last executing test programs: 3m12.864333654s ago: executing program 1 (id=1269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 3m12.754651775s ago: executing program 1 (id=1271): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) 3m12.704800399s ago: executing program 1 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0) 3m12.562736544s ago: executing program 1 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x4) 3m12.506681696s ago: executing program 1 (id=1280): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) exit(0xffff) getdents64(r0, &(0x7f00000001c0)=""/122, 0x7a) 3m12.187118927s ago: executing program 1 (id=1288): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) 3m12.025044926s ago: executing program 32 (id=1288): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) 2m38.315340836s ago: executing program 0 (id=1769): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) sendfile(r0, r0, 0x0, 0x13a) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x72000) 2m38.260678437s ago: executing program 0 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1}, 0x38) 2m38.177149598s ago: executing program 0 (id=1772): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a406000105"], 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2m36.747931162s ago: executing program 0 (id=1790): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000340)='As', 0x2, 0x7fffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb7}) 2m36.671443693s ago: executing program 0 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 2m36.67112064s ago: executing program 0 (id=1792): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101002) epoll_create(0x9) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) 2m21.539482388s ago: executing program 33 (id=1792): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101002) epoll_create(0x9) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) 1m2.05056195s ago: executing program 2 (id=3668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m1.741810635s ago: executing program 2 (id=3676): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x40, 0xd, 0x4, "fd000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x12, 0x16, "01d9df70db938ba806b8f82145054ee6903e2bfc9084"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1}, 0x0}) 59.678125115s ago: executing program 2 (id=3699): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f00000003c0)=""/71, 0x47}, 0x9}], 0x1, 0x40010000, 0x0) 59.603172357s ago: executing program 2 (id=3700): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 59.602388022s ago: executing program 2 (id=3701): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 59.299455413s ago: executing program 2 (id=3708): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 59.195691131s ago: executing program 34 (id=3708): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 51.513905147s ago: executing program 3 (id=3813): timer_create(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="410329bd70002da6a7260e"], 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 51.411659179s ago: executing program 3 (id=3815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0xc93accc5ebfd78e7, 0x70bd2a, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 51.323017336s ago: executing program 3 (id=3816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) 50.414639561s ago: executing program 3 (id=3833): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 50.275438672s ago: executing program 3 (id=3837): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000304000000040339"], 0x0, 0x0}, 0x0) close(0x3) 49.855103677s ago: executing program 3 (id=3842): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 49.684060462s ago: executing program 35 (id=3842): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 33.628199459s ago: executing program 8 (id=4045): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 33.331617361s ago: executing program 8 (id=4049): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 33.168808448s ago: executing program 8 (id=4053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x2, 0x2, 0x7, 0x644b}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x4, 0x0, {0x8, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x4}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x68}}, 0x0) 33.019638083s ago: executing program 8 (id=4055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 32.932500866s ago: executing program 8 (id=4057): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) 32.803447929s ago: executing program 8 (id=4058): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x10000, 0xfffffffa, 0x0, 0x6, 0x1b, "cff500"}) syz_open_pts(r0, 0x0) 18.517658576s ago: executing program 36 (id=4058): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x10000, 0xfffffffa, 0x0, 0x6, 0x1b, "cff500"}) syz_open_pts(r0, 0x0) 2.547807082s ago: executing program 6 (id=4410): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 2.546809281s ago: executing program 4 (id=4412): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="290000000300000000000000000000000100000000001f0008"], 0x29) 2.441896516s ago: executing program 4 (id=4413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2.31549936s ago: executing program 4 (id=4415): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r1) userfaultfd(0x80801) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.265621784s ago: executing program 4 (id=4416): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r0) 2.219794814s ago: executing program 6 (id=4418): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) 2.125868062s ago: executing program 6 (id=4419): syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000002c0007012bbd7000ffdbdf25057c0000280001"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x0) 2.05505808s ago: executing program 5 (id=4421): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x30000, 0x8) fsync(r0) 1.999752394s ago: executing program 5 (id=4422): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 1.827297011s ago: executing program 5 (id=4423): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.811547156s ago: executing program 9 (id=4424): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "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"}, 0x418, 0xe5bb}) 1.772127056s ago: executing program 9 (id=4425): openat$kvm(0xffffffffffffff9c, 0x0, 0x88003, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) 1.477238978s ago: executing program 7 (id=4430): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) 1.427712044s ago: executing program 7 (id=4431): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0xfffffffe, 0x21dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 1.335212851s ago: executing program 7 (id=4432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) 1.334935012s ago: executing program 4 (id=4433): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0xa) 1.315176594s ago: executing program 7 (id=4434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x9, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d4, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) 1.192828678s ago: executing program 7 (id=4435): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) 1.107802547s ago: executing program 7 (id=4436): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 923.509969ms ago: executing program 9 (id=4437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsmount(0xffffffffffffffff, 0x1, 0x0) 814.731672ms ago: executing program 9 (id=4438): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 805.996746ms ago: executing program 6 (id=4439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8820) 737.95692ms ago: executing program 6 (id=4440): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 487.901806ms ago: executing program 4 (id=4441): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 431.646761ms ago: executing program 6 (id=4442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='macvlan1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ea77158eff3b91d035c6837e7602585420822c5c22c32caedcf977a6ddee49523d3febfb9a27", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) 279.672736ms ago: executing program 5 (id=4443): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3, 0x8}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 174.542162ms ago: executing program 5 (id=4444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000024000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6_vti0\x00'}}, 0x1e) 100.088966ms ago: executing program 9 (id=4445): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd", 0x5) 14.661006ms ago: executing program 9 (id=4446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000009cc0)=@base={0x2, 0x4, 0x2, 0xb9d}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x3, 0x4, 0x4, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 0s ago: executing program 5 (id=4447): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x29}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) kernel console output (not intermixed with test programs): 51.376431][ T5866] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 251.444581][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 251.453646][T13584] netlink: 'syz.2.3265': attribute type 30 has an invalid length. [ 251.464314][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 251.513553][T13586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3266'. [ 251.558424][ T5866] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 251.585319][ T5866] usb 5-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 251.608871][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.623811][ T5866] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 251.642440][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.663323][ T5866] usb 5-1: config 0 descriptor?? [ 251.676139][T13564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.877370][T13602] netlink: 'syz.5.3274': attribute type 2 has an invalid length. [ 252.102297][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3278'. [ 252.104392][ T5866] aquacomputer_d5next 0003:0C70:F010.002F: hidraw0: USB HID v0.04 Device [HID 0c70:f010] on usb-dummy_hcd.4-1/input0 [ 252.194898][ T5887] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 252.237111][ T29] audit: type=1400 audit(1771485653.108:564): avc: denied { mounton } for pid=13618 comm="syz.2.3280" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 252.303814][ T5888] usb 5-1: USB disconnect, device number 34 [ 252.348334][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.360915][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 252.371844][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 252.385302][ T5887] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 252.394340][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.404882][ T5887] usb 6-1: config 0 descriptor?? [ 252.410662][T13608] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 252.619321][ T5887] usbhid 6-1:0.0: can't add hid device: -71 [ 252.626133][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 252.637164][ T5887] usb 6-1: USB disconnect, device number 21 [ 252.662438][ T29] audit: type=1400 audit(1771485653.560:565): avc: denied { getopt } for pid=13620 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.872394][T13632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.023537][ T5810] Bluetooth: hci6: command 0x1003 tx timeout [ 253.031315][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 253.099997][ T5888] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 253.258873][T13649] 9p: Bad value for 'rfdno' [ 253.310552][ T5888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 253.326012][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.340798][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 253.356194][ T5888] usb 6-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=70.01 [ 253.365719][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 253.375883][ T5888] usb 6-1: Manufacturer: syz [ 253.415026][ T5888] usb 6-1: config 0 descriptor?? [ 253.430485][ T5888] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 253.464225][ T5888] dvb-usb: bulk message failed: -22 (4/0) [ 253.470000][ T5888] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 253.486043][ T5888] dvb-usb: bulk message failed: -22 (5/0) [ 253.508453][ T5888] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 253.529445][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.547598][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.605630][ T5888] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 253.620578][ T5888] usb 6-1: media controller created [ 253.639271][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.645718][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.687444][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.732200][ T5888] usb 6-1: selecting invalid altsetting 3 [ 253.766695][ T5888] ttusb2: set interface to alts=3 failed [ 253.861685][T13679] input: syz1 as /devices/virtual/input/input47 [ 253.892199][ T5888] DVB: Unable to find symbol tda10023_attach() [ 253.903954][ T5888] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 254.033961][ T5888] rc_core: IR keymap rc-tt-1500 not found [ 254.051034][ T5888] Registered IR keymap rc-empty [ 254.060859][ T5888] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 254.084900][ T5888] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input48 [ 254.117097][ T5888] dvb-usb: schedule remote query interval to 150 msecs. [ 254.131926][ T5888] dvb-usb: bulk message failed: -22 (4/0) [ 254.156821][ T5888] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 254.176416][ T5888] dvb-usb: bulk message failed: -22 (5/0) [ 254.182189][ T5888] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 254.205134][ T5888] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 254.246574][ T5888] usb 6-1: USB disconnect, device number 22 [ 254.314080][ T5888] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 254.896396][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3332'. [ 255.890795][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 256.050226][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 256.063793][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 256.073275][T13787] netlink: 'syz.2.3356': attribute type 4 has an invalid length. [ 256.074879][ T10] usb 7-1: config 106 has an invalid interface number: 8 but max is 0 [ 256.084655][T13787] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.3356'. [ 256.097746][ T10] usb 7-1: config 106 has no interface number 0 [ 256.109753][ T10] usb 7-1: config 106 interface 8 has no altsetting 0 [ 256.119329][ T10] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 256.128784][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.136820][ T10] usb 7-1: Product: syz [ 256.141176][ T10] usb 7-1: Manufacturer: syz [ 256.147425][ T10] usb 7-1: SerialNumber: syz [ 256.297136][T13799] batman_adv: batadv0: Adding interface: dummy0 [ 256.330785][T13799] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.376499][T13799] batman_adv: batadv0: Interface activated: dummy0 [ 256.392495][ T10] kalmia 7-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 256.436457][ T10] kalmia 7-1:106.8: probe with driver kalmia failed with error -22 [ 256.463492][ T10] usb 7-1: USB disconnect, device number 12 [ 257.242549][ T29] audit: type=1400 audit(1771485658.357:566): avc: denied { execute } for pid=13832 comm="syz.6.3378" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 257.300701][ T25] block nbd0: Possible stuck request ffff8880278d8000: control (read@0,1024B). Runtime 120 seconds [ 257.311772][ T25] block nbd0: Possible stuck request ffff8880278d8200: control (read@1024,1024B). Runtime 120 seconds [ 257.322933][ T25] block nbd0: Possible stuck request ffff8880278d8400: control (read@2048,1024B). Runtime 120 seconds [ 257.334786][ T25] block nbd0: Possible stuck request ffff8880278d8600: control (read@3072,1024B). Runtime 120 seconds [ 257.834120][ T29] audit: type=1400 audit(1771485658.966:567): avc: denied { unmount } for pid=8934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 257.893714][T13860] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 257.981398][T13866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3391'. [ 258.176832][ T5866] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 258.367933][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 258.395816][ T5866] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 258.404900][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.446689][ T5866] usb 7-1: config 0 descriptor?? [ 258.700535][ T5888] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 258.721333][ T29] audit: type=1400 audit(1771485659.921:568): avc: denied { mounton } for pid=13886 comm="syz.2.3401" path="/739/file0" dev="tmpfs" ino=3762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.770246][T13888] netlink: 'syz.2.3401': attribute type 8 has an invalid length. [ 258.841828][ T5866] uclogic 0003:5543:0064.0030: unknown main item tag 0x0 [ 258.849028][ T5866] uclogic 0003:5543:0064.0030: unknown main item tag 0x0 [ 258.872234][ T5866] uclogic 0003:5543:0064.0030: unknown main item tag 0x0 [ 258.873829][ T5888] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 258.879390][ T5866] uclogic 0003:5543:0064.0030: unknown main item tag 0x0 [ 258.879418][ T5866] uclogic 0003:5543:0064.0030: unknown main item tag 0x0 [ 258.908366][ T5866] uclogic 0003:5543:0064.0030: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.6-1/input0 [ 258.927026][ T5888] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 258.938131][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.976903][ T5888] usb 5-1: Product: syz [ 258.983109][ T5888] usb 5-1: Manufacturer: syz [ 258.991284][ T5888] usb 5-1: SerialNumber: syz [ 259.034895][ T5915] usb 7-1: USB disconnect, device number 13 [ 259.234205][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 259.247098][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 259.258087][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 259.268519][ T5888] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 259.282369][ T5888] usb 5-1: USB disconnect, device number 35 [ 260.327956][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3419'. [ 260.472490][ T5866] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 260.571682][T13943] 9p: Bad value for 'wfdno' [ 260.658920][ T5866] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 260.673593][ T5866] usb 3-1: config 0 has no interface number 0 [ 260.688771][ T5866] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 260.710213][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.720930][ T5866] usb 3-1: Product: syz [ 260.738319][ T5866] usb 3-1: Manufacturer: syz [ 260.751609][ T5866] usb 3-1: SerialNumber: syz [ 260.777342][ T5866] usb 3-1: config 0 descriptor?? [ 261.141425][ T29] audit: type=1400 audit(1771485662.451:569): avc: denied { remount } for pid=13963 comm="syz.5.3435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.348786][ T29] audit: type=1800 audit(1771485662.672:570): pid=13973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3439" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45484 res=0 errno=0 [ 261.444002][ T976] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 261.595559][ T5866] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 261.615875][ T5866] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 261.627363][ T976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.639905][ T5866] asix 3-1:0.251: probe with driver asix failed with error -71 [ 261.644284][ T976] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.671827][ T5866] usb 3-1: USB disconnect, device number 39 [ 261.689014][ T976] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.722136][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.740070][T13989] sctp: [Deprecated]: syz.4.3446 (pid 13989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.740070][T13989] Use struct sctp_sack_info instead [ 261.935593][ T976] usb 6-1: usb_control_msg returned -32 [ 261.953762][ T976] usbtmc 6-1:16.0: can't read capabilities [ 262.180789][T14012] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.3456'. [ 262.588668][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3463'. [ 263.054438][T14040] fuse: Bad value for 'fd' [ 263.507333][T14042] gfs2: gfs2 mount does not exist [ 264.090030][ T10] usb 6-1: USB disconnect, device number 23 [ 264.323498][T14082] netlink: 'syz.3.3486': attribute type 3 has an invalid length. [ 264.616453][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.841822][ T29] audit: type=1400 audit(1771485666.336:571): avc: denied { accept } for pid=14103 comm="syz.2.3496" path="socket:[44640]" dev="sockfs" ino=44640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.144881][T14119] input: syz0 as /devices/virtual/input/input49 [ 265.321560][ T29] audit: type=1400 audit(1771485666.850:572): avc: denied { create } for pid=14123 comm="syz.4.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.393513][T14129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3507'. [ 265.936806][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3516'. [ 266.172187][ T29] audit: type=1400 audit(1771485667.742:573): avc: denied { name_connect } for pid=14153 comm="syz.4.3518" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 266.325047][T14135] netlink: 'syz.3.3510': attribute type 2 has an invalid length. [ 266.356073][T14159] 9p: Bad value for 'rfdno' [ 266.873963][ T29] audit: type=1400 audit(1771485668.467:574): avc: denied { read } for pid=14176 comm="syz.6.3526" laddr=172.20.20.10 lport=21961 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 266.956183][ T29] audit: type=1400 audit(1771485668.477:575): avc: denied { mount } for pid=14180 comm="syz.3.3530" name="/" dev="autofs" ino=44798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 267.018878][ T29] audit: type=1400 audit(1771485668.624:576): avc: denied { create } for pid=14188 comm="syz.3.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 267.064259][ T29] audit: type=1400 audit(1771485668.666:577): avc: denied { sys_admin } for pid=14188 comm="syz.3.3535" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 267.216784][ T976] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 267.361205][ T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.379022][ T976] usb 3-1: config 0 has no interface number 0 [ 267.390740][ T976] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.419849][ T976] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.446572][ T976] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.474177][ T976] usb 3-1: config 0 interface 1 has no altsetting 0 [ 267.507687][ T976] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 267.532177][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.555888][ T976] usb 3-1: config 0 descriptor?? [ 267.778676][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 267.921365][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 267.928047][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.939067][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 267.948373][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.956481][ T5915] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 267.966697][ T10] usb 5-1: config 0 descriptor?? [ 268.065337][T14227] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3551'. [ 268.131264][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 268.147558][ T5915] usb 6-1: config 129 has an invalid interface number: 234 but max is 0 [ 268.157919][ T5915] usb 6-1: config 129 has no interface number 0 [ 268.160849][ T976] uclogic 0003:145F:0212.0031: pen parameters not found [ 268.170443][ T5915] usb 6-1: New USB device found, idVendor=10d2, idProduct=62a3, bcdDevice= 3.cd [ 268.181738][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.183283][ T976] uclogic 0003:145F:0212.0031: interface is invalid, ignoring [ 268.206276][ T5915] usb 6-1: Product: syz [ 268.212100][ T5915] usb 6-1: Manufacturer: syz [ 268.216436][ T976] usb 3-1: USB disconnect, device number 40 [ 268.221489][ T5915] usb 6-1: SerialNumber: syz [ 268.245199][T14233] netlink: 'syz.6.3554': attribute type 12 has an invalid length. [ 268.253165][T14233] netlink: 'syz.6.3554': attribute type 29 has an invalid length. [ 268.261470][T14233] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3554'. [ 268.275021][T14233] netlink: 'syz.6.3554': attribute type 1 has an invalid length. [ 268.283016][T14233] netlink: 'syz.6.3554': attribute type 2 has an invalid length. [ 268.293966][T14233] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3554'. [ 268.395698][ T10] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 268.436302][ T5915] usblcd 6-1:129.234: USBLCD model not supported. [ 268.457018][ T5915] usb 6-1: USB disconnect, device number 24 [ 268.725535][ T29] audit: type=1400 audit(1771485670.419:578): avc: denied { ioctl } for pid=14248 comm="syz.2.3562" path="socket:[46012]" dev="sockfs" ino=46012 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.778953][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 268.834433][ T9] usb 5-1: USB disconnect, device number 36 [ 269.007788][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 269.019902][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.041164][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.063590][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 269.076323][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.095858][ T10] usb 7-1: SerialNumber: syz [ 269.115077][ T10] usb 7-1: 0:2 : does not exist [ 269.328526][ T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 269.357483][ T29] audit: type=1400 audit(1771485671.081:579): avc: denied { mounton } for pid=14266 comm="syz.2.3570" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 269.364655][ T10] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 269.438478][ T29] audit: type=1400 audit(1771485671.175:580): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 269.466928][ T10] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 269.518077][ T10] usb 7-1: USB disconnect, device number 14 [ 269.549156][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.721875][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 269.865024][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 269.872863][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.884243][ T29] audit: type=1400 audit(1771485671.616:581): avc: denied { write } for pid=14285 comm="syz.6.3578" path="socket:[44977]" dev="sockfs" ino=44977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 269.908736][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.920459][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.931897][ T24] usb 3-1: config 0 descriptor?? [ 270.046158][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 270.084275][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 270.147852][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 270.216988][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 270.223404][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.234774][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 270.243894][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.254928][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 270.265954][ T10] usb 6-1: config 0 descriptor?? [ 270.271622][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.282439][ T9] usb 5-1: Product: syz [ 270.286779][ T9] usb 5-1: Manufacturer: syz [ 270.291391][ T9] usb 5-1: SerialNumber: syz [ 270.298012][ T9] usb 5-1: config 0 descriptor?? [ 270.304741][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 270.420311][ T29] audit: type=1400 audit(1771485672.204:582): avc: denied { write } for pid=14295 comm="syz.3.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.439950][ T29] audit: type=1400 audit(1771485672.204:583): avc: denied { read } for pid=14295 comm="syz.3.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.579730][ T5915] usb 3-1: USB disconnect, device number 41 [ 270.658371][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 270.664731][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 270.676836][ T10] usb 6-1: USB disconnect, device number 25 [ 270.842682][ T29] audit: type=1400 audit(1771485672.645:584): avc: denied { setopt } for pid=14308 comm="syz.3.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 270.951883][T14315] netlink: 360 bytes leftover after parsing attributes in process `syz.3.3591'. [ 271.271668][ T9] usb 5-1: failed to send control message: -71 [ 271.295176][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 271.321837][ T9] usb 5-1: USB disconnect, device number 37 [ 271.337310][ T9] ch341 5-1:0.0: device disconnected [ 271.460574][T14344] loop8: detected capacity change from 0 to 7 [ 271.468606][ T5796] Dev loop8: unable to read RDB block 7 [ 271.469230][T14339] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.474959][ T5796] loop8: unable to read partition table [ 271.487625][ T5796] loop8: partition table beyond EOD, truncated [ 271.487738][ T10] IPVS: starting estimator thread 0... [ 271.509726][T14344] Dev loop8: unable to read RDB block 7 [ 271.517563][T14344] loop8: unable to read partition table [ 271.523719][T14344] loop8: partition table beyond EOD, truncated [ 271.537195][T14344] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 271.589531][T14346] IPVS: using max 41 ests per chain, 98400 per kthread [ 271.717367][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3608'. [ 271.727180][T14356] netlink: 'syz.2.3608': attribute type 20 has an invalid length. [ 271.735471][T14356] netlink: 'syz.2.3608': attribute type 29 has an invalid length. [ 271.743992][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 271.877128][T14370] netlink: 'syz.4.3614': attribute type 29 has an invalid length. [ 271.889849][T14370] netlink: 'syz.4.3614': attribute type 29 has an invalid length. [ 271.900141][T14370] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3614'. [ 272.587257][T14401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.617551][T14405] overlayfs: failed to clone lowerpath [ 272.642382][T14405] overlayfs: failed to clone lowerpath [ 272.789917][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 272.935249][ T5915] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 272.963442][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.984025][ T9] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 273.003451][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.023120][ T9] usb 6-1: config 0 descriptor?? [ 273.038451][ T9] option 6-1:0.0: GSM modem (1-port) converter detected [ 273.108790][ T5915] usb 3-1: config 0 has no interfaces? [ 273.115346][ T5915] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.156223][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.178914][ T5915] usb 3-1: config 0 descriptor?? [ 273.242671][ T5915] usb 6-1: USB disconnect, device number 26 [ 273.275269][ T5915] option 6-1:0.0: device disconnected [ 273.394424][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.410359][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.432549][ T9] usb 3-1: USB disconnect, device number 42 [ 273.799926][ T29] audit: type=1400 audit(1771485675.752:585): avc: denied { read } for pid=14440 comm="syz.6.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.858721][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 273.971307][T14451] overlayfs: failed to clone lowerpath [ 274.023732][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 274.050645][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 274.062652][ T9] usb 3-1: config 0 has no interface number 0 [ 274.069833][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 274.076906][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 274.089388][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.105591][ T9] usb 3-1: config 0 descriptor?? [ 274.305950][ T29] audit: type=1400 audit(1771485676.267:586): avc: denied { name_bind } for pid=14461 comm="syz.4.3656" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 274.342205][ T9] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input50 [ 274.541650][ T9] usb 3-1: USB disconnect, device number 43 [ 274.541708][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 275.455181][T14505] IPVS: stopping backup sync thread 14507 ... [ 275.457165][T14507] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 275.546568][T14511] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3678'. [ 275.666817][ T5866] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 275.827894][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 275.845711][ T5866] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 275.855367][ T5866] usb 3-1: config 0 has no interface number 0 [ 275.863969][ T5866] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 275.865808][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 275.873833][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.891399][ T5866] usb 3-1: Product: syz [ 275.895935][ T5866] usb 3-1: Manufacturer: syz [ 275.900617][ T5866] usb 3-1: SerialNumber: syz [ 275.911184][ T5866] usb 3-1: config 0 descriptor?? [ 275.980586][ T5887] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 276.018563][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 276.025120][ T24] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.038523][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.045158][ T24] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 276.054299][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.064990][ T24] usb 5-1: config 0 descriptor?? [ 276.132434][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 276.139135][ T5887] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 276.147483][ T5887] usb 6-1: config 0 has no interface number 0 [ 276.153838][ T5887] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 276.165975][ T5887] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 276.175159][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.183765][ T5887] usb 6-1: Product: syz [ 276.187947][ T5887] usb 6-1: Manufacturer: syz [ 276.192595][ T5887] usb 6-1: SerialNumber: syz [ 276.201513][ T5887] usb 6-1: config 0 descriptor?? [ 276.207409][T14527] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 276.415070][T14527] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 276.473597][ T24] waltop 0003:172F:0038.0033: item fetching failed at offset 0/5 [ 276.482063][ T24] waltop 0003:172F:0038.0033: probe with driver waltop failed with error -22 [ 276.537382][T14538] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3690'. [ 276.689185][ T976] usb 5-1: USB disconnect, device number 38 [ 276.773783][ T29] audit: type=1400 audit(1771485678.870:587): avc: denied { write } for pid=14545 comm="syz.3.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.887925][ T5866] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 276.911253][ T5866] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 276.924210][ T29] audit: type=1326 audit(1771485679.028:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.3.3695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd07e19c629 code=0x0 [ 276.948286][ T5866] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 276.961496][ T5866] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 276.991828][ T5866] usb 3-1: USB disconnect, device number 44 [ 277.002825][ T5887] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 277.194080][ T5887] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 277.204384][ T5887] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 277.215443][ T5887] asix 6-1:0.188: probe with driver asix failed with error -71 [ 277.230052][ T5887] usb 6-1: USB disconnect, device number 27 [ 277.472130][ T29] audit: type=1400 audit(1771485679.605:589): avc: denied { bind } for pid=14558 comm="syz.2.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.807333][ T49] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.926328][ T49] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.988487][ T49] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.053173][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.063799][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.073061][ T49] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.083719][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.092447][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.101457][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.208008][T14584] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3714'. [ 278.421215][ T49] bridge_slave_1: left allmulticast mode [ 278.472217][ T49] bridge_slave_1: left promiscuous mode [ 278.489806][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.527194][ T49] bridge_slave_0: left allmulticast mode [ 278.548802][ T49] bridge_slave_0: left promiscuous mode [ 278.555948][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.617469][ T49] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 278.827177][ T49] batman_adv: batadv0: Removing interface: ip6gretap1 [ 279.028285][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 279.072533][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.083535][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.094216][ T49] bond0 (unregistering): Released all slaves [ 279.183115][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 279.208091][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.222059][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.244320][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3731'. [ 279.274985][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 279.284314][ T5887] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 279.298759][T14578] chnl_net:caif_netlink_parms(): no params data found [ 279.315027][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.356501][ T24] usb 5-1: config 0 descriptor?? [ 279.426302][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3734'. [ 279.466966][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 279.474640][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.497229][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.530405][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.597251][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.665549][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.723594][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.811147][ T24] savu 0003:1E7D:2D5A.0034: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 279.978443][ T49] hsr_slave_0: left promiscuous mode [ 280.002907][ T5887] usb 6-1: GET_CAPABILITIES returned 0 [ 280.008438][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 280.028372][ T49] hsr_slave_1: left promiscuous mode [ 280.032210][ T24] usb 5-1: USB disconnect, device number 39 [ 280.045565][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.081772][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.089633][ T5810] Bluetooth: hci2: command tx timeout [ 280.119193][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.127213][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.156866][ T49] dummy0: left promiscuous mode [ 280.162979][ T49] veth1_macvtap: left promiscuous mode [ 280.168588][ T49] veth0_macvtap: left promiscuous mode [ 280.174887][ T49] veth1_vlan: left promiscuous mode [ 280.180769][ T49] veth0_vlan: left promiscuous mode [ 280.198009][ T5866] usb 6-1: USB disconnect, device number 28 [ 280.361179][ T49] team0 (unregistering): Port device team_slave_1 removed [ 280.361826][ T5887] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 280.376558][ T49] team0 (unregistering): Port device team_slave_0 removed [ 280.488134][T14578] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.501416][T14578] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.509089][T14578] bridge_slave_0: entered allmulticast mode [ 280.515207][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 280.531125][ T5887] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 280.531213][T14578] bridge_slave_0: entered promiscuous mode [ 280.550276][ T5887] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 280.562697][T14578] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.570099][ T5887] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.582222][ T5887] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.582548][T14578] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.597112][ T5887] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.608621][T14578] bridge_slave_1: entered allmulticast mode [ 280.614887][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.623663][T14578] bridge_slave_1: entered promiscuous mode [ 280.721915][T14578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.759040][T14578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.864353][ T5887] usb 7-1: usb_control_msg returned -32 [ 280.889118][ T5887] usbtmc 7-1:16.0: can't read capabilities [ 280.912614][T14578] team0: Port device team_slave_0 added [ 280.920427][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 280.932463][T14578] team0: Port device team_slave_1 added [ 280.963620][T14689] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3744'. [ 280.989709][T14578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.997429][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.029831][T14578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.061949][T14578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.077202][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.109092][T14578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.244981][T14578] hsr_slave_0: entered promiscuous mode [ 281.268604][T14578] hsr_slave_1: entered promiscuous mode [ 281.276491][T14578] debugfs: 'hsr0' already exists in 'hsr' [ 281.284296][T14578] Cannot create hsr debugfs directory [ 281.287606][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 281.339791][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 281.692337][ T29] audit: type=1400 audit(1771485684.035:590): avc: denied { append } for pid=14722 comm="syz.5.3753" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 281.862326][T14578] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 281.917559][T14578] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 281.949370][T14578] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 281.952100][T14737] Set syz1 is full, maxelem 14 reached [ 281.975575][T14578] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 282.060615][ T5810] Bluetooth: hci2: command tx timeout [ 282.191970][T14578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.251102][T14578] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.285006][T14762] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 282.305136][T14762] netlink: 'syz.3.3762': attribute type 2 has an invalid length. [ 282.307444][ T29] audit: type=1400 audit(1771485684.676:591): avc: denied { read } for pid=14763 comm="syz.5.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 282.356585][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.363739][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.446623][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.453807][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.541585][T14578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.836833][T14578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.979274][ T24] usb 7-1: USB disconnect, device number 15 [ 283.148776][T14798] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 283.267281][T14578] veth0_vlan: entered promiscuous mode [ 283.314519][T14578] veth1_vlan: entered promiscuous mode [ 283.419137][T14578] veth0_macvtap: entered promiscuous mode [ 283.454271][T14578] veth1_macvtap: entered promiscuous mode [ 283.520243][T14578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.566120][T14578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.600035][ T3553] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.649540][ T3553] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.686507][ T3553] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.746899][ T3553] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.909205][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3778'. [ 284.039501][ T5810] Bluetooth: hci2: command tx timeout [ 284.099485][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.139121][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.167133][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.203795][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.313567][T14826] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 284.804046][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3789'. [ 285.446974][T14860] dvmrp1: entered allmulticast mode [ 285.574136][ T3553] dvmrp1 (unregistering): left allmulticast mode [ 285.953728][ T25] block nbd0: Possible stuck request ffff8880278d8000: control (read@0,1024B). Runtime 150 seconds [ 285.965052][ T25] block nbd0: Possible stuck request ffff8880278d8200: control (read@1024,1024B). Runtime 150 seconds [ 285.977035][ T25] block nbd0: Possible stuck request ffff8880278d8400: control (read@2048,1024B). Runtime 150 seconds [ 285.988277][ T25] block nbd0: Possible stuck request ffff8880278d8600: control (read@3072,1024B). Runtime 150 seconds [ 285.989346][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3819'. [ 286.014193][ T29] audit: type=1400 audit(1771485688.550:592): avc: denied { setopt } for pid=14911 comm="syz.5.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.020064][ T5810] Bluetooth: hci2: command tx timeout [ 286.378079][T14930] input: syz1 as /devices/virtual/input/input51 [ 286.610573][ T35] Bluetooth: hci6: Frame reassembly failed (-84) [ 286.646845][T14936] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 287.042459][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 287.195076][ T24] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 287.205308][ T24] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 287.215764][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 287.226270][ T24] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 287.238938][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.240041][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 287.247851][ T24] usb 8-1: Product: syz [ 287.264526][ T24] usb 8-1: Manufacturer: syz [ 287.269966][ T24] usb 8-1: SerialNumber: syz [ 287.294824][ T3553] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.318224][T14948] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.326055][ T3553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.330109][T14948] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.402134][ T3553] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.412226][ T3553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.430276][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 287.441622][ T9] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 287.458790][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.477863][ T9] usb 7-1: Product: syz [ 287.482091][ T9] usb 7-1: Manufacturer: syz [ 287.486823][ T9] usb 7-1: SerialNumber: syz [ 287.517779][ T9] usb 7-1: config 0 descriptor?? [ 287.526611][ T3553] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.552830][ T3553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.608468][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.619180][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.632616][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.645970][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.661578][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.685917][ T3553] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.697187][ T3553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.802146][T14970] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3846'. [ 287.916734][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 287.929775][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.939981][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 287.948940][ T9] usb 7-1: media controller created [ 287.961939][ T3553] bridge_slave_1: left allmulticast mode [ 287.963378][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.969942][ T3553] bridge_slave_1: left promiscuous mode [ 287.988888][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.997960][ T3553] bridge_slave_0: left allmulticast mode [ 288.004697][ T3553] bridge_slave_0: left promiscuous mode [ 288.010701][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.174863][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.185971][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.195815][ T3553] bond0 (unregistering): Released all slaves [ 288.207903][T14973] syzkaller1: entered promiscuous mode [ 288.213669][T14973] syzkaller1: entered allmulticast mode [ 288.318423][ T24] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:7a:97:ff:1c:20 [ 288.392779][ T24] rtl8150 8-1:1.0: eth13: rtl8150 is detected [ 288.408882][ T24] usb 8-1: USB disconnect, device number 2 [ 288.499725][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 288.511498][T14965] chnl_net:caif_netlink_parms(): no params data found [ 288.534002][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 288.535812][ T5810] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 288.552061][ T5819] Bluetooth: hci6: command 0x1003 tx timeout [ 288.552785][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3848'. [ 288.580925][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 288.638986][ T9] usb 7-1: USB disconnect, device number 16 [ 288.814575][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 289.192518][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 289.317166][ T3553] hsr_slave_0: left promiscuous mode [ 289.332361][ T3553] hsr_slave_1: left promiscuous mode [ 289.348879][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 289.364775][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.388596][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.397139][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.434406][ T24] usb 6-1: config 0 descriptor?? [ 289.450343][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.457755][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.531341][ T3553] veth1_macvtap: left promiscuous mode [ 289.537504][ T3553] veth0_macvtap: left promiscuous mode [ 289.543250][ T3553] veth1_vlan: left promiscuous mode [ 289.548790][ T3553] veth0_vlan: left promiscuous mode [ 289.611070][ T5819] Bluetooth: hci4: command tx timeout [ 289.961046][T15035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.070622][ T24] usb 6-1: USB disconnect, device number 29 [ 290.102387][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.124034][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.137111][T14965] bridge_slave_0: entered allmulticast mode [ 290.144812][T14965] bridge_slave_0: entered promiscuous mode [ 290.156728][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.164673][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.171947][T14965] bridge_slave_1: entered allmulticast mode [ 290.179312][T14965] bridge_slave_1: entered promiscuous mode [ 290.278137][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.306412][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.388896][T14965] team0: Port device team_slave_0 added [ 290.424473][T14965] team0: Port device team_slave_1 added [ 290.488739][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.504831][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.550548][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.563880][ T29] audit: type=1400 audit(1771485693.337:593): avc: denied { read } for pid=15050 comm="syz.7.3871" path="socket:[50519]" dev="sockfs" ino=50519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 290.594752][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.602484][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.634813][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.714658][ T3553] IPVS: stop unused estimator thread 0... [ 290.716497][ T5866] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 290.782419][T14965] hsr_slave_0: entered promiscuous mode [ 290.798333][T14965] hsr_slave_1: entered promiscuous mode [ 290.845268][T14965] debugfs: 'hsr0' already exists in 'hsr' [ 290.863363][T14965] Cannot create hsr debugfs directory [ 290.897244][ T9] delete_channel: no stack [ 290.912724][ T5866] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 290.945116][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.953213][ T5866] usb 7-1: Product: syz [ 291.005646][ T5866] usb 7-1: Manufacturer: syz [ 291.026022][ T5866] usb 7-1: SerialNumber: syz [ 291.579112][T14965] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 291.586988][ T5819] Bluetooth: hci4: command tx timeout [ 291.631930][T14965] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 291.638879][ T5866] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:d6:99:05:fa:26 [ 291.656912][T14965] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 291.687350][ T5866] rtl8150 7-1:1.0: eth13: rtl8150 is detected [ 291.693893][T14965] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 291.817281][T14965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.882209][T14965] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.909456][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.916644][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.924395][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3885'. [ 291.942286][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.949466][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.009726][T15107] bond0: (slave bond_slave_1): Releasing backup interface [ 292.420894][T15131] netlink: 'syz.4.3890': attribute type 83 has an invalid length. [ 292.531214][T14965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.736026][T15146] Invalid argument reading file caps for ./file0 [ 293.052930][T14965] veth0_vlan: entered promiscuous mode [ 293.085715][T14965] veth1_vlan: entered promiscuous mode [ 293.154480][T14965] veth0_macvtap: entered promiscuous mode [ 293.161828][T15170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.171522][T14965] veth1_macvtap: entered promiscuous mode [ 293.230566][T14965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.246925][T14965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.257615][ T5822] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 293.275102][ T77] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.299245][ T77] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.328136][ T77] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.347181][ T5888] usb 7-1: USB disconnect, device number 17 [ 293.348821][ T77] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.413453][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 293.423936][ T5822] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 293.496172][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.516937][ T5822] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 293.530444][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.574730][ T5819] Bluetooth: hci4: command tx timeout [ 293.581630][ T5822] usb 5-1: config 0 descriptor?? [ 293.635546][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.681436][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.771681][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.805449][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.933978][ T5822] usbhid 5-1:0.0: can't add hid device: -71 [ 293.952621][ T5822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 293.993109][ T5822] usb 5-1: USB disconnect, device number 40 [ 294.320468][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 295.088435][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3932'. [ 295.105736][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.118055][T15268] chnl_net:caif_netlink_parms(): no params data found [ 295.270284][ T5887] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 295.347973][T15283] netlink: 'syz.7.3939': attribute type 29 has an invalid length. [ 295.373088][T15283] netlink: 'syz.7.3939': attribute type 29 has an invalid length. [ 295.390799][T15283] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3939'. [ 295.426793][T15283] unsupported nla_type 58 [ 295.446729][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 295.471636][ T5887] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.502733][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.530372][ T5887] usb 5-1: config 0 descriptor?? [ 295.547897][ T5810] Bluetooth: hci4: command tx timeout [ 295.635116][ T29] audit: type=1326 audit(1771485698.670:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7eec59c629 code=0x0 [ 295.706145][ T29] audit: type=1326 audit(1771485698.733:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eec59c629 code=0x7ffc0000 [ 295.751742][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 295.754552][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 295.788190][ T29] audit: type=1326 audit(1771485698.733:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eec59c629 code=0x7ffc0000 [ 295.814415][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.880062][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 295.897548][ T29] audit: type=1326 audit(1771485698.733:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7eec55cece code=0x7ffc0000 [ 295.913688][ T5887] usb 5-1: media controller created [ 295.948416][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 295.969924][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 295.978756][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 295.985710][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.999677][ T29] audit: type=1326 audit(1771485698.754:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7eec55cece code=0x7ffc0000 [ 296.046344][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.078763][ T5887] az6027: usb out operation failed. (-71) [ 296.086810][ T10] usb 7-1: config 0 descriptor?? [ 296.121359][ T5887] az6027: usb out operation failed. (-71) [ 296.124375][ T29] audit: type=1326 audit(1771485698.764:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7eec55cece code=0x7ffc0000 [ 296.136552][ T5887] stb0899_attach: Driver disabled by Kconfig [ 296.153462][ T29] audit: type=1326 audit(1771485698.775:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7eec55cece code=0x7ffc0000 [ 296.186749][ T29] audit: type=1326 audit(1771485698.785:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7eec55cece code=0x7ffc0000 [ 296.197325][ T5887] az6027: no front-end attached [ 296.197325][ T5887] [ 296.241555][ T5887] az6027: usb out operation failed. (-71) [ 296.249486][ T29] audit: type=1326 audit(1771485698.785:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7eec55cece code=0x7ffc0000 [ 296.255452][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 296.283110][ T29] audit: type=1326 audit(1771485698.785:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7eec55cece code=0x7ffc0000 [ 296.312867][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53 [ 296.343242][ T5887] dvb-usb: schedule remote query interval to 400 msecs. [ 296.365462][ T5887] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 296.394571][ T5887] usb 5-1: USB disconnect, device number 41 [ 296.492973][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 296.521239][ T10] hid (null): bogus close delimiter [ 296.532596][ T10] hid (null): bogus close delimiter [ 296.552243][ T10] hid (null): invalid report_count 60568 [ 296.574742][ T10] hid (null): unknown global tag 0xd [ 296.590178][ T10] hid (null): unknown global tag 0xe [ 296.609906][ T10] hid (null): report_id 0 is invalid [ 296.629985][ T10] hid (null): invalid report_size -218493109 [ 296.639823][ T10] hid (null): unknown global tag 0xc [ 296.655278][ T10] hid (null): unknown global tag 0xe [ 296.670103][ T10] hid (null): global environment stack overflow [ 296.727032][ T10] usb 7-1: USB disconnect, device number 18 [ 296.955480][T15350] loop8: detected capacity change from 0 to 8 [ 296.999270][T14965] Dev loop8: unable to read RDB block 8 [ 297.013411][T14965] loop8: unable to read partition table [ 297.029319][T14965] loop8: partition table beyond EOD, truncated [ 297.043026][T15350] Dev loop8: unable to read RDB block 8 [ 297.048820][T15350] loop8: unable to read partition table [ 297.061549][T15350] loop8: partition table beyond EOD, truncated [ 297.063838][T15360] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3961'. [ 297.075492][T15350] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 297.529775][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 297.536820][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 297.708211][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 297.727395][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 297.746273][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.777215][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.798348][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.821322][ T5915] IPVS: starting estimator thread 0... [ 297.846086][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.888210][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.918153][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.918989][T15399] IPVS: using max 45 ests per chain, 108000 per kthread [ 298.178727][ T10] usb 8-1: usb_control_msg returned -32 [ 298.185025][ T5915] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 298.197911][ T10] usbtmc 8-1:16.0: can't read capabilities [ 298.357276][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.395239][ T5915] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.416118][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.475806][ T5915] usb 6-1: config 0 descriptor?? [ 298.505104][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 298.563795][T15433] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 298.582980][ T5887] usb 8-1: USB disconnect, device number 3 [ 298.618512][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3985'. [ 298.889904][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.097768][ T5915] pwc: recv_control_msg error -71 req 02 val 2c00 [ 299.110503][ T5915] pwc: recv_control_msg error -71 req 04 val 1000 [ 299.125226][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 299.148675][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 299.176333][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 299.203173][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 299.226400][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 299.247434][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 299.276654][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 299.292885][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 299.307664][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 299.321432][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 299.339443][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 299.369830][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 299.394853][ T5915] pwc: Registered as video103. [ 299.417062][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54 [ 299.450548][ T5915] usb 6-1: USB disconnect, device number 30 [ 299.693910][T15466] netlink: 'syz.5.3996': attribute type 29 has an invalid length. [ 299.706405][T15466] netlink: 'syz.5.3996': attribute type 29 has an invalid length. [ 299.718102][T15466] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3996'. [ 299.791841][ T5822] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 299.815176][ T5822] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.842038][ T5887] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 300.006846][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 300.015937][ T5887] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 300.033336][ T5887] usb 5-1: config 0 has no interface number 0 [ 300.050605][ T5887] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.083681][ T5887] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 300.107635][ T5887] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 300.117112][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.125757][ T5887] usb 5-1: Product: syz [ 300.131004][ T5887] usb 5-1: Manufacturer: syz [ 300.135818][ T5887] usb 5-1: SerialNumber: syz [ 300.145930][ T5887] usb 5-1: config 0 descriptor?? [ 300.162837][ T5887] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 300.651255][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 300.651275][ T29] audit: type=1400 audit(1771485703.929:692): avc: denied { write } for pid=15492 comm="syz.8.4007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 300.943779][ T5887] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 301.194998][ T29] audit: type=1400 audit(1771485704.475:693): avc: denied { write } for pid=15507 comm="syz.5.4014" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 301.227279][ T5887] usb 5-1: USB disconnect, device number 42 [ 301.897722][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4023'. [ 302.019656][T15537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4026'. [ 302.233038][T15542] mmap: syz.6.4029 (15542): VmData 41652224 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 302.627350][T15552] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 302.645151][ T29] audit: type=1400 audit(1771485706.018:694): avc: denied { create } for pid=15551 comm="syz.7.4033" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 302.813399][ T29] audit: type=1400 audit(1771485706.176:695): avc: denied { associate } for pid=15551 comm="syz.7.4033" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 303.039114][ T29] audit: type=1400 audit(1771485706.186:696): avc: denied { mounton } for pid=15551 comm="syz.7.4033" path="/59/file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 303.143154][ T29] audit: type=1400 audit(1771485706.197:697): avc: denied { setattr } for pid=15551 comm="syz.7.4033" name="file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 303.358323][ T29] audit: type=1400 audit(1771485706.659:698): avc: denied { rmdir } for pid=14578 comm="syz-executor" name="file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 303.657709][ T29] audit: type=1400 audit(1771485707.089:699): avc: denied { mount } for pid=15586 comm="syz.4.4046" name="/" dev="hugetlbfs" ino=53638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 304.003478][T15600] sg_write: data in/out 8156/38 bytes for SCSI command 0x0-- guessing data in; [ 304.003478][T15600] program syz.6.4047 not setting count and/or reply_len properly [ 304.290200][ T29] audit: type=1400 audit(1771485707.750:700): avc: denied { setattr } for pid=14965 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.323611][ T5822] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 304.394390][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 304.496264][ T5822] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.509444][ T5822] usb 6-1: config 0 has no interface number 0 [ 304.515585][ T5822] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 304.548082][ T5822] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 304.566765][ T5822] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.575837][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.610595][ T5822] usb 6-1: config 0 descriptor?? [ 304.624520][T15604] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.638338][ T5822] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 304.931998][ T5822] usb 6-1: USB disconnect, device number 31 [ 304.938020][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 306.330988][T15670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4072'. [ 306.919716][ T5887] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 307.066486][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.090808][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.131635][ T5887] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.141477][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.159921][ T5887] usb 6-1: SerialNumber: syz [ 307.305416][T15699] netlink: 566 bytes leftover after parsing attributes in process `syz.6.4082'. [ 307.392483][ T5887] usb 6-1: 0:2 : does not exist [ 307.410645][ T5887] usb 6-1: usbmixer: too many channels (61) in unit 5 [ 307.437461][ T29] audit: type=1400 audit(1771485711.057:701): avc: denied { map } for pid=15702 comm="syz.6.4084" path="socket:[53917]" dev="sockfs" ino=53917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 307.536452][ T5887] usb 6-1: USB disconnect, device number 32 [ 307.824598][ T5915] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 308.006308][ T5915] usb 8-1: Using ep0 maxpacket: 8 [ 308.014088][ T5915] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 308.043888][ T5915] usb 8-1: config 179 has no interface number 0 [ 308.080494][ T5915] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 308.110949][ T5915] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 308.156461][ T5915] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.193177][ T5915] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 308.226518][ T5915] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 308.300203][ T5915] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 308.344444][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.391233][T15708] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 308.867412][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.925988][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.054609][ T5915] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input56 [ 309.282807][T15743] pim6reg: left allmulticast mode [ 309.553087][ T5888] usb 8-1: USB disconnect, device number 4 [ 309.553097][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 309.740247][T15754] syzkaller1: entered promiscuous mode [ 309.745794][T15754] syzkaller1: entered allmulticast mode [ 309.793368][T15758] syzkaller1: entered promiscuous mode [ 309.815227][T15758] syzkaller1: entered allmulticast mode [ 310.076922][ T29] audit: type=1400 audit(1771485713.829:702): avc: denied { setopt } for pid=15759 comm="syz.5.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.221109][ T29] audit: type=1400 audit(1771485713.986:703): avc: denied { name_bind } for pid=15766 comm="syz.5.4111" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 310.284577][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4112'. [ 310.308409][T15771] netlink: 'syz.7.4112': attribute type 30 has an invalid length. [ 310.326189][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4112'. [ 310.377552][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4113'. [ 310.386562][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4113'. [ 310.444551][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4113'. [ 310.478172][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4113'. [ 310.666325][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 311.264079][T15823] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4129'. [ 311.284191][T15823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4129'. [ 312.162702][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.170442][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.289773][ T29] audit: type=1400 audit(1771485716.149:704): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 312.711310][ T5955] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 313.549895][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 313.560890][ T5955] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 313.576664][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.587309][ T5955] usb 8-1: config 0 descriptor?? [ 313.593228][T15875] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 313.893162][T15906] __nla_validate_parse: 1 callbacks suppressed [ 313.893183][T15906] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.4160'. [ 313.949914][T15907] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.4160'. [ 314.045419][ T5955] elan 0003:04F3:0755.0038: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 314.249200][ T5822] usb 8-1: USB disconnect, device number 5 [ 314.509508][ T29] audit: type=1400 audit(1771485718.479:705): avc: denied { unmount } for pid=8934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 314.598055][ T25] block nbd0: Possible stuck request ffff8880278d8000: control (read@0,1024B). Runtime 180 seconds [ 314.609073][ T25] block nbd0: Possible stuck request ffff8880278d8200: control (read@1024,1024B). Runtime 180 seconds [ 314.621916][ T25] block nbd0: Possible stuck request ffff8880278d8400: control (read@2048,1024B). Runtime 180 seconds [ 314.634004][ T25] block nbd0: Possible stuck request ffff8880278d8600: control (read@3072,1024B). Runtime 180 seconds [ 315.133068][ T29] audit: type=1400 audit(1771485719.141:706): avc: denied { bind } for pid=15941 comm="syz.7.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 315.264007][ T5822] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 315.285491][T15948] loop5: detected capacity change from 0 to 4096 [ 315.436792][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 315.462380][ T5822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.482330][ T5822] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 315.505807][ T5822] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 315.529489][ T5822] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.543865][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.568669][ T5822] usb 6-1: Product: syz [ 315.575451][ T5822] usb 6-1: Manufacturer: syz [ 315.587635][ T5822] usb 6-1: SerialNumber: syz [ 315.807711][ T5887] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 315.812944][ T5822] cdc_ncm 6-1:1.0: bind() failure [ 315.840784][ T5822] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 315.853023][ T5822] cdc_ncm 6-1:1.1: bind() failure [ 315.868808][ T5822] usb 6-1: USB disconnect, device number 33 [ 315.969054][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 315.975910][ T5887] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 315.988986][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.016689][ T5887] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.029411][ T5887] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.039896][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.064169][ T5887] usb 7-1: Product: syz [ 316.068374][ T5887] usb 7-1: Manufacturer: syz [ 316.072973][ T5887] usb 7-1: SerialNumber: syz [ 316.129521][T15969] erspan0: entered promiscuous mode [ 316.135021][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4187'. [ 316.456425][ T5915] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 316.495480][ T5887] usb 7-1: 0:2 : does not exist [ 316.633704][ T5915] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.645572][ T5915] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 316.683397][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.698886][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 316.723443][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 316.736568][ T5915] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.747422][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.755529][ T5915] usb 5-1: Product: syz [ 316.759959][ T5915] usb 5-1: Manufacturer: syz [ 316.769997][ T5915] cdc_wdm 5-1:1.0: skipping garbage [ 316.775218][ T5915] cdc_wdm 5-1:1.0: skipping garbage [ 316.783173][ T5915] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 316.789927][ T5915] cdc_wdm 5-1:1.0: Unknown control protocol [ 316.921158][ T5888] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 317.047555][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 317.054197][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 317.055308][ T5822] usb 5-1: USB disconnect, device number 43 [ 317.060278][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 317.102255][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 317.122560][ T5888] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 317.150097][ T5888] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 317.178969][ T5887] usb 7-1: USB disconnect, device number 19 [ 317.185940][ T5888] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.216987][ T5888] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 317.247511][ T5888] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 317.257227][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.273635][ T5888] usb 6-1: Product: syz [ 317.277858][ T5888] usb 6-1: Manufacturer: syz [ 317.293783][ T5888] usb 6-1: SerialNumber: syz [ 317.327951][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 317.347077][ T5888] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input57 [ 317.540309][ T5888] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 317.548760][ T5888] (id 0x00) [ 317.607938][ T5888] rc_core: IR keymap rc-imon-pad not found [ 317.613804][ T5888] Registered IR keymap rc-empty [ 317.624268][ T5888] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 317.634917][ T5888] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 317.741061][ T5888] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 317.772625][ T5888] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input58 [ 317.811476][ T5888] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:34> initialized [ 318.018081][T15981] imon:display_open: display port is already open [ 318.037875][ T5888] usb 6-1: USB disconnect, device number 34 [ 318.519827][ T29] audit: type=1400 audit(1771485722.689:707): avc: denied { setopt } for pid=16011 comm="syz.6.4206" lport=41773 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 318.627837][ T29] audit: type=1400 audit(1771485722.804:708): avc: denied { bind } for pid=16014 comm="syz.6.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 319.014391][ T5819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.036010][ T5819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.052045][ T5819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.088753][T16033] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 319.110400][T16033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 319.123101][ T5819] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.142516][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.206622][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4215'. [ 319.282405][T16037] syz_tun: left allmulticast mode [ 319.291930][T16037] syz_tun: left promiscuous mode [ 319.310902][T16037] bridge0: port 3(syz_tun) entered disabled state [ 319.344872][T16037] bridge_slave_1: left allmulticast mode [ 319.356745][T16037] bridge_slave_1: left promiscuous mode [ 319.372461][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.406992][T16037] bridge_slave_0: left allmulticast mode [ 319.422462][T16037] bridge_slave_0: left promiscuous mode [ 319.428891][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.636956][ T5955] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 319.817372][ T5955] usb 8-1: Using ep0 maxpacket: 32 [ 319.828890][ T5955] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 319.840989][ T5955] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 319.848184][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.854157][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 319.869294][ T5955] usb 8-1: Product: syz [ 319.873453][ T5955] usb 8-1: Manufacturer: syz [ 319.878132][ T5955] usb 8-1: SerialNumber: syz [ 319.887042][ T5955] usb 8-1: config 0 descriptor?? [ 319.893676][T16045] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 319.908644][T16062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4228'. [ 319.952124][ T5955] hub 8-1:0.0: bad descriptor, ignoring hub [ 319.960255][ T5955] hub 8-1:0.0: probe with driver hub failed with error -5 [ 320.077114][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4230'. [ 320.090051][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.137307][T16030] chnl_net:caif_netlink_parms(): no params data found [ 320.230460][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.375434][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.519028][T16030] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.553864][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.571595][T16030] bridge_slave_0: entered allmulticast mode [ 320.582394][T16045] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 320.599094][T16030] bridge_slave_0: entered promiscuous mode [ 320.633316][T16030] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.647572][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.654847][T16030] bridge_slave_1: entered allmulticast mode [ 320.674817][T16030] bridge_slave_1: entered promiscuous mode [ 320.747492][T16045] usb 8-1: device firmware changed [ 320.788177][T16030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.805048][ T5822] usb 8-1: USB disconnect, device number 6 [ 320.836001][T16030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.953105][T16030] team0: Port device team_slave_0 added [ 320.961261][ T5822] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 320.969129][T16030] team0: Port device team_slave_1 added [ 321.061454][T16030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.077002][T16030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.094855][ T10] libceph: connect (1)[c::]:6789 error -101 [ 321.115793][T16030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.116481][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 321.132686][ T5822] usb 8-1: Using ep0 maxpacket: 32 [ 321.144033][ T5822] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 321.154450][ T5810] Bluetooth: hci6: command tx timeout [ 321.156605][T16111] ceph: No mds server is up or the cluster is laggy [ 321.162240][ T10] libceph: connect (1)[c::]:6789 error -101 [ 321.175467][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 321.179547][ T12] bridge_slave_1: left allmulticast mode [ 321.189661][ T5822] usb 8-1: string descriptor 0 read error: -22 [ 321.190848][ T12] bridge_slave_1: left promiscuous mode [ 321.196115][ T5822] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.213263][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.215118][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.224955][ T5822] usb 8-1: config 0 descriptor?? [ 321.235321][T16074] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 321.244781][ T5822] hub 8-1:0.0: bad descriptor, ignoring hub [ 321.251054][ T5822] hub 8-1:0.0: probe with driver hub failed with error -5 [ 321.274464][ T5915] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 321.298169][ T12] bridge_slave_0: left allmulticast mode [ 321.308485][ T12] bridge_slave_0: left promiscuous mode [ 321.317147][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.443027][ T5915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 321.460720][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.477449][ T5915] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.489558][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.501633][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.514476][ T5915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 321.521918][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.557476][ T5915] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.588075][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.599907][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.613369][ T5915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 321.625058][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.640625][ T5915] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.652915][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.665349][ T5822] usb 8-1: USB disconnect, device number 7 [ 321.675640][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.694575][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.707362][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.711376][ T5915] usb 6-1: string descriptor 0 read error: -22 [ 321.724301][ T5915] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 321.734870][ T12] bond0 (unregistering): Released all slaves [ 321.736820][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.762599][T16030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.770089][T16030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.797654][T16030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.831848][ T5915] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 321.878212][T16128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.028427][T16030] hsr_slave_0: entered promiscuous mode [ 322.034938][T16030] hsr_slave_1: entered promiscuous mode [ 322.066479][T16030] debugfs: 'hsr0' already exists in 'hsr' [ 322.072319][T16030] Cannot create hsr debugfs directory [ 322.096855][ T29] audit: type=1400 audit(1771485726.447:709): avc: denied { append } for pid=16133 comm="syz.7.4256" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 322.135799][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.147285][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.158860][ T5915] usb 6-1: USB disconnect, device number 35 [ 322.186677][T16109] adutux: No device or device unplugged -19 [ 322.357939][ T12] hsr_slave_0: left promiscuous mode [ 322.364505][ T12] hsr_slave_1: left promiscuous mode [ 322.373611][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.384891][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.393228][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.405826][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.433203][ T12] veth1_macvtap: left promiscuous mode [ 322.449202][ T12] veth0_macvtap: left promiscuous mode [ 322.455095][ T12] veth1_vlan: left promiscuous mode [ 322.473410][ T12] veth0_vlan: left promiscuous mode [ 322.559935][ T29] audit: type=1400 audit(1771485726.930:710): avc: denied { relabelfrom } for pid=16155 comm="syz.7.4261" name="" dev="pipefs" ino=56088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 322.862369][ T12] team0 (unregistering): Port device team_slave_1 removed [ 322.881253][ T12] team0 (unregistering): Port device team_slave_0 removed [ 323.141859][ T5810] Bluetooth: hci6: command tx timeout [ 323.478700][T16030] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 323.533466][T16030] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 323.605825][T16030] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 323.662636][T16030] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.026932][T16030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.085590][T16030] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.106374][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.113629][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.190811][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.198031][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.346806][ T29] audit: type=1400 audit(1771485728.809:711): avc: denied { sys_module } for pid=16030 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 324.448928][ T5810] block nbd7: Receive control failed (result -32) [ 324.460469][T16192] block nbd7: shutting down sockets [ 324.693277][T16030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.790636][ T976] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 324.890865][ T29] audit: type=1400 audit(1771485729.376:712): avc: denied { read } for pid=16258 comm="syz.4.4290" path="socket:[57057]" dev="sockfs" ino=57057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.934931][T16265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4290'. [ 324.998951][ T976] usb 7-1: Using ep0 maxpacket: 8 [ 325.005971][ T976] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 325.014812][ T976] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.044134][ T976] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.068168][ T976] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.099003][ T976] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.113903][ T5810] Bluetooth: hci6: command tx timeout [ 325.145347][ T976] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.180539][ T5853] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 325.188303][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.309842][T16030] veth0_vlan: entered promiscuous mode [ 325.322215][T16030] veth1_vlan: entered promiscuous mode [ 325.350853][T16276] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 325.368124][T16030] veth0_macvtap: entered promiscuous mode [ 325.374133][ T5853] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 325.402015][T16030] veth1_macvtap: entered promiscuous mode [ 325.406815][ T5853] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 325.437552][ T5853] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 325.450133][ T976] usb 7-1: usb_control_msg returned -32 [ 325.455733][ T976] usbtmc 7-1:16.0: can't read capabilities [ 325.466369][ T5853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 325.475731][ T5853] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.491260][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 325.496421][T16030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.519299][ T5853] usb 6-1: Product: syz [ 325.536605][ T5853] usb 6-1: Manufacturer: syz [ 325.540440][T16286] binder: 16284:16286 ioctl c0306201 200000000040 returned -14 [ 325.541256][ T5853] usb 6-1: SerialNumber: syz [ 325.565053][T16030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.575698][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 325.582393][ T5853] usb 6-1: config 0 descriptor?? [ 325.613395][ T3553] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.623361][T16261] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 325.623417][ T3553] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.650343][ T5853] usb 6-1: selecting invalid altsetting 0 [ 325.691058][ T3553] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.724424][ T3553] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.762196][T16290] support for cryptoloop has been removed. Use dm-crypt instead. [ 325.865342][T16296] usbtmc 7-1:16.0: usb_bulk_msg returned -71 [ 326.010398][T16261] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 326.024523][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.049573][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.062331][ T5888] usb 7-1: USB disconnect, device number 20 [ 326.104879][T16305] all (unregistering): Released all slaves [ 326.114887][ T5853] usb 6-1: USB disconnect, device number 36 [ 326.285507][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.306285][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.351454][ T29] audit: type=1400 audit(1771485730.909:713): avc: denied { read write } for pid=16311 comm="syz.4.4301" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 326.411279][ T29] audit: type=1400 audit(1771485730.909:714): avc: denied { open } for pid=16311 comm="syz.4.4301" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 326.550025][T16323] netlink: 'syz.9.4208': attribute type 13 has an invalid length. [ 326.559074][T16323] netlink: 'syz.9.4208': attribute type 17 has an invalid length. [ 326.571118][ T5853] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 326.685115][T16323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.706656][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4304'. [ 326.752437][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 326.770881][ T5915] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 326.791347][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.817565][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.833432][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.846306][ T5853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 326.857158][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.944000][ T5853] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 326.953323][ T5853] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 326.961445][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 326.967116][ T5853] usb 5-1: Manufacturer: syz [ 326.972948][ T5915] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 326.985374][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.997315][ T5853] usb 5-1: config 0 descriptor?? [ 327.003044][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.013592][ T5915] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 327.030482][ T5915] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 327.039682][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.056446][ T976] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 327.059875][ T5915] usb 8-1: config 0 descriptor?? [ 327.097093][ T5810] Bluetooth: hci6: command tx timeout [ 327.199583][ T976] usb 7-1: Using ep0 maxpacket: 16 [ 327.213962][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.234388][ T976] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 327.256907][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.272402][ T976] usb 7-1: config 0 descriptor?? [ 327.296391][ T5853] rc_core: IR keymap rc-hauppauge not found [ 327.304376][ T5853] Registered IR keymap rc-empty [ 327.321748][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.372152][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.390953][ T5853] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 327.405553][ T5853] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59 [ 327.427078][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.447103][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.483665][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.508763][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.528176][ T5915] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0039/input/input60 [ 327.552288][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.570993][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.599691][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.633258][ T5915] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0039/input/input61 [ 327.650956][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.685497][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.697115][ T976] input: HID 041e:3100 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:041E:3100.003A/input/input62 [ 327.715990][ T5853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.763352][ T5853] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 327.797647][ T5915] kye 0003:0458:5013.0039: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 327.828295][ T5853] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 327.848776][ T976] creative-sb0540 0003:041E:3100.003A: input,hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.6-1/input0 [ 327.905335][ T5853] usb 5-1: USB disconnect, device number 44 [ 327.916578][ T5915] usb 8-1: USB disconnect, device number 8 [ 327.964333][ T976] usb 7-1: USB disconnect, device number 21 [ 328.070811][T16347] fido_id[16347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 328.118900][T16346] fido_id[16346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 328.321445][ T792] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 328.497336][ T792] usb 10-1: Using ep0 maxpacket: 32 [ 328.541394][ T792] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 328.560784][ T792] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 328.579630][ T792] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 328.598260][ T792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 328.637761][ T792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 328.666571][ T792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 328.681671][ T792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 328.693894][ T792] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 328.743091][ T792] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 328.755747][ T792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.805268][ T792] usb 10-1: config 0 descriptor?? [ 328.822187][T16351] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 329.022105][ T29] audit: type=1400 audit(1771485733.712:715): avc: denied { remount } for pid=16388 comm="syz.4.4326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 329.074092][ T792] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 329.336640][ C1] usblp0: nonzero read bulk status received: -71 [ 329.365862][ T792] usb 10-1: USB disconnect, device number 2 [ 329.389095][ T792] usblp0: removed [ 329.558712][T16411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.617344][T16411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.971620][T16438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.978909][T16438] IPv6: NLM_F_CREATE should be set when creating new route [ 330.061374][T16444] netlink: 207952 bytes leftover after parsing attributes in process `syz.9.4350'. [ 330.190377][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 330.272470][ T29] audit: type=1326 audit(1771485735.035:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.7.4355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7eec59c629 code=0x0 [ 330.361787][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 330.370410][ T10] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 330.389800][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.409582][ T10] usb 7-1: Product: syz [ 330.413784][ T10] usb 7-1: Manufacturer: syz [ 330.418372][ T10] usb 7-1: SerialNumber: syz [ 330.425373][ T10] usb 7-1: config 0 descriptor?? [ 330.790679][ T29] audit: type=1400 audit(1771485735.560:717): avc: denied { search } for pid=16474 comm="syz.9.4362" name="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.847775][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 330.858915][ T29] audit: type=1400 audit(1771485735.570:718): avc: denied { search } for pid=16474 comm="syz.9.4362" name="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.900151][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.920356][ T29] audit: type=1400 audit(1771485735.570:719): avc: denied { read open } for pid=16474 comm="syz.9.4362" path="/12/file0" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.945030][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 330.954330][ T10] usb 7-1: media controller created [ 330.968388][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.977556][ T29] audit: type=1400 audit(1771485735.654:720): avc: denied { unmount } for pid=16030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 331.524292][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 331.531436][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 331.547594][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 331.580094][ T10] usb 7-1: USB disconnect, device number 22 [ 331.643877][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 331.670201][ T5814] Bluetooth: hci6: command 0x0405 tx timeout [ 331.747777][T16502] xt_hashlimit: size too large, truncated to 1048576 [ 331.998817][T16515] netlink: 204 bytes leftover after parsing attributes in process `syz.9.4376'. [ 332.246935][T16534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.532053][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 332.686132][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 332.697316][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 332.709072][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.733785][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.762462][ T5915] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 332.770231][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 332.810301][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 332.829350][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.838994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #241!!! [ 332.853093][ T10] usb 7-1: config 0 descriptor?? [ 332.905703][ T5887] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 332.943574][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 332.950474][ T5915] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 332.972698][ T5915] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 332.995093][ T5915] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.026259][ T5915] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 333.059507][ T5915] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 333.061635][ T29] audit: type=1326 audit(1771485737.964:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.9.4391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f502c79c629 code=0x0 [ 333.068868][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.093487][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 333.123196][ T5915] usb 5-1: Product: syz [ 333.127700][ T5915] usb 5-1: Manufacturer: syz [ 333.130418][ T5887] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 333.132563][ T5915] usb 5-1: SerialNumber: syz [ 333.146413][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.160918][ T5887] usb 6-1: Product: syz [ 333.164741][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 333.177717][ T5887] usb 6-1: Manufacturer: syz [ 333.182657][ T5887] usb 6-1: SerialNumber: syz [ 333.185492][ T5915] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input63 [ 333.207830][ T5887] usb 6-1: config 0 descriptor?? [ 333.221324][ T5887] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 333.319067][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.003B/input/input65 [ 333.371997][ T5915] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 333.380432][ T5915] (id 0x00) [ 333.402805][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.003B/input/input66 [ 333.426884][ T5887] gspca_ov534_9: reg_w failed -71 [ 333.452871][ T5915] rc_core: IR keymap rc-imon-pad not found [ 333.465578][ T10] kye 0003:0458:5013.003B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 333.479138][ T5915] Registered IR keymap rc-empty [ 333.484072][ T5915] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 333.501153][ T5915] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 333.520814][ T10] usb 7-1: USB disconnect, device number 23 [ 333.556532][T16558] fido_id[16558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 333.565936][ T5915] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 333.584391][ T5915] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input64 [ 333.603842][ T5915] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:45> initialized [ 333.765861][ T10] usb 5-1: USB disconnect, device number 45 [ 333.858005][ T5887] gspca_ov534_9: Unknown sensor 0000 [ 333.858096][ T5887] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 333.885529][ T5887] usb 6-1: USB disconnect, device number 37 [ 333.925131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 334.293686][T16584] ªªªªªª: renamed from wg2 [ 334.524921][ T29] audit: type=1400 audit(1771485739.486:722): avc: denied { ioctl } for pid=16592 comm="syz.9.4406" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 335.005705][ T5887] IPVS: starting estimator thread 0... [ 335.005760][T16618] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 335.096187][T16623] IPVS: using max 53 ests per chain, 127200 per kthread [ 335.221411][ T976] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 335.374174][ T976] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 335.394674][ T976] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 335.418349][ T976] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 335.420770][ T29] audit: type=1326 audit(1771485740.441:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16636 comm="syz.9.4425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f502c79c629 code=0x0 [ 335.427822][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.476857][T16620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 335.487997][T16640] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4426'. [ 335.497654][T16640] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4426'. [ 335.524728][ T5887] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 335.684641][T16620] netlink: 'syz.6.4419': attribute type 1 has an invalid length. [ 335.692642][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 335.699599][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4419'. [ 335.713570][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.738884][ T5887] usb 6-1: config 0 has no interfaces? [ 335.751327][ T976] usb 7-1: string descriptor 0 read error: -71 [ 335.765562][ T5887] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 335.779959][ T976] hub 7-1:32.0: USB hub found [ 335.786079][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.804493][ T976] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 335.815150][ T5887] usb 6-1: Product: syz [ 335.828200][ T5887] usb 6-1: Manufacturer: syz [ 335.836758][ T5887] usb 6-1: SerialNumber: syz [ 335.861437][ T29] audit: type=1400 audit(1771485740.903:724): avc: denied { listen } for pid=16653 comm="syz.4.4433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 335.898777][ T5887] usb 6-1: config 0 descriptor?? [ 335.914150][ T976] usb 7-1: USB disconnect, device number 24 [ 335.924159][ T29] audit: type=1400 audit(1771485740.903:725): avc: denied { accept } for pid=16653 comm="syz.4.4433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 336.203993][ T976] usb 6-1: USB disconnect, device number 38 [ 336.277534][ T5915] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 336.429589][ T5915] usb 8-1: Using ep0 maxpacket: 8 [ 336.450301][ T5915] usb 8-1: config 0 has no interfaces? [ 336.460736][ T5915] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 336.485058][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.505887][ T5915] usb 8-1: Product: syz [ 336.512384][ T5915] usb 8-1: Manufacturer: syz [ 336.526374][ T5915] usb 8-1: SerialNumber: syz [ 336.553321][ T5915] usb 8-1: config 0 descriptor?? [ 336.740262][ T29] audit: type=1400 audit(1771485741.816:726): avc: denied { listen } for pid=16687 comm="syz.4.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 336.787056][ T5915] usb 8-1: USB disconnect, device number 9 [ 336.791632][ T29] audit: type=1400 audit(1771485741.816:727): avc: denied { accept } for pid=16687 comm="syz.4.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 337.155530][ T30] INFO: task syz.0.1792:10286 blocked for more than 143 seconds. [ 337.190522][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 337.201151][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.229485][ T30] task:syz.0.1792 state:D stack:28792 pid:10286 tgid:10285 ppid:6102 task_flags:0x400040 flags:0x00080002 [ 337.290024][ T30] Call Trace: [ 337.293352][ T30] [ 337.335120][ T30] __schedule+0xfee/0x60e0 [ 337.339598][ T30] ? __lock_acquire+0x4a5/0x2630 [ 337.382586][ T30] ? __pfx___schedule+0x10/0x10 [ 337.387518][ T30] ? find_held_lock+0x2b/0x80 [ 337.439737][ T30] ? schedule+0x2bf/0x390 [ 337.444126][ T30] schedule+0xdd/0x390 [ 337.448208][ T30] schedule_preempt_disabled+0x13/0x30 [ 337.464592][ T30] __mutex_lock+0xc9a/0x1b90 [ 337.477659][ T30] ? bdev_open+0x41a/0xe40 [ 337.487124][ T30] ? find_held_lock+0x2b/0x80 [ 337.491851][ T30] ? find_inode_fast+0x5e3/0x910 [ 337.496801][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 337.513843][ T30] ? find_inode_fast+0x1fa/0x910 [ 337.537035][ T30] ? bdev_open+0x41a/0xe40 [ 337.541511][ T30] bdev_open+0x41a/0xe40 [ 337.545810][ T30] ? iput+0x3a/0x40 [ 337.549626][ T30] blkdev_open+0x34e/0x4f0 [ 337.555114][ T30] do_dentry_open+0x6d8/0x1660 [ 337.559913][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 337.565627][ T30] vfs_open+0x82/0x3f0 [ 337.569722][ T30] path_openat+0x208c/0x31a0 [ 337.574528][ T30] ? __pfx_path_openat+0x10/0x10 [ 337.579495][ T30] do_file_open+0x20e/0x430 [ 337.584599][ T30] ? __pfx_do_file_open+0x10/0x10 [ 337.589640][ T30] ? alloc_fd+0x476/0x790 [ 337.598825][ T30] ? do_getname+0x191/0x390 [ 337.603436][ T30] do_sys_openat2+0x10d/0x1e0 [ 337.608124][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 337.615017][ T30] __x64_sys_openat+0x12d/0x210 [ 337.619964][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 337.625690][ T30] ? do_user_addr_fault+0x8d6/0x12f0 [ 337.631750][ T30] do_syscall_64+0x106/0xf80 [ 337.636361][ T30] ? clear_bhb_loop+0x40/0x90 [ 337.642197][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.648121][ T30] RIP: 0033:0x7f06a0f5cece [ 337.653408][ T30] RSP: 002b:00007f06a1ea8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 337.663038][ T30] RAX: ffffffffffffffda RBX: 00007f06a1ea96c0 RCX: 00007f06a0f5cece [ 337.671316][ T30] RDX: 0000000000101002 RSI: 00007f06a1ea8c00 RDI: ffffffffffffff9c [ 337.679405][ T30] RBP: 00007f06a1ea8c00 R08: 0000000000000000 R09: 0000000000000000 [ 337.691845][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 337.700118][ T30] R13: 00007f06a1216038 R14: 00007f06a1215fa0 R15: 00007ffdc3f30a88 [ 337.708224][ T30] [ 337.711379][ T30] [ 337.711379][ T30] Showing all locks held in the system: [ 337.817258][ T30] 2 locks held by ksoftirqd/1/23: [ 337.832235][ T30] 1 lock held by khungtaskd/30: [ 337.837128][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 337.897791][ T30] 2 locks held by getty/5568: [ 337.902500][ T30] #0: ffff8880385f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 337.952574][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 337.982959][ T30] 1 lock held by udevd/5794: [ 337.987592][ T30] #0: ffff888027845358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 338.031805][ T30] 3 locks held by kworker/0:4/5853: [ 338.037047][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 338.097028][ T30] #1: ffffc90003f27d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 338.136717][ T30] #2: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 338.173260][ T30] 1 lock held by syz.0.1792/10286: [ 338.178416][ T30] #0: ffff888027845358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 338.240184][ T30] 1 lock held by syz.5.3611/14363: [ 338.246006][ T30] 1 lock held by syz.6.4442/16694: [ 338.278038][ T30] #0: ffff888053770ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 338.309634][ T30] 1 lock held by syz.9.4446/16715: [ 338.314779][ T30] 5 locks held by dhcpcd-run-hook/16731: [ 338.331354][ T30] [ 338.333713][ T30] ============================================= [ 338.333713][ T30] [ 338.348359][ T30] NMI backtrace for cpu 0 [ 338.348378][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 338.348402][ T30] Tainted: [L]=SOFTLOCKUP [ 338.348409][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.348419][ T30] Call Trace: [ 338.348424][ T30] [ 338.348431][ T30] dump_stack_lvl+0x100/0x190 [ 338.348464][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 338.348482][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.348523][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 338.348548][ T30] sys_info+0x141/0x190 [ 338.348567][ T30] watchdog+0xd25/0x1050 [ 338.348594][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.348617][ T30] ? __kthread_parkme+0x18c/0x230 [ 338.348643][ T30] ? kthread+0x13a/0x450 [ 338.348657][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.348677][ T30] kthread+0x370/0x450 [ 338.348691][ T30] ? __pfx_kthread+0x10/0x10 [ 338.348708][ T30] ret_from_fork+0x754/0xd80 [ 338.348726][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 338.348743][ T30] ? __switch_to+0x7b4/0x1120 [ 338.348764][ T30] ? __pfx_kthread+0x10/0x10 [ 338.348781][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.348811][ T30] [ 338.348817][ T30] Sending NMI from CPU 0 to CPUs 1: [ 338.479301][ C1] NMI backtrace for cpu 1 [ 338.479319][ C1] CPU: 1 UID: 0 PID: 16715 Comm: syz.9.4446 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.479339][ C1] Tainted: [L]=SOFTLOCKUP [ 338.479344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.479352][ C1] RIP: 0010:__lock_acquire+0x34/0x2630 [ 338.479379][ C1] Code: 48 83 ec 70 8b 1d b0 f3 f4 0e 65 4c 8b 25 ac bd 28 12 4c 89 64 24 68 4c 8b a4 24 a8 00 00 00 85 db 0f 84 58 03 00 00 48 8b 07 <49> 89 fa 48 3d 40 37 14 94 0f 84 46 03 00 00 44 8b 1d f6 c3 89 0c [ 338.479395][ C1] RSP: 0000:ffffc900031176c0 EFLAGS: 00000002 [ 338.479407][ C1] RAX: ffffffff9b3697e0 RBX: 0000000000000001 RCX: 0000000000000000 [ 338.479416][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9b419ad8 [ 338.479424][ C1] RBP: ffffffff9b419ad8 R08: 0000000000000001 R09: 0000000000000001 [ 338.479432][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 338.479440][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 338.479448][ C1] FS: 0000000000000000(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000 [ 338.479463][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.479472][ C1] CR2: 000055a2bf587b11 CR3: 0000000025dda000 CR4: 00000000003526f0 [ 338.479481][ C1] Call Trace: [ 338.479485][ C1] [ 338.479491][ C1] ? arch_stack_walk+0xa6/0xf0 [ 338.479510][ C1] lock_acquire+0x1cf/0x380 [ 338.479529][ C1] ? debug_check_no_obj_freed+0x1c9/0x630 [ 338.479546][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 338.479568][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 338.479586][ C1] ? debug_check_no_obj_freed+0x1c9/0x630 [ 338.479601][ C1] debug_check_no_obj_freed+0x1c9/0x630 [ 338.479618][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 338.479633][ C1] ? __page_table_check_zero+0x333/0x410 [ 338.479654][ C1] ? __page_table_check_zero+0x338/0x410 [ 338.479674][ C1] __free_frozen_pages+0x36b/0x10a0 [ 338.479691][ C1] vfree.part.0+0x12b/0x9d0 [ 338.479704][ C1] ? __pfx___might_resched+0x10/0x10 [ 338.479718][ C1] ? __pfx_kcov_close+0x10/0x10 [ 338.479735][ C1] ? rcu_is_watching+0x12/0xc0 [ 338.479750][ C1] ? __pfx_kcov_close+0x10/0x10 [ 338.479766][ C1] vfree+0x55/0x80 [ 338.479777][ C1] kcov_close+0x34/0x60 [ 338.479792][ C1] __fput+0x3ff/0xb40 [ 338.479806][ C1] ? cleanup_mnt+0x263/0x450 [ 338.479826][ C1] task_work_run+0x150/0x240 [ 338.479840][ C1] ? __pfx_task_work_run+0x10/0x10 [ 338.479855][ C1] do_exit+0x829/0x2aa0 [ 338.479873][ C1] ? __pfx_map_delete_elem+0x10/0x10 [ 338.479891][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 338.479909][ C1] ? __pfx_do_exit+0x10/0x10 [ 338.479925][ C1] ? do_raw_spin_lock+0x128/0x260 [ 338.479939][ C1] ? find_held_lock+0x2b/0x80 [ 338.479953][ C1] ? get_signal+0x7e0/0x21e0 [ 338.479970][ C1] do_group_exit+0xd5/0x2a0 [ 338.479990][ C1] get_signal+0x1ec7/0x21e0 [ 338.480008][ C1] ? __pfx_get_signal+0x10/0x10 [ 338.480022][ C1] ? do_futex+0x192/0x350 [ 338.480036][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 338.480054][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 338.480072][ C1] ? xfd_validate_state+0x129/0x190 [ 338.480093][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 338.480114][ C1] do_syscall_64+0x67c/0xf80 [ 338.480127][ C1] ? clear_bhb_loop+0x40/0x90 [ 338.480142][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.480155][ C1] RIP: 0033:0x7f502c79c629 [ 338.480166][ C1] Code: Unable to access opcode bytes at 0x7f502c79c5ff. [ 338.480171][ C1] RSP: 002b:00007f502d6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.480184][ C1] RAX: 0000000000000000 RBX: 00007f502ca16090 RCX: 00007f502c79c629 [ 338.480192][ C1] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000003 [ 338.480200][ C1] RBP: 00007f502c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 338.480208][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.480216][ C1] R13: 00007f502ca16128 R14: 00007f502ca16090 R15: 00007ffc4a989fa8 [ 338.480229][ C1] [ 338.888869][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 338.895774][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 338.906476][ T30] Tainted: [L]=SOFTLOCKUP [ 338.910849][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.920895][ T30] Call Trace: [ 338.924186][ T30] [ 338.927120][ T30] dump_stack_lvl+0x100/0x190 [ 338.931785][ T30] vpanic+0x552/0x970 [ 338.935756][ T30] ? __pfx_vpanic+0x10/0x10 [ 338.940289][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 338.946457][ T30] panic+0xd1/0xe0 [ 338.950168][ T30] ? __pfx_panic+0x10/0x10 [ 338.954573][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 338.960710][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 338.966854][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 338.973079][ T30] ? watchdog.cold+0x198/0x1ca [ 338.977849][ T30] ? watchdog+0xd35/0x1050 [ 338.982257][ T30] watchdog.cold+0x1a9/0x1ca [ 338.986851][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.991529][ T30] ? __kthread_parkme+0x18c/0x230 [ 338.996546][ T30] ? kthread+0x13a/0x450 [ 339.000771][ T30] ? __pfx_watchdog+0x10/0x10 [ 339.005433][ T30] kthread+0x370/0x450 [ 339.009483][ T30] ? __pfx_kthread+0x10/0x10 [ 339.014054][ T30] ret_from_fork+0x754/0xd80 [ 339.018629][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 339.023725][ T30] ? __switch_to+0x7b4/0x1120 [ 339.028388][ T30] ? __pfx_kthread+0x10/0x10 [ 339.032961][ T30] ret_from_fork_asm+0x1a/0x30 [ 339.037725][ T30] [ 339.041073][ T30] Kernel Offset: disabled [ 339.045394][ T30] Rebooting in 86400 seconds..