [ 165.425195][ T5817] ? process_one_work+0xa2c/0x1b10 [ 165.430288][ T5817] ? process_one_work+0x906/0x1b10 [ 165.435392][ T5817] ? process_one_work+0x906/0x1b10 [ 165.440486][ T5817] process_one_work+0xac7/0x1b10 [ 165.445414][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 165.450785][ T5817] ? lock_acquire+0x1d1/0x380 [ 165.455451][ T5817] ? __pfx_hub_event+0x10/0x10 [ 165.460193][ T5817] worker_thread+0x5ef/0xe50 [ 165.464777][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 165.469867][ T5817] ? kthread+0x13a/0x450 [ 165.474090][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 165.479173][ T5817] kthread+0x373/0x450 [ 165.483223][ T5817] ? __pfx_kthread+0x10/0x10 [ 165.487791][ T5817] ret_from_fork+0x730/0xd60 [ 165.492363][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 165.497451][ T5817] ? __switch_to+0x800/0x10f0 [ 165.502107][ T5817] ? __pfx_kthread+0x10/0x10 [ 165.506676][ T5817] ret_from_fork_asm+0x1a/0x30 [ 165.511425][ T5817] [ 165.514665][ T5817] Kernel Offset: disabled [ 165.518976][ T5817] Rebooting in 86400 seconds..