last executing test programs: 14.504921985s ago: executing program 2 (id=3738): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000001228290081e949b93897bc3b0000000040007d01ff020000000000000000000000000001"], 0xfdef) 13.015782455s ago: executing program 2 (id=3744): ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00Wz', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) 11.586622208s ago: executing program 0 (id=3747): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xb81}) r1 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300), 0x0) sendto$inet(r1, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) syz_emit_ethernet(0x48, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x12, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18}]}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x31) 10.518054979s ago: executing program 2 (id=3752): mremap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 9.52243896s ago: executing program 3 (id=3756): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x130, 0x117, 0x2, 0x116, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1c8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 8.539515777s ago: executing program 4 (id=3758): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1c}]]}, 0x34}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x1f40) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="3ac4f34613", 0x5, 0x240000c5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) 8.461489658s ago: executing program 3 (id=3760): r0 = syz_io_uring_setup(0x2f68, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8004, 0x40024e}, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 8.450021816s ago: executing program 0 (id=3761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.298018622s ago: executing program 0 (id=3762): socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) dup(0xffffffffffffffff) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402"], 0x0) 8.297706496s ago: executing program 3 (id=3763): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r1, 0x8b22, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000bc0)=0xc, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.429933094s ago: executing program 4 (id=3764): ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00Wz', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) 6.516210403s ago: executing program 4 (id=3765): pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, r0, 0x6d099000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004888) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x22380, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.472469342s ago: executing program 1 (id=3766): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000180)={&(0x7f0000001000)={[{0x0, 0x0, 0x3ffe}, {0x0}, {0x0, 0xfffffcd0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000280)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x0, 0x0, 0xfffffffc}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) dup3(r2, r1, 0x80000) r7 = fsmount(r0, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma -cpuset'], 0xe) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(r9, 0x4b44, 0x2) 5.818867006s ago: executing program 4 (id=3767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) fsopen(0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) shutdown(r7, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 5.801876029s ago: executing program 0 (id=3768): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) socket(0x14, 0x2, 0x4) 5.595334263s ago: executing program 3 (id=3769): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) capset(0x0, &(0x7f00000001c0)={0x40, 0x8, 0x0, 0x82, 0x6, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x500, 0x0, 0x32315258, 0x2, 0x6, [{0x6}, {0x8}, {}, {0x10000000}, {0x0, 0xffffffff}, {0xfffffffe}, {}, {0x0, 0xfffffffc}], 0x0, 0x8, 0x0, 0x0, 0x1}}) 5.559855345s ago: executing program 1 (id=3770): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x130, 0x117, 0x2, 0x116, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1c8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 5.558934285s ago: executing program 2 (id=3771): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0x140000, 0x2000001, 0x1a44b, 0x5, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) 4.527429206s ago: executing program 3 (id=3772): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000012c0)=""/4099, 0x1003}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 4.507269185s ago: executing program 0 (id=3773): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 4.486382433s ago: executing program 1 (id=3774): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1c}]]}, 0x34}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x1f40) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="3ac4f34613", 0x5, 0x240000c5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) 4.439538903s ago: executing program 4 (id=3775): gettid() socket$inet(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 3.611250098s ago: executing program 3 (id=3776): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000f80)={0x0, 0x3, 0x0, &(0x7f0000000b80)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000cc0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="0001010000", 0x5}], 0x1}, 0x4004) r3 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2f, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) 3.386076897s ago: executing program 4 (id=3777): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0), &(0x7f0000000140)) write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) 2.746195026s ago: executing program 2 (id=3778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2.733027504s ago: executing program 0 (id=3779): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000340)) 2.688017294s ago: executing program 1 (id=3780): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x20, 0x700, 0x2, 0x40, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x64, 0x0, 0xf, 0x4, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x27, 0x39, [@empty, @local, @empty, @private=0xa010102, @broadcast, @private=0xa010101, @multicast1, @empty, @multicast2]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3f, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.425832328s ago: executing program 2 (id=3781): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r1, 0x8b22, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000bc0)=0xc, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 959.374715ms ago: executing program 1 (id=3782): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) capset(0x0, &(0x7f00000001c0)={0x40, 0x8, 0x0, 0x82, 0x6, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x500, 0x0, 0x32315258, 0x2, 0x6, [{0x6}, {0x8}, {}, {0x10000000}, {0x0, 0xffffffff}, {0xfffffffe}, {}, {0x0, 0xfffffffc}], 0x0, 0x8, 0x0, 0x0, 0x1}}) 0s ago: executing program 1 (id=3783): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x14, 0x2, 0x4) kernel console output (not intermixed with test programs): port 6081 - 0 [ 941.923274][T16906] usb 4-1: USB disconnect, device number 41 [ 942.046658][T16906] usblp0: removed [ 942.074377][T13964] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.347458][ T5914] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 942.513002][T17175] netlink: 'syz.1.2983': attribute type 3 has an invalid length. [ 942.527509][ T5914] usb 1-1: config 1 interface 0 has no altsetting 0 [ 942.548408][ T5914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 942.569469][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.594944][ T5914] usb 1-1: Product: syz [ 942.620569][T17181] o2cb: This node has not been configured. [ 942.635828][ T5914] usb 1-1: Manufacturer: syz [ 942.651442][T17181] o2cb: Cluster check failed. Fix errors before retrying. [ 942.695758][ T5914] usb 1-1: SerialNumber: syz [ 942.799131][T17181] (syz.4.2978,17181,1):user_dlm_register:674 ERROR: status = -22 [ 942.976443][T17181] (syz.4.2978,17181,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 944.000395][ T5914] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 944.355799][T16973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 944.706848][T16973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 944.733336][T16973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 944.765038][T16973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 944.998447][T16973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.066918][T16973] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.103025][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.110227][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.156618][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.163778][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.164020][ T5907] usb 1-1: USB disconnect, device number 38 [ 945.209384][ T5907] usblp0: removed [ 945.317568][T16906] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 945.492524][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 945.492544][ T30] audit: type=1326 audit(2000000418.143:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17232 comm="syz.0.2992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64d9b8eba9 code=0x0 [ 945.607894][T16906] usb 5-1: config 1 interface 0 has no altsetting 0 [ 946.322420][ T30] audit: type=1400 audit(2000000418.553:1245): avc: denied { create } for pid=17232 comm="syz.0.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 946.375501][T16906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 946.647561][T16906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.794350][T16906] usb 5-1: Product: syz [ 946.824084][T16906] usb 5-1: Manufacturer: syz [ 946.847403][T16906] usb 5-1: SerialNumber: syz [ 947.355188][T16973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.761056][T16906] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 947.820290][T16973] veth0_vlan: entered promiscuous mode [ 947.834311][T16973] veth1_vlan: entered promiscuous mode [ 947.866566][T16973] veth0_macvtap: entered promiscuous mode [ 947.880495][T16973] veth1_macvtap: entered promiscuous mode [ 947.903986][T16973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.455250][T16973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.491858][T17279] netlink: 'syz.0.2998': attribute type 3 has an invalid length. [ 948.516516][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.543345][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.559222][T17279] comedi comedi3: pcl812: I/O port conflict (0x4f2a,16) [ 948.569548][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.585696][ T30] audit: type=1400 audit(2000000421.233:1246): avc: denied { lock } for pid=17278 comm="syz.0.2998" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 948.620359][ T6175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.004981][T13964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.051472][T13964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.087815][ T5979] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 949.127615][T13964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.146795][T13964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.261855][ T5979] usb 2-1: config 1 interface 0 has no altsetting 0 [ 949.283781][ T5979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 949.349500][ T5950] usb 5-1: USB disconnect, device number 24 [ 949.407770][ T5950] usblp0: removed [ 949.465873][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.477371][ T5979] usb 2-1: Product: syz [ 949.481549][ T5979] usb 2-1: Manufacturer: syz [ 949.486140][ T5979] usb 2-1: SerialNumber: syz [ 950.573625][ T5979] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 950.667389][T16906] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 950.843491][T16906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 951.139693][T16906] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 951.279955][T16906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.332034][ T30] audit: type=1400 audit(2000000423.903:1247): avc: denied { getopt } for pid=17325 comm="syz.3.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 951.492159][T16906] usb 5-1: Product: syz [ 951.695701][T16906] usb 5-1: Manufacturer: syz [ 951.787207][T16906] usb 5-1: SerialNumber: syz [ 951.795613][T16906] usb 5-1: config 0 descriptor?? [ 952.160996][ T5979] usb 2-1: USB disconnect, device number 35 [ 952.202720][ T5979] usblp0: removed [ 952.241285][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 952.279283][T16906] usb 5-1: USB disconnect, device number 25 [ 952.352846][ T30] audit: type=1400 audit(2000000425.003:1248): avc: denied { setopt } for pid=17337 comm="syz.3.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 952.475045][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.948446][T16906] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 954.741042][T16906] usb 3-1: config 1 interface 0 has no altsetting 0 [ 954.799129][T16906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 954.814093][T16906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.857198][T16906] usb 3-1: Product: syz [ 954.862241][T16906] usb 3-1: Manufacturer: syz [ 954.904947][T16906] usb 3-1: SerialNumber: syz [ 954.925747][T17363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.571526][T16906] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 956.650265][ T5950] usb 3-1: USB disconnect, device number 39 [ 956.760251][ T5950] usblp0: removed [ 961.109996][ T5979] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 961.289142][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 961.332915][ T5979] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 961.349163][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.362876][ T5979] usb 1-1: Product: syz [ 961.367056][ T5979] usb 1-1: Manufacturer: syz [ 961.373100][ T5979] usb 1-1: SerialNumber: syz [ 961.384082][ T5979] usb 1-1: config 0 descriptor?? [ 962.202715][ T5979] usb 1-1: USB disconnect, device number 39 [ 962.259366][T17444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.297268][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.573825][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 964.585686][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 964.602051][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 964.630136][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 964.645445][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.717858][ T5907] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 965.137960][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 965.168526][ T5907] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 965.185476][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.221262][ T5907] usb 3-1: Product: syz [ 965.232534][ T5907] usb 3-1: Manufacturer: syz [ 965.237151][ T5907] usb 3-1: SerialNumber: syz [ 965.293261][ T5907] r8152-cfgselector 3-1: Unknown version 0x0000 [ 965.309655][ T5907] r8152-cfgselector 3-1: config 0 descriptor?? [ 965.903579][T16906] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 966.707630][T16531] Bluetooth: hci1: command tx timeout [ 967.265666][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.322037][T17468] chnl_net:caif_netlink_parms(): no params data found [ 967.864930][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.722623][T17511] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3061'. [ 968.807533][T16531] Bluetooth: hci1: command tx timeout [ 968.814341][T17514] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 968.831054][ T30] audit: type=1804 audit(2000000441.463:1249): pid=17514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3060" name="/newroot/599/file0" dev="tmpfs" ino=3127 res=1 errno=0 [ 968.863319][T17514] ref_ctr increment failed for inode: 0xc37 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807dee0ac0 [ 968.887883][ T30] audit: type=1800 audit(2000000441.463:1250): pid=17514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3060" name="file0" dev="tmpfs" ino=3127 res=0 errno=0 [ 969.007054][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.081547][T16531] Bluetooth: hci1: command tx timeout [ 972.471907][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.207156][T16531] Bluetooth: hci1: command tx timeout [ 973.437473][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.458678][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.465954][T17468] bridge_slave_0: entered allmulticast mode [ 973.485477][T17468] bridge_slave_0: entered promiscuous mode [ 973.515619][T17468] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.523609][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.565082][T17558] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 973.565082][T17558] program syz.1.3071 not setting count and/or reply_len properly [ 973.775694][T17468] bridge_slave_1: entered allmulticast mode [ 973.895570][T17468] bridge_slave_1: entered promiscuous mode [ 974.017728][T16906] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 974.050165][T17468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.078574][T17468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.089507][T17562] block nbd1: Attempted send on invalid socket [ 974.095685][T17562] blk_print_req_error: 2 callbacks suppressed [ 974.095697][T17562] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.131428][T17562] block nbd1: Attempted send on invalid socket [ 974.332031][T17562] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.347910][T16906] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 974.444482][T16906] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 974.459656][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 974.465569][T16906] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 974.483455][T16906] usb 3-1: config 220 has no interface number 2 [ 974.485183][T17562] block nbd1: Send control failed (result -32) [ 974.489825][T16906] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 974.489859][T16906] usb 3-1: config 220 interface 0 has no altsetting 0 [ 974.489880][T16906] usb 3-1: config 220 interface 76 has no altsetting 0 [ 974.489901][T16906] usb 3-1: config 220 interface 1 has no altsetting 0 [ 974.492188][T16906] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 974.516592][T17562] block nbd1: Request send failed, requeueing [ 974.553099][T17563] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.3074'. [ 974.562691][ T6089] block nbd1: Dead connection, failed to find a fallback [ 974.570311][ T6089] block nbd1: shutting down sockets [ 974.575509][ T6089] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.585633][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 974.598266][ T30] audit: type=1804 audit(2000000447.243:1251): pid=17570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3076" name="/newroot/601/file0" dev="tmpfs" ino=3138 res=1 errno=0 [ 974.598331][T17570] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 974.633874][T17562] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.643717][T17562] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.649342][T17468] team0: Port device team_slave_0 added [ 974.658850][ T30] audit: type=1800 audit(2000000447.253:1252): pid=17570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3076" name="file0" dev="tmpfs" ino=3138 res=0 errno=0 [ 974.682721][T17570] ref_ctr increment failed for inode: 0xc42 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880346560c0 [ 974.695585][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 974.697456][T16906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.716198][T17468] team0: Port device team_slave_1 added [ 974.734489][T16906] usb 3-1: Product: syz [ 974.754008][T16906] usb 3-1: Manufacturer: syz [ 974.764644][T16906] usb 3-1: SerialNumber: syz [ 974.823126][T17562] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.839693][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 974.888102][T17562] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.897970][T17562] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.907545][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 974.925668][T17468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.933784][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.963488][T17562] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.973442][T17468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.003143][ T67] bridge_slave_1: left allmulticast mode [ 975.007701][T16906] usb 3-1: selecting invalid altsetting 0 [ 975.010064][ T67] bridge_slave_1: left promiscuous mode [ 975.020751][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.028326][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 975.044508][T17562] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 975.049150][T16906] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 975.060900][T16906] usb 3-1: No valid video chain found. [ 975.067161][ T67] bridge_slave_0: left allmulticast mode [ 975.073629][ T67] bridge_slave_0: left promiscuous mode [ 975.080835][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 975.083850][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.097779][T16906] usb 3-1: selecting invalid altsetting 0 [ 975.098293][T17562] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 975.113607][T17562] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 975.115832][T16906] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 975.859949][T16906] usb 3-1: USB disconnect, device number 41 [ 976.855151][ T67] bond4 (unregistering): (slave geneve3): Releasing active interface [ 976.925967][ T67] bond3 (unregistering): (slave geneve2): Releasing active interface [ 977.232869][T17602] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.3086'. [ 977.540211][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.550945][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.562840][ T67] bond0 (unregistering): Released all slaves [ 977.694321][ T67] bond1 (unregistering): (slave bond2): Releasing backup interface [ 977.703071][ T67] bond2 (unregistering): left promiscuous mode [ 977.712358][ T67] bond1 (unregistering): Released all slaves [ 977.855795][ T67] bond2 (unregistering): Released all slaves [ 978.003239][ T67] bond3 (unregistering): Released all slaves [ 978.093271][ T67] bond4 (unregistering): Released all slaves [ 978.105410][T17468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.112737][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.138703][T17468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.405751][T17613] block nbd4: Attempted send on invalid socket [ 978.419317][ T67] tipc: Disabling bearer [ 978.425015][T17613] block nbd4: Attempted send on invalid socket [ 978.433002][ T67] tipc: Left network mode [ 978.439438][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 978.460492][T17468] hsr_slave_0: entered promiscuous mode [ 978.466915][T17468] hsr_slave_1: entered promiscuous mode [ 978.474126][T17468] debugfs: 'hsr0' already exists in 'hsr' [ 978.479965][ T5906] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 978.490986][T17613] block nbd4: Send control failed (result -32) [ 978.507520][T17468] Cannot create hsr debugfs directory [ 978.513087][T17613] block nbd4: Request send failed, requeueing [ 978.527828][ T6089] block nbd4: Dead connection, failed to find a fallback [ 978.535041][ T6089] block nbd4: shutting down sockets [ 978.542594][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 978.557446][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 978.568492][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 978.579214][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 978.591226][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 978.601308][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 978.611250][T17613] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 978.621570][T17613] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 978.673928][ T5906] usb 2-1: config 1 interface 0 has no altsetting 0 [ 978.690383][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 978.722463][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.739653][ T5906] usb 2-1: Product: syz [ 978.744404][ T5906] usb 2-1: Manufacturer: syz [ 978.749994][ T5906] usb 2-1: SerialNumber: syz [ 980.086708][ T5906] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 980.184510][T17635] ./file0: Can't open blockdev [ 981.144438][T17645] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.3098'. [ 981.464119][T17656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 981.480478][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.524268][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.553925][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.572617][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.594293][ T67] batman_adv: batadv0: Removing interface: team0 [ 981.709166][ T67] veth1_macvtap: left promiscuous mode [ 981.730832][ T67] veth0_macvtap: left promiscuous mode [ 981.752230][ T67] veth1_vlan: left promiscuous mode [ 981.772003][ T67] veth0_vlan: left promiscuous mode [ 981.877597][ T5950] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 982.037554][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 982.053512][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.078495][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.096535][ T44] usb 2-1: USB disconnect, device number 36 [ 982.118365][ T44] usblp0: removed [ 982.127391][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 982.157776][ T5950] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 982.201786][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.238592][ T5950] usb 5-1: config 0 descriptor?? [ 982.496257][ T67] team0 (unregistering): Port device team_slave_1 removed [ 982.527484][ T44] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 982.583062][ T67] team0 (unregistering): Port device team_slave_0 removed [ 982.670864][ T44] usb 2-1: device descriptor read/64, error -71 [ 982.688881][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.696128][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.709506][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.717035][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.730216][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.739899][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.747508][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.764960][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.773686][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.786348][ T5950] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 982.816717][ T5950] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 982.832884][ T5950] microsoft 0003:045E:07DA.000B: no inputs found [ 982.840657][ T5950] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 982.890425][ T5950] usb 5-1: USB disconnect, device number 26 [ 982.937683][ T44] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 982.987435][T17683] fido_id[17683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 983.570606][ T44] usb 2-1: device descriptor read/64, error -71 [ 983.694542][ T44] usb usb2-port1: attempt power cycle [ 984.506379][ T44] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 984.834987][ T44] usb 2-1: device descriptor read/8, error -71 [ 985.237540][ T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 985.664619][ T30] audit: type=1400 audit(2000000457.933:1253): avc: denied { create } for pid=17700 comm="syz.3.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 985.697731][ T30] audit: type=1400 audit(2000000457.943:1254): avc: denied { ioctl } for pid=17700 comm="syz.3.3112" path="socket:[51610]" dev="sockfs" ino=51610 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 985.742012][ T44] usb 2-1: device descriptor read/8, error -71 [ 985.781113][ T30] audit: type=1400 audit(2000000458.343:1255): avc: denied { write } for pid=17700 comm="syz.3.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 985.932102][ T44] usb usb2-port1: unable to enumerate USB device [ 986.463338][T17716] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3115'. [ 986.472570][T17716] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3115'. [ 986.481713][T17716] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3115'. [ 988.136687][ T67] IPVS: stop unused estimator thread 0... [ 988.325683][T17468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 988.382250][T17468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 988.418247][T17468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 988.436228][ T30] audit: type=1400 audit(2000000461.083:1256): avc: denied { bind } for pid=17755 comm="syz.3.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 988.499431][T17468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 988.747210][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.785135][T17468] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.814777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.821958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.860602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.867774][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.594938][T17468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.552176][T17468] veth0_vlan: entered promiscuous mode [ 990.601420][T17468] veth1_vlan: entered promiscuous mode [ 990.674823][T17468] veth0_macvtap: entered promiscuous mode [ 990.700157][T17468] veth1_macvtap: entered promiscuous mode [ 990.754564][T17468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.793844][T17468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.824609][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.858182][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.035715][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.306992][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.343076][T17822] program syz.2.3135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.390538][T17819] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3134'. [ 991.544103][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.807474][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.997567][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.005821][T17830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.026689][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.279047][T17845] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 992.286766][T17845] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3139'. [ 992.295855][T17845] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 992.303717][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 992.707802][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.714233][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.381149][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.392602][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.401269][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.410575][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.428674][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 995.002147][T17872] chnl_net:caif_netlink_parms(): no params data found [ 995.485469][T17912] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 995.502028][T16531] Bluetooth: hci0: command tx timeout [ 995.574694][T17872] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.608607][T17872] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.638842][T17872] bridge_slave_0: entered allmulticast mode [ 995.651715][T17872] bridge_slave_0: entered promiscuous mode [ 995.824940][T17872] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.832255][T17872] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.842983][T17872] bridge_slave_1: entered allmulticast mode [ 995.850515][T17872] bridge_slave_1: entered promiscuous mode [ 995.897046][T17872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.913866][T17872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.943481][T17872] team0: Port device team_slave_0 added [ 995.952203][T17872] team0: Port device team_slave_1 added [ 996.004531][T17872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.014185][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.088167][T17872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.103341][T17872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.110692][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.159922][T17872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.315944][T17872] hsr_slave_0: entered promiscuous mode [ 996.335219][T17872] hsr_slave_1: entered promiscuous mode [ 996.353216][T17872] debugfs: 'hsr0' already exists in 'hsr' [ 996.371981][T17872] Cannot create hsr debugfs directory [ 996.690688][T17872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.793630][T17872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.990642][T17872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.465969][T17872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.577592][T16531] Bluetooth: hci0: command tx timeout [ 997.867961][ T30] audit: type=1804 audit(2000000470.523:1257): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3167" name="/newroot/38/file0" dev="tmpfs" ino=216 res=1 errno=0 [ 997.869426][T17950] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 997.927293][T17954] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3165'. [ 997.936599][ T30] audit: type=1800 audit(2000000470.523:1258): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3167" name="file0" dev="tmpfs" ino=216 res=0 errno=0 [ 997.961673][T17950] ref_ctr increment failed for inode: 0xd8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807b14d600 [ 998.056616][T17872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 998.126685][T17872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 998.276020][T17872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 998.294177][T17872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 999.079687][T17872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.107060][T17872] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.148966][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.156125][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.192027][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.199233][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.353854][ T30] audit: type=1400 audit(2000000472.003:1259): avc: denied { accept } for pid=17977 comm="syz.0.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 999.663525][T16531] Bluetooth: hci0: command tx timeout [ 999.800015][ T30] audit: type=1400 audit(2000000472.453:1260): avc: denied { lock } for pid=17986 comm="syz.2.3175" path="socket:[52844]" dev="sockfs" ino=52844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1000.028938][T16906] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1000.494333][T17872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.597596][T16906] usb 5-1: Using ep0 maxpacket: 32 [ 1000.819564][T16906] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1001.001791][T16906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.032250][T16906] usb 5-1: config 0 descriptor?? [ 1001.077743][T17872] veth0_vlan: entered promiscuous mode [ 1001.103664][T17872] veth1_vlan: entered promiscuous mode [ 1001.140258][T17872] veth0_macvtap: entered promiscuous mode [ 1001.152197][T17872] veth1_macvtap: entered promiscuous mode [ 1001.204880][T18006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.246024][T17872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.263977][T16906] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1001.272610][T17872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.281005][T16906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1001.301399][T16906] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1001.308750][T13964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.318133][T16906] usb 5-1: media controller created [ 1001.322371][T13964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.413959][T13964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.452918][T16906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.453351][T13964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.742723][T16531] Bluetooth: hci0: command tx timeout [ 1002.101884][T16906] az6027: usb out operation failed. (-71) [ 1002.140334][T16906] az6027: usb out operation failed. (-71) [ 1002.177781][T16906] stb0899_attach: Driver disabled by Kconfig [ 1002.183783][T16906] az6027: no front-end attached [ 1002.183783][T16906] [ 1002.186443][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.214130][T16906] az6027: usb out operation failed. (-71) [ 1002.230601][T16906] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1002.249841][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.282307][T16906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 1002.328817][T16906] dvb-usb: schedule remote query interval to 400 msecs. [ 1002.335781][T16906] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1002.349725][T16906] usb 5-1: USB disconnect, device number 27 [ 1002.412937][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.437526][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.584125][T16906] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1002.820396][ T44] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1002.940217][T18038] netlink: 'syz.4.3187': attribute type 7 has an invalid length. [ 1002.948098][T18038] netlink: 'syz.4.3187': attribute type 8 has an invalid length. [ 1003.264131][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.343297][ T44] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1003.479154][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.508922][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.585121][T18047] netlink: 'syz.4.3189': attribute type 3 has an invalid length. [ 1004.014124][ T44] usb 2-1: Product: syz [ 1004.037452][ T44] usb 2-1: Manufacturer: syz [ 1004.042076][ T44] usb 2-1: SerialNumber: syz [ 1004.306156][T18031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1004.661844][T18055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3193'. [ 1004.701791][T18055] netlink: 'syz.4.3193': attribute type 5 has an invalid length. [ 1004.987465][ T1095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.110750][T18031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1005.372340][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1005.384315][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1005.393056][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1005.402048][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1005.409770][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.430135][ T1095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.465811][ T44] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1005.485556][ T44] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1005.506129][ T44] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1005.600447][ T1095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.659039][T18069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1005.665923][T18069] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1005.681799][T18069] vhci_hcd vhci_hcd.0: Device attached [ 1005.695392][ T44] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1005.704724][ T44] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1005.721303][ T44] wwan wwan0: port wwan0mbim0 attached [ 1005.759308][ T44] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 1005.914401][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1005.921252][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1005.928467][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1005.935130][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1005.941465][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1005.948120][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1005.954383][ T5950] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1005.954505][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1005.968580][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1005.976811][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1005.983491][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1005.990134][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1005.996789][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1006.003092][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1006.009761][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1006.016137][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1006.022824][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1006.029165][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1006.035824][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1006.042132][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1006.048784][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1006.090758][ T9] usb 2-1: USB disconnect, device number 41 [ 1006.117273][ T1095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.130916][ T9] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1006.327374][T18072] vhci_hcd: connection reset by peer [ 1006.350283][ T2985] vhci_hcd: stop threads [ 1006.390765][ T2985] vhci_hcd: release socket [ 1006.449085][ T2985] vhci_hcd: disconnect device [ 1006.588908][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1006.845414][T18094] fuse: Bad value for 'fd' [ 1007.582893][ T5847] Bluetooth: hci2: command tx timeout [ 1008.347425][T16906] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1008.364791][T18063] chnl_net:caif_netlink_parms(): no params data found [ 1008.514005][T16906] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1008.536594][T16906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1008.571998][T16906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.647677][T16906] usb 2-1: Product: syz [ 1008.651867][T16906] usb 2-1: Manufacturer: syz [ 1008.697101][T16906] usb 2-1: SerialNumber: syz [ 1008.922355][ T1095] bridge_slave_1: left promiscuous mode [ 1008.957953][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.018507][ T1095] bridge_slave_0: left allmulticast mode [ 1009.024194][ T1095] bridge_slave_0: left promiscuous mode [ 1009.087566][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.380836][T16906] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1009.657614][ T5847] Bluetooth: hci2: command tx timeout [ 1010.613457][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.631286][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.649163][ T1095] bond0 (unregistering): Released all slaves [ 1010.864213][T16906] usb 2-1: USB disconnect, device number 42 [ 1010.873834][T16906] usblp0: removed [ 1011.044361][ T1095] tipc: Disabling bearer [ 1011.066920][ T1095] tipc: Disabling bearer [ 1011.090053][ T1095] tipc: Left network mode [ 1011.095304][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.125940][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.126375][ T1095] IPVS: stopping master sync thread 13778 ... [ 1011.133226][T18063] bridge_slave_0: entered allmulticast mode [ 1011.134668][T18063] bridge_slave_0: entered promiscuous mode [ 1011.154383][T18063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.161802][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.169068][ T5906] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1011.177546][ T5950] vhci_hcd: vhci_device speed not set [ 1011.186260][T18063] bridge_slave_1: entered allmulticast mode [ 1011.193906][T18063] bridge_slave_1: entered promiscuous mode [ 1011.580037][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 1011.640075][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1011.669875][ T5906] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1011.685112][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.737444][ T5847] Bluetooth: hci2: command tx timeout [ 1011.738140][ T5906] usb 1-1: Product: syz [ 1011.817684][T18063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.857424][ T5906] usb 1-1: Manufacturer: syz [ 1011.873114][T18063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.886309][ T5906] usb 1-1: SerialNumber: syz [ 1012.081378][ T5906] usb 1-1: config 0 descriptor?? [ 1012.098326][ T5906] hub 1-1:0.0: bad descriptor, ignoring hub [ 1012.107399][ T5906] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1012.475522][ T5906] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 1012.676024][T18063] team0: Port device team_slave_0 added [ 1012.855874][T18063] team0: Port device team_slave_1 added [ 1013.155631][T18063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.383081][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.574407][T18063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.636050][ T1095] hsr_slave_0: left promiscuous mode [ 1013.683013][ T1095] hsr_slave_1: left promiscuous mode [ 1013.690238][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.723784][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.818734][ T5847] Bluetooth: hci2: command tx timeout [ 1013.827435][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.913130][ T1095] veth1_macvtap: left promiscuous mode [ 1013.952144][ T1095] veth0_macvtap: left promiscuous mode [ 1013.962133][ T1095] veth1_vlan: left promiscuous mode [ 1014.138533][ T5906] usb 1-1: USB disconnect, device number 40 [ 1014.498776][ T5906] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1014.762359][ T1095] veth0_vlan: left promiscuous mode [ 1014.789799][T18205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1014.868009][ T5906] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1014.886832][ T5906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1014.906550][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.926250][ T5906] usb 1-1: Product: syz [ 1014.935651][ T5906] usb 1-1: Manufacturer: syz [ 1014.950237][ T5906] usb 1-1: SerialNumber: syz [ 1015.365561][T18214] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 1015.373365][T18214] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1015.382528][T18214] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 1015.390301][T18214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1015.499541][T18216] fuse: Bad value for 'fd' [ 1015.626327][ T5906] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1015.851302][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 1015.889878][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 1016.040854][ C1] usblp0: nonzero write bulk status received: -71 [ 1016.047733][ T5906] usb 1-1: USB disconnect, device number 41 [ 1016.055302][ T5906] usblp0: removed [ 1016.550873][T18063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.560154][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.592216][T18063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.976456][T18063] hsr_slave_0: entered promiscuous mode [ 1016.995103][T18063] hsr_slave_1: entered promiscuous mode [ 1017.019281][T18063] debugfs: 'hsr0' already exists in 'hsr' [ 1017.050562][T18063] Cannot create hsr debugfs directory [ 1017.816423][T18244] o2cb: This node has not been configured. [ 1017.908213][T18244] o2cb: Cluster check failed. Fix errors before retrying. [ 1018.016233][T18244] (syz.4.3236,18244,1):user_dlm_register:674 ERROR: status = -22 [ 1018.079469][T18244] (syz.4.3236,18244,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1018.285382][T18249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1018.298946][T18249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1019.167366][T18063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1019.191903][T18063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1019.213600][T18063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1019.260522][T18063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1019.279714][T18259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.676850][T18063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.710670][T18063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.739444][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3242'. [ 1019.824036][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.831199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.978170][T18284] netlink: 'syz.4.3244': attribute type 1 has an invalid length. [ 1019.985986][T18284] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1019.995553][T18284] netlink: 'syz.4.3244': attribute type 1 has an invalid length. [ 1020.003463][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1020.095864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.103067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.264301][T18286] comedi comedi3: pcl812: I/O port conflict (0x4f28,16) [ 1021.604337][T18312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3250'. [ 1021.692159][T18312] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3250'. [ 1022.017678][T18307] netlink: 'syz.4.3249': attribute type 3 has an invalid length. [ 1023.204781][T18063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.647900][T18063] veth0_vlan: entered promiscuous mode [ 1023.742485][ T30] audit: type=1400 audit(2000000496.363:1261): avc: denied { bind } for pid=18333 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1024.122583][T18063] veth1_vlan: entered promiscuous mode [ 1024.128556][ T30] audit: type=1400 audit(2000000496.383:1262): avc: denied { setopt } for pid=18333 comm="syz.1.3253" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1024.365185][T18063] veth0_macvtap: entered promiscuous mode [ 1024.400850][T18063] veth1_macvtap: entered promiscuous mode [ 1024.450614][T18063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.471426][T18063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.570463][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.608296][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.688323][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.712409][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.877842][ T44] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1025.160282][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1025.217414][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.225313][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.248478][ T44] usb 2-1: device descriptor read/64, error -71 [ 1025.274117][ T7578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.291574][ T7578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.354695][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1025.371810][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1025.487850][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.495866][ T9] usb 1-1: Product: syz [ 1025.496776][ T44] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1025.506833][ T9] usb 1-1: Manufacturer: syz [ 1025.512391][ T9] usb 1-1: SerialNumber: syz [ 1025.681329][ T44] usb 2-1: device descriptor read/64, error -71 [ 1025.907628][ T44] usb usb2-port1: attempt power cycle [ 1026.247388][ T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1026.268041][ T44] usb 2-1: device descriptor read/8, error -71 [ 1026.507428][ T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1026.528122][ T44] usb 2-1: device descriptor read/8, error -71 [ 1026.691801][ T44] usb usb2-port1: unable to enumerate USB device [ 1026.716624][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1028.241323][ T5906] usb 1-1: USB disconnect, device number 42 [ 1028.264238][ T5906] usblp0: removed [ 1028.438141][T18404] netlink: 'syz.4.3265': attribute type 3 has an invalid length. [ 1028.556496][ T5939] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1028.860288][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 1029.036510][ T5939] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1029.067031][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.263654][ T5939] usb 2-1: config 0 descriptor?? [ 1030.232832][ T5939] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1030.242165][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1031.085149][ T5939] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1031.096694][ T5939] usb 2-1: media controller created [ 1031.487137][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1031.550690][ T5939] az6027: usb out operation failed. (-71) [ 1031.603914][ T5939] az6027: usb out operation failed. (-71) [ 1031.827663][ T5939] stb0899_attach: Driver disabled by Kconfig [ 1031.864117][ T5939] az6027: no front-end attached [ 1031.864117][ T5939] [ 1032.045368][ T30] audit: type=1400 audit(2000000504.693:1263): avc: denied { connect } for pid=18433 comm="syz.0.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1032.065871][ T5939] az6027: usb out operation failed. (-71) [ 1032.081046][ T5939] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1032.112696][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 1033.076487][ T5939] dvb-usb: schedule remote query interval to 400 msecs. [ 1033.107808][ T30] audit: type=1400 audit(2000000504.723:1264): avc: denied { read } for pid=18433 comm="syz.0.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1033.702248][ T5939] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1033.910181][ T5939] usb 2-1: USB disconnect, device number 47 [ 1033.972204][T18446] block nbd1: Attempted send on invalid socket [ 1034.046451][T18446] blk_print_req_error: 14 callbacks suppressed [ 1034.046469][T18446] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.199583][T18446] block nbd1: Attempted send on invalid socket [ 1034.205949][T18446] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.234579][ T5939] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1034.243264][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1034.269991][T18446] block nbd1: Attempted send on invalid socket [ 1034.276272][T18446] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.287343][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1034.299416][T18446] block nbd1: Attempted send on invalid socket [ 1034.305565][T18446] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.315521][T18446] block nbd1: Attempted send on invalid socket [ 1034.321903][T18446] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.334022][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1034.378437][T18446] block nbd1: Attempted send on invalid socket [ 1034.384839][T18446] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.397782][T16906] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1034.407853][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1034.540713][T18446] block nbd1: Attempted send on invalid socket [ 1034.546972][T18446] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.573917][T18446] block nbd1: Attempted send on invalid socket [ 1034.581011][T18446] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.596504][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1034.619636][T18446] block nbd1: Attempted send on invalid socket [ 1034.623365][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3276'. [ 1034.640271][T18446] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.661927][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1034.661982][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3276'. [ 1034.699389][T16906] usb 5-1: device descriptor read/64, error -71 [ 1034.752510][T18446] block nbd1: Attempted send on invalid socket [ 1034.829681][T18446] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.871470][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1034.891599][T18446] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1034.953044][T18446] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1034.977753][T16906] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1035.279149][T16906] usb 5-1: device descriptor read/64, error -71 [ 1035.418877][T16906] usb usb5-port1: attempt power cycle [ 1036.387626][T16906] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1036.450788][T16906] usb 5-1: device descriptor read/8, error -71 [ 1036.759576][T16906] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1036.840089][T16906] usb 5-1: device descriptor read/8, error -71 [ 1036.996867][T16906] usb usb5-port1: unable to enumerate USB device [ 1037.737534][T12357] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1037.927421][T12357] usb 2-1: Using ep0 maxpacket: 32 [ 1038.801330][T12357] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1038.823943][T12357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.966582][T12357] usb 2-1: config 0 descriptor?? [ 1039.333588][T18502] geneve2: entered promiscuous mode [ 1039.338950][T18502] geneve2: entered allmulticast mode [ 1039.422061][T12357] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1039.511901][T12357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1039.556202][T12357] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1039.580345][T18507] nbd_handle_cmd: 2 callbacks suppressed [ 1039.580360][T18507] block nbd3: Attempted send on invalid socket [ 1039.597586][T12357] usb 2-1: media controller created [ 1039.726308][T12357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1039.744303][T18507] blk_print_req_error: 2 callbacks suppressed [ 1039.744321][T18507] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.274717][T12357] az6027: usb out operation failed. (-71) [ 1040.281522][T12357] az6027: usb out operation failed. (-71) [ 1040.287247][T12357] stb0899_attach: Driver disabled by Kconfig [ 1040.297368][T12357] az6027: no front-end attached [ 1040.297368][T12357] [ 1040.317425][T12357] az6027: usb out operation failed. (-71) [ 1040.323162][T12357] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1040.330786][T18507] block nbd3: Attempted send on invalid socket [ 1040.363642][T18507] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.365357][T12357] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 1040.413397][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1040.432035][T12357] dvb-usb: schedule remote query interval to 400 msecs. [ 1040.445180][T12357] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1040.464309][T18507] block nbd3: Attempted send on invalid socket [ 1040.485288][T12357] usb 2-1: USB disconnect, device number 48 [ 1040.504264][T18507] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.542056][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1040.574100][T18507] block nbd3: Attempted send on invalid socket [ 1040.607828][T18507] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.618220][T12357] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1040.637572][T18507] block nbd3: Attempted send on invalid socket [ 1040.643747][T18507] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.669282][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1040.680689][T18507] block nbd3: Attempted send on invalid socket [ 1040.691336][T18507] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.703682][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1040.714946][T18507] block nbd3: Attempted send on invalid socket [ 1040.725397][T18507] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.735469][T18507] block nbd3: Attempted send on invalid socket [ 1040.747507][T18507] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.760375][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1040.775074][T18507] block nbd3: Attempted send on invalid socket [ 1040.896167][T18507] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.921224][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1040.934492][T18507] block nbd3: Attempted send on invalid socket [ 1040.958191][T18507] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.978900][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1041.013117][T18517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.027600][T18507] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1041.046336][T18507] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1041.467516][ T5979] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1042.118818][ T5979] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.133224][ T5979] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1042.145675][ T5979] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1042.155538][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.410702][ T5906] usb 5-1: USB disconnect, device number 32 [ 1042.450181][T18548] fuse: Bad value for 'user_id' [ 1042.455072][T18548] fuse: Bad value for 'user_id' [ 1042.767899][T12357] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1042.947689][T12357] usb 4-1: Using ep0 maxpacket: 32 [ 1042.992684][T12357] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1043.024830][T12357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.197271][T12357] usb 4-1: config 0 descriptor?? [ 1043.533517][T12357] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1043.551184][T12357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1043.615157][T12357] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1044.119364][T12357] usb 4-1: media controller created [ 1044.136379][T12357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1044.636916][T18571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.644570][T12357] az6027: usb out operation failed. (-71) [ 1044.678162][T12357] az6027: usb out operation failed. (-71) [ 1044.683910][T12357] stb0899_attach: Driver disabled by Kconfig [ 1044.701791][T12357] az6027: no front-end attached [ 1044.701791][T12357] [ 1044.707463][T18571] batadv_slave_0: entered promiscuous mode [ 1044.716741][T12357] az6027: usb out operation failed. (-71) [ 1044.725351][T12357] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1044.751995][T12357] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 1044.773270][T12357] dvb-usb: schedule remote query interval to 400 msecs. [ 1044.783259][T12357] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1044.824356][T12357] usb 4-1: USB disconnect, device number 42 [ 1045.550899][T12357] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1046.148756][T18596] o2cb: This node has not been configured. [ 1046.190196][ T5979] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1046.207397][T18596] o2cb: Cluster check failed. Fix errors before retrying. [ 1046.218288][T18596] (syz.1.3317,18596,0):user_dlm_register:674 ERROR: status = -22 [ 1046.236105][T18596] (syz.1.3317,18596,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1046.409404][ T5979] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1046.418575][ T5979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1046.525833][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1046.547439][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.613902][ T5979] usb 3-1: Product: syz [ 1046.725158][ T5979] usb 3-1: Manufacturer: syz [ 1046.730325][ T5979] usb 3-1: SerialNumber: syz [ 1046.739080][T18600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.810167][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.826920][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1046.840749][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1046.867211][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.093758][ T5950] usb 4-1: USB disconnect, device number 43 [ 1047.375082][ T5979] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1047.430826][ T5979] usb 3-1: USB disconnect, device number 42 [ 1047.470871][ T5979] usblp0: removed [ 1047.809813][ T5950] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1047.840571][ T30] audit: type=1400 audit(2000000520.353:1265): avc: denied { cmd } for pid=18618 comm="syz.3.3327" path="socket:[56243]" dev="sockfs" ino=56243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1047.989674][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 1047.999290][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1048.017152][ T5950] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1048.027070][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.037139][ T5950] usb 1-1: Product: syz [ 1048.043854][ T5950] usb 1-1: Manufacturer: syz [ 1048.055298][ T5950] usb 1-1: SerialNumber: syz [ 1048.064722][ T5950] usb 1-1: config 0 descriptor?? [ 1048.075567][ T5950] hub 1-1:0.0: bad descriptor, ignoring hub [ 1048.082933][ T5950] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1048.100259][ T5950] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 1048.257564][ T5979] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1048.962929][ T5979] usb 2-1: Using ep0 maxpacket: 32 [ 1048.973838][T18634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.986192][T18634] batadv_slave_0: entered promiscuous mode [ 1048.998201][ T5979] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1049.009548][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.046416][ T5979] usb 2-1: config 0 descriptor?? [ 1049.256819][ T5979] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1049.274294][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1049.318099][ T5979] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1049.327106][ T5979] usb 2-1: media controller created [ 1049.368507][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1050.275190][ T5979] az6027: usb out operation failed. (-71) [ 1050.299081][ T5979] az6027: usb out operation failed. (-71) [ 1050.305389][ T5979] stb0899_attach: Driver disabled by Kconfig [ 1050.311504][ T5979] az6027: no front-end attached [ 1050.311504][ T5979] [ 1050.323238][ T5979] az6027: usb out operation failed. (-71) [ 1050.340369][ T5979] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1050.362578][ T5979] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 1050.693169][ T5979] dvb-usb: schedule remote query interval to 400 msecs. [ 1050.703170][ T5979] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1050.715254][ T5979] usb 2-1: USB disconnect, device number 49 [ 1050.859228][T18649] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1050.880821][ T30] audit: type=1804 audit(2000000523.513:1266): pid=18649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3336" name="/newroot/45/file0" dev="tmpfs" ino=250 res=1 errno=0 [ 1050.889169][T18649] ref_ctr increment failed for inode: 0xfa offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888055440000 [ 1050.941447][ T5979] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1051.044806][ T30] audit: type=1800 audit(2000000523.513:1267): pid=18649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3336" name="file0" dev="tmpfs" ino=250 res=0 errno=0 [ 1051.098260][T16531] Bluetooth: hci4: command 0x0406 tx timeout [ 1051.254019][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1051.287552][T18660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1051.497298][ T44] usb 1-1: USB disconnect, device number 43 [ 1052.207739][ T44] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1052.408751][ T44] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1052.417460][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1052.426531][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.467357][ T44] usb 1-1: Product: syz [ 1052.471541][ T44] usb 1-1: Manufacturer: syz [ 1052.476133][ T44] usb 1-1: SerialNumber: syz [ 1053.577249][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3353'. [ 1053.662293][ T44] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1053.858076][ T44] usb 1-1: USB disconnect, device number 44 [ 1053.876930][ T44] usblp0: removed [ 1054.191623][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.538044][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.532568][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 1057.551956][T18749] batadv0: entered promiscuous mode [ 1057.557707][T18749] vlan2: entered promiscuous mode [ 1062.300537][ T30] audit: type=1400 audit(2000000534.873:1268): avc: denied { append } for pid=18796 comm="syz.4.3383" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1062.648176][T18794] block nbd2: shutting down sockets [ 1062.686266][ T30] audit: type=1804 audit(2000000535.333:1269): pid=18803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3384" name="/newroot/43/file0" dev="tmpfs" ino=238 res=1 errno=0 [ 1062.698331][T18803] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1062.711437][ T30] audit: type=1800 audit(2000000535.343:1270): pid=18803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3384" name="file0" dev="tmpfs" ino=238 res=0 errno=0 [ 1062.781839][T18803] ref_ctr increment failed for inode: 0xee offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880236e4b40 [ 1065.147698][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1065.326018][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1065.809399][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1065.810533][T18836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.826822][ T30] audit: type=1400 audit(2000000538.083:1271): avc: denied { write } for pid=18831 comm="syz.1.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1065.846224][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.846252][ T9] usb 1-1: Product: syz [ 1065.846267][ T9] usb 1-1: Manufacturer: syz [ 1065.846282][ T9] usb 1-1: SerialNumber: syz [ 1065.867379][ T5979] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1065.891922][T18836] batadv_slave_0: entered promiscuous mode [ 1065.895012][ T5914] IPVS: starting estimator thread 0... [ 1066.027556][T18841] IPVS: using max 33 ests per chain, 79200 per kthread [ 1066.049031][ T5979] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.207591][ T44] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1066.391912][ T44] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1066.438106][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1066.460454][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.476548][ T44] usb 5-1: Product: syz [ 1066.510311][ T44] usb 5-1: Manufacturer: syz [ 1066.542541][ T44] usb 5-1: SerialNumber: syz [ 1066.855150][ T5979] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1066.866326][ T5979] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.879367][ T5979] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1066.888768][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.903790][ T5979] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1066.962337][ T5979] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1066.996839][ T6376] udevd[6376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.668984][ T5979] usb 3-1: USB disconnect, device number 43 [ 1067.924679][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1067.942576][ T9] usb 1-1: USB disconnect, device number 45 [ 1067.955460][ T9] usblp0: removed [ 1069.117922][ T44] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1069.217753][ T44] usb 5-1: USB disconnect, device number 33 [ 1069.356828][ T44] usblp0: removed [ 1071.072858][ T44] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1071.163167][T18895] nbd_handle_cmd: 2 callbacks suppressed [ 1071.163187][T18895] block nbd3: Attempted send on invalid socket [ 1071.396810][T18895] blk_print_req_error: 2 callbacks suppressed [ 1071.396845][T18895] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1071.477183][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1071.729512][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 1071.742341][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.751556][ T44] usb 5-1: Product: syz [ 1071.752604][T18895] block nbd3: Send control failed (result -32) [ 1071.762132][T18895] block nbd3: Request send failed, requeueing [ 1071.762166][ T44] usb 5-1: Manufacturer: syz [ 1071.839266][ T44] usb 5-1: SerialNumber: syz [ 1071.848796][ T44] usb 5-1: config 0 descriptor?? [ 1071.859247][ T2594] block nbd3: Dead connection, failed to find a fallback [ 1071.866437][ T2594] block nbd3: shutting down sockets [ 1071.872131][ T2594] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1071.882810][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1071.899806][ T44] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1071.912150][T18895] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1071.921792][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1071.935989][T18895] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1071.957168][T18895] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1071.972071][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1071.982055][T18895] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.042545][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1072.303179][T18895] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.325126][ T9] usb 5-1: USB disconnect, device number 34 [ 1072.351126][T18895] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.353416][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.430824][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1072.447756][T18895] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.457173][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1072.606554][T18895] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.617064][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1072.634456][T18895] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1072.654557][T18895] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1072.747484][T16906] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1073.391005][T16906] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1073.615803][T16906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1073.635042][T16906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.656027][T16906] usb 1-1: Product: syz [ 1073.663973][T16906] usb 1-1: Manufacturer: syz [ 1073.682590][T16906] usb 1-1: SerialNumber: syz [ 1073.989050][T18933] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1074.453677][ T30] audit: type=1804 audit(2000000546.643:1272): pid=18933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3425" name="/newroot/97/file0" dev="tmpfs" ino=525 res=1 errno=0 [ 1074.559419][T18933] ref_ctr increment failed for inode: 0x20d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880236e0ac0 [ 1074.577219][ T30] audit: type=1800 audit(2000000546.643:1273): pid=18933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3425" name="file0" dev="tmpfs" ino=525 res=0 errno=0 [ 1075.366447][T18944] syz_tun: entered allmulticast mode [ 1075.456372][T18944] syz_tun: left allmulticast mode [ 1075.601772][T16906] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1075.626667][T16906] usb 1-1: USB disconnect, device number 46 [ 1075.664380][T16906] usblp0: removed [ 1076.545804][T18961] block nbd0: Attempted send on invalid socket [ 1076.580297][T18961] blk_print_req_error: 2 callbacks suppressed [ 1076.580315][T18961] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1076.740400][T18961] block nbd0: Send control failed (result -32) [ 1076.752416][T18961] block nbd0: Request send failed, requeueing [ 1076.804768][ T2594] block nbd0: Dead connection, failed to find a fallback [ 1076.813047][ T2594] block nbd0: shutting down sockets [ 1076.818662][ T2594] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1076.830007][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1076.856915][T18961] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1076.881379][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1076.993133][T18961] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1077.006436][T18961] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1078.263403][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1078.273414][T18961] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1078.283115][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1078.298514][T18961] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1078.308332][T18961] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1078.318102][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1078.327996][T18961] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1078.337645][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1078.355119][T18961] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1078.366303][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1078.376778][T18961] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1078.386802][T18961] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1078.760711][T18985] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1078.774176][T18985] ref_ctr increment failed for inode: 0x222 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880236e0000 [ 1078.797640][ T30] audit: type=1804 audit(2000000551.413:1274): pid=18985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3439" name="/newroot/101/file0" dev="tmpfs" ino=546 res=1 errno=0 [ 1078.915007][ T30] audit: type=1800 audit(2000000551.413:1275): pid=18985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3439" name="file0" dev="tmpfs" ino=546 res=0 errno=0 [ 1079.162494][ T5907] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1079.398930][ T5907] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1079.418048][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1079.434337][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.452767][ T5907] usb 1-1: Product: syz [ 1079.456948][ T5907] usb 1-1: Manufacturer: syz [ 1079.483052][ T5907] usb 1-1: SerialNumber: syz [ 1081.869769][ T5907] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1081.930049][ T5907] usb 1-1: USB disconnect, device number 47 [ 1081.944592][ T5907] usblp0: removed [ 1082.254048][ T30] audit: type=1804 audit(2000000554.893:1276): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3456" name="/newroot/62/file0" dev="tmpfs" ino=339 res=1 errno=0 [ 1082.309810][T19036] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1082.362377][T19036] ref_ctr increment failed for inode: 0x153 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880292d4b40 [ 1082.396731][ T30] audit: type=1800 audit(2000000554.933:1277): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3456" name="file0" dev="tmpfs" ino=339 res=0 errno=0 [ 1084.287423][T12357] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1084.436055][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1084.444003][ T5907] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1085.170401][T19068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.188922][T19068] batadv_slave_0: entered promiscuous mode [ 1085.291227][T12357] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1085.303356][T12357] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1085.311160][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1085.312485][T12357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.329731][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1085.804237][T12357] usb 1-1: Product: syz [ 1085.808556][T12357] usb 1-1: Manufacturer: syz [ 1085.813154][T12357] usb 1-1: SerialNumber: syz [ 1085.840645][ T5907] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 1085.851272][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.859846][ T5907] usb 2-1: Product: syz [ 1085.864533][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1085.873684][ T5907] usb 2-1: Manufacturer: syz [ 1085.878500][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.886525][ T5907] usb 2-1: SerialNumber: syz [ 1085.904631][ T5907] usb 2-1: config 0 descriptor?? [ 1085.912109][ T9] usb 4-1: config 0 descriptor?? [ 1085.966152][ T5907] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1086.014203][ T6380] udevd[6380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1086.168031][ T5939] usb 2-1: USB disconnect, device number 50 [ 1086.189934][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1086.246353][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1086.268569][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1086.277810][ T9] usb 4-1: media controller created [ 1086.299128][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1087.246916][T16531] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.585855][ T9] az6027: usb out operation failed. (-71) [ 1087.604718][ T9] az6027: usb out operation failed. (-71) [ 1087.614364][T12357] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1087.661456][ T9] stb0899_attach: Driver disabled by Kconfig [ 1087.669315][T12357] usb 1-1: USB disconnect, device number 48 [ 1087.678571][ T9] az6027: no front-end attached [ 1087.678571][ T9] [ 1087.693702][T12357] usblp0: removed [ 1087.725177][ T9] az6027: usb out operation failed. (-71) [ 1087.986607][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1088.051490][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 1088.155251][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1088.172730][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1088.186510][ T9] usb 4-1: USB disconnect, device number 44 [ 1088.291487][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1090.575323][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1091.137374][ T5907] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1091.159161][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.178513][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1091.207385][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.247376][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.278274][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.287417][ T5907] usb 2-1: device descriptor read/64, error -71 [ 1091.383793][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.402501][ T9] usb 4-1: invalid MIDI out EP 0 [ 1091.517814][T12357] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1091.527370][ T5907] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1091.572880][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1091.654621][ T9] usb 4-1: USB disconnect, device number 45 [ 1091.689583][ T5907] usb 2-1: device descriptor read/64, error -71 [ 1091.721421][T12357] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1091.782761][T12357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1091.810176][ T5907] usb usb2-port1: attempt power cycle [ 1091.912732][T12357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.927483][T12357] usb 3-1: Product: syz [ 1091.931776][T12357] usb 3-1: Manufacturer: syz [ 1091.936477][T12357] usb 3-1: SerialNumber: syz [ 1092.317489][ T5907] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1092.348195][ T5907] usb 2-1: device descriptor read/8, error -71 [ 1094.461587][T12357] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1094.484047][T12357] usb 3-1: USB disconnect, device number 44 [ 1094.495207][T12357] usblp0: removed [ 1095.091185][ T5907] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1095.898717][T19152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.919479][ T5907] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1095.934944][ T5907] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1095.951064][ T5907] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1095.960278][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.011594][ T5907] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1096.020046][ T5907] usb 1-1: invalid MIDI out EP 0 [ 1096.306192][ T5907] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1096.329433][ T5907] usb 1-1: USB disconnect, device number 49 [ 1096.397433][ T9] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1096.619940][ T9] usb 4-1: config 2 has an invalid interface number: 35 but max is 0 [ 1096.630188][ T9] usb 4-1: config 2 has no interface number 0 [ 1096.636785][ T9] usb 4-1: config 2 interface 35 has no altsetting 0 [ 1096.649778][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1096.656135][ T9] usb 4-1: New USB device found, idVendor=1d19, idProduct=0100, bcdDevice=7a.e9 [ 1096.669438][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.849408][ T30] audit: type=1400 audit(2000000570.293:1278): avc: denied { ioctl } for pid=19166 comm="syz.3.3501" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1099.543624][ T44] usb 4-1: USB disconnect, device number 46 [ 1100.098499][ T30] audit: type=1400 audit(2000000572.723:1279): avc: denied { create } for pid=19198 comm="syz.4.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1100.102840][T19208] fuse: Unknown parameter 'use00000000000000000000' [ 1100.313712][ T30] audit: type=1400 audit(2000000572.723:1280): avc: denied { connect } for pid=19198 comm="syz.4.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1100.499607][T19214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1101.577398][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1101.591752][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1101.898969][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1101.917801][ T9] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1102.077487][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1102.587383][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.608604][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.629725][ T9] usb 1-1: invalid MIDI out EP 0 [ 1102.795802][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.816939][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1102.880388][T19244] fuse: Unknown parameter 'use00000000000000000000' [ 1102.888252][ T9] usb 1-1: USB disconnect, device number 50 [ 1103.967782][T19261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.475949][T19265] block nbd4: Attempted send on invalid socket [ 1104.485815][T19265] blk_print_req_error: 2 callbacks suppressed [ 1104.494835][T19265] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.508261][T19265] block nbd4: Attempted send on invalid socket [ 1104.517159][T19265] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.532034][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1104.628731][T19265] block nbd4: Send control failed (result -32) [ 1104.644101][T19265] block nbd4: Request send failed, requeueing [ 1104.661954][ T2594] block nbd4: Dead connection, failed to find a fallback [ 1104.669075][ T2594] block nbd4: shutting down sockets [ 1104.674589][ T2594] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.684174][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1104.754868][T19265] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.791281][T19265] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.820227][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1104.891994][T19265] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.917282][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1104.928747][T19265] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.939500][T19265] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.950226][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1104.961177][T19265] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1104.971018][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1105.167474][T19265] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.718090][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1105.728095][T19265] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1105.763104][T19265] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1105.819522][T19282] fuse: Unknown parameter 'use00000000000000000000' [ 1106.340864][T19297] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1106.351242][T19297] ref_ctr increment failed for inode: 0x184 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807d70c080 [ 1106.369954][ T30] audit: type=1804 audit(2000000578.993:1281): pid=19297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3541" name="/newroot/72/file0" dev="tmpfs" ino=388 res=1 errno=0 [ 1106.406902][ T30] audit: type=1800 audit(2000000578.993:1282): pid=19297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3541" name="file0" dev="tmpfs" ino=388 res=0 errno=0 [ 1107.267627][ T5858] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1107.437669][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 1107.519711][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1107.585927][ T5858] usb 3-1: config 0 has no interfaces? [ 1107.619819][ T5858] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1107.637392][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.656349][ T5858] usb 3-1: Product: syz [ 1107.662959][ T5858] usb 3-1: Manufacturer: syz [ 1107.671728][ T5858] usb 3-1: SerialNumber: syz [ 1107.801493][T19310] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3546'. [ 1107.877958][ T5858] usb 3-1: config 0 descriptor?? [ 1109.243959][T19326] block nbd0: Attempted send on invalid socket [ 1109.264228][T19326] block nbd0: Attempted send on invalid socket [ 1109.284130][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1109.327138][T19332] fuse: Unknown parameter 'user_i00000000000000000000' [ 1109.334694][T19326] block nbd0: Send control failed (result -32) [ 1109.343429][T19326] block nbd0: Request send failed, requeueing [ 1109.352221][ T2594] block nbd0: Dead connection, failed to find a fallback [ 1109.361197][ T2594] block nbd0: shutting down sockets [ 1109.369667][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1109.557023][T19337] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1109.567905][ T30] audit: type=1804 audit(2000000582.203:1283): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3554" name="/newroot/77/file0" dev="tmpfs" ino=416 res=1 errno=0 [ 1109.596858][T19326] blk_print_req_error: 5 callbacks suppressed [ 1109.596870][T19326] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1109.615749][T19337] ref_ctr increment failed for inode: 0x1a0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880336e60c0 [ 1109.627639][T19326] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1109.638108][ T30] audit: type=1800 audit(2000000582.203:1284): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3554" name="file0" dev="tmpfs" ino=416 res=0 errno=0 [ 1109.750912][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1110.012740][T19326] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.025394][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1110.036922][T19326] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.052789][T19326] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.062872][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1110.303650][ T5939] usb 3-1: USB disconnect, device number 45 [ 1110.380831][T19326] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.401597][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1110.416095][T19326] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.425950][T19326] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.439666][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1110.450664][T19326] I/O error, dev nbd0, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.914331][T19326] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1111.075712][T19326] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1112.243546][ T30] audit: type=1400 audit(2000000584.893:1285): avc: denied { ioctl } for pid=19364 comm="syz.0.3561" path="socket:[58295]" dev="sockfs" ino=58295 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1112.268358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.393972][ T30] audit: type=1804 audit(2000000586.043:1286): pid=19371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3565" name="/newroot/80/file0" dev="tmpfs" ino=432 res=1 errno=0 [ 1113.416373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.424835][T19371] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1113.466325][T19371] ref_ctr increment failed for inode: 0x1b0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880292d0000 [ 1113.467840][ T30] audit: type=1800 audit(2000000586.043:1287): pid=19371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3565" name="file0" dev="tmpfs" ino=432 res=0 errno=0 [ 1113.499197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.837612][ T5907] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1114.117523][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 1114.130340][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1114.150262][ T5907] usb 5-1: config 0 has no interfaces? [ 1114.157870][ T5907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1114.166911][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.175178][ T5907] usb 5-1: Product: syz [ 1114.630921][ T5907] usb 5-1: Manufacturer: syz [ 1114.639718][ T5907] usb 5-1: SerialNumber: syz [ 1114.657425][ T5907] usb 5-1: config 0 descriptor?? [ 1115.587817][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.594984][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.546917][ T5907] usb 5-1: USB disconnect, device number 35 [ 1117.815888][T16531] Bluetooth: hci0: command 0x0406 tx timeout [ 1121.347554][ T5907] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1121.518599][ T5907] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1121.535603][ T5907] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1121.554498][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1121.585853][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1121.615448][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1121.761839][ T5907] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1121.773459][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1121.786364][ T5907] usb 4-1: Product: syz [ 1121.795494][ T5907] usb 4-1: Manufacturer: syz [ 1121.812573][ T5907] cdc_wdm 4-1:1.0: skipping garbage [ 1121.820846][ T5907] cdc_wdm 4-1:1.0: skipping garbage [ 1121.835030][ T5907] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1121.841069][ T5907] cdc_wdm 4-1:1.0: Unknown control protocol [ 1122.112324][ C0] wdm_int_callback: 192 callbacks suppressed [ 1122.112356][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.125106][ C0] wdm_int_callback: 192 callbacks suppressed [ 1122.125130][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.138168][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.144754][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.150973][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.157546][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.163821][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.170392][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.176630][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.183222][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.189779][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.196383][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.202776][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.209378][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.215677][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.222279][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.228571][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.235140][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.241465][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1122.248039][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1122.255455][ T5907] usb 4-1: USB disconnect, device number 47 [ 1122.261390][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1123.259105][T19481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.455086][T19525] netlink: 'syz.0.3613': attribute type 1 has an invalid length. [ 1126.463206][T19525] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3613'. [ 1127.008430][T19527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.015255][T19537] vivid-001: disconnect [ 1127.521327][T19548] fuse: Unknown parameter 'user_id00000000000000000000' [ 1127.817418][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1127.937598][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.155739][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.217405][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.337880][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1128.346985][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1128.358513][ T9] usb 1-1: SerialNumber: syz [ 1129.393619][T19574] overlayfs: missing 'lowerdir' [ 1130.257386][ T5858] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1130.459202][ T5858] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1130.515309][T19539] vivid-001: reconnect [ 1130.523221][ T9] usb 1-1: 0:2 : does not exist [ 1130.553046][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.588128][ T9] usb 1-1: USB disconnect, device number 51 [ 1130.604952][ T5858] usb 5-1: config 0 descriptor?? [ 1130.829556][T19577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.838447][T19577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.912622][ T5858] cp210x 5-1:0.0: cp210x converter detected [ 1130.965559][T19545] udevd[19545]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.125015][T19592] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.3631'. [ 1131.465771][ T5858] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1132.203849][ T9] usb 5-1: USB disconnect, device number 36 [ 1132.211706][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1132.224503][T19593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.296860][ T9] cp210x 5-1:0.0: device disconnected [ 1132.405535][T19601] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 1133.174139][ T5858] IPVS: starting estimator thread 0... [ 1133.291335][T19602] IPVS: using max 34 ests per chain, 81600 per kthread [ 1133.311698][T19606] fuse: Bad value for 'fd' [ 1133.461495][ T5858] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1134.037560][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 1134.356931][ T5858] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1134.393810][ T5858] usb 1-1: config 0 has no interface number 0 [ 1134.407270][T19611] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1134.439085][ T5858] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1134.475647][ T5858] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1134.493586][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.518084][ T5858] usb 1-1: Product: syz [ 1134.530942][ T5858] usb 1-1: Manufacturer: syz [ 1134.558863][ T5858] usb 1-1: SerialNumber: syz [ 1134.578300][ T5858] usb 1-1: config 0 descriptor?? [ 1134.603842][ T5858] f81534 1-1:0.12: required endpoints missing [ 1135.601770][ T30] audit: type=1400 audit(2000000608.253:1288): avc: denied { setopt } for pid=19630 comm="syz.1.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1136.441186][T19650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.583477][ T5979] usb 1-1: USB disconnect, device number 52 [ 1136.876076][ T30] audit: type=1400 audit(2000000609.513:1289): avc: denied { read write } for pid=19663 comm="syz.3.3655" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1136.913931][ T30] audit: type=1400 audit(2000000609.523:1290): avc: denied { open } for pid=19663 comm="syz.3.3655" path="/89/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1136.940259][ T30] audit: type=1400 audit(2000000609.563:1291): avc: denied { unmount } for pid=18063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1136.943277][T19666] block nbd0: Attempted send on invalid socket [ 1136.998807][T19666] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.010947][T19668] syz_tun: entered allmulticast mode [ 1137.048970][T19666] block nbd0: Send control failed (result -32) [ 1137.057775][T19666] block nbd0: Request send failed, requeueing [ 1137.071168][T19667] syz_tun: left allmulticast mode [ 1137.083869][ T6089] block nbd0: Dead connection, failed to find a fallback [ 1137.091173][ T6089] block nbd0: shutting down sockets [ 1137.096353][ T6089] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.105955][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1137.120831][T19666] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.135530][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1137.148126][T19666] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.246843][T19666] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.276157][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1137.318273][T19666] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.343725][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1137.382571][T19666] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.392399][T19666] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.403980][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1137.413869][T19666] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.423741][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1137.436050][T19666] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1137.450656][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1137.463842][T19666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1137.473608][T19666] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1138.005377][ T30] audit: type=1326 audit(2000000610.653:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6925f8eba9 code=0x7ffc0000 [ 1138.133429][ T30] audit: type=1326 audit(2000000610.653:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6925f8eba9 code=0x7ffc0000 [ 1138.355411][ T30] audit: type=1326 audit(2000000610.653:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6925f8eba9 code=0x7ffc0000 [ 1138.397704][ T30] audit: type=1326 audit(2000000610.653:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6925f8eba9 code=0x7ffc0000 [ 1138.430168][ T30] audit: type=1326 audit(2000000610.653:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6925f8eba9 code=0x7ffc0000 [ 1138.474740][ T30] audit: type=1326 audit(2000000610.653:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6925f8eba9 code=0x7ffc0000 [ 1138.498156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1141.545608][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1141.545625][ T30] audit: type=1400 audit(2000000614.193:1300): avc: denied { ioctl } for pid=19739 comm="syz.1.3680" path="socket:[61595]" dev="sockfs" ino=61595 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1142.462358][ T30] audit: type=1804 audit(2000000615.113:1301): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3685" name="/newroot/145/file0" dev="tmpfs" ino=774 res=1 errno=0 [ 1142.503861][ T30] audit: type=1800 audit(2000000615.133:1302): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3685" name="file0" dev="tmpfs" ino=774 res=0 errno=0 [ 1142.633481][ T5858] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1143.246091][T19770] fuse: Bad value for 'fd' [ 1143.264129][ T5858] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1143.280718][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.400801][ T5858] usb 4-1: Product: syz [ 1143.405295][ T5858] usb 4-1: Manufacturer: syz [ 1143.410523][ T5858] usb 4-1: SerialNumber: syz [ 1143.452445][ T5858] usb 4-1: config 0 descriptor?? [ 1143.680565][ T5858] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1143.960214][ T5907] usb 4-1: USB disconnect, device number 48 [ 1144.070822][ T30] audit: type=1804 audit(2000000616.723:1303): pid=19790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3697" name="/newroot/149/file0" dev="tmpfs" ino=795 res=1 errno=0 [ 1144.130239][ T30] audit: type=1800 audit(2000000616.753:1304): pid=19790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3697" name="file0" dev="tmpfs" ino=795 res=0 errno=0 [ 1146.839920][T19829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.195443][ T5907] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1148.357595][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 1148.376991][ T5907] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1148.401365][ T5907] usb 5-1: config 0 has no interface number 0 [ 1148.413351][ T5907] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1148.428783][ T5907] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1148.441840][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.466099][ T5907] usb 5-1: Product: syz [ 1148.482103][ T5907] usb 5-1: Manufacturer: syz [ 1148.508839][ T5907] usb 5-1: SerialNumber: syz [ 1148.684184][ T5907] usb 5-1: config 0 descriptor?? [ 1148.750786][T19855] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1150.757847][ T30] audit: type=1400 audit(2000000623.383:1305): avc: denied { write } for pid=19875 comm="syz.0.3725" path="socket:[61881]" dev="sockfs" ino=61881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1151.633489][ T30] audit: type=1804 audit(2000000624.143:1306): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3726" name="/newroot/102/file0" dev="tmpfs" ino=545 res=1 errno=0 [ 1152.632728][ T30] audit: type=1800 audit(2000000624.143:1307): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3726" name="file0" dev="tmpfs" ino=545 res=0 errno=0 [ 1153.220235][ T5907] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 1153.242631][ T5907] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1153.264867][ T5907] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1153.273206][ T5907] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1153.779750][ T5907] usb 5-1: USB disconnect, device number 37 [ 1154.457824][T19912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1157.382691][ T5858] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1157.599415][ T30] audit: type=1804 audit(2000000630.243:1308): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3742" name="/newroot/105/file0" dev="tmpfs" ino=562 res=1 errno=0 [ 1157.662783][ T30] audit: type=1800 audit(2000000630.243:1309): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3742" name="file0" dev="tmpfs" ino=562 res=0 errno=0 [ 1157.727432][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1157.768186][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1157.807039][ T5858] usb 2-1: config 0 has no interfaces? [ 1157.843773][T19958] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 1158.842759][ T5858] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1158.937387][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.945900][ T5858] usb 2-1: Product: syz [ 1158.956601][ T5858] usb 2-1: Manufacturer: syz [ 1158.961772][ T5858] usb 2-1: SerialNumber: syz [ 1158.980776][ T5858] usb 2-1: config 0 descriptor?? [ 1159.284630][ T5858] usb 2-1: USB disconnect, device number 55 [ 1159.582738][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1160.123106][T19978] syz_tun: entered allmulticast mode [ 1160.135352][T19977] syz_tun: left allmulticast mode [ 1160.151700][ T30] audit: type=1400 audit(2000000632.803:1310): avc: denied { name_connect } for pid=19981 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1160.434253][T19991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1160.825734][ T30] audit: type=1400 audit(2000000633.473:1311): avc: denied { read } for pid=19981 comm="syz.2.3752" lport=42554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1161.594210][T20003] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 1161.661787][ T5847] Bluetooth: hci3: command 0x1003 tx timeout [ 1161.669585][T16531] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1162.189031][T20006] block nbd1: Attempted send on invalid socket [ 1162.197935][T20006] blk_print_req_error: 2 callbacks suppressed [ 1162.197951][T20006] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.070539][T20006] block nbd1: Send control failed (result -32) [ 1163.079105][T20006] block nbd1: Request send failed, requeueing [ 1163.094437][ T2594] block nbd1: Dead connection, failed to find a fallback [ 1163.101551][ T2594] block nbd1: shutting down sockets [ 1163.106741][ T2594] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.116866][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1163.139879][T20006] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.174274][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1163.209392][T20006] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.328069][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1163.664868][T20006] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.685676][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1163.701184][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1163.709778][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.721903][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1163.731708][T20006] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.744064][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.759612][ T9] usb 1-1: Product: syz [ 1163.761548][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1163.763995][ T9] usb 1-1: Manufacturer: syz [ 1163.778470][ T9] usb 1-1: SerialNumber: syz [ 1163.792698][ T9] usb 1-1: config 0 descriptor?? [ 1163.805584][ T9] usb 1-1: Found UVC 0.00 device syz (046d:0721) [ 1163.815140][ T9] usb 1-1: No valid video chain found. [ 1163.825504][T20006] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.860698][T20006] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.877842][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1163.888458][T20006] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.906546][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1163.923734][T20006] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.940744][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1163.955733][T20006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1163.985164][T20006] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1164.131408][ T9] usb 1-1: USB disconnect, device number 53 [ 1164.172039][ T30] audit: type=1400 audit(2000000636.823:1312): avc: denied { map } for pid=20026 comm="syz.4.3765" path="pipe:[62060]" dev="pipefs" ino=62060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1166.244161][T20054] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 1169.089168][ T5950] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1169.257568][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 1169.265947][ T5950] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1169.266020][ T5950] usb 1-1: config 0 has no interface number 0 [ 1169.266186][ T5950] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1169.272737][ T5950] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1169.272802][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1169.272855][ T5950] usb 1-1: Product: syz [ 1169.272903][ T5950] usb 1-1: SerialNumber: syz [ 1169.432623][ T5950] usb 1-1: config 0 descriptor?? [ 1169.449473][ T5950] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 1169.556330][ T5950] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input54 [ 1170.894797][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1170.901774][ C1] ------------[ cut here ]------------ [ 1170.907650][ C1] URB ffff88806cd20500 submitted while active [ 1170.914537][ C1] WARNING: CPU: 1 PID: 20070 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1519/0x1770 [ 1170.924279][ C1] Modules linked in: [ 1170.928497][ C1] CPU: 1 UID: 0 PID: 20070 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1170.937427][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1170.947473][ C1] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 1170.953116][ C1] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 cf 1f 7a fa c6 05 c0 52 52 09 01 90 48 c7 c7 80 0d 74 8c 48 89 de e8 d8 c2 38 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 1170.972714][ C1] RSP: 0018:ffffc90000a08a80 EFLAGS: 00010086 [ 1170.978770][ C1] RAX: 0000000000000000 RBX: ffff88806cd20500 RCX: ffffc90002392000 [ 1170.986728][ C1] RDX: 0000000000040000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1170.994680][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1171.002622][ C1] R10: 0000000000000000 R11: fffffffffffc81c0 R12: 0000000000000001 [ 1171.010563][ C1] R13: ffff8880587af857 R14: ffff88801b861fe0 R15: 000000000000000f [ 1171.018507][ C1] FS: 00007eff2a980880(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 1171.027510][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1171.034065][ C1] CR2: 00007eff2a0513ec CR3: 0000000077f7c000 CR4: 00000000003526f0 [ 1171.042009][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000006800 [ 1171.049950][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1171.057892][ C1] Call Trace: [ 1171.061142][ C1] [ 1171.063959][ C1] ? find_held_lock+0x2b/0x80 [ 1171.068616][ C1] ? __pfx____ratelimit+0x10/0x10 [ 1171.073626][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 1171.078982][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 1171.084337][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 1171.089507][ C1] dummy_timer+0x1814/0x3a30 [ 1171.094079][ C1] ? find_held_lock+0x2b/0x80 [ 1171.098741][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1171.104349][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1171.109963][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1171.115932][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1171.120860][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1171.125786][ C1] ? mark_held_locks+0x49/0x80 [ 1171.130541][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1171.136327][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1171.141261][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 1171.146454][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1171.152157][ C1] ? read_tsc+0x9/0x20 [ 1171.156219][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1171.161324][ C1] handle_softirqs+0x219/0x8e0 [ 1171.166093][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1171.171375][ C1] __irq_exit_rcu+0x109/0x170 [ 1171.176037][ C1] irq_exit_rcu+0x9/0x30 [ 1171.180289][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1171.185902][ C1] [ 1171.188808][ C1] [ 1171.191711][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1171.197666][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 1171.202926][ C1] Code: d6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 98 13 0f 0f 82 74 02 00 00 8b 35 da c9 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 d6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 1171.222506][ C1] RSP: 0018:ffffc900032d73e0 EFLAGS: 00000206 [ 1171.228550][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c15a0 RCX: 00000000a6c9c1ed [ 1171.236513][ C1] RDX: 0000000000000000 RSI: ffffffff8de2d3e8 RDI: ffffffff8c163200 [ 1171.244464][ C1] RBP: 0000000000000002 R08: 11332c0815887e97 R09: 0000000000000000 [ 1171.252411][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1171.260358][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1171.268326][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1171.273521][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1171.279667][ C1] unwind_next_frame+0xd1/0x20a0 [ 1171.284675][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1171.289769][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1171.294515][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1171.300660][ C1] arch_stack_walk+0x94/0x100 [ 1171.305330][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1171.310088][ C1] stack_trace_save+0x8e/0xc0 [ 1171.314766][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1171.320128][ C1] ? vfs_setxattr+0x145/0x360 [ 1171.324785][ C1] ? __x64_sys_lsetxattr+0xc9/0x140 [ 1171.329967][ C1] ? do_syscall_64+0xcd/0x4e0 [ 1171.334628][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.340674][ C1] kasan_save_stack+0x33/0x60 [ 1171.345335][ C1] ? kasan_save_stack+0x33/0x60 [ 1171.350166][ C1] ? kasan_save_track+0x14/0x30 [ 1171.354990][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1171.359764][ C1] kasan_save_track+0x14/0x30 [ 1171.364443][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1171.369014][ C1] __kvmalloc_node_noprof+0x27b/0x620 [ 1171.374364][ C1] ? simple_xattr_alloc+0x41/0xa0 [ 1171.379381][ C1] ? simple_xattr_alloc+0x41/0xa0 [ 1171.384467][ C1] simple_xattr_alloc+0x41/0xa0 [ 1171.389324][ C1] simple_xattr_set+0x3d/0x3e0 [ 1171.394081][ C1] shmem_xattr_handler_set+0x31b/0x3b0 [ 1171.399552][ C1] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1171.405518][ C1] __vfs_setxattr+0x172/0x1e0 [ 1171.410180][ C1] ? __pfx___vfs_setxattr+0x10/0x10 [ 1171.415361][ C1] ? __pfx_make_vfsgid+0x10/0x10 [ 1171.420287][ C1] __vfs_setxattr_noperm+0x127/0x660 [ 1171.425552][ C1] __vfs_setxattr_locked+0x182/0x260 [ 1171.430828][ C1] vfs_setxattr+0x145/0x360 [ 1171.435317][ C1] ? lock_acquire+0x179/0x350 [ 1171.439968][ C1] ? __pfx_vfs_setxattr+0x10/0x10 [ 1171.444969][ C1] ? mnt_get_write_access+0x54/0x300 [ 1171.450240][ C1] ? mnt_get_write_access+0x54/0x300 [ 1171.455688][ C1] do_setxattr+0x145/0x180 [ 1171.460086][ C1] filename_setxattr+0x16b/0x1d0 [ 1171.465008][ C1] ? __pfx_filename_setxattr+0x10/0x10 [ 1171.470449][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 1171.475806][ C1] path_setxattrat+0x1de/0x2a0 [ 1171.480548][ C1] ? __pfx_path_setxattrat+0x10/0x10 [ 1171.485981][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1171.490903][ C1] ? css_rstat_updated+0x1c2/0x510 [ 1171.496014][ C1] ? exc_page_fault+0x5c/0xb0 [ 1171.500671][ C1] __x64_sys_lsetxattr+0xc9/0x140 [ 1171.505671][ C1] ? do_syscall_64+0x91/0x4e0 [ 1171.510324][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1171.515508][ C1] do_syscall_64+0xcd/0x4e0 [ 1171.520003][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.525880][ C1] RIP: 0033:0x7eff2a31d57a [ 1171.530284][ C1] Code: 48 83 c4 08 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 31 db eb e4 0f 1f 40 00 49 89 ca b8 bd 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 4e 38 0d 00 f7 d8 64 89 01 48 [ 1171.549874][ C1] RSP: 002b:00007fff9ba27148 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1171.558267][ C1] RAX: ffffffffffffffda RBX: 0000556371eaf530 RCX: 00007eff2a31d57a [ 1171.566215][ C1] RDX: 0000556371eaf530 RSI: 00007eff2aa4029c RDI: 0000556371c614f0 [ 1171.574159][ C1] RBP: 0000556371c5e8d0 R08: 0000000000000000 R09: 0000000000000030 [ 1171.582105][ C1] R10: 0000000000000021 R11: 0000000000000246 R12: 0000556371c614f0 [ 1171.590048][ C1] R13: 0000000000000001 R14: 0000556371c614f0 R15: 0000556371ea00c0 [ 1171.598004][ C1] [ 1171.600998][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1171.608260][ C1] CPU: 1 UID: 0 PID: 20070 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1171.617166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1171.627193][ C1] Call Trace: [ 1171.630447][ C1] [ 1171.633264][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1171.637836][ C1] vpanic+0x6e8/0x7a0 [ 1171.641799][ C1] ? __pfx_vpanic+0x10/0x10 [ 1171.646285][ C1] ? usb_submit_urb+0x1519/0x1770 [ 1171.651294][ C1] panic+0xca/0xd0 [ 1171.655002][ C1] ? __pfx_panic+0x10/0x10 [ 1171.659396][ C1] check_panic_on_warn+0xab/0xb0 [ 1171.664316][ C1] __warn+0xf6/0x3c0 [ 1171.668182][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1171.673194][ C1] ? usb_submit_urb+0x1519/0x1770 [ 1171.678193][ C1] report_bug+0x3c3/0x580 [ 1171.682499][ C1] ? usb_submit_urb+0x1519/0x1770 [ 1171.687500][ C1] handle_bug+0x184/0x210 [ 1171.691809][ C1] exc_invalid_op+0x17/0x50 [ 1171.696289][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1171.701113][ C1] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 1171.706722][ C1] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 cf 1f 7a fa c6 05 c0 52 52 09 01 90 48 c7 c7 80 0d 74 8c 48 89 de e8 d8 c2 38 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 1171.726299][ C1] RSP: 0018:ffffc90000a08a80 EFLAGS: 00010086 [ 1171.732338][ C1] RAX: 0000000000000000 RBX: ffff88806cd20500 RCX: ffffc90002392000 [ 1171.740282][ C1] RDX: 0000000000040000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1171.748227][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1171.756178][ C1] R10: 0000000000000000 R11: fffffffffffc81c0 R12: 0000000000000001 [ 1171.764122][ C1] R13: ffff8880587af857 R14: ffff88801b861fe0 R15: 000000000000000f [ 1171.772082][ C1] ? __warn_printk+0x1a5/0x350 [ 1171.776848][ C1] ? find_held_lock+0x2b/0x80 [ 1171.781513][ C1] ? __pfx____ratelimit+0x10/0x10 [ 1171.786521][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 1171.791885][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 1171.797236][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 1171.802424][ C1] dummy_timer+0x1814/0x3a30 [ 1171.807000][ C1] ? find_held_lock+0x2b/0x80 [ 1171.811659][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1171.817268][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1171.822875][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1171.828829][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1171.833742][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1171.838652][ C1] ? mark_held_locks+0x49/0x80 [ 1171.843396][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1171.849184][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1171.854096][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 1171.859277][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1171.864972][ C1] ? read_tsc+0x9/0x20 [ 1171.869022][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1171.874110][ C1] handle_softirqs+0x219/0x8e0 [ 1171.878858][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1171.884138][ C1] __irq_exit_rcu+0x109/0x170 [ 1171.888805][ C1] irq_exit_rcu+0x9/0x30 [ 1171.893027][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1171.898638][ C1] [ 1171.901541][ C1] [ 1171.904444][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1171.910400][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 1171.915581][ C1] Code: d6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 98 13 0f 0f 82 74 02 00 00 8b 35 da c9 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 d6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 1171.935161][ C1] RSP: 0018:ffffc900032d73e0 EFLAGS: 00000206 [ 1171.941201][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c15a0 RCX: 00000000a6c9c1ed [ 1171.949145][ C1] RDX: 0000000000000000 RSI: ffffffff8de2d3e8 RDI: ffffffff8c163200 [ 1171.957085][ C1] RBP: 0000000000000002 R08: 11332c0815887e97 R09: 0000000000000000 [ 1171.965030][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1171.972974][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1171.980956][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1171.986144][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1171.992277][ C1] unwind_next_frame+0xd1/0x20a0 [ 1171.997188][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1172.002271][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1172.007012][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1172.013144][ C1] arch_stack_walk+0x94/0x100 [ 1172.017799][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1172.022537][ C1] stack_trace_save+0x8e/0xc0 [ 1172.027190][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1172.032562][ C1] ? vfs_setxattr+0x145/0x360 [ 1172.037260][ C1] ? __x64_sys_lsetxattr+0xc9/0x140 [ 1172.042446][ C1] ? do_syscall_64+0xcd/0x4e0 [ 1172.047112][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.053158][ C1] kasan_save_stack+0x33/0x60 [ 1172.057813][ C1] ? kasan_save_stack+0x33/0x60 [ 1172.062639][ C1] ? kasan_save_track+0x14/0x30 [ 1172.067475][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1172.072250][ C1] kasan_save_track+0x14/0x30 [ 1172.076910][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1172.081483][ C1] __kvmalloc_node_noprof+0x27b/0x620 [ 1172.086837][ C1] ? simple_xattr_alloc+0x41/0xa0 [ 1172.091913][ C1] ? simple_xattr_alloc+0x41/0xa0 [ 1172.096930][ C1] simple_xattr_alloc+0x41/0xa0 [ 1172.101946][ C1] simple_xattr_set+0x3d/0x3e0 [ 1172.106707][ C1] shmem_xattr_handler_set+0x31b/0x3b0 [ 1172.112148][ C1] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1172.118106][ C1] __vfs_setxattr+0x172/0x1e0 [ 1172.122761][ C1] ? __pfx___vfs_setxattr+0x10/0x10 [ 1172.127946][ C1] ? __pfx_make_vfsgid+0x10/0x10 [ 1172.132870][ C1] __vfs_setxattr_noperm+0x127/0x660 [ 1172.138148][ C1] __vfs_setxattr_locked+0x182/0x260 [ 1172.143411][ C1] vfs_setxattr+0x145/0x360 [ 1172.147891][ C1] ? lock_acquire+0x179/0x350 [ 1172.152539][ C1] ? __pfx_vfs_setxattr+0x10/0x10 [ 1172.157537][ C1] ? mnt_get_write_access+0x54/0x300 [ 1172.162801][ C1] ? mnt_get_write_access+0x54/0x300 [ 1172.168067][ C1] do_setxattr+0x145/0x180 [ 1172.172460][ C1] filename_setxattr+0x16b/0x1d0 [ 1172.177385][ C1] ? __pfx_filename_setxattr+0x10/0x10 [ 1172.182817][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 1172.188170][ C1] path_setxattrat+0x1de/0x2a0 [ 1172.192929][ C1] ? __pfx_path_setxattrat+0x10/0x10 [ 1172.198203][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1172.203136][ C1] ? css_rstat_updated+0x1c2/0x510 [ 1172.208241][ C1] ? exc_page_fault+0x5c/0xb0 [ 1172.212904][ C1] __x64_sys_lsetxattr+0xc9/0x140 [ 1172.217914][ C1] ? do_syscall_64+0x91/0x4e0 [ 1172.222577][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1172.227757][ C1] do_syscall_64+0xcd/0x4e0 [ 1172.232241][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.238109][ C1] RIP: 0033:0x7eff2a31d57a [ 1172.242498][ C1] Code: 48 83 c4 08 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 31 db eb e4 0f 1f 40 00 49 89 ca b8 bd 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 4e 38 0d 00 f7 d8 64 89 01 48 [ 1172.262087][ C1] RSP: 002b:00007fff9ba27148 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1172.270515][ C1] RAX: ffffffffffffffda RBX: 0000556371eaf530 RCX: 00007eff2a31d57a [ 1172.278464][ C1] RDX: 0000556371eaf530 RSI: 00007eff2aa4029c RDI: 0000556371c614f0 [ 1172.286411][ C1] RBP: 0000556371c5e8d0 R08: 0000000000000000 R09: 0000000000000030 [ 1172.294359][ C1] R10: 0000000000000021 R11: 0000000000000246 R12: 0000556371c614f0 [ 1172.302306][ C1] R13: 0000000000000001 R14: 0000556371c614f0 R15: 0000556371ea00c0 [ 1172.310270][ C1] [ 1173.376810][ C1] Shutting down cpus with NMI [ 1173.381727][ C1] Kernel Offset: disabled [ 1173.386043][ C1] Rebooting in 86400 seconds..