last executing test programs: 10m33.933663989s ago: executing program 0 (id=810): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 10m33.170474544s ago: executing program 0 (id=813): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 10m30.092777792s ago: executing program 0 (id=823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newchain={0x200, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x1, 0xffe0}, {0x6, 0x9}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x1c0, 0x2, [@TCA_RSVP_ACT={0x1bc, 0x6, [@m_gact={0x188, 0x5, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0xfee, 0x0, 0x1, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xa, 0x3, 0xf1, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x1, 0x6, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x1, 0x9, 0xd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18ce}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ecc, 0x2}}]}, {0xe1, 0x6, "3323c9692a4e88ccfe0567bce3eeb3ff8d9f12e00b2d96a2d88090115a6899248e6ceeaba6f4cd59a9c2cb865482d6b2967cbd66c07437bf35fe57962166dfa27ccf7d1e70ace06e41d9334c2f08fe8b6a51f66080099d73d9fd8abcc93897053df061a753bd6c324a7479e78260c8bf5aa16c64946518d259de0685325f157a9ed0239679a903d15e675d914803e8cd73df3d20c7269c58bbbfd7aaf15305e795d5ac257f0a0c205cca225f58b233d0cd140a8636434c32023d7d991599f8ff557027e590273449b4433b767ec3039b3d7b5f5a4054f2ab915adc178d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) 10m29.895423304s ago: executing program 0 (id=827): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 10m29.391037261s ago: executing program 0 (id=832): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x28, r1, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8, 0x2}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 10m29.182404463s ago: executing program 0 (id=834): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 10m28.875964599s ago: executing program 32 (id=834): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 21.586544866s ago: executing program 5 (id=3762): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000"], 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.275373156s ago: executing program 4 (id=3870): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x567cb83f1cfaa285) 5.162495388s ago: executing program 1 (id=3871): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000000}) 4.299927411s ago: executing program 4 (id=3876): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x3f, 0x69) 4.194156663s ago: executing program 5 (id=3787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, r5, 0xaaa81db43af9b3db, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3.9218322s ago: executing program 4 (id=3879): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) syz_emit_ethernet(0xfeca, &(0x7f0000000080)=ANY=[], 0x0) 3.154855755s ago: executing program 5 (id=3881): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000400)={0xd, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 2.803778915s ago: executing program 4 (id=3883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 2.56177237s ago: executing program 4 (id=3884): dup(0xffffffffffffffff) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) close_range(r0, 0xffffffffffffffff, 0x0) 2.099974448s ago: executing program 2 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r3, r1, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 1.928158607s ago: executing program 2 (id=3887): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x20}}, 0x44850) 1.877272685s ago: executing program 3 (id=3888): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.852568056s ago: executing program 1 (id=3889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 1.824782217s ago: executing program 2 (id=3890): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$setperm(0x5, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x13, 0x0, &(0x7f00000001c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x42a400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@empty}, {@empty}, {}]}}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x8}) preadv(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000004c0)=""/209, 0xd1}], 0x2, 0x3, 0x3) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000003c0)={{0x0, 0x2}, {0x4, 0x401}, 0x10001}) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700"], 0x58}, 0x1, 0x2}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.702600904s ago: executing program 2 (id=3891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, r5, 0xaaa81db43af9b3db, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.476665156s ago: executing program 5 (id=3892): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r7}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 900.731642ms ago: executing program 5 (id=3893): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) syz_emit_ethernet(0xfeca, &(0x7f0000000080)=ANY=[], 0x0) 872.714043ms ago: executing program 1 (id=3894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 871.75845ms ago: executing program 3 (id=3895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = dup(0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8000000000008, 0x4, 0xfffffffffffffffe, 0xfffffffffffffa5a, 0x4000000000000}, 0x0, &(0x7f00000002c0)={0x1000003ff, 0x4, 0x10000, 0x0, 0x0, 0x5, 0xfffffffffffffff9, 0xfff}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b32e2c96d0a0d52393"], 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0xffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="83", 0x1}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1}}], 0x2, 0x0) 748.308666ms ago: executing program 2 (id=3896): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 426.785437ms ago: executing program 1 (id=3897): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7cb, &(0x7f0000000980)={&(0x7f0000000100)={{@hyper}, {}, 0x400, "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"}, 0x418}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 373.466071ms ago: executing program 3 (id=3898): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x4008040, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 330.5299ms ago: executing program 2 (id=3899): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000000}) 309.414235ms ago: executing program 1 (id=3900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffd"], 0x20}}, 0x44850) 286.5704ms ago: executing program 3 (id=3901): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x3c}}, 0x0) 244.856279ms ago: executing program 4 (id=3902): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 212.641273ms ago: executing program 1 (id=3903): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newchain={0xfcc, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x1, 0xffe0}, {0x6, 0x9}}, [@f_rsvp={{0x9}, {0x2f8, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x4dbd, 0xeeb}, {0x2, 0x8, 0xfffffffa}, 0xc1, 0x6a, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0xb, 0xa7}, {0x5, 0x5, 0x800}, 0x8, 0x7, 0x7}}, @TCA_RSVP_ACT={0x29c, 0x6, [@m_mpls={0x50, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x19, 0x6, "8afa00b66cd46a3dd56b15e78c42c5591665aeb38c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x120, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0xe1, 0x6, "e72064788474e9d9e37d10634c48137100cd94378d719d8bd7941dad82ddc6801abbaa8f647285f9824234165b9164bf9e07b059e8876d3b86f3d3eff123dba20c31009bf5356d4bfb902c879aadb96893919766360a75e3b6404b4ee350e5069892d8d53a532f0ab2991dacf5372f2793899ac294b8bdf081b1045fcb0642c3ec1f5fa35016be0346c5dfaf13cdf2231fcde134b75b4986efe4e1174e6c8dd6388bb51e53bded3dc1f39636729462668780eeb1beaecaa7e546ef2e208007bfead597ba9860ccd6ffd17cdda2608e6f2d712466d6de10742c6500e684"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x6, 0x10000, 0x1ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc8f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xa5, 0x6, "97100804a6e83741ac91d00f97036bd5a059445798ae5f1d29ed13399a2b8ba89948bbbac461d5c532b687722214ca48aeadc12d3abc2c3309c14abe618318a684e865ac924bdf1ffa74cb1495a8e7fe212fdbcc5cfd00bccbc713c830853e544043950ef0d308e3fc4b92300a548ea899e6b08cdf47a8bbf4f700a6e28bae34b99ba69765535a9bbd1931a83e9e28328635d5a32b511580f1fdf62e8756ba567b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}, @f_rsvp={{0x9}, {0x94c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x7fffffff, 0x10000}, {0x9, 0x80000000, 0x19}, 0x3c58127146fc1915, 0x7e, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x0, 0x100}, {0xd7, 0x57, 0xff}, 0x2, 0x6, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff8}}, @TCA_RSVP_ACT={0x398, 0x6, [@m_tunnel_key={0xe0, 0x0, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "bb2cdd218e1932c60e25532848837b415d56e6744bf0b3f8aba66b0d2cad032b8cf911d07e8929550f9c5047de25564b34"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x18, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1cc5, 0x10000000}}]}, {0xb1, 0x6, "2f7e17336698956b6031823656f446206c288c15e63393ac0209c3aca831623d31c5979ed04ea05a6ad1ff34ad989f74edaa909e59500289321dae9b3dd180566cdf21e67e8004f70abffced08e6927c5360bfb787984ba5718d9060fde444b7589483febec75ceecb9874d03d4b9ac235a2e5105f5e4d101c7bb89d42552b5001e6f30636aa246f8a902586bd24150fa3103f039ef05cb2c0d2b249628b30fe700ce0cc2d1bcc9f84cb23539f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x60, 0x6, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "f41fc0b35e938477d0bf68d3f3424a77"}]}, {0x19, 0x6, "c5ae7b164aca2eb1b650efe7025f54bc4b1f425664"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x168, 0x15, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x2, 0x1, 0x8}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfceb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa5f35}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x6, 0x5, 0xdb}, 0x1}}]}, {0xd9, 0x6, "324bf91de07124b9e54937a32ee33bcdaa62106a7caf5835fd0e696c43e2316f8772f9f823bba68a9c89f0ae20748880652a70e1805890363fa80d3dcf379a8acde00c97af04c9d138527c6c9f877e07d6ddafebce4ada28b72f21399dbf3555d32162f5d74e473ab593b947ebc3ec2fa87cc1e9e03f3eb9ceb45b75f908e8a69ff062c983cab8f637a576b62b6458ae5b999b20b4877654cc2a0af9ff333fa596c5a7e37a68fa7aa7e24ad28a58acdf1d3339fc34716c1a7ec899f913568001637d8638e773f205b76fcbe372a9e7ada20d485e8a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x0, 0xb3, 0x3, 0x8653, 0x2232, 0xe, 0x7, 0x4, 0x0, 0x7fff, 0x8, 0x9d, 0x632, 0x6, 0x5, 0x6, 0x5, 0x49cc, 0x2, 0x0, 0xde6a, 0xfffffffa, 0x4, 0x9, 0x8a, 0xd, 0x1ff, 0x30, 0x5, 0xfffffffd, 0x6, 0x7ff, 0x8, 0x3, 0x81, 0x4, 0x9, 0x9, 0x4, 0xffffffff, 0x6, 0x4, 0x2, 0x36e, 0x10000, 0x4, 0xd4, 0x1, 0x0, 0x5, 0xddc, 0x2, 0x0, 0x9, 0x80000000, 0x69, 0x80, 0x9, 0x8, 0x3, 0x400, 0x6, 0x0, 0x4, 0x9, 0x572, 0x8, 0x9, 0x4, 0x8a, 0xfffffffe, 0x1, 0x401, 0x6, 0x4c2645fd, 0x6, 0x3, 0x8611329, 0x3, 0x0, 0x2, 0x7, 0x5, 0xfff, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0x39bd, 0x81, 0x5, 0x0, 0x24, 0x3, 0x0, 0xfffffff9, 0x9, 0x1fb4, 0x80000000, 0x9, 0x1, 0xffffffff, 0x7d, 0x4, 0x1000, 0x80000001, 0x0, 0x2a7, 0xc03, 0xfffff000, 0x1e8, 0x5, 0x6, 0x400, 0x528, 0x2, 0x88, 0x3d75, 0x9, 0xb8, 0xd6bb, 0x8, 0x5, 0x6, 0x4, 0x28, 0x9, 0x7, 0x0, 0xfffffffc, 0x6, 0xfffffffa, 0x1000, 0x8, 0x2, 0xa71, 0xfffffff7, 0x401, 0x7, 0xfffffff1, 0x40, 0x1000, 0xfffff000, 0x0, 0x6, 0x6b, 0xc, 0x8c1, 0x7, 0x3, 0x1, 0x2, 0x6, 0x3, 0xfad10b0c, 0x7f, 0x5, 0x2, 0x2b, 0x1ff, 0x9e, 0x80, 0x7, 0x2, 0x1, 0xefe, 0x5cbf198d, 0x3, 0x0, 0x8, 0xf, 0x5, 0x3ff, 0x1ff, 0x9e11, 0x4, 0x4, 0x8, 0x401, 0xfffffff9, 0xf90, 0x1b1, 0xc6, 0x6885, 0x660, 0x8, 0x10001, 0x1000, 0x6, 0x1ff, 0x2, 0x4, 0x7, 0x81, 0x1, 0x4, 0xfff, 0xfff, 0xa0000, 0x5, 0x10000, 0x401, 0x8772, 0xe, 0x400, 0x9, 0x5, 0xba8, 0xd, 0x1, 0x81, 0x8, 0x1, 0x2, 0x5, 0x5, 0xa3d, 0x5, 0x6, 0x7, 0x9, 0x2, 0x5e, 0x10, 0x800, 0x9, 0xfffffff1, 0x3, 0x6, 0x7, 0x10, 0x0, 0x0, 0x4, 0x1ff, 0xf779, 0x5, 0x0, 0xff, 0x8, 0x7abf, 0x2, 0x9, 0x7, 0x99, 0x4, 0x5dc05eee, 0x1, 0xfff, 0x9, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x138, 0x6, [@m_pedit={0x134, 0x11, 0x0, 0x0, {{0xa}, {0xbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4d, 0x6, "71a6d04508ff170cc51a31a334dd9c13a6f8dbcb50218378b331323f8b3b5580c5cc2f578a025646bfc5237b6808b383141e2b249dce8f6590795a8d7b29b73fd51a5fa3242b88e2e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @f_rsvp6={{0xa}, {0x340, 0x2, [@TCA_RSVP_ACT={0x33c, 0x6, [@m_gact={0x188, 0x5, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0xfee, 0x0, 0x1, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xa, 0x3, 0xf1, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x1, 0x6, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x1, 0x9, 0xd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18ce}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ecc, 0x2}}]}, {0xe1, 0x6, "3323c9692a4e88ccfe0567bce3eeb3ff8d9f12e00b2d96a2d88090115a6899248e6ceeaba6f4cd59a9c2cb865482d6b2967cbd66c07437bf35fe57962166dfa27ccf7d1e70ace06e41d9334c2f08fe8b6a51f66080099d73d9fd8abcc93897053df061a753bd6c324a7479e78260c8bf5aa16c64946518d259de0685325f157a9ed0239679a903d15e675d914803e8cd73df3d20c7269c58bbbfd7aaf15305e795d5ac257f0a0c205cca225f58b233d0cd140a8636434c32023d7d991599f8ff557027e590273449b4433b767ec3039b3d7b5f5a4054f2ab915adc178d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x90, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x51, 0x6, "2de4d412af6cc489a40706c9e66f8ed8cdb5c76f5dd5def0a04783ef5c0ae5de8f7a0657ae2e2cfad420035bba8453d8490d2955cfa8bb2fbda9dc31b500cf69a231888c130ff85c29b958695b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x120, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9b, 0x4, 0x5, 0x8, 0x4}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0xffffffffffffffff, 0x9eb50}, 0x68}}]}, {0xb9, 0x6, "da0b5f1d9d892eaa435052deb1ca0c4383a749cfd08ae85f4ca3a7ea3342e2f4ad3386c81764ff5e29307b4e29f566ca4d9b87bfd84edd0a5493713189932597edb7c0ffd27207beb0b0b3a820c800c5b2ed3b8e1d58d9305c7a186bd1f02e54bddc811ad00caa03843b0159524f37cd2cb5f9de9589255b144f29278e96999e245a36cd5821d88dc8fd8eee3362323d61f59d95b4f2d6446bdef8d7f4ba170ad420e7f9e09f9c126f488ca44b0f32a5c4f60625ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xfcc}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) 175.067375ms ago: executing program 3 (id=3904): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x5, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) pselect6(0x40, &(0x7f0000000040)={0x74, 0x8, 0x1b78, 0x0, 0xa7a7, 0x6, 0x8, 0x894}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 42.557096ms ago: executing program 3 (id=3905): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 0s ago: executing program 5 (id=3906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, r5, 0xaaa81db43af9b3db, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): -speed USB device number 28 using dummy_hcd [ 798.279919][ T5894] usb 2-1: device descriptor read/8, error -71 [ 798.416495][ T5894] usb usb2-port1: unable to enumerate USB device [ 798.995149][ T5826] Bluetooth: hci0: command tx timeout [ 799.005191][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 799.023540][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 799.032497][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 799.042326][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 799.053400][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 799.060839][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 799.101387][T16664] lo speed is unknown, defaulting to 1000 [ 799.108788][T16664] lo speed is unknown, defaulting to 1000 [ 799.115453][T16664] syzkaller0 speed is unknown, defaulting to 1000 [ 799.319171][T16664] chnl_net:caif_netlink_parms(): no params data found [ 799.411796][T16673] netlink: zone id is out of range [ 799.417352][T16673] netlink: zone id is out of range [ 800.147128][T16664] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.159478][T16664] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.171175][T16664] bridge_slave_0: entered allmulticast mode [ 800.208795][T16664] bridge_slave_0: entered promiscuous mode [ 800.224315][T16664] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.231617][T16664] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.241179][T16664] bridge_slave_1: entered allmulticast mode [ 800.265893][T16664] bridge_slave_1: entered promiscuous mode [ 800.559994][T16664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.618513][T16664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.776298][T16664] team0: Port device team_slave_0 added [ 800.816121][T16664] team0: Port device team_slave_1 added [ 800.864042][T16664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.933885][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.155763][ T5826] Bluetooth: hci4: command tx timeout [ 801.266104][T16664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.279129][T16664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.286231][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.315642][T16664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.533720][T16664] hsr_slave_0: entered promiscuous mode [ 801.570176][T16664] hsr_slave_1: entered promiscuous mode [ 801.615050][T16664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.667087][T16664] Cannot create hsr debugfs directory [ 801.955833][T16664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.072436][T16664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.221295][T16664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.439659][T16664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.805545][T16728] program syz.1.2991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.245796][ T5826] Bluetooth: hci4: command tx timeout [ 803.548061][ T29] audit: type=1400 audit(1734888493.156:637): avc: denied { read } for pid=16738 comm="syz.4.2997" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 803.608751][T16739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 803.618002][T16739] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 803.656116][T16664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 804.088461][T16664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 804.102120][T16739] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 804.228461][T16664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 804.329435][T16664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 804.342698][T16739] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 804.443477][T16739] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 804.458651][T16739] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 804.621892][T16664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.782309][T16664] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.940082][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.947223][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.227551][T16764] program syz.2.3003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 805.870112][ T29] audit: type=1326 audit(1734888495.376:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.3002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf12b85d29 code=0x0 [ 805.908384][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 805.961078][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.968189][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.511894][ T5826] Bluetooth: hci4: command 0x0419 tx timeout [ 806.921973][T16664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.781689][T16664] veth0_vlan: entered promiscuous mode [ 807.836328][ T5895] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 807.955083][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 808.116875][T16664] veth1_vlan: entered promiscuous mode [ 808.309779][T16664] veth0_macvtap: entered promiscuous mode [ 808.594901][ T5826] Bluetooth: hci4: command 0x0419 tx timeout [ 808.945383][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.945838][ T5895] usb 2-1: device descriptor read/64, error -71 [ 808.969303][T16664] veth1_macvtap: entered promiscuous mode [ 809.092307][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.105110][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.117073][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.128243][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.147948][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.225247][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.279465][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.315167][ T5895] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 809.348814][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.403105][T16664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.448985][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.484858][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.494697][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.505533][ T5895] usb 2-1: device descriptor read/64, error -71 [ 809.536186][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.583905][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.604867][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.615280][ T5895] usb usb2-port1: attempt power cycle [ 809.620894][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.645174][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.675195][T16664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.749940][T16664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.800624][T16664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.866573][T16664] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.906518][T16664] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.945480][T16664] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.954979][T16664] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.035736][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 810.677688][T12447] Bluetooth: hci4: command 0x0419 tx timeout [ 810.768556][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.776728][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.827880][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.836576][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.906360][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3022'. [ 812.368330][T16858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3030'. [ 812.755019][T12447] Bluetooth: hci4: command 0x0419 tx timeout [ 812.937110][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.948909][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.965976][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 812.986188][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.002869][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 813.011493][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 813.136241][T16874] lo speed is unknown, defaulting to 1000 [ 813.142833][T16874] lo speed is unknown, defaulting to 1000 [ 813.150163][T16874] syzkaller0 speed is unknown, defaulting to 1000 [ 813.481138][T16888] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3036'. [ 813.870923][T16874] chnl_net:caif_netlink_parms(): no params data found [ 813.976945][T16894] netlink: zone id is out of range [ 813.977258][T16894] netlink: zone id is out of range [ 814.666523][T16874] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.695233][T16874] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.705047][T16874] bridge_slave_0: entered allmulticast mode [ 814.714073][T16874] bridge_slave_0: entered promiscuous mode [ 814.723586][T16874] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.730877][T16874] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.738346][T16874] bridge_slave_1: entered allmulticast mode [ 814.745876][T16874] bridge_slave_1: entered promiscuous mode [ 814.812221][T16874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.856843][T16874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.946007][T16874] team0: Port device team_slave_0 added [ 814.966681][T16874] team0: Port device team_slave_1 added [ 815.004972][ T5895] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 815.024361][T16874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.053189][T16874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.079713][T12447] Bluetooth: hci3: command tx timeout [ 815.099048][T16874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.111663][T16874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.118999][T16874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.155401][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 815.156470][T16874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.186544][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 815.210963][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 815.226474][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 815.237481][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.269830][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 815.279608][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.352549][T16874] hsr_slave_0: entered promiscuous mode [ 815.373163][T16874] hsr_slave_1: entered promiscuous mode [ 815.395056][T16874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.418599][T16874] Cannot create hsr debugfs directory [ 815.623637][ T5895] usb 2-1: GET_CAPABILITIES returned 0 [ 815.626822][ T29] audit: type=1400 audit(1734888505.256:639): avc: denied { ioctl } for pid=16920 comm="syz.5.3046" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 815.644967][ T5895] usbtmc 2-1:16.0: can't read capabilities [ 815.930280][ T29] audit: type=1400 audit(1734888505.556:640): avc: denied { bind } for pid=16896 comm="syz.1.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 815.983154][ T5895] usb 2-1: USB disconnect, device number 32 [ 816.075415][T16874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.374083][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3050'. [ 816.673892][T16941] overlayfs: failed to resolve './file1': -2 [ 817.155077][T12447] Bluetooth: hci3: command tx timeout [ 817.344490][T16874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.388391][T16940] lo speed is unknown, defaulting to 1000 [ 817.397002][T16940] lo speed is unknown, defaulting to 1000 [ 817.403556][T16940] syzkaller0 speed is unknown, defaulting to 1000 [ 817.541716][T16874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.654882][ T5865] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 817.748720][T16874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.885032][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 817.894008][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.905164][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.915030][ T5865] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 817.990664][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.006240][ T5895] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 818.255402][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 818.270001][ T5865] usb 6-1: config 0 descriptor?? [ 818.381259][ T5895] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 818.442379][ T5895] usb 5-1: config 0 has no interface number 0 [ 818.465616][T16874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 818.480701][ T5895] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 818.483806][T16874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 818.506671][ T5895] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 818.519041][ T5895] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 818.539355][T16874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 818.549477][T16874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 818.556350][ T5895] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.574255][ T5895] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 818.601259][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.623676][ T5895] usb 5-1: Product: syz [ 818.642492][ T5895] usb 5-1: Manufacturer: syz [ 818.662891][ T5895] usb 5-1: SerialNumber: syz [ 818.774654][ T5895] usb 5-1: config 0 descriptor?? [ 818.932825][ T5865] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 818.997632][ T5865] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 819.042708][ T5865] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 819.095606][T16874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.112613][ T5865] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 819.120854][ T5895] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 819.138384][ T5865] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 819.159992][T16874] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.170078][ T5865] appleir 0003:05AC:8241.0012: No inputs registered, leaving [ 819.185702][ T5865] appleir 0003:05AC:8241.0012: hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 819.206796][T14557] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.213891][T14557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.226135][T14557] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.233301][T14557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.240886][T12447] Bluetooth: hci3: command tx timeout [ 819.354278][ T5864] usb 5-1: USB disconnect, device number 38 [ 819.360404][ C0] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 819.384997][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 819.432132][T16874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.570415][T16874] veth0_vlan: entered promiscuous mode [ 819.578716][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.600601][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 819.619280][T16874] veth1_vlan: entered promiscuous mode [ 819.630271][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 819.681651][T16874] veth0_macvtap: entered promiscuous mode [ 819.688204][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.706534][T16874] veth1_macvtap: entered promiscuous mode [ 819.713825][ T8] usb 2-1: config 0 descriptor?? [ 819.748836][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.765588][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.780596][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.792773][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.807240][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.820503][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.832952][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.846104][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.861044][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.875133][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.891885][T16874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.910204][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.921304][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.939555][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.953845][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.965769][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.982132][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.994353][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.010154][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.020202][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.036131][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.050483][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.061911][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.077189][T16874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.120578][T16874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.162137][T16874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.202376][T16874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.255025][T16874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.413000][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.426767][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.474250][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.504338][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.562680][T16646] usb 6-1: USB disconnect, device number 31 [ 820.640527][T16997] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3068'. [ 821.404874][T12447] Bluetooth: hci3: command tx timeout [ 821.534835][ T29] audit: type=1400 audit(1734888511.156:641): avc: denied { rename } for pid=16999 comm="syz.3.3069" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 821.595124][ T29] audit: type=1400 audit(1734888511.166:642): avc: denied { unlink } for pid=16999 comm="syz.3.3069" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 822.239124][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 822.256401][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 822.267663][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 822.274898][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 822.538510][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 822.573887][T17014] ceph: No mds server is up or the cluster is laggy [ 822.579190][ T8] usb 2-1: USB disconnect, device number 33 [ 822.587054][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 822.638412][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 822.708561][T17022] team1: entered promiscuous mode [ 822.713842][T17022] 8021q: adding VLAN 0 to HW filter on device team1 [ 822.918348][T17027] overlay: ./file0 is not a directory [ 822.948917][ T29] audit: type=1400 audit(1734888512.586:643): avc: denied { ioctl } for pid=17029 comm="syz.3.3078" path="socket:[48152]" dev="sockfs" ino=48152 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 823.123645][ T8] syzkaller0 speed is unknown, defaulting to 1000 [ 824.710343][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 824.721877][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 824.740788][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 824.751972][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 824.761318][ T5826] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 824.768970][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 824.936792][T17038] lo speed is unknown, defaulting to 1000 [ 824.974647][T17038] lo speed is unknown, defaulting to 1000 [ 824.981654][T17038] syzkaller0 speed is unknown, defaulting to 1000 [ 825.908032][T17038] chnl_net:caif_netlink_parms(): no params data found [ 826.254496][T17038] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.297959][T17038] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.857237][T12447] Bluetooth: hci5: command tx timeout [ 826.877544][T17038] bridge_slave_0: entered allmulticast mode [ 826.930950][T17038] bridge_slave_0: entered promiscuous mode [ 826.980001][T17038] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.007495][T17038] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.045416][T17038] bridge_slave_1: entered allmulticast mode [ 827.080115][T17038] bridge_slave_1: entered promiscuous mode [ 827.253186][T17038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.383280][T17038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.393660][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 827.507154][T17038] team0: Port device team_slave_0 added [ 827.576543][T17038] team0: Port device team_slave_1 added [ 827.678849][T17038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.692397][T12447] Bluetooth: hci4: unexpected event for opcode 0x001b [ 827.694860][T17038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.741336][T16646] libceph: connect (1)[c::]:6789 error -101 [ 827.797261][T16646] libceph: mon0 (1)[c::]:6789 connect error [ 827.944267][T17038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.000655][T17038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.029379][T17038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.055302][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.097699][T17038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.105145][T16646] libceph: connect (1)[c::]:6789 error -101 [ 828.156542][T16646] libceph: mon0 (1)[c::]:6789 connect error [ 828.329847][T17038] hsr_slave_0: entered promiscuous mode [ 828.370305][T17038] hsr_slave_1: entered promiscuous mode [ 828.387223][T17121] ceph: No mds server is up or the cluster is laggy [ 828.442726][T17038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.478782][T17038] Cannot create hsr debugfs directory [ 828.929034][T12447] Bluetooth: hci5: command tx timeout [ 829.729979][T17038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.747720][T14689] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 829.903025][T17038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.925688][T14689] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 829.945106][T14689] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 829.977413][T14689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.014927][T14689] usb 3-1: config 0 descriptor?? [ 830.196439][T17038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.326771][T17038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.473184][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 830.525894][T17190] batman_adv: batadv0: Adding interface: ip6gretap1 [ 830.548504][T17190] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.574091][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.601377][T17190] batman_adv: batadv0: Interface activated: ip6gretap1 [ 830.698438][T17038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 830.738753][T17038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 830.767225][ T29] audit: type=1400 audit(1734888520.406:644): avc: denied { shutdown } for pid=17198 comm="syz.3.3112" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 830.812856][T17038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 830.836992][T17038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 830.995434][T12447] Bluetooth: hci5: command tx timeout [ 831.133970][ T29] audit: type=1326 audit(1734888520.766:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17205 comm="syz.3.3114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b55785d29 code=0x0 [ 831.230744][T17216] program syz.5.3115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 831.714987][T17038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.714996][T12447] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 831.730690][T12447] Bluetooth: hci4: Injecting HCI hardware error event [ 831.741905][T12447] Bluetooth: hci4: hardware error 0x00 [ 831.782318][T17038] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.919576][T14562] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.926729][T14562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.005744][T14562] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.012886][T14562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.668636][ T5895] usb 3-1: USB disconnect, device number 25 [ 832.876699][T17038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.076703][ T5826] Bluetooth: hci5: command tx timeout [ 833.106475][T17259] bridge1: entered promiscuous mode [ 833.117338][T17259] bridge1: entered allmulticast mode [ 833.153771][T17259] team0: Device bridge1 is up. Set it down before adding it as a team port [ 833.539880][T17038] veth0_vlan: entered promiscuous mode [ 833.633659][T17038] veth1_vlan: entered promiscuous mode [ 833.805144][T12447] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 833.815971][T17038] veth0_macvtap: entered promiscuous mode [ 833.866423][T17038] veth1_macvtap: entered promiscuous mode [ 833.953297][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.015966][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.067436][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.098511][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.128712][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.160553][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.190024][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.218695][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.230370][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.247470][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.266246][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.276904][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.302897][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.320275][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.328586][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.341297][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.352489][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.371857][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.455780][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.474950][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.518550][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.544473][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.553347][T17038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.595887][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.604553][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.630654][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.660823][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.681418][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.690577][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.738475][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.744822][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.756406][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.756441][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.756460][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.756479][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.756629][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.756957][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 834.787780][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.918271][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 834.925193][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 834.932766][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 834.942389][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 835.182262][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.205421][ T8] libceph: connect (1)[c::]:6789 error -101 [ 835.212604][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 835.225652][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.248877][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.258158][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.264935][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.311638][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.337122][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.339356][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.386955][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.392745][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.422518][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.445790][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.447898][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.493049][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.500847][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.510293][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.552814][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.572407][T17291] ceph: No mds server is up or the cluster is laggy [ 835.586346][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.589388][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 835.642650][ T5895] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 835.645351][T17038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.694943][T17038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.730340][T17038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.768390][T17038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.830335][T17038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.850750][T17038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.911859][T17038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.532511][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.577723][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.704636][T13566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.737227][T13566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.869925][T17331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.317167][T17340] 9pnet_virtio: no channels available for device syz [ 838.260969][T14689] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 838.497677][T14689] usb 4-1: Using ep0 maxpacket: 8 [ 838.561288][T14689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.659559][T14689] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 838.684918][T14689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.733962][T14689] usb 4-1: config 0 descriptor?? [ 838.996030][T14689] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 839.376219][T17389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.628600][T17391] tun0: tun_chr_ioctl cmd 1074025675 [ 839.636464][T17391] tun0: persist enabled [ 839.655859][T14689] usb 4-1: USB disconnect, device number 24 [ 839.981290][T17405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3148'. [ 840.212149][T17408] input: syz0 as /devices/virtual/input/input14 [ 840.218782][T17408] input: failed to attach handler leds to device input14, error: -6 [ 841.863448][T17450] overlayfs: failed to resolve './file0': -2 [ 842.075000][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3160'. [ 843.018867][ T29] audit: type=1400 audit(1734888532.646:646): avc: denied { append } for pid=17474 comm="syz.4.3166" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 843.304989][ T29] audit: type=1400 audit(1734888532.646:647): avc: denied { map } for pid=17474 comm="syz.4.3166" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 843.415635][ T29] audit: type=1400 audit(1734888532.646:648): avc: denied { execute } for pid=17474 comm="syz.4.3166" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 844.659698][T17515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.721935][T17522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3177'. [ 845.390412][T17554] batman_adv: batadv0: Adding interface: ip6gretap1 [ 845.416478][T17554] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.442092][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.509851][T17554] batman_adv: batadv0: Interface activated: ip6gretap1 [ 845.838388][T17558] program syz.1.3183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.068772][T17574] netlink: zone id is out of range [ 846.074317][T17574] netlink: zone id is out of range [ 846.631543][T17577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3190'. [ 847.577265][T17596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.375002][T16646] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 848.805848][T16646] usb 6-1: Using ep0 maxpacket: 16 [ 848.823664][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 848.835905][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 848.837737][T16646] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 848.964988][T16646] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.975547][T16646] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.991330][T16646] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 849.001080][T16646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.009260][T16646] usb 6-1: Product: syz [ 849.015988][T16646] usb 6-1: Manufacturer: syz [ 849.029136][T16646] usb 6-1: SerialNumber: syz [ 849.095354][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 849.118405][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 849.203842][T17622] ceph: No mds server is up or the cluster is laggy [ 849.310966][T17639] overlayfs: failed to resolve './file0': -2 [ 849.506879][T16646] usb 6-1: 0:2 : does not exist [ 849.639172][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3206'. [ 850.986201][ T5863] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 851.154910][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 851.209737][ T5894] usb 6-1: USB disconnect, device number 32 [ 851.233611][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 851.298523][T17704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3218'. [ 851.321322][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 851.348651][T17705] overlayfs: failed to resolve './file1': -2 [ 851.372530][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 851.411719][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 851.446422][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.489062][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 851.523032][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.557497][ T5863] usb 3-1: Product: syz [ 851.582309][ T5863] usb 3-1: Manufacturer: syz [ 851.594092][ T5863] usb 3-1: SerialNumber: syz [ 851.720780][ T5863] usb 3-1: config 0 descriptor?? [ 852.044587][ T5863] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 852.097559][ T5863] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 852.129561][ T5863] usb 3-1: USB disconnect, device number 26 [ 852.508348][T17717] siw: device registration error -23 [ 853.243562][T17722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.818427][ T29] audit: type=1400 audit(1734888544.456:649): avc: denied { append } for pid=17742 comm="syz.2.3228" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 855.023579][ T29] audit: type=1400 audit(1734888544.506:650): avc: denied { map } for pid=17742 comm="syz.2.3228" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 855.023851][ T29] audit: type=1400 audit(1734888544.546:651): avc: denied { execute } for pid=17742 comm="syz.2.3228" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 855.057218][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.265964][ T29] audit: type=1400 audit(1734888544.876:652): avc: denied { map } for pid=17757 comm="syz.1.3234" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 855.266007][ T29] audit: type=1400 audit(1734888544.876:653): avc: denied { execute } for pid=17757 comm="syz.1.3234" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 855.736614][T17761] netlink: zone id is out of range [ 855.741161][T17761] netlink: zone id is out of range [ 856.564487][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3229'. [ 857.055431][ T5863] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 857.371431][ T5863] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 857.385082][ T5863] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 857.394167][ T5863] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 857.424715][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.992877][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'. [ 858.172299][T17827] virtio-fs: tag <(null)> not found [ 858.208385][ T5863] usb 4-1: USB disconnect, device number 25 [ 858.653900][T16646] libceph: connect (1)[c::]:6789 error -101 [ 858.662237][T16646] libceph: mon0 (1)[c::]:6789 connect error [ 858.925868][T16646] libceph: connect (1)[c::]:6789 error -101 [ 858.943236][T16646] libceph: mon0 (1)[c::]:6789 connect error [ 858.985066][T14689] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 859.176036][T14689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.274615][T14689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.303911][T17833] ceph: No mds server is up or the cluster is laggy [ 859.311430][T14689] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 859.327290][T14689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.348607][T14689] usb 5-1: config 0 descriptor?? [ 859.562618][T17853] overlayfs: failed to resolve './file1': -2 [ 859.690409][T14689] usbhid 5-1:0.0: can't add hid device: -71 [ 859.708243][T14689] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 859.735046][T14689] usb 5-1: USB disconnect, device number 39 [ 859.998160][T17863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3270'. [ 860.814971][T17888] overlayfs: failed to resolve './file1': -2 [ 861.085703][T17899] batman_adv: batadv0: Adding interface: ip6gretap1 [ 861.114037][T17899] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.203849][T17899] batman_adv: batadv0: Interface activated: ip6gretap1 [ 861.898351][T17923] overlayfs: failed to resolve './file1': -2 [ 861.966176][T17927] bridge_slave_0: entered promiscuous mode [ 861.982365][T17927] bridge_slave_0: entered allmulticast mode [ 862.170754][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3299'. [ 862.397069][T17948] lo speed is unknown, defaulting to 1000 [ 862.403286][T17948] lo speed is unknown, defaulting to 1000 [ 862.409507][T17948] syzkaller0 speed is unknown, defaulting to 1000 [ 862.437519][T17954] overlayfs: failed to resolve './file1': -2 [ 863.526396][T17976] 9pnet_virtio: no channels available for device syz [ 864.790223][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 864.853405][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 865.147476][T18002] lo speed is unknown, defaulting to 1000 [ 865.154226][T18002] lo speed is unknown, defaulting to 1000 [ 865.160952][T18002] syzkaller0 speed is unknown, defaulting to 1000 [ 865.169384][T17987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=17987 comm=syz.1.3312 [ 865.186737][T18003] overlayfs: failed to resolve './file1': -2 [ 865.622310][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3316'. [ 866.275436][T18024] 9pnet_virtio: no channels available for device syz [ 866.959358][ T29] audit: type=1400 audit(1734888556.596:654): avc: denied { write } for pid=18039 comm="syz.2.3327" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 867.589474][ T29] audit: type=1400 audit(1734888557.226:655): avc: denied { mount } for pid=18046 comm="syz.3.3328" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 868.250012][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3337'. [ 868.287686][ T29] audit: type=1400 audit(1734888557.926:656): avc: denied { execmem } for pid=18073 comm="syz.4.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 868.536505][T18072] hsr_slave_1 (unregistering): left promiscuous mode [ 868.791736][ T29] audit: type=1400 audit(1734888558.426:657): avc: denied { map } for pid=18086 comm="syz.1.3342" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 868.880496][ T29] audit: type=1400 audit(1734888558.426:658): avc: denied { execute } for pid=18086 comm="syz.1.3342" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 869.535320][ T29] audit: type=1400 audit(1734888559.176:659): avc: denied { create } for pid=18097 comm="syz.5.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 869.704910][ T29] audit: type=1400 audit(1734888559.196:660): avc: denied { write } for pid=18097 comm="syz.5.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 869.773451][ T29] audit: type=1400 audit(1734888559.196:661): avc: denied { nlmsg_read } for pid=18097 comm="syz.5.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 870.122234][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3353'. [ 870.223650][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.137248][T18141] lo speed is unknown, defaulting to 1000 [ 872.143760][T18141] lo speed is unknown, defaulting to 1000 [ 872.150280][T18141] syzkaller0 speed is unknown, defaulting to 1000 [ 872.496289][ T29] audit: type=1400 audit(1734888562.136:662): avc: denied { unmount } for pid=18151 comm="syz.3.3362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 872.645853][ T1199] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 872.949334][T18162] vlan2: entered promiscuous mode [ 872.954647][T18162] vlan2: entered allmulticast mode [ 872.959870][T18162] hsr_slave_1: entered allmulticast mode [ 872.979812][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 872.984852][ T1199] usb 2-1: Using ep0 maxpacket: 16 [ 873.045045][T16646] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 873.134685][ T1199] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 873.157575][ T1199] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 873.189278][ T1199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 873.226364][ T1199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 873.254080][ T1199] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.274632][ T1199] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 873.276320][T16646] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 873.310501][ T1199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.328236][ T1199] usb 2-1: Product: syz [ 873.332572][ T1199] usb 2-1: Manufacturer: syz [ 873.337354][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 873.348747][T16646] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.360694][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 873.372265][ T1199] usb 2-1: SerialNumber: syz [ 873.404144][ T1199] usb 2-1: config 0 descriptor?? [ 873.411235][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 873.480042][T16646] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 873.503129][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 873.540164][T16646] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.586106][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 873.627249][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 873.664469][T16646] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 873.664511][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 873.664537][T16646] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.664562][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 873.664587][T16646] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 873.667040][T16646] usb 4-1: string descriptor 0 read error: -22 [ 873.667105][T16646] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 873.667128][T16646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.672616][T16646] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 873.685717][ T1199] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 873.700854][ T1199] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 873.907309][ T1199] usb 4-1: USB disconnect, device number 26 [ 873.998828][T16646] usb 2-1: USB disconnect, device number 34 [ 875.155347][ T29] audit: type=1400 audit(1734888564.786:663): avc: denied { ioctl } for pid=18185 comm="syz.1.3372" path="socket:[54504]" dev="sockfs" ino=54504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 875.180745][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.278473][T18191] input: syz0 as /devices/virtual/input/input16 [ 876.126621][T18209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3375'. [ 876.185871][ T29] audit: type=1400 audit(1734888565.826:664): avc: denied { bind } for pid=18192 comm="syz.5.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 876.871167][T18223] netlink: 'syz.3.3384': attribute type 41 has an invalid length. [ 876.895081][T18223] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3384'. [ 877.144298][ T5894] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 877.304922][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 877.314089][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 877.472440][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 877.637811][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 877.785412][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 877.828130][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 877.874040][ T5894] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 877.918759][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.934978][ T5894] usb 2-1: Product: syz [ 877.944599][ T5894] usb 2-1: Manufacturer: syz [ 877.949600][ T5894] usb 2-1: SerialNumber: syz [ 877.972046][ T5894] usb 2-1: config 0 descriptor?? [ 878.017116][ T29] audit: type=1400 audit(1734888567.646:665): avc: denied { setattr } for pid=18234 comm="syz.3.3387" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 878.095205][ T29] audit: type=1400 audit(1734888567.696:666): avc: denied { write } for pid=18234 comm="syz.3.3387" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 878.115908][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.185433][ T29] audit: type=1400 audit(1734888567.696:667): avc: denied { open } for pid=18234 comm="syz.3.3387" path="/84/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 878.243306][ T5894] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 878.255418][ T5894] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 878.333461][ T5894] usb 2-1: USB disconnect, device number 35 [ 879.011655][T18254] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in; [ 879.011655][T18254] program syz.4.3393 not setting count and/or reply_len properly [ 879.104219][T18254] lo speed is unknown, defaulting to 1000 [ 879.114352][T18254] lo speed is unknown, defaulting to 1000 [ 879.124267][T18254] syzkaller0 speed is unknown, defaulting to 1000 [ 879.905691][T16646] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 880.178203][T16646] usb 2-1: device descriptor read/64, error -71 [ 880.504905][T16646] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 880.655170][T16646] usb 2-1: device descriptor read/64, error -71 [ 881.025162][T16646] usb usb2-port1: attempt power cycle [ 881.475114][T16646] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 881.546976][T16646] usb 2-1: device descriptor read/8, error -71 [ 881.591744][T18301] program syz.4.3406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.805515][T16646] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 881.826371][T16646] usb 2-1: device descriptor read/8, error -71 [ 881.946667][T16646] usb usb2-port1: unable to enumerate USB device [ 882.554359][T18317] siw: device registration error -23 [ 883.579799][ T29] audit: type=1400 audit(1734888573.216:668): avc: denied { nlmsg_write } for pid=18321 comm="syz.1.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 883.600396][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.219795][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 884.254613][ T29] audit: type=1400 audit(1734888573.856:669): avc: denied { ioctl } for pid=18347 comm="syz.4.3423" path="socket:[54810]" dev="sockfs" ino=54810 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 884.614932][T16646] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 885.110130][T16646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.144909][T16646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.160370][T16646] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 885.176148][T16646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.188810][T16646] usb 2-1: config 0 descriptor?? [ 885.290392][T18362] binder: 18360:18362 ioctl 4018620d 0 returned -22 [ 886.627068][T16646] usbhid 2-1:0.0: can't add hid device: -71 [ 886.641529][T16646] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 886.988115][T16646] usb 2-1: USB disconnect, device number 40 [ 887.211882][T18406] binder: 18405:18406 ioctl 4018620d 0 returned -22 [ 887.769777][ T5894] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 887.850092][T18423] 9pnet_virtio: no channels available for device syz [ 888.115439][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 888.128842][ T5894] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 888.174945][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 888.290571][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 888.407533][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 888.559010][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.600356][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 888.635015][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.871338][ T5894] usb 5-1: usb_control_msg returned -32 [ 888.947924][T18436] Bluetooth: MGMT ver 1.23 [ 889.390323][ T5817] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 889.399535][ T5894] usbtmc 5-1:16.0: can't read capabilities [ 889.497318][T18439] binder: 18438:18439 ioctl 4018620d 0 returned -22 [ 889.556787][ T5817] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 889.569602][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.595525][ T5817] usb 3-1: config 0 descriptor?? [ 889.612308][ T5817] cp210x 3-1:0.0: cp210x converter detected [ 889.724860][ T5895] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 889.743964][T18448] overlayfs: missing 'lowerdir' [ 889.826789][ T5817] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 889.844567][ T5817] cp210x 3-1:0.0: querying part number failed [ 889.856232][ T5817] usb 3-1: cp210x converter now attached to ttyUSB0 [ 889.884932][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 889.903924][ T5895] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 889.933609][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.964045][ T5895] usb 6-1: Product: syz [ 889.974089][ T5895] usb 6-1: Manufacturer: syz [ 889.986415][ T5895] usb 6-1: SerialNumber: syz [ 889.993609][ T5895] usb 6-1: config 0 descriptor?? [ 890.331597][ T5895] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.394688][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3464'. [ 890.558147][ T5817] usb 5-1: USB disconnect, device number 40 [ 890.674670][T18467] lo speed is unknown, defaulting to 1000 [ 890.695067][T18467] lo speed is unknown, defaulting to 1000 [ 890.701917][T18467] syzkaller0 speed is unknown, defaulting to 1000 [ 890.734132][T18469] binder: 18468:18469 ioctl c0306201 0 returned -14 [ 890.754411][T18470] overlayfs: failed to resolve './file1': -2 [ 891.570318][ T5895] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 891.594397][ T5895] usb 6-1: USB disconnect, device number 33 [ 891.705599][ T5817] usb 3-1: USB disconnect, device number 27 [ 891.734049][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 891.762898][ T5817] cp210x 3-1:0.0: device disconnected [ 891.924899][ T1199] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 892.011606][T18501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3475'. [ 892.095146][ T1199] usb 5-1: Using ep0 maxpacket: 16 [ 892.147444][ T1199] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 892.291076][ T1199] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.331240][ T1199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.357447][ T1199] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 892.369999][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.400695][ T1199] usb 5-1: Product: syz [ 892.426945][ T1199] usb 5-1: Manufacturer: syz [ 892.431658][ T1199] usb 5-1: SerialNumber: syz [ 892.509036][T14562] Bluetooth: hci1: Frame reassembly failed (-84) [ 892.690643][T18510] Bluetooth: hci1: Frame reassembly failed (-84) [ 892.933413][ T1199] usb 5-1: 0:2 : does not exist [ 892.952982][ T1199] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 892.982762][T18517] program syz.1.3479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 893.177299][ T1199] usb 5-1: USB disconnect, device number 41 [ 893.624247][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 893.923256][T18528] lo speed is unknown, defaulting to 1000 [ 893.965697][T18528] lo speed is unknown, defaulting to 1000 [ 893.975039][T18534] overlayfs: failed to resolve './file1': -2 [ 893.993951][ T29] audit: type=1400 audit(1734888583.626:670): avc: denied { read } for pid=18531 comm="syz.3.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 894.042341][T18528] syzkaller0 speed is unknown, defaulting to 1000 [ 894.084914][ T1199] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 894.224930][ T1199] usb 3-1: device descriptor read/64, error -71 [ 894.464900][ T1199] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 894.515315][T12447] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 894.522122][ T5826] Bluetooth: hci1: command 0x1003 tx timeout [ 894.635066][ T1199] usb 3-1: device descriptor read/64, error -71 [ 894.751666][ T1199] usb usb3-port1: attempt power cycle [ 895.115811][ T1199] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 895.274973][ T1199] usb 3-1: device descriptor read/8, error -71 [ 895.402198][T18549] netlink: zone id is out of range [ 896.055283][ T1199] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 896.096316][ T1199] usb 3-1: device descriptor read/8, error -71 [ 896.205149][ T1199] usb usb3-port1: unable to enumerate USB device [ 896.335100][ T5817] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 896.413501][T18563] vlan2: entered promiscuous mode [ 896.425027][T18563] vlan2: entered allmulticast mode [ 896.440129][T18563] hsr_slave_1: entered allmulticast mode [ 896.456574][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3494'. [ 896.486663][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 896.504447][ T5817] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 896.517140][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.537476][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 896.567468][T18563] hsr_slave_1 (unregistering): left allmulticast mode [ 896.576559][ T5817] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.585930][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.593998][ T5817] usb 6-1: Product: syz [ 896.616784][ T5817] usb 6-1: Manufacturer: syz [ 896.622862][ T5817] usb 6-1: SerialNumber: syz [ 896.759764][T18563] hsr_slave_1 (unregistering): left promiscuous mode [ 896.814190][T18569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.028165][T18571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 897.037802][T18571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 897.439235][T18579] 9pnet_virtio: no channels available for device syz [ 897.518486][ T5817] usb 6-1: 0:2 : does not exist [ 897.538157][ T5817] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 897.578608][T18588] netlink: 'syz.1.3500': attribute type 10 has an invalid length. [ 897.605630][ T5817] usb 6-1: USB disconnect, device number 34 [ 897.716834][T18588] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 897.975687][T18175] udevd[18175]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.129646][T18596] overlayfs: failed to resolve './file1': -2 [ 898.777244][T18595] lo speed is unknown, defaulting to 1000 [ 898.783431][T18595] lo speed is unknown, defaulting to 1000 [ 898.789708][T18595] syzkaller0 speed is unknown, defaulting to 1000 [ 899.205716][ T5817] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 899.387614][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.432806][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.468855][ T5817] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 899.490412][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.523194][ T5817] usb 3-1: config 0 descriptor?? [ 900.441513][T18619] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 900.477372][T18619] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 900.790804][T18629] input: syz0 as /devices/virtual/input/input17 [ 901.186734][ T5817] usbhid 3-1:0.0: can't add hid device: -71 [ 901.204913][ T5817] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 901.224967][ T5817] usb 3-1: USB disconnect, device number 32 [ 901.524864][ T29] audit: type=1400 audit(1734888591.136:671): avc: denied { getopt } for pid=18640 comm="syz.3.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 901.755171][ T5817] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 902.115868][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 902.122777][ T5817] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.244306][ T5817] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.264880][ T5817] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 902.282241][ T5817] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.368725][ T5817] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 902.378485][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.545810][T18660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 902.578980][T18660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 902.595250][ T5817] usb 2-1: GET_CAPABILITIES returned 0 [ 902.621168][ T5817] usbtmc 2-1:16.0: can't read capabilities [ 902.812432][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.834433][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.843581][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.852682][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.861794][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.870992][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.879883][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.889013][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.898086][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.907164][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.916207][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.925248][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 902.934308][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.981593][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.033043][T18681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.055652][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.064786][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.077051][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.086171][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.342452][ T25] usb 2-1: USB disconnect, device number 41 [ 903.793616][ T29] audit: type=1400 audit(1734888593.426:672): avc: denied { getopt } for pid=18687 comm="syz.4.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 903.828049][ T29] audit: type=1400 audit(1734888593.426:673): avc: denied { getopt } for pid=18687 comm="syz.4.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 903.888016][T18693] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 903.955538][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 904.016525][T18701] overlayfs: missing 'lowerdir' [ 904.148178][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.188341][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.217133][ T25] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 904.246853][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.274493][ T25] usb 4-1: config 0 descriptor?? [ 905.035530][T18725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.074860][T12447] Bluetooth: hci0: command 0x0c1a tx timeout [ 905.441007][T18731] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 905.610013][T18737] overlayfs: missing 'lowerdir' [ 906.603902][ T5817] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 906.643899][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 906.752065][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 906.785041][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 906.785855][ T25] usb 4-1: USB disconnect, device number 27 [ 906.983514][ T5817] usb 5-1: config 0 has no interfaces? [ 906.995617][ T5817] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 907.008576][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.018820][ T5817] usb 5-1: config 0 descriptor?? [ 907.050550][T18768] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 907.221957][T18776] overlayfs: missing 'lowerdir' [ 907.233764][ T29] audit: type=1400 audit(1734888596.876:674): avc: denied { write } for pid=18750 comm="syz.4.3556" path="socket:[57023]" dev="sockfs" ino=57023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 907.236893][ T5894] usb 5-1: USB disconnect, device number 42 [ 907.257242][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.354942][ T5817] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 907.536850][ T5817] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 907.555165][ T8] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 907.576170][ T5817] usb 2-1: config 0 has no interface number 0 [ 907.576199][T18781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.620167][ T5817] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 907.636685][ T5817] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 907.652830][ T5817] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 907.668265][ T5817] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 907.691383][ T5817] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 907.710179][ T5817] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 907.727557][ T5817] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 907.749627][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.768137][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 907.777799][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 907.805633][ T5817] usb 2-1: config 0 descriptor?? [ 907.866285][T18770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 907.881909][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 907.891855][T18770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 907.905341][ T5817] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 907.927459][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 907.975475][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.037403][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 908.070733][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.131323][ T5863] usb 2-1: USB disconnect, device number 42 [ 908.137422][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 908.178917][ T5863] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 908.307815][ T8] usb 6-1: GET_CAPABILITIES returned 0 [ 908.324097][ T8] usbtmc 6-1:16.0: can't read capabilities [ 908.362718][T18770] ldusb: No device or device unplugged -19 [ 908.434220][T18797] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 908.441258][T18797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 908.479704][T18797] vhci_hcd vhci_hcd.0: Device attached [ 908.506479][T18806] overlayfs: missing 'workdir' [ 908.517569][T16646] usb 6-1: USB disconnect, device number 35 [ 908.654966][ T8] vhci_hcd: vhci_device speed not set [ 908.714963][ T5863] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 908.717408][ T8] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 908.815314][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 908.866663][ T5863] usb 3-1: config 0 has no interfaces? [ 908.872383][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 908.887046][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.899521][ T5863] usb 3-1: config 0 descriptor?? [ 909.101907][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.112953][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.123005][ T25] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 909.132586][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.146319][T16646] usb 3-1: USB disconnect, device number 33 [ 909.246337][T18798] usb 37-1: recv xbuf, 0 [ 909.292251][ T25] usb 4-1: config 0 descriptor?? [ 909.308976][ T68] vhci_hcd: stop threads [ 909.326904][ T68] vhci_hcd: release socket [ 909.343899][ T68] vhci_hcd: disconnect device [ 909.514844][ T8] vhci_hcd: vhci_device speed not set [ 910.682599][T18834] 9pnet_virtio: no channels available for device syz [ 911.358227][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'. [ 911.572262][T18844] overlayfs: missing 'workdir' [ 911.900698][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 911.927173][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 911.943627][ T25] usb 4-1: USB disconnect, device number 28 [ 912.140693][T18837] hsr_slave_1 (unregistering): left allmulticast mode [ 912.412130][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 912.516139][T18837] hsr_slave_1 (unregistering): left promiscuous mode [ 912.853637][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 912.860637][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 912.903740][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 912.929041][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 912.969677][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.044019][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 913.058609][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.275261][T16646] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 913.306063][T18878] 9pnet_virtio: no channels available for device syz [ 913.348501][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 913.379740][ T25] usbtmc 4-1:16.0: can't read capabilities [ 913.619468][ T5894] usb 4-1: USB disconnect, device number 29 [ 913.625568][T16646] usb 6-1: Using ep0 maxpacket: 16 [ 913.641773][T16646] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 913.652995][T16646] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 913.698745][T16646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 913.710805][T16646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 913.723295][T16646] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 913.739280][T16646] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 913.748612][T16646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.769204][T16646] usb 6-1: Product: syz [ 913.773401][T16646] usb 6-1: Manufacturer: syz [ 913.917671][T16646] usb 6-1: SerialNumber: syz [ 913.931181][T16646] usb 6-1: config 0 descriptor?? [ 914.307148][T16646] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 914.348005][T16646] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 914.452000][ T25] usb 6-1: USB disconnect, device number 36 [ 914.576427][T18894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3598'. [ 914.905269][T16646] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 915.577564][T16646] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 915.598759][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 915.637666][T16646] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 915.663083][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 915.681665][T18907] input: syz1 as /devices/virtual/input/input18 [ 915.701991][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 915.719797][T16646] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 915.731613][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 915.771170][T16646] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 915.827843][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 915.839790][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 915.867126][T16646] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 915.874951][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 915.907280][T16646] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 915.945058][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 915.964332][T16646] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 915.979549][T16646] usb 3-1: string descriptor 0 read error: -22 [ 915.985957][T16646] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 915.995127][T16646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.021986][T16646] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 916.101935][T18920] netlink: 'syz.5.3609': attribute type 2 has an invalid length. [ 916.151304][T18923] netlink: 'syz.1.3610': attribute type 2 has an invalid length. [ 916.941610][T18934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3613'. [ 918.002606][T16646] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz1 [ 918.034081][ T25] usb 3-1: USB disconnect, device number 34 [ 919.216261][T18988] netlink: 'syz.5.3626': attribute type 2 has an invalid length. [ 920.430045][ T5864] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 920.599218][ T25] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz1 [ 920.646288][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 920.690377][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.731341][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.756196][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 920.783452][ T5864] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 920.803335][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.828987][ T5864] usb 5-1: config 0 descriptor?? [ 921.265675][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 921.284960][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 921.323337][ T5864] usb 5-1: USB disconnect, device number 43 [ 923.958890][ T29] audit: type=1400 audit(1734888613.596:675): avc: denied { bind } for pid=19065 comm="syz.4.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 924.851979][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3663'. [ 925.439641][T19124] lo speed is unknown, defaulting to 1000 [ 925.465590][T19128] overlayfs: failed to resolve './file1': -2 [ 925.488654][T19124] lo speed is unknown, defaulting to 1000 [ 925.526099][T19124] syzkaller0 speed is unknown, defaulting to 1000 [ 925.567074][T19130] syzkaller1: entered promiscuous mode [ 925.572590][T19130] syzkaller1: entered allmulticast mode [ 925.958120][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3666'. [ 927.711498][ T5894] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 927.946211][ T5894] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 927.964111][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.987059][ T5894] usb 6-1: config 0 descriptor?? [ 927.994593][ T5894] cp210x 6-1:0.0: cp210x converter detected [ 928.426220][ T5894] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 928.451306][ T5894] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 928.470874][ T5894] usb 6-1: cp210x converter now attached to ttyUSB0 [ 928.479876][ T5894] usb 6-1: USB disconnect, device number 37 [ 928.501888][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 928.521973][ T5894] cp210x 6-1:0.0: device disconnected [ 929.014984][T12447] Bluetooth: hci0: command 0x0c1a tx timeout [ 929.683884][ T29] audit: type=1400 audit(1734888619.316:676): avc: denied { append } for pid=19210 comm="syz.3.3695" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 929.945649][ T29] audit: type=1326 audit(1734888619.586:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 929.988105][T19224] tipc: Started in network mode [ 929.993131][T19224] tipc: Node identity 7f000001, cluster identity 4711 [ 930.000111][ T29] audit: type=1326 audit(1734888619.616:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.024499][T19224] tipc: Enabled bearer , priority 10 [ 930.042249][ T29] audit: type=1326 audit(1734888619.616:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.068100][ T29] audit: type=1326 audit(1734888619.616:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.075187][T16646] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 930.091948][ T29] audit: type=1326 audit(1734888619.616:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.123308][ T29] audit: type=1326 audit(1734888619.616:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.182761][ T29] audit: type=1326 audit(1734888619.616:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.212746][ T29] audit: type=1326 audit(1734888619.616:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.235432][T19228] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3703'. [ 930.252322][ T29] audit: type=1326 audit(1734888619.616:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb194785d29 code=0x7ffc0000 [ 930.331469][T19224] tipc: Enabled bearer , priority 0 [ 930.359892][T16646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.380065][T16646] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 930.403359][T16646] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 930.434451][T16646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.471277][T16646] usb 4-1: config 0 descriptor?? [ 930.488659][T16646] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 930.855310][ T5895] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 931.050205][ T5895] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 931.149745][ T5895] usb 5-1: config 0 has no interface number 0 [ 931.229799][ T5895] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 931.262611][ T5895] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 931.281342][ T5895] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 931.295069][ T5895] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 931.306740][ T5895] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 931.311633][T16646] usb 4-1: USB disconnect, device number 30 [ 931.405649][ T5895] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 931.418980][ T5863] tipc: Node number set to 2130706433 [ 931.451046][ T5895] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 931.494967][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.509984][ T5895] usb 5-1: config 0 descriptor?? [ 931.515133][ T1199] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 931.524286][T19247] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 931.587906][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3715'. [ 931.704157][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.242180][T19258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3716'. [ 932.265086][T19247] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 932.284836][ T1199] usb 3-1: Using ep0 maxpacket: 8 [ 932.291576][ T1199] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 932.310988][ T5895] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 932.319495][ T1199] usb 3-1: config 179 has no interface number 0 [ 932.334881][ T1199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 932.366606][ T1199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 932.384848][ T1199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 932.412474][ T1199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 932.454520][ T1199] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 932.485348][ T1199] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 932.515185][ T1199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.546250][T19254] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 932.590016][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 932.597031][ T1199] usb 5-1: USB disconnect, device number 44 [ 932.605296][ T1199] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 932.816676][T19247] ldusb: No device or device unplugged -19 [ 933.138728][T16646] usb 3-1: USB disconnect, device number 35 [ 933.138774][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 933.153716][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 933.454872][ T5864] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 933.680689][ T5864] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 933.712582][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.770307][ T5864] usb 4-1: config 0 descriptor?? [ 933.799460][ T5864] cp210x 4-1:0.0: cp210x converter detected [ 934.105857][T19315] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 934.210186][ T5864] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 934.234786][ T5864] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 934.247053][ T5864] usb 4-1: cp210x converter now attached to ttyUSB0 [ 934.275649][ T5864] usb 4-1: USB disconnect, device number 31 [ 934.288964][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 934.297746][ T5864] cp210x 4-1:0.0: device disconnected [ 934.327046][T19321] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 934.371371][T19321] kvm: pic: non byte read [ 934.379128][T19321] kvm: pic: non byte read [ 934.384168][T19321] kvm: pic: non byte read [ 934.389678][T19321] kvm: pic: non byte read [ 934.394534][T19321] kvm: pic: non byte read [ 934.399669][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3743'. [ 934.409379][T19321] kvm: pic: non byte read [ 934.416757][T19321] kvm: pic: level sensitive irq not supported [ 934.416867][T19321] kvm: pic: non byte read [ 934.445715][T19321] kvm: pic: non byte read [ 934.450493][T19321] kvm: pic: non byte read [ 934.455020][ T5895] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 934.465109][T19321] kvm: pic: non byte read [ 934.624987][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 934.645424][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 934.657740][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 934.669103][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 934.683040][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 934.700335][ T5895] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 934.722278][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.759118][T19331] lo speed is unknown, defaulting to 1000 [ 934.765723][T19331] lo speed is unknown, defaulting to 1000 [ 934.772179][T19331] syzkaller0 speed is unknown, defaulting to 1000 [ 934.808911][T19332] overlayfs: failed to resolve './file1': -2 [ 934.838985][ T5895] usb 2-1: config 0 descriptor?? [ 934.857562][T19319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 934.912587][ T5895] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 935.118710][ T5895] usb 2-1: USB disconnect, device number 43 [ 935.124711][ C1] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 935.852284][T19353] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 935.908914][T19355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3752'. [ 935.942762][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3752'. [ 935.966292][T19355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3752'. [ 936.000479][T19355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3752'. [ 936.027426][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 936.027441][ T29] audit: type=1400 audit(1734888625.666:749): avc: denied { map } for pid=19354 comm="syz.5.3752" path="socket:[60481]" dev="sockfs" ino=60481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 936.343897][ T29] audit: type=1400 audit(1734888625.976:750): avc: denied { append } for pid=19367 comm="syz.5.3757" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 936.375663][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3759'. [ 936.386723][T19372] loop6: detected capacity change from 0 to 524287999 [ 936.420447][ C1] blk_print_req_error: 90 callbacks suppressed [ 936.420462][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.448526][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3755'. [ 936.468646][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.495839][T14555] loop: Write error at byte offset 1, length 4096. [ 936.502909][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 936.512323][ C0] buffer_io_error: 60 callbacks suppressed [ 936.512332][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 936.975976][ T5817] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 937.072601][ T29] audit: type=1400 audit(1734888626.706:751): avc: denied { mounton } for pid=19402 comm="syz.3.3770" path="/155/file0/bus" dev="ramfs" ino=60621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 937.084196][T19403] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 937.122783][T19403] overlayfs: failed to set xattr on upper [ 937.129476][T19403] overlayfs: ...falling back to redirect_dir=nofollow. [ 937.145574][ T29] audit: type=1400 audit(1734888626.776:752): avc: denied { create } for pid=19402 comm="syz.3.3770" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 937.166736][T19403] overlayfs: ...falling back to index=off. [ 937.172566][T19403] overlayfs: ...falling back to uuid=null. [ 937.190248][T19404] lo speed is unknown, defaulting to 1000 [ 937.196880][T19404] lo speed is unknown, defaulting to 1000 [ 937.203389][T19404] syzkaller0 speed is unknown, defaulting to 1000 [ 937.234658][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 937.241125][T19409] overlayfs: failed to resolve './file1': -2 [ 937.254482][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.266173][ T5817] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 937.275228][ T5817] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 937.284300][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.316643][T12447] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 937.327677][T12447] Bluetooth: hci5: Injecting HCI hardware error event [ 937.340360][ T54] Bluetooth: hci5: hardware error 0x00 [ 937.385576][ T5817] usb 6-1: config 0 descriptor?? [ 937.396919][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 937.402989][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 937.444251][ T29] audit: type=1400 audit(1734888627.076:753): avc: denied { unlink } for pid=16664 comm="syz-executor" name="file1" dev="ramfs" ino=59501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 937.696000][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 937.702579][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 938.086235][T19411] ceph: No mds server is up or the cluster is laggy [ 938.251840][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3778'. [ 938.427113][T19428] hsr_slave_1 (unregistering): left promiscuous mode [ 938.781589][ T25] usb 6-1: USB disconnect, device number 38 [ 938.834808][T12447] Bluetooth: hci3: command 0x0406 tx timeout [ 938.910121][T19450] netlink: 'syz.2.3785': attribute type 1 has an invalid length. [ 939.035482][T19450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 939.082971][T19450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 939.089557][T19450] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 939.477886][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 939.745899][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3792'. [ 939.766168][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 939.779611][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 939.791420][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 939.820379][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 939.834989][ T5826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 939.842543][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.992220][T19463] lo speed is unknown, defaulting to 1000 [ 940.216748][T19463] lo speed is unknown, defaulting to 1000 [ 940.238535][T19476] rtc_cmos 00:00: Alarms can be up to one day in the future [ 940.335463][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.389759][T19463] syzkaller0 speed is unknown, defaulting to 1000 [ 940.975444][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.094114][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 941.164947][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 941.268031][T19491] overlayfs: failed to resolve './file1': -2 [ 941.583460][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.683130][T19490] lo speed is unknown, defaulting to 1000 [ 941.708600][T19490] lo speed is unknown, defaulting to 1000 [ 941.773496][T19490] syzkaller0 speed is unknown, defaulting to 1000 [ 941.843413][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.876289][ T5826] Bluetooth: hci1: command tx timeout [ 941.944879][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 942.134844][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 942.141715][ T25] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 942.150037][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.160500][ T25] usb 2-1: config 0 has no interface number 0 [ 942.166787][ T25] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 942.181443][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 942.191164][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.199664][ T25] usb 2-1: Product: syz [ 942.204089][ T25] usb 2-1: Manufacturer: syz [ 942.208843][ T25] usb 2-1: SerialNumber: syz [ 942.215502][ T25] usb 2-1: config 0 descriptor?? [ 942.222862][ T25] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 942.512415][T19463] chnl_net:caif_netlink_parms(): no params data found [ 942.582713][ T36] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 942.690256][ T36] batman_adv: batadv0: Removing interface: ip6gretap1 [ 942.844999][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 943.015009][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 943.023648][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 943.032861][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.040946][ T25] usb 3-1: Product: syz [ 943.045233][ T25] usb 3-1: Manufacturer: syz [ 943.049872][ T25] usb 3-1: SerialNumber: syz [ 943.058767][ T25] usb 3-1: config 0 descriptor?? [ 943.069399][ T25] appledisplay 3-1:0.0: Could not find int-in endpoint [ 943.076923][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 943.240489][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 943.302902][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.305238][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.306872][ T36] bond0 (unregistering): Released all slaves [ 943.346401][ T5894] usb 3-1: USB disconnect, device number 36 [ 943.455057][ T36] tipc: Left network mode [ 943.471368][T19463] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.479801][T19463] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.487583][T19463] bridge_slave_0: entered allmulticast mode [ 943.496480][T19463] bridge_slave_0: entered promiscuous mode [ 943.546598][T19519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3807'. [ 943.566232][T19463] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.577236][T19463] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.591072][T19463] bridge_slave_1: entered allmulticast mode [ 943.607110][T19463] bridge_slave_1: entered promiscuous mode [ 943.726554][T19463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.957385][ T5826] Bluetooth: hci1: command tx timeout [ 944.206115][T19463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.317167][T19463] team0: Port device team_slave_0 added [ 944.401389][T19463] team0: Port device team_slave_1 added [ 944.502725][T19463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.519426][T19463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.545396][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.652474][T19463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.725294][ T5864] usb 2-1: USB disconnect, device number 44 [ 944.747939][T19554] input: syz1 as /devices/virtual/input/input22 [ 944.791126][T19463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.825858][T19463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.871709][T19463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.923868][ T36] hsr_slave_0: left promiscuous mode [ 944.947462][ T36] hsr_slave_1: left promiscuous mode [ 944.948883][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3817'. [ 944.983395][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.006133][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.037714][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.065168][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.100859][ T36] veth1_macvtap: left promiscuous mode [ 945.116341][ T36] veth0_macvtap: left promiscuous mode [ 945.122562][ T36] veth1_vlan: left promiscuous mode [ 945.129364][ T36] veth0_vlan: left promiscuous mode [ 945.377972][T19570] overlayfs: failed to resolve './file1': -2 [ 945.995158][ T5864] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 946.040108][ T5826] Bluetooth: hci1: command tx timeout [ 946.267771][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 946.292579][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 946.528195][ T5864] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 946.545064][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.566873][ T5864] usb 5-1: Product: syz [ 946.575334][ T5864] usb 5-1: Manufacturer: syz [ 946.580721][ T5864] usb 5-1: SerialNumber: syz [ 946.603765][ T5864] usb 5-1: config 0 descriptor?? [ 946.624562][ T5864] appledisplay 5-1:0.0: Could not find int-in endpoint [ 946.632882][ T5864] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 946.834610][ T36] team0 (unregistering): Port device team_slave_1 removed [ 946.873102][ T5895] usb 5-1: USB disconnect, device number 45 [ 946.909545][ T36] team0 (unregistering): Port device team_slave_0 removed [ 947.451211][ T5895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 947.634337][T19567] lo speed is unknown, defaulting to 1000 [ 947.636458][ T5895] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 947.659111][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.675288][ T5895] usb 3-1: config 0 descriptor?? [ 947.675318][T19600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3830'. [ 947.690532][ T5895] cp210x 3-1:0.0: cp210x converter detected [ 947.779675][T19567] lo speed is unknown, defaulting to 1000 [ 947.802838][T19463] hsr_slave_0: entered promiscuous mode [ 947.822756][T19463] hsr_slave_1: entered promiscuous mode [ 947.840575][T19463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.850263][T19463] Cannot create hsr debugfs directory [ 947.931433][T19567] syzkaller0 speed is unknown, defaulting to 1000 [ 948.115295][ T5826] Bluetooth: hci1: command tx timeout [ 948.121559][ T5895] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 948.135022][ T5895] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 948.165840][ T5895] usb 3-1: cp210x converter now attached to ttyUSB0 [ 948.324214][ T5817] usb 3-1: USB disconnect, device number 37 [ 948.391296][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 948.431213][ T5817] cp210x 3-1:0.0: device disconnected [ 948.478419][ T36] IPVS: stop unused estimator thread 0... [ 949.733485][T19463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 949.780770][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'. [ 949.791183][T19463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 949.849582][T19463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 949.889888][T19463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 949.904949][T19660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3848'. [ 950.015012][T19657] block nbd2: shutting down sockets [ 950.214581][T19463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.519734][T19463] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.571273][T13566] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.578407][T13566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.625029][T13566] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.632143][T13566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.862566][T19688] lo speed is unknown, defaulting to 1000 [ 950.895263][T19688] lo speed is unknown, defaulting to 1000 [ 950.898540][T19691] overlayfs: failed to resolve './file1': -2 [ 950.901689][T19688] syzkaller0 speed is unknown, defaulting to 1000 [ 951.093824][T19463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.517321][T19725] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 951.523887][T19725] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 951.618087][T19725] vhci_hcd vhci_hcd.0: Device attached [ 951.676656][T19726] vhci_hcd: connection closed [ 951.676908][T13566] vhci_hcd: stop threads [ 951.699139][T13566] vhci_hcd: release socket [ 951.703715][T13566] vhci_hcd: disconnect device [ 951.936839][T19463] veth0_vlan: entered promiscuous mode [ 951.973401][T19463] veth1_vlan: entered promiscuous mode [ 952.348932][T19463] veth0_macvtap: entered promiscuous mode [ 952.387936][T19463] veth1_macvtap: entered promiscuous mode [ 952.423170][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.442454][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.467337][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.538542][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.562164][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.584309][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.617934][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.674190][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.738314][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.754446][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.783313][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.922044][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.973625][T19463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.052612][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.101456][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.116148][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.127187][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.137154][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.164558][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.174622][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.185279][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.306426][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.498664][ T5894] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 953.548686][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.558865][ T5864] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 953.572756][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.588173][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.602786][T19463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.618340][T19463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.631410][T19463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.655345][T19463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.664252][T19463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.673774][T19463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.674857][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 953.682686][T19463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.711704][ T5894] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 953.720581][ T5894] usb 2-1: config 0 has no interface number 0 [ 953.727035][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 953.732324][ T5894] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 953.754082][ T5864] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 953.774476][ T5864] usb 4-1: config 179 has no interface number 0 [ 953.799064][ T5864] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 953.817068][ T5864] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 953.831983][ T5864] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 953.843767][T14561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.845627][ T5894] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 953.868329][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.877188][ T5864] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 953.883920][T14561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.920184][ T5894] usb 2-1: Product: syz [ 953.930313][ T5864] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 953.951913][ T5894] usb 2-1: Manufacturer: syz [ 953.953542][T14555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.966845][T14555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.967324][ T5894] usb 2-1: SerialNumber: syz [ 953.991778][ T5864] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 954.009705][ T5894] usb 2-1: config 0 descriptor?? [ 954.024471][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.035270][ T5894] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 954.056612][T19773] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 955.256535][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 955.377452][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23 [ 955.553331][ T25] usb 4-1: USB disconnect, device number 32 [ 955.553329][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 955.553368][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 955.576844][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.594934][ T5895] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 955.617915][ T25] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 955.774826][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 955.782223][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 955.796557][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 955.811585][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 955.834496][ T5895] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 955.844095][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.853625][ T5895] usb 6-1: Product: syz [ 955.862291][ T5895] usb 6-1: Manufacturer: syz [ 955.868328][ T5895] usb 6-1: SerialNumber: syz [ 955.874480][ T5895] usb 6-1: config 0 descriptor?? [ 955.893573][ T5895] appledisplay 6-1:0.0: Could not find int-in endpoint [ 955.904148][ T5895] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 955.914863][ T5864] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 956.086288][ T5864] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 956.093777][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 956.119107][ T5817] usb 6-1: USB disconnect, device number 39 [ 956.153415][ T5864] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.165944][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 956.179181][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 956.205904][ T5864] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 956.213904][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 956.231756][ T5864] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.244009][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 956.255404][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 956.272275][ T5864] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 956.293653][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 956.312310][ T25] usb 2-1: USB disconnect, device number 45 [ 956.337540][ T5864] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.371750][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 956.395887][ T5864] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 956.417227][ T5864] usb 5-1: string descriptor 0 read error: -22 [ 956.427016][ T5864] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 956.447286][T19824] input: syz0 as /devices/virtual/input/input24 [ 956.471154][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.517553][ T5864] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 956.963451][ T25] usb 5-1: USB disconnect, device number 46 [ 957.745162][T19844] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 958.114979][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 958.208795][T19866] [ 958.211167][T19866] ====================================================== [ 958.218185][T19866] WARNING: possible circular locking dependency detected [ 958.225203][T19866] 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 Not tainted [ 958.232293][T19866] ------------------------------------------------------ [ 958.239292][T19866] syz.4.3902/19866 is trying to acquire lock: [ 958.245337][T19866] ffff88814274d418 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.255676][T19866] [ 958.255676][T19866] but task is already holding lock: [ 958.263019][T19866] ffff88814274cee8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 958.274400][T19866] [ 958.274400][T19866] which lock already depends on the new lock. [ 958.274400][T19866] [ 958.284804][T19866] [ 958.284804][T19866] the existing dependency chain (in reverse order) is: [ 958.293800][T19866] [ 958.293800][T19866] -> #4 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 958.302398][T19866] blk_mq_submit_bio+0x1fb6/0x24c0 [ 958.308020][T19866] __submit_bio+0x384/0x540 [ 958.313027][T19866] submit_bio_noacct_nocheck+0x698/0xd70 [ 958.319161][T19866] submit_bio_noacct+0x93a/0x1e20 [ 958.324687][T19866] mpage_readahead+0x41d/0x590 [ 958.329959][T19866] read_pages+0x1a8/0xdc0 [ 958.334794][T19866] page_cache_ra_unbounded+0x3dc/0x750 [ 958.340757][T19866] force_page_cache_ra+0x24b/0x340 [ 958.346380][T19866] page_cache_sync_ra+0x110/0x9c0 [ 958.351931][T19866] filemap_get_pages+0xd7b/0x1be0 [ 958.357463][T19866] filemap_read+0x3ca/0xd70 [ 958.362482][T19866] blkdev_read_iter+0x187/0x480 [ 958.367840][T19866] vfs_read+0x87f/0xbe0 [ 958.372499][T19866] ksys_read+0x12b/0x250 [ 958.377248][T19866] do_syscall_64+0xcd/0x250 [ 958.382261][T19866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.388681][T19866] [ 958.388681][T19866] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 958.397208][T19866] down_read+0x9a/0x330 [ 958.401895][T19866] page_cache_ra_unbounded+0x173/0x750 [ 958.407869][T19866] page_cache_ra_order+0x8f2/0xc80 [ 958.413495][T19866] page_cache_async_ra+0x5cb/0x820 [ 958.419110][T19866] filemap_fault+0xd69/0x2820 [ 958.424300][T19866] __do_fault+0x10a/0x490 [ 958.429147][T19866] do_pte_missing+0x99f/0x3e00 [ 958.434425][T19866] __handle_mm_fault+0x103c/0x2a40 [ 958.440040][T19866] handle_mm_fault+0x3fa/0xaa0 [ 958.445312][T19866] __get_user_pages+0x8d9/0x3b50 [ 958.450752][T19866] __gup_longterm_locked+0x5ff/0x1870 [ 958.456626][T19866] pin_user_pages+0x13f/0x160 [ 958.461806][T19866] xdp_umem_create+0x73c/0x1270 [ 958.467172][T19866] xsk_setsockopt+0x7fc/0xa10 [ 958.472352][T19866] do_sock_setsockopt+0x222/0x480 [ 958.477886][T19866] __sys_setsockopt+0x1a0/0x230 [ 958.483245][T19866] __x64_sys_setsockopt+0xbd/0x160 [ 958.488871][T19866] do_syscall_64+0xcd/0x250 [ 958.493892][T19866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.500293][T19866] [ 958.500293][T19866] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 958.507835][T19866] __might_fault+0x11b/0x190 [ 958.512930][T19866] _copy_from_user+0x29/0xd0 [ 958.518020][T19866] __blk_trace_setup+0xa8/0x180 [ 958.523399][T19866] blk_trace_ioctl+0x163/0x290 [ 958.528681][T19866] blkdev_ioctl+0x109/0x6d0 [ 958.533703][T19866] __x64_sys_ioctl+0x190/0x200 [ 958.538994][T19866] do_syscall_64+0xcd/0x250 [ 958.544008][T19866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.550424][T19866] [ 958.550424][T19866] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 958.558224][T19866] __mutex_lock+0x19b/0xa60 [ 958.563236][T19866] blk_register_queue+0x13c/0x4f0 [ 958.568817][T19866] add_disk_fwnode+0x785/0x1300 [ 958.574169][T19866] brd_alloc.isra.0+0x5a2/0x840 [ 958.579525][T19866] brd_init+0x12b/0x1d0 [ 958.584186][T19866] do_one_initcall+0x128/0x700 [ 958.589457][T19866] kernel_init_freeable+0x5c7/0x900 [ 958.595166][T19866] kernel_init+0x1c/0x2b0 [ 958.600010][T19866] ret_from_fork+0x45/0x80 [ 958.604930][T19866] ret_from_fork_asm+0x1a/0x30 [ 958.610202][T19866] [ 958.610202][T19866] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 958.617740][T19866] __lock_acquire+0x249e/0x3c40 [ 958.623094][T19866] lock_acquire.part.0+0x11b/0x380 [ 958.628710][T19866] __mutex_lock+0x19b/0xa60 [ 958.633719][T19866] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.640203][T19866] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 958.646251][T19866] nbd_start_device+0x15b/0xd70 [ 958.651606][T19866] nbd_ioctl+0x21a/0xfd0 [ 958.656354][T19866] blkdev_ioctl+0x276/0x6d0 [ 958.661365][T19866] __x64_sys_ioctl+0x190/0x200 [ 958.666642][T19866] do_syscall_64+0xcd/0x250 [ 958.671658][T19866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.678070][T19866] [ 958.678070][T19866] other info that might help us debug this: [ 958.678070][T19866] [ 958.688276][T19866] Chain exists of: [ 958.688276][T19866] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#53 [ 958.688276][T19866] [ 958.703039][T19866] Possible unsafe locking scenario: [ 958.703039][T19866] [ 958.710470][T19866] CPU0 CPU1 [ 958.715813][T19866] ---- ---- [ 958.721156][T19866] lock(&q->q_usage_counter(io)#53); [ 958.726516][T19866] lock(mapping.invalidate_lock#2); [ 958.734305][T19866] lock(&q->q_usage_counter(io)#53); [ 958.742181][T19866] lock(&q->sysfs_lock); [ 958.746492][T19866] [ 958.746492][T19866] *** DEADLOCK *** [ 958.746492][T19866] [ 958.754614][T19866] 4 locks held by syz.4.3902/19866: [ 958.759792][T19866] #0: ffff888026653998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 958.769099][T19866] #1: ffff8880266538d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 958.779870][T19866] #2: ffff88814274cee8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 958.791687][T19866] #3: ffff88814274cf20 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 958.803763][T19866] [ 958.803763][T19866] stack backtrace: [ 958.809629][T19866] CPU: 0 UID: 0 PID: 19866 Comm: syz.4.3902 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 958.820373][T19866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 958.830411][T19866] Call Trace: [ 958.833675][T19866] [ 958.836600][T19866] dump_stack_lvl+0x116/0x1f0 [ 958.841268][T19866] print_circular_bug+0x419/0x5d0 [ 958.846279][T19866] check_noncircular+0x31a/0x400 [ 958.851219][T19866] ? __pfx_check_noncircular+0x10/0x10 [ 958.856664][T19866] ? add_lock_to_list+0x17d/0x390 [ 958.861682][T19866] __lock_acquire+0x249e/0x3c40 [ 958.866536][T19866] ? __pfx___lock_acquire+0x10/0x10 [ 958.871725][T19866] ? __pfx_stack_trace_save+0x10/0x10 [ 958.877092][T19866] ? lockdep_unlock+0x11a/0x290 [ 958.881938][T19866] ? stack_depot_save_flags+0x28/0x9c0 [ 958.887390][T19866] lock_acquire.part.0+0x11b/0x380 [ 958.892488][T19866] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.898628][T19866] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 958.904250][T19866] ? rcu_is_watching+0x12/0xc0 [ 958.909006][T19866] ? trace_lock_acquire+0x14e/0x1f0 [ 958.914192][T19866] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.920331][T19866] ? lock_acquire+0x2f/0xb0 [ 958.924824][T19866] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.930968][T19866] __mutex_lock+0x19b/0xa60 [ 958.935459][T19866] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.941603][T19866] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.947760][T19866] ? __pfx___mutex_lock+0x10/0x10 [ 958.952792][T19866] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.958935][T19866] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 958.964905][T19866] ? __mutex_trylock_common+0xea/0x250 [ 958.970350][T19866] ? __pfx___mutex_trylock_common+0x10/0x10 [ 958.976230][T19866] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 958.981934][T19866] ? rcu_is_watching+0x12/0xc0 [ 958.986697][T19866] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 958.993097][T19866] ? __pfx___mutex_trylock_common+0x10/0x10 [ 958.998986][T19866] ? avc_has_perm_noaudit+0x61/0x3a0 [ 959.004282][T19866] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 959.009987][T19866] ? __pfx___mutex_lock+0x10/0x10 [ 959.014999][T19866] ? trace_contention_end+0xee/0x140 [ 959.020268][T19866] ? __mutex_lock+0x1cc/0xa60 [ 959.024932][T19866] ? nbd_ioctl+0x151/0xfd0 [ 959.029331][T19866] ? __pfx___mutex_lock+0x10/0x10 [ 959.034342][T19866] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 959.039873][T19866] nbd_start_device+0x15b/0xd70 [ 959.044711][T19866] ? bpf_lsm_capable+0x9/0x10 [ 959.049376][T19866] nbd_ioctl+0x21a/0xfd0 [ 959.053605][T19866] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 959.060101][T19866] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 959.066593][T19866] ? __pfx_nbd_ioctl+0x10/0x10 [ 959.071361][T19866] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 959.078219][T19866] ? __pfx_lock_release+0x10/0x10 [ 959.083242][T19866] ? __pfx_nbd_ioctl+0x10/0x10 [ 959.087995][T19866] blkdev_ioctl+0x276/0x6d0 [ 959.092503][T19866] ? __pfx_blkdev_ioctl+0x10/0x10 [ 959.097518][T19866] ? selinux_file_ioctl+0x180/0x270 [ 959.102703][T19866] ? selinux_file_ioctl+0xb4/0x270 [ 959.107803][T19866] ? __pfx_blkdev_ioctl+0x10/0x10 [ 959.112818][T19866] __x64_sys_ioctl+0x190/0x200 [ 959.117571][T19866] do_syscall_64+0xcd/0x250 [ 959.122065][T19866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.127949][T19866] RIP: 0033:0x7fa1f2b85d29 [ 959.132346][T19866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.151935][T19866] RSP: 002b:00007fa1f3a80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.160341][T19866] RAX: ffffffffffffffda RBX: 00007fa1f2d76080 RCX: 00007fa1f2b85d29 [ 959.168316][T19866] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 959.176278][T19866] RBP: 00007fa1f2c01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 959.184235][T19866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.192187][T19866] R13: 0000000000000001 R14: 00007fa1f2d76080 R15: 00007ffd30bc6108 [ 959.200147][T19866] [ 959.203174][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 959.321006][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 959.336629][ T25] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 959.371761][ T25] usb 3-1: config 0 has no interface number 0 [ 959.424272][ T25] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 959.625783][ T5826] block nbd4: Receive control failed (result -32) [ 959.626797][ T54] block nbd4: Receive control failed (result -32) [ 959.632226][T12447] block nbd4: Receive control failed (result -32) [ 959.746743][T19866] block nbd4: shutting down sockets [ 959.857565][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.928267][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.987652][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.078487][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.094023][ T25] usb 3-1: string descriptor 0 read error: -71 [ 960.107344][ T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 960.117405][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.130309][ T25] usb 3-1: config 0 descriptor?? [ 960.135984][ T25] usb 3-1: can't set config #0, error -71 [ 960.174379][ T25] usb 3-1: USB disconnect, device number 38 [ 960.210687][ T36] bridge_slave_1: left allmulticast mode [ 960.235057][ T36] bridge_slave_1: left promiscuous mode [ 960.240773][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.256481][ T36] bridge_slave_0: left allmulticast mode [ 960.262151][ T36] bridge_slave_0: left promiscuous mode [ 960.284884][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.400000][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.409827][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.419350][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 960.427643][ T36] bond0 (unregistering): Released all slaves [ 960.471949][ T36] tipc: Disabling bearer [ 960.484940][ T36] tipc: Disabling bearer [ 960.495301][ T36] tipc: Left network mode [ 960.641812][ T36] hsr_slave_0: left promiscuous mode [ 960.647684][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.655187][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.662657][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.670794][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.679879][ T36] veth1_macvtap: left promiscuous mode [ 960.687226][ T36] veth0_macvtap: left promiscuous mode [ 960.692803][ T36] veth1_vlan: left promiscuous mode [ 960.698993][ T36] veth0_vlan: left promiscuous mode [ 960.791536][ T36] team0 (unregistering): Port device team_slave_1 removed [ 960.824148][ T36] team0 (unregistering): Port device team_slave_0 removed [ 961.170343][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.215955][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.280355][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.312441][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.403312][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.449039][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.500148][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.548427][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.612167][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.648282][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.698990][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.740170][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.819967][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.870402][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.900459][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.948735][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.032779][ T36] bridge_slave_1: left allmulticast mode [ 962.039639][ T36] bridge_slave_1: left promiscuous mode [ 962.048286][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.058034][ T36] bridge_slave_0: left allmulticast mode [ 962.063692][ T36] bridge_slave_0: left promiscuous mode [ 962.072049][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.089298][ T36] bridge_slave_1: left allmulticast mode [ 962.095408][ T36] bridge_slave_1: left promiscuous mode [ 962.101077][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.112859][ T36] bridge_slave_0: left allmulticast mode [ 962.118812][ T36] bridge_slave_0: left promiscuous mode [ 962.124628][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.136842][ T36] bridge_slave_1: left allmulticast mode [ 962.142513][ T36] bridge_slave_1: left promiscuous mode [ 962.149977][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.161249][ T36] bridge_slave_0: left allmulticast mode [ 962.168352][ T36] bridge_slave_0: left promiscuous mode [ 962.174043][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.183476][ T36] bridge_slave_1: left allmulticast mode [ 962.189282][ T36] bridge_slave_1: left promiscuous mode [ 962.195286][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.203178][ T36] bridge_slave_0: left allmulticast mode [ 962.209344][ T36] bridge_slave_0: left promiscuous mode [ 962.215106][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.223154][ T36] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 962.231243][ T36] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 962.238738][ T36] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 962.289296][ T36] batman_adv: batadv0: Removing interface: ip6gretap1 [ 962.300212][ T36] batman_adv: batadv0: Removing interface: ip6gretap1 [ 962.313694][ T36] batman_adv: batadv0: Removing interface: ip6gretap1 [ 962.678043][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.687908][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.697090][ T36] bond0 (unregistering): Released all slaves [ 962.707247][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.717244][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.726695][ T36] bond0 (unregistering): Released all slaves [ 962.734250][ T36] bond1 (unregistering): Released all slaves [ 962.743600][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.753034][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.763885][ T36] bond0 (unregistering): Released all slaves [ 962.774020][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.783431][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.793462][ T36] bond0 (unregistering): Released all slaves [ 963.388289][ T36] hsr_slave_0: left promiscuous mode [ 963.393977][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.401915][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.409863][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.418081][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.427281][ T36] hsr_slave_0: left promiscuous mode [ 963.432917][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.440413][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.448295][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.455918][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.464909][ T36] hsr_slave_0: left promiscuous mode [ 963.470497][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.478217][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.486457][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.493857][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.502989][ T36] hsr_slave_0: left promiscuous mode [ 963.508678][ T36] hsr_slave_1: left promiscuous mode [ 963.514258][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.521681][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.529117][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.536542][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.549226][ T36] veth1_macvtap: left promiscuous mode [ 963.554926][ T36] veth0_macvtap: left promiscuous mode [ 963.560417][ T36] veth1_vlan: left promiscuous mode [ 963.565761][ T36] veth0_vlan: left promiscuous mode [ 963.571358][ T36] veth1_macvtap: left promiscuous mode [ 963.576906][ T36] veth0_macvtap: left promiscuous mode [ 963.582368][ T36] veth1_vlan: left promiscuous mode [ 963.587676][ T36] veth0_vlan: left promiscuous mode [ 963.594308][ T36] veth1_macvtap: left promiscuous mode [ 963.599802][ T36] veth0_macvtap: left promiscuous mode [ 963.605429][ T36] veth1_vlan: left promiscuous mode [ 963.610640][ T36] veth0_vlan: left promiscuous mode [ 963.616303][ T36] veth1_macvtap: left promiscuous mode [ 963.621751][ T36] veth0_macvtap: left promiscuous mode [ 963.627304][ T36] veth1_vlan: left promiscuous mode [ 963.632504][ T36] veth0_vlan: left promiscuous mode [ 963.748447][ T36] team0 (unregistering): Port device team_slave_1 removed [ 963.780339][ T36] team0 (unregistering): Port device team_slave_0 removed [ 963.917154][ T36] team0 (unregistering): Port device team_slave_1 removed [ 963.944195][ T36] team0 (unregistering): Port device team_slave_0 removed [ 964.109188][ T36] team0 (unregistering): Port device team_slave_1 removed [ 964.138520][ T36] team0 (unregistering): Port device team_slave_0 removed [ 964.278285][ T36] team0 (unregistering): Port device team_slave_1 removed [ 964.302026][ T36] team0 (unregistering): Port device team_slave_0 removed