last executing test programs: 58.43924494s ago: executing program 4 (id=775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x2c3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 58.198377886s ago: executing program 4 (id=776): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x54}}, 0x240440d0) 58.030888296s ago: executing program 4 (id=779): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0x7fff}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1000007f, 0x6, 0x4d, 0xfffffff6, 0x5f, 0x9, 0x1, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x81, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7ffd, 0x4c74, 0x80010000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0xffffffff, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x5, 0x2, 0x9, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0x8000, 0xffff, 0x2, 0x7d, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x27fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x80000, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x20000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x936, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x800, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x6, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x2, 0x1, 0x10000, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xe, 0x7, 0x1, 0x6c1a, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x600, 0xffff3441, 0x5]}, 0x45c) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 57.748466551s ago: executing program 4 (id=784): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x224e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 57.703282582s ago: executing program 4 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 57.618252557s ago: executing program 4 (id=788): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b", 0x8}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 42.54536391s ago: executing program 32 (id=788): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b", 0x8}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 10.083784975s ago: executing program 2 (id=1390): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x40) 9.932363258s ago: executing program 2 (id=1392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 9.87146026s ago: executing program 2 (id=1394): mkdir(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x2, 0x0, @void}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.858520664s ago: executing program 2 (id=1395): socket(0x10, 0x80002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.552253654s ago: executing program 2 (id=1399): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x3, r0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "ca00"}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x6248, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x250}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) 7.604375815s ago: executing program 0 (id=1417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x2}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) fcntl$setsig(r1, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0) creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040) syz_io_uring_setup(0xec4, &(0x7f0000000500)={0x0, 0xfffffffb, 0x2, 0x3, 0x78}, &(0x7f0000000400), &(0x7f0000000300)) 6.87826767s ago: executing program 0 (id=1420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 5.119609329s ago: executing program 0 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000}, {0x0, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0xc, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0xeeee8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x3400b0, 0xa, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 4.837492522s ago: executing program 0 (id=1438): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 4.776338141s ago: executing program 2 (id=1399): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x3, r0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "ca00"}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x6248, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x250}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) 4.731978965s ago: executing program 0 (id=1440): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 4.424346228s ago: executing program 0 (id=1443): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0xfeda) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0), 0x8) 3.047658899s ago: executing program 1 (id=1452): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 2.347535808s ago: executing program 5 (id=1457): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r1, &(0x7f00000001c0)='\v', 0x1) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 2.307313949s ago: executing program 5 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r4, 0x407, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) splice(r3, 0x0, r0, 0x0, 0x2008484c, 0xb) write$binfmt_elf64(r2, 0x0, 0x0) 2.034438834s ago: executing program 1 (id=1461): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000280)=@ethtool_eee={0x1, 0x9, 0xfffffff8, 0x8, 0x7, 0x35efd175, 0x100, 0x1, [0x0, 0x49]}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000080200001) close_range(r0, 0xffffffffffffffff, 0x0) 1.907620926s ago: executing program 1 (id=1464): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) 1.795986119s ago: executing program 3 (id=1465): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100fadb0010000000000b000000deffffff0e"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 1.576312608s ago: executing program 3 (id=1466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000d40)=0x6) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x7, 0x2, 0x2, 0x800002, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x40000, 0x7, 0x7f, 0x9, 0x1000000000400001, 0xfffffffffffffffd, 0x1002], 0x1, 0x3e0602}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.472156428s ago: executing program 3 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 1.412963401s ago: executing program 5 (id=1468): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 804.438172ms ago: executing program 1 (id=1469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r0, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f21e25837263b201f", 0x73, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000180)=""/4, 0x4}], 0x2}, 0x0) 752.273133ms ago: executing program 1 (id=1470): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xc3, 0x28000, 0xe21c, 0x200000, 0xfd, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) close_range(r0, r2, 0x0) 623.329827ms ago: executing program 1 (id=1471): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x30, 0xb, 0x2, 'nw'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x14, 0x2, "a3d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 411.362774ms ago: executing program 3 (id=1472): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x3f, 0x69) 308.06303ms ago: executing program 5 (id=1473): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec0}], 0x1}, 0x2) 307.334047ms ago: executing program 3 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 195.050439ms ago: executing program 5 (id=1475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 10.419284ms ago: executing program 5 (id=1476): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="a5", 0x1}], 0x1, 0x0) 0s ago: executing program 3 (id=1477): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) nanosleep(&(0x7f0000000500)={0x77359400}, &(0x7f0000000540)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): item tag 0x1 [ 77.906783][ T5896] a4tech 0003:09DA:001A.0003: item fetching failed at offset 3/7 [ 77.916046][ T5896] a4tech 0003:09DA:001A.0003: parse failed [ 77.923125][ T5896] a4tech 0003:09DA:001A.0003: probe with driver a4tech failed with error -22 [ 78.170573][ T5865] usb 2-1: USB disconnect, device number 4 [ 78.541283][ T6887] tipc: Started in network mode [ 78.546191][ T6887] tipc: Node identity 5231f1b3d296, cluster identity 4711 [ 78.555466][ T6887] tipc: Enabled bearer , priority 31 [ 78.562244][ T6888] ªªªªªª: renamed from syzkaller0 [ 78.573192][ T6888] tipc: Disabling bearer [ 78.917546][ T6918] vlan2: entered allmulticast mode [ 79.552776][ T29] audit: type=1400 audit(1736724807.816:820): avc: denied { read } for pid=6940 comm="syz.2.405" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.625222][ T6938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.730908][ T6938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.815671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.838362][ T6938] bond0 (unregistering): Released all slaves [ 79.917894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.049616][ T3148] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 80.090845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.243749][ T3148] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 80.252121][ T3148] usb 1-1: config 0 has no interface number 0 [ 80.258182][ T3148] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 80.267500][ T3148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.278680][ T3148] usb 1-1: config 0 descriptor?? [ 80.285155][ T3148] hub 1-1:0.3: bad descriptor, ignoring hub [ 80.291106][ T3148] hub 1-1:0.3: probe with driver hub failed with error -5 [ 80.298630][ T3148] sierra 1-1:0.3: Sierra USB modem converter detected [ 80.409604][ T5934] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.569513][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 80.578192][ T5934] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.599336][ T5934] usb 2-1: config 1 has no interface number 1 [ 80.609041][ T5934] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.007427][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 81.007442][ T29] audit: type=1400 audit(1736724809.266:824): avc: denied { write } for pid=6962 comm="syz.2.415" name="xfrm_stat" dev="proc" ino=4026533307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.143858][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 81.207542][ T6974] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.216595][ T6974] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.225357][ T6974] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.235132][ T6974] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.536083][ T6974] vxlan0: entered promiscuous mode [ 81.572793][ T5934] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.579573][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 81.581900][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.598833][ T5934] usb 2-1: Product: syz [ 81.603043][ T5934] usb 2-1: Manufacturer: syz [ 81.607667][ T5934] usb 2-1: SerialNumber: syz [ 81.610567][ T6981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.758787][ T3148] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 81.812811][ T3148] usb 1-1: USB disconnect, device number 4 [ 81.831419][ T3148] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 81.849770][ T5934] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 81.868641][ T3148] sierra 1-1:0.3: device disconnected [ 81.874795][ T5934] usb 2-1: 2:1 : sample bitwidth 23 in over sample bytes 2 [ 81.883544][ T5934] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 81.905490][ T5934] usb 2-1: USB disconnect, device number 5 [ 82.042655][ T29] audit: type=1400 audit(1736724810.306:825): avc: denied { ioctl } for pid=6992 comm="syz.3.426" path="socket:[12228]" dev="sockfs" ino=12228 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.073817][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'. [ 82.163906][ T29] audit: type=1400 audit(1736724810.426:826): avc: denied { write } for pid=6998 comm="syz.2.429" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.188342][ T29] audit: type=1400 audit(1736724810.426:827): avc: denied { open } for pid=6998 comm="syz.2.429" name="/" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.211563][ T51] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.370553][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.389622][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.408548][ T51] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 82.427143][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.437535][ T51] usb 5-1: config 0 descriptor?? [ 82.620859][ T7017] capability: warning: `syz.0.436' uses deprecated v2 capabilities in a way that may be insecure [ 82.860066][ T51] ortek 0003:1223:3F07.0004: Fixing up logical maximum in report descriptor (Ortek) [ 82.877171][ T51] ortek 0003:1223:3F07.0004: unknown main item tag 0x6 [ 82.898684][ T51] ortek 0003:1223:3F07.0004: report_id 29495 is invalid [ 82.906034][ T51] ortek 0003:1223:3F07.0004: item 0 2 1 8 parsing failed [ 82.936443][ T51] ortek 0003:1223:3F07.0004: probe with driver ortek failed with error -22 [ 82.984354][ T29] audit: type=1400 audit(1736724811.246:828): avc: denied { read append } for pid=7028 comm="syz.0.441" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.005843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.030334][ T29] audit: type=1400 audit(1736724811.256:829): avc: denied { ioctl } for pid=7028 comm="syz.0.441" path="/87/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.111695][ T51] usb 5-1: USB disconnect, device number 5 [ 83.149985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.406225][ T29] audit: type=1400 audit(1736724811.656:830): avc: denied { remount } for pid=7044 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.565556][ T7054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.594561][ T7056] overlayfs: failed to clone upperpath [ 83.803330][ T29] audit: type=1400 audit(1736724812.066:831): avc: denied { map } for pid=7067 comm="syz.1.459" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.868180][ T7070] syz.3.458 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.275771][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 84.393835][ T29] audit: type=1400 audit(1736724812.656:832): avc: denied { create } for pid=7089 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.413044][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.448690][ T29] audit: type=1400 audit(1736724812.686:833): avc: denied { create } for pid=7089 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.625922][ T7101] tipc: Started in network mode [ 84.632980][ T7101] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 84.640354][ T7101] tipc: Enabled bearer , priority 0 [ 85.249858][ T51] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.279155][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 85.285265][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 85.400835][ T51] usb 1-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 85.413465][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.437673][ T51] usb 1-1: config 0 descriptor?? [ 85.444952][ T51] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 85.551823][ T25] libceph: connect (1)[c::]:6789 error -101 [ 85.558121][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 85.648820][ T51] gspca_sn9c20x: Write register 1000 failed -71 [ 85.656327][ T51] gspca_sn9c20x: Device initialization failed [ 85.665668][ T51] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 85.676962][ T51] usb 1-1: USB disconnect, device number 5 [ 85.729823][ T5934] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.761129][ T25] tipc: Node number set to 11578026 [ 85.881678][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.892618][ T5934] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.901867][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.911405][ T5934] usb 5-1: config 0 descriptor?? [ 86.067036][ T7130] ceph: No mds server is up or the cluster is laggy [ 86.070915][ T51] libceph: connect (1)[c::]:6789 error -101 [ 86.079781][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 86.324932][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.334560][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.336630][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 86.348688][ T5934] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 86.365379][ T5934] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input9 [ 86.438736][ T5934] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 86.649369][ T51] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.809320][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 86.816041][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.827305][ T51] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.836427][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.845621][ T51] usb 3-1: config 0 descriptor?? [ 86.928633][ T5934] usb 5-1: USB disconnect, device number 6 [ 87.063078][ T51] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 87.190234][ T7171] Failed to get privilege flags for destination (handle=0x0:0x0) [ 87.441033][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 87.441047][ T29] audit: type=1400 audit(1736724815.706:837): avc: denied { setopt } for pid=7175 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.489504][ T5934] usb 3-1: USB disconnect, device number 4 [ 87.567576][ T29] audit: type=1400 audit(1736724815.826:838): avc: denied { ioctl } for pid=7182 comm="syz.4.504" path="socket:[13014]" dev="sockfs" ino=13014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.169390][ T7208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7208 comm=syz.2.512 [ 88.209391][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 88.218852][ T7208] netlink: 'syz.2.512': attribute type 30 has an invalid length. [ 89.141003][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 89.152957][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.161947][ T7223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.219990][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.238733][ T7223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.315334][ T29] audit: type=1400 audit(1736724817.566:839): avc: denied { ioctl } for pid=7226 comm="syz.1.519" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.351374][ T29] audit: type=1400 audit(1736724817.576:840): avc: denied { set_context_mgr } for pid=7226 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 89.418226][ T29] audit: type=1400 audit(1736724817.676:841): avc: denied { read } for pid=7228 comm="syz.1.521" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.470835][ T29] audit: type=1400 audit(1736724817.706:842): avc: denied { open } for pid=7228 comm="syz.1.521" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.512518][ T29] audit: type=1400 audit(1736724817.706:843): avc: denied { ioctl } for pid=7228 comm="syz.1.521" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.785151][ T29] audit: type=1400 audit(1736724818.046:844): avc: denied { read write } for pid=7238 comm="syz.4.525" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 89.842072][ T29] audit: type=1400 audit(1736724818.076:845): avc: denied { open } for pid=7238 comm="syz.4.525" path="/79/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 89.939311][ T5934] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.100801][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.119432][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.139660][ T5934] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 90.170637][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.198951][ T5934] usb 3-1: config 0 descriptor?? [ 90.455379][ T7269] fuse: root generation should be zero [ 90.617084][ T5934] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 90.625846][ T5934] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 90.674209][ T29] audit: type=1400 audit(1736724818.936:846): avc: denied { ioctl } for pid=7278 comm="syz.0.541" path="socket:[13196]" dev="sockfs" ino=13196 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.816971][ T5934] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 91.624371][ T5865] usb 3-1: USB disconnect, device number 5 [ 91.821831][ T7323] syz.3.558[7323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.821879][ T7323] syz.3.558[7323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.833923][ T7323] syz.3.558[7323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.109759][ T5934] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.294914][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 92.311039][ T5934] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.319941][ T5934] usb 2-1: config 179 has no interface number 0 [ 92.334150][ T5934] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 92.355572][ T5934] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 92.376266][ T5934] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.389888][ T5934] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.413528][ T5934] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.451188][ T5934] usb 2-1: config 179 interface 65 has no altsetting 0 [ 92.508520][ T5934] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 92.525482][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.595397][ T5934] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 92.616049][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 92.838999][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 92.839012][ T29] audit: type=1400 audit(1736724821.096:851): avc: denied { setopt } for pid=7366 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.852307][ T5934] usb 2-1: USB disconnect, device number 6 [ 92.865640][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 92.915915][ T5934] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 92.951947][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.582'. [ 92.982190][ T7377] netlink: 'syz.3.583': attribute type 4 has an invalid length. [ 93.002183][ T7377] netlink: 'syz.3.583': attribute type 4 has an invalid length. [ 93.026376][ T7377] syz.3.583 (7377) used greatest stack depth: 21216 bytes left [ 93.052138][ T29] audit: type=1400 audit(1736724821.316:852): avc: denied { read } for pid=7372 comm="syz.2.580" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 93.097354][ T29] audit: type=1400 audit(1736724821.316:853): avc: denied { open } for pid=7372 comm="syz.2.580" path="/115/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 93.122532][ T29] audit: type=1400 audit(1736724821.356:854): avc: denied { listen } for pid=7386 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.143597][ T29] audit: type=1400 audit(1736724821.356:855): avc: denied { accept } for pid=7386 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.164633][ T5142] Bluetooth: hci3: command tx timeout [ 93.166999][ T7389] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 93.187633][ T7389] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 93.265144][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'. [ 93.269320][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.429354][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 93.433023][ T29] audit: type=1400 audit(1736724821.696:856): avc: denied { ioctl } for pid=7402 comm="syz.2.593" path="/119/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 93.439074][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.489739][ T5865] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 93.513869][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.529967][ T5865] usb 1-1: config 0 descriptor?? [ 93.940425][ T5865] logitech 0003:046D:C287.0007: unknown main item tag 0x0 [ 93.957564][ T5865] logitech 0003:046D:C287.0007: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.0-1/input0 [ 93.969540][ T5865] logitech 0003:046D:C287.0007: no inputs found [ 94.154311][ T5865] usb 1-1: USB disconnect, device number 6 [ 94.204602][ T7433] Bluetooth: MGMT ver 1.23 [ 94.697859][ T29] audit: type=1400 audit(1736724822.956:857): avc: denied { create } for pid=7438 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.724222][ T29] audit: type=1400 audit(1736724822.986:858): avc: denied { bind } for pid=7438 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.809837][ T5865] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.879718][ T970] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.953618][ T29] audit: type=1400 audit(1736724823.216:859): avc: denied { execute_no_trans } for pid=7447 comm="syz.0.610" path="/124/file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.977473][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 94.984016][ T5865] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 94.992426][ T5865] usb 3-1: config 0 has no interface number 0 [ 95.004059][ T5865] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 95.014142][ T29] audit: type=1400 audit(1736724823.266:860): avc: denied { listen } for pid=7447 comm="syz.0.610" lport=38941 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.038117][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.046575][ T5865] usb 3-1: Product: syz [ 95.051391][ T5865] usb 3-1: Manufacturer: syz [ 95.055993][ T5865] usb 3-1: SerialNumber: syz [ 95.060657][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 95.067127][ T970] usb 2-1: config 0 has no interfaces? [ 95.074879][ T5865] usb 3-1: config 0 descriptor?? [ 95.081449][ T970] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 95.091452][ T5865] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 95.097996][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.106056][ T970] usb 2-1: Product: syz [ 95.110298][ T970] usb 2-1: Manufacturer: syz [ 95.114891][ T970] usb 2-1: SerialNumber: syz [ 95.120410][ T970] usb 2-1: config 0 descriptor?? [ 95.126039][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 95.405517][ T970] usb 2-1: USB disconnect, device number 7 [ 96.383491][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 96.489821][ T5865] gspca_topro: Sensor cx0342 [ 96.602941][ T3148] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.692237][ T51] usb 3-1: USB disconnect, device number 6 [ 96.759940][ T3148] usb 1-1: Using ep0 maxpacket: 16 [ 96.769843][ T3148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.790881][ T3148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.811859][ T3148] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.841623][ T3148] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 96.869912][ T3148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.885075][ T3148] usb 1-1: config 0 descriptor?? [ 97.022568][ T7543] kernel profiling enabled (shift: 17) [ 97.301123][ T3148] koneplus 0003:1E7D:2E22.0008: item fetching failed at offset 0/2 [ 97.309848][ T3148] koneplus 0003:1E7D:2E22.0008: parse failed [ 97.315913][ T3148] koneplus 0003:1E7D:2E22.0008: probe with driver koneplus failed with error -22 [ 97.514670][ T3148] usb 1-1: USB disconnect, device number 7 [ 98.049363][ T970] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.063100][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 98.075067][ T7572] vxlan1: entered promiscuous mode [ 98.133114][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 98.133130][ T29] audit: type=1400 audit(1736724826.396:873): avc: denied { watch } for pid=7577 comm="syz.2.664" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.199418][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 98.206054][ T970] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.223117][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.247042][ T970] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.277418][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.290963][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.302654][ T29] audit: type=1400 audit(1736724826.576:874): avc: denied { mounton } for pid=7581 comm="syz.0.666" path="/131/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 98.305887][ T970] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.357174][ T7582] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.384294][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.387368][ T29] audit: type=1400 audit(1736724826.646:875): avc: denied { create } for pid=7588 comm="syz.2.670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.419808][ T970] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.460753][ T29] audit: type=1800 audit(1736724826.696:876): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.666" name="loop2" dev="overlay" ino=729 res=0 errno=0 [ 98.462045][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.517399][ T29] audit: type=1400 audit(1736724826.776:877): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.517423][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.557596][ T970] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.565537][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.567022][ T29] audit: type=1400 audit(1736724826.836:878): avc: denied { unlink } for pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.577210][ T970] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.613750][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.625519][ T970] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.686529][ T970] usb 5-1: string descriptor 0 read error: -22 [ 98.693778][ T970] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 98.704076][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.716851][ T970] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 98.953310][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.964782][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.974109][ T970] usb 5-1: USB disconnect, device number 7 [ 99.523395][ T29] audit: type=1400 audit(1736724827.786:879): avc: denied { ioctl } for pid=7644 comm="syz.2.691" path="socket:[15573]" dev="sockfs" ino=15573 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.548550][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 99.627546][ T7650] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 99.642484][ T7650] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 99.764830][ T7658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.800606][ T5934] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.853027][ T29] audit: type=1400 audit(1736724828.116:880): avc: denied { mount } for pid=7659 comm="syz.4.698" name="/" dev="autofs" ino=15008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.877356][ T29] audit: type=1400 audit(1736724828.116:881): avc: denied { read } for pid=7659 comm="syz.4.698" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.901863][ T29] audit: type=1400 audit(1736724828.116:882): avc: denied { open } for pid=7659 comm="syz.4.698" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.979317][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 99.986036][ T5934] usb 1-1: config 2 has an invalid interface number: 6 but max is 0 [ 99.997068][ T5934] usb 1-1: config 2 has no interface number 0 [ 100.030298][ T5934] usb 1-1: string descriptor 0 read error: -71 [ 100.036740][ T5934] usb 1-1: New USB device found, idVendor=05c6, idProduct=9033, bcdDevice= 2.ad [ 100.048239][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.077201][ T5934] usb 1-1: can't set config #2, error -71 [ 100.094407][ T5934] usb 1-1: USB disconnect, device number 8 [ 100.111684][ T970] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 100.949345][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.124660][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.154773][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.169461][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.182413][ T5934] usb 3-1: Product: syz [ 101.186582][ T5934] usb 3-1: Manufacturer: syz [ 101.196135][ T5934] usb 3-1: SerialNumber: syz [ 101.489764][ T7696] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.570005][ T7705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.717'. [ 102.235797][ T5934] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 102.242661][ T5934] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 102.646630][ T5934] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 102.854346][ T5934] usb 3-1: USB disconnect, device number 7 [ 102.861443][ T5934] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 103.703292][ T5865] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 104.001437][ T5865] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 104.009899][ T5865] usb 3-1: config 0 has no interface number 0 [ 104.016215][ T5865] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 104.027175][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.038798][ T5865] usb 3-1: config 0 descriptor?? [ 104.047673][ T5865] hub 3-1:0.3: bad descriptor, ignoring hub [ 104.054122][ T5865] hub 3-1:0.3: probe with driver hub failed with error -5 [ 104.078450][ T5865] sierra 3-1:0.3: Sierra USB modem converter detected [ 104.204108][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 104.231020][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 104.241007][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 104.257948][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 104.477302][ T7750] No buffer was provided with the request [ 104.480883][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 104.480895][ T29] audit: type=1400 audit(1736724832.736:895): avc: denied { write } for pid=7751 comm="syz.0.736" name="usbmon8" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.522111][ T29] audit: type=1400 audit(1736724832.776:896): avc: denied { open } for pid=7751 comm="syz.0.736" path="/dev/usbmon8" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.696303][ T5865] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 104.719948][ T5865] usb 3-1: USB disconnect, device number 8 [ 104.727218][ T5865] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 104.737258][ T5865] sierra 3-1:0.3: device disconnected [ 104.769632][ T3148] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 104.875722][ T7759] overlayfs: failed to clone upperpath [ 104.929470][ T3148] usb 1-1: Using ep0 maxpacket: 16 [ 104.935897][ T3148] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.946106][ T3148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.957089][ T3148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.966781][ T3148] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 104.985538][ T3148] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.999391][ T3148] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.008976][ T3148] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.021745][ T3148] usb 1-1: Manufacturer: syz [ 105.027960][ T3148] usb 1-1: config 0 descriptor?? [ 105.292568][ T3148] rc_core: IR keymap rc-hauppauge not found [ 105.319449][ T3148] Registered IR keymap rc-empty [ 105.324375][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.349291][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.379743][ T3148] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 105.410064][ T3148] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 105.443234][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.470130][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.475206][ T7776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.499445][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.529301][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.559957][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.609358][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.650618][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.699317][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.729746][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.749760][ T3148] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.770684][ T3148] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 105.796108][ T3148] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.819675][ T3148] usb 1-1: USB disconnect, device number 9 [ 106.012206][ T5865] kernel read not supported for file /345/net/igmp (pid: 5865 comm: kworker/0:4) [ 106.359367][ T3148] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 106.540707][ T3148] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 106.555326][ T3148] usb 3-1: config 0 has no interface number 0 [ 106.562039][ T3148] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 106.573422][ T3148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.583835][ T3148] usb 3-1: config 0 descriptor?? [ 106.595752][ T3148] hub 3-1:0.3: bad descriptor, ignoring hub [ 106.601753][ T3148] hub 3-1:0.3: probe with driver hub failed with error -5 [ 106.609768][ T3148] sierra 3-1:0.3: Sierra USB modem converter detected [ 106.686652][ T7815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.713298][ T7815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.124486][ T3148] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 107.160185][ T3148] usb 3-1: USB disconnect, device number 9 [ 107.168868][ T3148] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 107.177795][ T3148] sierra 3-1:0.3: device disconnected [ 107.769333][ T5865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.949284][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 107.957167][ T5865] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 107.957204][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.957225][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.957247][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.957269][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.957300][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.957321][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.757414][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 109.049361][ T5934] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 109.185810][ T29] audit: type=1400 audit(1736724837.446:897): avc: denied { mounton } for pid=7883 comm="syz.4.786" path="/122/file1/file0" dev="autofs" ino=16396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 109.246098][ T29] audit: type=1400 audit(1736724837.456:898): avc: denied { watch watch_reads } for pid=7879 comm="syz.0.783" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 109.278476][ T29] audit: type=1400 audit(1736724837.496:899): avc: denied { watch } for pid=7885 comm="syz.3.785" path="/216" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.302076][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.304465][ T29] audit: type=1400 audit(1736724837.496:900): avc: denied { watch_sb } for pid=7885 comm="syz.3.785" path="/216" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.314786][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.358206][ T5934] usb 3-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 109.367366][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.376823][ T5934] usb 3-1: config 0 descriptor?? [ 109.481279][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 109.493945][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 109.541785][ T7899] raw_sendmsg: syz.3.792 forgot to set AF_INET. Fix it! [ 109.811780][ T5934] wacom 0003:056A:7A26.0009: Unknown device_type for 'HID 056a:7a26'. Ignoring. [ 109.919381][ T5866] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 110.045497][ T5896] usb 3-1: USB disconnect, device number 10 [ 110.081830][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.092781][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.103755][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.113028][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.121091][ T5866] usb 1-1: Product: syz [ 110.125243][ T5866] usb 1-1: Manufacturer: syz [ 110.130438][ T5866] usb 1-1: SerialNumber: syz [ 110.342730][ T5866] usb 1-1: 0:2 : does not exist [ 110.352775][ T29] audit: type=1400 audit(1736724838.616:901): avc: denied { connect } for pid=7906 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.376747][ T5865] usb 2-1: usb_control_msg returned -71 [ 110.385243][ T5866] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 110.401496][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 110.422343][ T29] audit: type=1400 audit(1736724838.616:902): avc: denied { setopt } for pid=7906 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.451146][ T5865] usb 2-1: USB disconnect, device number 9 [ 110.458320][ T5866] usb 1-1: USB disconnect, device number 10 [ 110.466716][ T29] audit: type=1400 audit(1736724838.616:903): avc: denied { write } for pid=7906 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.519351][ T5934] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 111.679367][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 111.693523][ T5934] usb 3-1: config 0 has an invalid interface number: 40 but max is 0 [ 111.711932][ T5934] usb 3-1: config 0 has no interface number 0 [ 111.724842][ T5934] usb 3-1: config 0 interface 40 has no altsetting 0 [ 111.741753][ T5934] usb 3-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=9f.28 [ 111.751869][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.759981][ T5934] usb 3-1: Product: syz [ 111.764884][ T5934] usb 3-1: Manufacturer: syz [ 111.772967][ T5934] usb 3-1: SerialNumber: syz [ 111.780858][ T5934] usb 3-1: config 0 descriptor?? [ 111.976477][ T7955] kvm: emulating exchange as write [ 112.352301][ T29] audit: type=1326 audit(1736724840.606:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1a985d29 code=0x7fc00000 [ 112.380570][ T29] audit: type=1326 audit(1736724840.606:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a1a985d29 code=0x7fc00000 [ 112.407514][ T29] audit: type=1326 audit(1736724840.606:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1a985d29 code=0x7fc00000 [ 112.435573][ T29] audit: type=1326 audit(1736724840.606:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1a985d29 code=0x7fc00000 [ 112.470700][ T29] audit: type=1326 audit(1736724840.606:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1a985d29 code=0x7fc00000 [ 112.494630][ T29] audit: type=1326 audit(1736724840.606:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1a985d29 code=0x7fc00000 [ 112.519386][ T29] audit: type=1326 audit(1736724840.606:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1a985d29 code=0x7fc00000 [ 112.588564][ T7980] bridge0: entered promiscuous mode [ 112.609349][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 112.756005][ T7979] bridge0: left promiscuous mode [ 112.832483][ T7987] input: syz0 as /devices/virtual/input/input16 [ 113.453287][ T5934] pegasus 3-1:0.40: setup Pegasus II specific registers [ 113.650027][ T5934] pegasus 3-1:0.40: can't locate MII phy, using default [ 113.690973][ T5934] pegasus 3-1:0.40: eth1, ADMtek ADM8511 "Pegasus II" USB Ethernet, 9a:ae:82:54:93:df [ 113.704208][ T5934] usb 3-1: USB disconnect, device number 11 [ 114.409501][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 114.579862][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 114.591331][ T5910] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 114.603888][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.616136][ T5910] usb 3-1: config 0 descriptor?? [ 114.625137][ T8039] overlayfs: failed to clone upperpath [ 114.784093][ T8051] overlayfs: failed to clone upperpath [ 115.453859][ T29] kauditd_printk_skb: 1832 callbacks suppressed [ 115.453875][ T29] audit: type=1400 audit(1736724843.716:2743): avc: denied { mounton } for pid=8066 comm="syz.1.862" path="/158/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.769510][ T5896] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.809333][ T5866] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.919344][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 115.927621][ T5896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.937395][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.947793][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.957871][ T5896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.971527][ T5896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.980793][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.989381][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.000552][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.011061][ T5866] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.020143][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.031085][ T5866] usb 2-1: config 0 descriptor?? [ 116.229524][ T5896] usb 1-1: GET_CAPABILITIES returned 0 [ 116.235030][ T5896] usbtmc 1-1:16.0: can't read capabilities [ 116.236023][ T5910] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 116.251059][ T5910] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 116.262472][ T5910] asix 3-1:0.0: probe with driver asix failed with error -71 [ 116.272873][ T5910] usb 3-1: USB disconnect, device number 12 [ 116.433477][ T5934] usb 1-1: USB disconnect, device number 11 [ 117.175135][ T29] audit: type=1400 audit(1736724845.436:2744): avc: denied { read } for pid=8105 comm="syz.0.879" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.212166][ T8107] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.878'. [ 117.225134][ T8107] netlink: zone id is out of range [ 117.230618][ T8107] netlink: zone id is out of range [ 117.237309][ T29] audit: type=1400 audit(1736724845.436:2745): avc: denied { open } for pid=8105 comm="syz.0.879" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.261966][ T8107] netlink: zone id is out of range [ 117.267259][ T29] audit: type=1400 audit(1736724845.436:2746): avc: denied { write } for pid=8105 comm="syz.0.879" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.299439][ T5866] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 117.308238][ T8111] xt_hashlimit: size too large, truncated to 1048576 [ 117.309731][ T5866] usb 2-1: USB disconnect, device number 10 [ 117.623904][ T8115] 9pnet_fd: Insufficient options for proto=fd [ 118.169346][ T5866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 118.439646][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 118.469390][ T5866] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 118.528527][ T5866] usb 2-1: config 0 has no interface number 0 [ 118.544600][ T5866] usb 2-1: config 0 interface 12 has no altsetting 0 [ 118.553480][ T5866] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 118.572682][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.589258][ T5866] usb 2-1: Product: syz [ 118.596756][ T5866] usb 2-1: Manufacturer: syz [ 118.602307][ T5866] usb 2-1: SerialNumber: syz [ 118.612546][ T5866] usb 2-1: config 0 descriptor?? [ 119.818073][ T29] audit: type=1400 audit(1736724848.076:2747): avc: denied { listen } for pid=8173 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.854534][ T29] audit: type=1400 audit(1736724848.086:2748): avc: denied { accept } for pid=8173 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.939889][ T5896] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 120.108551][ T29] audit: type=1400 audit(1736724848.366:2749): avc: denied { append } for pid=8182 comm="syz.2.911" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.139442][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 120.145781][ T5896] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 120.154171][ T5896] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 120.163513][ T5896] usb 1-1: config 0 has no interface number 0 [ 120.169846][ T5896] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.182193][ T5896] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.193271][ T5896] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.210439][ T5896] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 120.231814][ T5896] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 120.240053][ T5896] usb 1-1: Product: syz [ 120.244287][ T5896] usb 1-1: Manufacturer: syz [ 120.250817][ T5896] usb 1-1: config 0 descriptor?? [ 120.256415][ T8168] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.291179][ T8186] kvm: MONITOR instruction emulated as NOP! [ 120.292677][ T5866] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 120.304879][ T5866] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 120.312487][ T5866] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 120.320170][ T5866] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 120.331503][ T5866] usb 2-1: USB disconnect, device number 11 [ 120.527333][ T29] audit: type=1400 audit(1736724848.786:2750): avc: denied { nlmsg_read } for pid=8196 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.551635][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 120.552309][ T29] audit: type=1326 audit(1736724848.816:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.3.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a1a985d29 code=0x0 [ 120.677405][ T29] audit: type=1400 audit(1736724848.936:2752): avc: denied { read } for pid=8167 comm="syz.0.904" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.700858][ T29] audit: type=1400 audit(1736724848.936:2753): avc: denied { map } for pid=8167 comm="syz.0.904" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.855388][ T29] audit: type=1400 audit(1736724849.116:2754): avc: denied { setopt } for pid=8200 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.876535][ T8201] netlink: 168 bytes leftover after parsing attributes in process `syz.1.918'. [ 120.924989][ T5896] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input17 [ 121.026727][ T8206] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 121.045711][ T8206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.068234][ T8206] bond2: (slave gretap2): making interface the new active one [ 121.077634][ T8206] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 121.176139][ T29] audit: type=1400 audit(1736724849.436:2755): avc: denied { lock } for pid=8210 comm="syz.1.922" path="socket:[17001]" dev="sockfs" ino=17001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 121.231154][ T5142] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 121.239630][ T5142] Bluetooth: hci1: Injecting HCI hardware error event [ 121.248209][ T5831] Bluetooth: hci1: hardware error 0x00 [ 121.375563][ T8217] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.402329][ T29] audit: type=1400 audit(1736724849.666:2756): avc: denied { write } for pid=8218 comm="syz.3.925" lport=36312 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 121.673978][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.932'. [ 122.258361][ T8260] @: renamed from vlan0 (while UP) [ 122.295804][ T29] audit: type=1400 audit(1736724850.556:2757): avc: denied { map } for pid=8259 comm="syz.1.952" path="/proc/419/net/vlan/vlan0" dev="proc" ino=4026533848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.679423][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.693548][ T5910] usb 1-1: USB disconnect, device number 12 [ 122.693582][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 122.880961][ T5896] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 122.911644][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.923159][ T5896] usb 3-1: config 0 descriptor?? [ 122.941391][ T5896] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 123.069317][ T5910] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 123.140602][ T5896] gp8psk: usb in 128 operation failed. [ 123.219328][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 123.234737][ T5910] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 123.249245][ T5910] usb 1-1: config 0 has no interface number 1 [ 123.274063][ T5910] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 123.289264][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.297259][ T5910] usb 1-1: Product: syz [ 123.309303][ T5910] usb 1-1: Manufacturer: syz [ 123.313904][ T5910] usb 1-1: SerialNumber: syz [ 123.319358][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 123.329700][ T5910] usb 1-1: config 0 descriptor?? [ 123.348722][ T5896] gp8psk: usb in 137 operation failed. [ 123.359255][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.379752][ T5896] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 123.388697][ T5896] usb 3-1: media controller created [ 123.404039][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.419607][ T5896] gp8psk_fe: Frontend attached [ 123.424613][ T5896] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 123.433640][ T5896] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 123.460198][ T5896] gp8psk: usb in 138 operation failed. [ 123.465699][ T5896] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 123.475746][ T5896] gp8psk: found Genpix USB device pID = 203 (hex) [ 123.483765][ T5896] usb 3-1: USB disconnect, device number 13 [ 123.516480][ T5896] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 123.554301][ T5910] snd-usb-6fire 1-1:0.111: unable to receive device firmware state. [ 123.573010][ T5910] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 123.599473][ T5910] usb 1-1: USB disconnect, device number 13 [ 123.605887][ T8280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.949'. [ 123.900543][ T29] audit: type=1400 audit(1736724852.166:2758): avc: denied { getopt } for pid=8291 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.939069][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 123.948213][ T8293] netlink: 'syz.3.954': attribute type 18 has an invalid length. [ 123.967984][ T8295] kvm: user requested TSC rate below hardware speed [ 124.063271][ T8298] netlink: 'syz.1.957': attribute type 4 has an invalid length. [ 124.104124][ T8298] netlink: 'syz.1.957': attribute type 4 has an invalid length. [ 124.234125][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 124.603418][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.616475][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.626106][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.635556][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.644951][ T5142] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.656959][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.677268][ T29] audit: type=1400 audit(1736724852.936:2759): avc: denied { mounton } for pid=8323 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 124.805997][ T8323] chnl_net:caif_netlink_parms(): no params data found [ 124.857986][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.865244][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.873088][ T8323] bridge_slave_0: entered allmulticast mode [ 124.879785][ T8323] bridge_slave_0: entered promiscuous mode [ 124.886628][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.894221][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.901386][ T8323] bridge_slave_1: entered allmulticast mode [ 124.907707][ T8323] bridge_slave_1: entered promiscuous mode [ 124.923834][ T970] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 124.933972][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.944377][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.965876][ T8323] team0: Port device team_slave_0 added [ 124.975430][ T8323] team0: Port device team_slave_1 added [ 124.990028][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.996994][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.022830][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.029399][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.041405][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.048341][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.074275][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.100262][ T8323] hsr_slave_0: entered promiscuous mode [ 125.106266][ T8323] hsr_slave_1: entered promiscuous mode [ 125.112326][ T8323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.119276][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 125.120924][ T8323] Cannot create hsr debugfs directory [ 125.126465][ T970] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.141349][ T970] usb 1-1: config 0 has no interface number 0 [ 125.149792][ T970] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 125.159026][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.167243][ T970] usb 1-1: Product: syz [ 125.171606][ T970] usb 1-1: Manufacturer: syz [ 125.176310][ T970] usb 1-1: SerialNumber: syz [ 125.183674][ T970] usb 1-1: config 0 descriptor?? [ 125.190887][ T970] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 125.257553][ T8323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.271967][ T8323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.285393][ T8323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.295675][ T8323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.314657][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.321743][ T8323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.329826][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.336872][ T8323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.402523][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.427612][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.440471][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.470730][ T8345] hsr0: entered promiscuous mode [ 125.477624][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.504417][ T8345] hsr_slave_0: left promiscuous mode [ 125.510286][ T8345] hsr_slave_1: left promiscuous mode [ 125.618402][ T8345] hsr0 (unregistering): left promiscuous mode [ 125.663569][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.670725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.716567][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.723653][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.914188][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 125.985108][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.124118][ T8368] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.980'. [ 126.136472][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 126.194273][ T8323] veth0_vlan: entered promiscuous mode [ 126.203381][ T8323] veth1_vlan: entered promiscuous mode [ 126.225157][ T8323] veth0_macvtap: entered promiscuous mode [ 126.235662][ T8323] veth1_macvtap: entered promiscuous mode [ 126.247356][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.259039][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.270597][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.284663][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.295363][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.306031][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.329466][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.350739][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.382199][ T8323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.399278][ T8323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.408503][ T8323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.437992][ T8323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.539672][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.547489][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.586232][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.598119][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.622069][ T29] audit: type=1400 audit(1736724854.886:2760): avc: denied { mounton } for pid=8323 comm="syz-executor" path="/root/syzkaller.ZXOVFa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 126.730956][ T8384] overlayfs: failed to clone upperpath [ 126.750933][ T5831] Bluetooth: hci5: command tx timeout [ 126.824493][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.853254][ T970] gspca_spca1528: reg_r err -71 [ 126.858172][ T970] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 126.868943][ T970] usb 1-1: USB disconnect, device number 14 [ 126.946086][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.991'. [ 127.022105][ T5866] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.041655][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.050933][ T5866] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.074930][ T5866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.084718][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.094231][ T5866] usb 3-1: Product: syz [ 127.098403][ T5866] usb 3-1: Manufacturer: syz [ 127.111704][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 127.125086][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 127.139401][ T5866] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 127.327622][ T8378] netlink: 'syz.2.984': attribute type 2 has an invalid length. [ 127.336873][ T8378] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.984'. [ 127.351540][ T5866] usb 3-1: USB disconnect, device number 14 [ 127.569414][ T970] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 127.719309][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 127.728374][ T970] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 127.744962][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.761915][ T970] usb 2-1: Product: syz [ 127.766395][ T970] usb 2-1: Manufacturer: syz [ 127.771527][ T970] usb 2-1: SerialNumber: syz [ 127.780708][ T970] r8152-cfgselector 2-1: Unknown version 0x0000 [ 127.787477][ T970] r8152-cfgselector 2-1: config 0 descriptor?? [ 128.210951][ T970] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 128.347952][ T8449] overlayfs: failed to clone upperpath [ 128.382710][ T5934] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.514140][ T29] audit: type=1400 audit(1736724856.776:2761): avc: denied { getopt } for pid=8460 comm="syz.3.1020" lport=58342 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.550656][ T5934] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 128.568024][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.579914][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.591176][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 128.606836][ T5934] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 128.616104][ T5934] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 128.624454][ T5934] usb 1-1: Manufacturer: syz [ 128.630574][ T5934] usb 1-1: config 0 descriptor?? [ 128.829714][ T5831] Bluetooth: hci5: command tx timeout [ 129.076197][ T5934] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 129.085176][ T5934] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 129.096666][ T5934] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 129.259861][ T970] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.374392][ T5910] usb 1-1: USB disconnect, device number 15 [ 129.452276][ T970] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 129.469779][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.477805][ T970] usb 2-1: Product: syz [ 129.488934][ T8491] netlink: 'syz.3.1033': attribute type 16 has an invalid length. [ 129.497548][ T970] usb 2-1: Manufacturer: syz [ 129.502256][ T8491] netlink: 'syz.3.1033': attribute type 17 has an invalid length. [ 129.510121][ T970] usb 2-1: SerialNumber: syz [ 129.516059][ T970] usb 2-1: config 0 descriptor?? [ 129.524932][ T8491] tipc: Resetting bearer [ 129.759530][ T970] usb 2-1: Firmware version (0.0) predates our first public release. [ 129.771288][ T970] usb 2-1: Please update to version 0.2 or newer [ 129.830904][ T970] usb 2-1: USB disconnect, device number 13 [ 130.386989][ T29] audit: type=1400 audit(1736724858.646:2762): avc: denied { create } for pid=8536 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.443601][ T29] audit: type=1400 audit(1736724858.656:2763): avc: denied { setopt } for pid=8538 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.489306][ T29] audit: type=1400 audit(1736724858.676:2764): avc: denied { bind } for pid=8536 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.515710][ T29] audit: type=1400 audit(1736724858.736:2765): avc: denied { write } for pid=8536 comm="syz.0.1052" path="socket:[19949]" dev="sockfs" ino=19949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.594539][ T29] audit: type=1400 audit(1736724858.836:2766): avc: denied { read } for pid=8536 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.910807][ T5831] Bluetooth: hci5: command tx timeout [ 131.909300][ T970] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 132.079376][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 132.092704][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 132.117466][ T970] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.140629][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.159068][ T970] usb 3-1: Product: syz [ 132.163348][ T970] usb 3-1: Manufacturer: syz [ 132.177620][ T970] usb 3-1: SerialNumber: syz [ 132.185993][ T970] usb 3-1: config 0 descriptor?? [ 132.200374][ T970] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.219277][ T970] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 132.435419][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.443604][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.882054][ T970] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 132.989896][ T5831] Bluetooth: hci5: command tx timeout [ 133.145903][ T8579] input: syz1 as /devices/virtual/input/input19 [ 133.396403][ T29] audit: type=1326 audit(1736724861.656:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.449311][ T29] audit: type=1326 audit(1736724861.656:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.473943][ T29] audit: type=1326 audit(1736724861.656:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.497602][ T29] audit: type=1326 audit(1736724861.656:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.539306][ T29] audit: type=1326 audit(1736724861.656:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.589334][ T29] audit: type=1326 audit(1736724861.656:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.624594][ T29] audit: type=1326 audit(1736724861.656:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.650321][ T5865] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 133.669042][ T29] audit: type=1326 audit(1736724861.656:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.696560][ T8597] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1073'. [ 133.707195][ T29] audit: type=1326 audit(1736724861.656:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.741484][ T970] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 133.769345][ T970] em28xx 3-1:0.0: board has no eeprom [ 133.790962][ T29] audit: type=1326 audit(1736724861.656:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 133.851530][ T970] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 133.869284][ T970] em28xx 3-1:0.0: dvb set to bulk mode. [ 133.892989][ T5865] em28xx 3-1:0.0: Binding DVB extension [ 133.901648][ T970] usb 3-1: USB disconnect, device number 15 [ 133.914050][ T970] em28xx 3-1:0.0: Disconnecting em28xx [ 133.966735][ T5865] em28xx 3-1:0.0: Registering input extension [ 133.975482][ T970] em28xx 3-1:0.0: Closing input extension [ 133.999736][ T970] em28xx 3-1:0.0: Freeing device [ 134.092672][ T8615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.302597][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.345982][ T8629] overlayfs: failed to clone upperpath [ 134.362961][ T8629] overlayfs: failed to clone lowerpath [ 134.459297][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 134.475230][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.504171][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.516138][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.539996][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.560464][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.585607][ T25] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 134.597797][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.625289][ T25] usb 1-1: Product: syz [ 134.642305][ T25] usb 1-1: Manufacturer: syz [ 134.649131][ T25] usb 1-1: SerialNumber: syz [ 134.655431][ T25] usb 1-1: config 0 descriptor?? [ 134.665977][ T25] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 134.863499][ T8658] tipc: Started in network mode [ 134.871007][ T8658] tipc: Node identity 1, cluster identity 4711 [ 134.882489][ T8658] tipc: Node number set to 1 [ 135.060566][ T8671] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1103'. [ 135.453831][ T8689] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 135.500416][ T25] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 135.677784][ T8696] block device autoloading is deprecated and will be removed. [ 135.755026][ T5934] usb 1-1: USB disconnect, device number 16 [ 137.927117][ T8755] ptrace attach of "./syz-executor exec"[8757] was attempted by " [ 138.346286][ T8770] KVM: debugfs: duplicate directory 8770-5 [ 138.910409][ T8741] Set syz1 is full, maxelem 65536 reached [ 139.013607][ T970] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 139.065142][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 139.065155][ T29] audit: type=1400 audit(1736724867.326:2782): avc: denied { read } for pid=8796 comm="syz.2.1156" path="socket:[20708]" dev="sockfs" ino=20708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.179310][ T970] usb 2-1: Using ep0 maxpacket: 32 [ 139.186317][ T970] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.195260][ T970] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.209457][ T970] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.236187][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.271111][ T970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.296286][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.332874][ T970] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.346882][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.360593][ T970] usb 2-1: config 0 descriptor?? [ 139.378753][ T8807] ebtables: ebtables: counters copy to user failed while replacing table [ 139.574633][ T970] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.776972][ T970] usb 2-1: USB disconnect, device number 14 [ 139.782936][ T5866] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 139.796795][ T970] usblp0: removed [ 139.949561][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 139.971354][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.003299][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.039279][ T5866] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 140.058578][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.092789][ T5866] usb 3-1: config 0 descriptor?? [ 140.356966][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.387018][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.470427][ T29] audit: type=1400 audit(1736724868.736:2783): avc: denied { getopt } for pid=8820 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 140.496859][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 140.509676][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 140.521029][ T5866] usb 3-1: USB disconnect, device number 16 [ 140.750798][ T8857] binder: 8856:8857 ioctl 4018620d 0 returned -22 [ 140.819474][ T8858] binder: 8856:8858 ioctl 80089418 0 returned -22 [ 140.876774][ T29] audit: type=1400 audit(1736724869.136:2784): avc: denied { relabelfrom } for pid=8861 comm="syz.5.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 140.909857][ T8863] binder: 8856:8863 ioctl 8004f50c 0 returned -22 [ 140.917116][ T29] audit: type=1400 audit(1736724869.136:2785): avc: denied { relabelto } for pid=8861 comm="syz.5.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.025497][ T8867] netlink: 'syz.5.1180': attribute type 9 has an invalid length. [ 141.033483][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 141.059871][ T8867] netlink: 'syz.5.1180': attribute type 9 has an invalid length. [ 141.067777][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 141.076951][ T29] audit: type=1400 audit(1736724869.336:2786): avc: denied { mounton } for pid=8868 comm="syz.2.1181" path="/213/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 141.128963][ T8869] erofs (device erofs): cannot read erofs superblock [ 141.269805][ T29] audit: type=1400 audit(1736724869.536:2787): avc: denied { ioctl } for pid=8876 comm="syz.0.1184" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.538937][ T8896] overlayfs: failed to clone upperpath [ 141.649384][ T970] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 141.809518][ T970] usb 6-1: Using ep0 maxpacket: 8 [ 141.818215][ T970] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 141.834680][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.849352][ T970] usb 6-1: Product: syz [ 141.853528][ T970] usb 6-1: Manufacturer: syz [ 141.868338][ T970] usb 6-1: SerialNumber: syz [ 141.903195][ T970] usb 6-1: config 0 descriptor?? [ 141.923178][ T970] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 142.109259][ T29] audit: type=1400 audit(1736724870.366:2788): avc: denied { write } for pid=8921 comm="syz.1.1200" name="fd" dev="proc" ino=20921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 142.180656][ T29] audit: type=1400 audit(1736724870.406:2789): avc: denied { add_name } for pid=8921 comm="syz.1.1200" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 142.236211][ T29] audit: type=1400 audit(1736724870.406:2790): avc: denied { create } for pid=8921 comm="syz.1.1200" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 142.289263][ T29] audit: type=1400 audit(1736724870.406:2791): avc: denied { associate } for pid=8921 comm="syz.1.1200" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 142.363031][ T8926] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 142.469351][ T3148] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 142.598404][ T8930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.621181][ T8937] input: syz0 as /devices/virtual/input/input22 [ 142.625738][ T3148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.655344][ T3148] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.675365][ T3148] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.688726][ T3148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.703127][ T3148] usb 3-1: SerialNumber: syz [ 142.706990][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 142.726838][ T8942] netlink: 'syz.1.1208': attribute type 7 has an invalid length. [ 142.916810][ T3148] usb 3-1: 0:2 : does not exist [ 142.924616][ T3148] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 142.952283][ T3148] usb 3-1: USB disconnect, device number 17 [ 143.559266][ T970] gspca_sonixj: i2c_w8 err -71 [ 143.586842][ T8988] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.602499][ T8988] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.619406][ T970] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 143.634391][ T970] usb 6-1: USB disconnect, device number 2 [ 143.728946][ T8990] relay: one or more items not logged [item size (56) > sub-buffer size (42)] [ 144.456975][ T9032] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1243'. [ 144.466549][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 144.489336][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 144.649290][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 144.656118][ T25] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 144.664470][ T25] usb 6-1: config 0 has no interface number 0 [ 144.671322][ T25] usb 6-1: config 0 interface 184 has no altsetting 0 [ 144.681049][ T25] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.699387][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.714815][ T25] usb 6-1: Product: syz [ 144.723418][ T25] usb 6-1: Manufacturer: syz [ 144.735286][ T25] usb 6-1: SerialNumber: syz [ 144.744201][ T25] usb 6-1: config 0 descriptor?? [ 144.751641][ T25] smsc75xx v1.0.0 [ 144.859352][ T5934] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.884148][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 144.884163][ T29] audit: type=1326 audit(1736724873.146:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 144.945110][ T29] audit: type=1326 audit(1736724873.146:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 144.989928][ T29] audit: type=1326 audit(1736724873.146:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.032674][ T29] audit: type=1326 audit(1736724873.146:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.069370][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 145.075922][ T5934] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 145.089346][ T29] audit: type=1326 audit(1736724873.146:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.113913][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.125487][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.136424][ T29] audit: type=1326 audit(1736724873.146:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.161344][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 145.179671][ T29] audit: type=1326 audit(1736724873.146:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.203335][ T29] audit: type=1326 audit(1736724873.146:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.232976][ T5934] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 145.245381][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.263678][ T5934] usb 1-1: Product: syz [ 145.267876][ T5934] usb 1-1: Manufacturer: syz [ 145.275999][ T29] audit: type=1326 audit(1736724873.146:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.307542][ T5934] usb 1-1: SerialNumber: syz [ 145.327906][ T5934] usb 1-1: config 0 descriptor?? [ 145.335217][ T29] audit: type=1326 audit(1736724873.146:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e51385d29 code=0x7ffc0000 [ 145.336410][ T9041] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.365802][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.433146][ T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 145.455046][ T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 145.634576][ T5934] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 145.660270][ T5934] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 145.854129][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.872878][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.899490][ C1] powermate: config urb returned -71 [ 145.899937][ T970] usb 1-1: USB disconnect, device number 17 [ 145.904824][ C1] powermate: usb_submit_urb(config) failed [ 145.911289][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 146.284293][ T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 146.299404][ T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 146.321813][ T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 146.340096][ T25] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 146.362006][ T25] usb 6-1: USB disconnect, device number 3 [ 146.699316][ T5910] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 146.707173][ T5934] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 146.862926][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 146.871327][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 146.880880][ T5910] usb 3-1: config 2 has an invalid interface number: 1 but max is 0 [ 146.899952][ T5934] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 146.908202][ T5910] usb 3-1: config 2 has no interface number 0 [ 146.914589][ T5934] usb 2-1: config 0 has no interface number 0 [ 146.924485][ T5910] usb 3-1: config 2 interface 1 has no altsetting 0 [ 146.936453][ T5934] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 146.945936][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.954595][ T5910] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 146.968847][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.977288][ T5934] usb 2-1: Product: syz [ 146.982576][ T5934] usb 2-1: Manufacturer: syz [ 146.987321][ T5910] usb 3-1: Product: syz [ 146.992224][ T5934] usb 2-1: SerialNumber: syz [ 146.997455][ T5910] usb 3-1: Manufacturer: syz [ 147.003197][ T5934] usb 2-1: config 0 descriptor?? [ 147.008265][ T5910] usb 3-1: SerialNumber: syz [ 147.014872][ T5934] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 147.230681][ T5934] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 147.250489][ T5934] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 147.265447][ T5910] snd-usb-audio 3-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 147.278080][ T5910] snd-usb-us122l 3-1:2.1: usb_set_interface error [ 147.289442][ T5910] snd-usb-us122l 3-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 147.305825][ T5910] usb 3-1: USB disconnect, device number 18 [ 147.455025][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 147.621562][ T9097] overlayfs: failed to clone upperpath [ 147.668847][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 147.682993][ T5910] usb 2-1: USB disconnect, device number 15 [ 147.691756][ T5910] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 147.722356][ T5910] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 147.749751][ T5910] quatech2 2-1:0.51: device disconnected [ 149.385188][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 149.401104][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1292'. [ 149.561147][ T9159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'. [ 149.641322][ T9161] mmap: syz.2.1296 (9161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.069279][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 150.219317][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 150.225954][ T5934] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 150.241790][ T5934] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 150.253481][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.262579][ T5934] usb 6-1: Product: syz [ 150.267911][ T5934] usb 6-1: Manufacturer: syz [ 150.272845][ T5934] usb 6-1: SerialNumber: syz [ 150.280460][ T5934] usb 6-1: config 0 descriptor?? [ 150.288834][ T5934] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 150.473644][ T9174] tipc: Failed to remove unknown binding: 66,1,1/0:619894291/619894293 [ 150.490434][ T9174] tipc: Failed to remove unknown binding: 66,1,1/0:619894291/619894293 [ 151.111159][ T5934] gspca_zc3xx: reg_w_i err -71 [ 151.219124][ T9202] overlayfs: failed to clone upperpath [ 151.389656][ T9208] kvm: pic: level sensitive irq not supported [ 151.389886][ T9208] kvm: pic: non byte read [ 151.395005][ T9214] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 151.413681][ T9214] syz_tun: entered promiscuous mode [ 151.418771][ T9208] kvm: pic: level sensitive irq not supported [ 151.419123][ T9208] kvm: pic: non byte read [ 151.440504][ T9208] kvm: pic: level sensitive irq not supported [ 151.440558][ T9208] kvm: pic: non byte read [ 151.462716][ T9218] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 151.463365][ T9208] kvm: pic: level sensitive irq not supported [ 151.475668][ T9218] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1320'. [ 151.481946][ T9208] kvm: pic: non byte read [ 151.699332][ T5934] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 151.721622][ T5934] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 151.736927][ T5934] usb 6-1: USB disconnect, device number 4 [ 151.814983][ T9228] binder: 9227:9228 ioctl c0306201 200002c0 returned -14 [ 152.022374][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 152.022391][ T29] audit: type=1400 audit(1736724880.286:2846): avc: denied { execute } for pid=9238 comm="syz.0.1328" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 152.189815][ T5866] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.259368][ T5865] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 152.377724][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 152.724932][ T5866] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.741386][ T5866] usb 6-1: config 179 has no interface number 0 [ 152.747710][ T5866] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.759355][ T5866] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.772946][ T5866] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.784110][ T5866] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.795574][ T5866] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.809041][ T5866] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.818572][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.827472][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.839025][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.848809][ T5865] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.857886][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.879883][ T5865] usb 2-1: config 0 descriptor?? [ 152.883114][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 152.928477][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 152.939709][ T9236] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 153.070549][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 153.103217][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 153.225692][ T5866] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input24 [ 153.484330][ T5866] usb 6-1: USB disconnect, device number 5 [ 153.490227][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.490265][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.541368][ T5866] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 153.658293][ T9285] input: syz1 as /devices/virtual/input/input25 [ 153.948637][ T5865] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input26 [ 153.967139][ T5865] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input27 [ 153.985806][ T5865] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input28 [ 154.000593][ T5865] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input29 [ 154.055022][ T5865] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 154.206158][ T5865] usb 2-1: USB disconnect, device number 16 [ 154.569824][ T9303] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.1352'. [ 154.579033][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 154.806580][ T9317] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 154.815548][ T9317] ref_ctr increment failed for inode: 0x563 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a8dd7c0 [ 155.266567][ T29] audit: type=1326 audit(1736724883.526:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.0.1362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5913385d29 code=0x0 [ 155.654818][ T9354] Process accounting resumed [ 157.556548][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.568624][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.579107][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.587110][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.596434][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.603732][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.703424][ T9428] chnl_net:caif_netlink_parms(): no params data found [ 157.747285][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.754639][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.761851][ T9428] bridge_slave_0: entered allmulticast mode [ 157.768349][ T9428] bridge_slave_0: entered promiscuous mode [ 157.777305][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.784905][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.793888][ T9428] bridge_slave_1: entered allmulticast mode [ 157.801857][ T9428] bridge_slave_1: entered promiscuous mode [ 157.835166][ T9428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.846542][ T9428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.889804][ T9428] team0: Port device team_slave_0 added [ 157.896815][ T9428] team0: Port device team_slave_1 added [ 157.940349][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.947912][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.990972][ T9428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.012493][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.020131][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.085719][ T9428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.165801][ T9428] hsr_slave_0: entered promiscuous mode [ 158.177638][ T9428] hsr_slave_1: entered promiscuous mode [ 158.184102][ T9428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.194827][ T9428] Cannot create hsr debugfs directory [ 158.315181][ T29] audit: type=1400 audit(1736724886.576:2848): avc: denied { getattr } for pid=9452 comm="syz.5.1409" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 158.342406][ T9453] overlayfs: statfs failed on './file0' [ 158.384397][ T9428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.480198][ T9428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.553900][ T9428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.619589][ T9428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.811290][ T9428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.828508][ T9428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.844876][ T9428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.854309][ T9428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.906685][ T9468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1415'. [ 158.976593][ T29] audit: type=1400 audit(1736724887.236:2849): avc: denied { mounton } for pid=9470 comm="syz.3.1416" path="/442/file0" dev="tmpfs" ino=2375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 158.993805][ T9428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.044572][ T9428] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.065037][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.072174][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.129920][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.137071][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.308577][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 159.331250][ T29] audit: type=1400 audit(1736724887.586:2850): avc: denied { read } for pid=9479 comm="syz.0.1417" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.361240][ T29] audit: type=1400 audit(1736724887.586:2851): avc: denied { open } for pid=9479 comm="syz.0.1417" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.408005][ T9480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.416533][ T9428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.479136][ T9480] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 159.496030][ T9428] veth0_vlan: entered promiscuous mode [ 159.514403][ T9428] veth1_vlan: entered promiscuous mode [ 159.529437][ T9480] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 159.559988][ T9480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.571084][ T9428] veth0_macvtap: entered promiscuous mode [ 159.577166][ T9480] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.590140][ T9428] veth1_macvtap: entered promiscuous mode [ 159.599890][ T9480] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.614182][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.624683][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.634606][ T5831] Bluetooth: hci3: command tx timeout [ 159.640349][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.650877][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.661603][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.679766][ T9480] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 159.687593][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.699248][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.711211][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.719414][ T9480] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 159.721749][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.737454][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.748334][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.759075][ T9480] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 159.759500][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.773126][ T9480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.779145][ T9480] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.787026][ T9480] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.795979][ T9428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.811646][ T9428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.831069][ T9428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.849244][ T9428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.914928][ T366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.929122][ T366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.960069][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.979399][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.127434][ T9487] tipc: Started in network mode [ 160.132908][ T9487] tipc: Node identity d64be0f239, cluster identity 4711 [ 160.140110][ T9487] tipc: Enabled bearer , priority 0 [ 160.171414][ T9487] syzkaller0: entered promiscuous mode [ 160.176892][ T9487] syzkaller0: entered allmulticast mode [ 160.183846][ T9487] tipc: Resetting bearer [ 160.194180][ T9491] bond_slave_1: entered promiscuous mode [ 160.202830][ T9491] bond_slave_1: entered allmulticast mode [ 160.216129][ T9486] tipc: Resetting bearer [ 161.203617][ T3148] tipc: Node number set to 4014727410 [ 161.469361][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.493569][ T29] audit: type=1400 audit(1736724889.756:2852): avc: denied { read } for pid=9504 comm="syz.5.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.624604][ T9486] tipc: Disabling bearer [ 161.630681][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.709523][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 161.710453][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.724866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.764404][ T29] audit: type=1400 audit(1736724890.026:2853): avc: denied { bind } for pid=9516 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.827665][ T970] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 161.854463][ T29] audit: type=1326 audit(1736724890.116:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5913385d29 code=0x7ffc0000 [ 161.878409][ T29] audit: type=1326 audit(1736724890.116:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5913385d29 code=0x7ffc0000 [ 161.903888][ T29] audit: type=1326 audit(1736724890.116:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5913385d29 code=0x7ffc0000 [ 161.927543][ T29] audit: type=1326 audit(1736724890.116:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5913385d29 code=0x7ffc0000 [ 162.000673][ T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.015927][ T970] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.025517][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.042369][ T970] usb 6-1: config 0 descriptor?? [ 162.168769][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.327396][ T9535] binder: 9534:9535 unknown command 0 [ 162.337714][ T9535] binder: 9534:9535 ioctl c0306201 20000880 returned -22 [ 162.478912][ T970] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 162.497329][ T970] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000D/input/input30 [ 162.499894][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.519893][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.527593][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.535741][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.543219][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.556698][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.608564][ T970] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 162.820057][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.854234][ T9539] chnl_net:caif_netlink_parms(): no params data found [ 162.854249][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.878991][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.889573][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.891226][ T366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.904813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.914475][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.922599][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.103395][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.143972][ T9555] overlayfs: failed to clone upperpath [ 163.178993][ T5934] usb 6-1: USB disconnect, device number 6 [ 163.334223][ T9564] overlayfs: failed to clone upperpath [ 163.347808][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.372961][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.381177][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.388904][ T9539] bridge_slave_0: entered allmulticast mode [ 163.396969][ T9539] bridge_slave_0: entered promiscuous mode [ 163.452018][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.466207][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.479653][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.486843][ T9539] bridge_slave_1: entered allmulticast mode [ 163.502110][ T9539] bridge_slave_1: entered promiscuous mode [ 163.549348][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.575515][ T9539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.644879][ T9539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.709747][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.727538][ T53] bridge_slave_1: left allmulticast mode [ 163.739704][ T53] bridge_slave_1: left promiscuous mode [ 163.748704][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.762948][ T53] bridge_slave_0: left allmulticast mode [ 163.768625][ T53] bridge_slave_0: left promiscuous mode [ 163.774419][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.789986][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 163.796533][ T5000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.810630][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.829538][ T3148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.838186][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.874931][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 163.874946][ T29] audit: type=1800 audit(1736724892.136:2862): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1451" name="/" dev="fuse" ino=1 res=0 errno=0 [ 163.975982][ T9582] Bluetooth: hci0: service_discovery: too big uuid_count value 24929 [ 164.040921][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.049178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.212221][ T29] audit: type=1326 audit(1736724892.476:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 164.237071][ T29] audit: type=1326 audit(1736724892.476:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 164.264762][ T29] audit: type=1326 audit(1736724892.476:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 164.322273][ T29] audit: type=1326 audit(1736724892.476:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 164.348470][ T29] audit: type=1326 audit(1736724892.476:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 164.372105][ T29] audit: type=1326 audit(1736724892.506:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 164.395648][ T29] audit: type=1326 audit(1736724892.556:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652b85d29 code=0x7ffc0000 [ 164.426776][ T29] audit: type=1326 audit(1736724892.566:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5652b7cce7 code=0x7ffc0000 [ 164.455160][ T29] audit: type=1326 audit(1736724892.566:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652b21f29 code=0x7ffc0000 [ 164.524849][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.537085][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.547736][ T53] bond0 (unregistering): Released all slaves [ 164.559150][ T9550] chnl_net:caif_netlink_parms(): no params data found [ 164.578010][ T9539] team0: Port device team_slave_0 added [ 164.589845][ T5831] Bluetooth: hci1: command tx timeout [ 164.616474][ T9539] team0: Port device team_slave_1 added [ 164.743648][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.751714][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.778044][ T9539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.799083][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.816202][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.848096][ T9539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.989373][ T5831] Bluetooth: hci3: command tx timeout [ 165.011892][ T9539] hsr_slave_0: entered promiscuous mode [ 165.019159][ T9539] hsr_slave_1: entered promiscuous mode [ 165.028016][ T9539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.035762][ T9539] Cannot create hsr debugfs directory [ 165.041814][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.065161][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.090492][ T9550] bridge_slave_0: entered allmulticast mode [ 165.097644][ T9550] bridge_slave_0: entered promiscuous mode [ 165.140086][ T9550] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.148335][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.170700][ T9550] bridge_slave_1: entered allmulticast mode [ 165.192278][ T9550] bridge_slave_1: entered promiscuous mode [ 165.270185][ T53] hsr_slave_0: left promiscuous mode [ 165.284618][ T53] hsr_slave_1: left promiscuous mode [ 165.304348][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.335304][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.363168][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.384980][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.501210][ T53] veth1_macvtap: left promiscuous mode [ 165.508769][ T53] veth0_macvtap: left promiscuous mode [ 165.514404][ T53] veth1_vlan: left promiscuous mode [ 165.519853][ T53] veth0_vlan: left promiscuous mode [ 165.629390][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.791567][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.869514][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 165.959776][ T53] team0 (unregistering): Port device team_slave_1 removed [ 165.995941][ T53] team0 (unregistering): Port device team_slave_0 removed [ 166.390872][ T9550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.406834][ T9550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.489443][ T5865] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.518924][ T9550] team0: Port device team_slave_0 added [ 166.558975][ T9550] team0: Port device team_slave_1 added [ 166.605942][ T9550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.615262][ T9550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.674059][ T5831] Bluetooth: hci1: command tx timeout [ 166.691752][ T5865] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.700858][ T9550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.711510][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.728281][ T5865] usb 2-1: config 0 descriptor?? [ 166.748210][ T9550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.756081][ T9550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.790074][ T9550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.901980][ T9550] hsr_slave_0: entered promiscuous mode [ 166.911216][ T5866] net_ratelimit: 8 callbacks suppressed [ 166.911230][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.929649][ T9550] hsr_slave_1: entered promiscuous mode [ 166.951433][ T9550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.968703][ T9550] Cannot create hsr debugfs directory [ 167.069699][ T5831] Bluetooth: hci3: command tx timeout [ 167.157030][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.244305][ T9539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.277207][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.294922][ T9661] [ 167.297254][ T9661] ============================= [ 167.302075][ T9661] [ BUG: Invalid wait context ] [ 167.306896][ T9661] 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 Not tainted [ 167.313979][ T9661] ----------------------------- [ 167.318800][ T9661] syz.5.1476/9661 is trying to lock: [ 167.324064][ T9661] ffff88802e2b40d8 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 167.333739][ T9661] other info that might help us debug this: [ 167.339610][ T9661] context-{5:5} [ 167.343044][ T9661] 3 locks held by syz.5.1476/9661: [ 167.348128][ T9661] #0: ffff88807f87b180 (&wq->lock){+.+.}-{2:2}, at: create_worker_cb+0xa4/0x260 [ 167.357247][ T9661] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 167.366613][ T9661] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 167.376335][ T9661] stack backtrace: [ 167.380033][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.5.1476 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 167.390688][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.400720][ T9661] Call Trace: [ 167.403982][ T9661] [ 167.406895][ T9661] dump_stack_lvl+0x116/0x1f0 [ 167.411564][ T9661] __lock_acquire+0x878/0x3c40 [ 167.416313][ T9661] ? __pfx___lock_acquire+0x10/0x10 [ 167.421494][ T9661] ? __pfx___lock_acquire+0x10/0x10 [ 167.426675][ T9661] ? flush_sigqueue_mask+0xbf/0x820 [ 167.431857][ T9661] lock_acquire.part.0+0x11b/0x380 [ 167.436947][ T9661] ? __lock_task_sighand+0xc2/0x340 [ 167.442126][ T9661] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 167.447736][ T9661] ? rcu_is_watching+0x12/0xc0 [ 167.452483][ T9661] ? trace_lock_acquire+0x14e/0x1f0 [ 167.457674][ T9661] ? trace_lock_acquire+0x14e/0x1f0 [ 167.462861][ T9661] ? __lock_task_sighand+0xc2/0x340 [ 167.468037][ T9661] ? lock_acquire+0x2f/0xb0 [ 167.472518][ T9661] ? __lock_task_sighand+0xc2/0x340 [ 167.477689][ T9661] _raw_spin_lock_irqsave+0x3a/0x60 [ 167.482860][ T9661] ? __lock_task_sighand+0xc2/0x340 [ 167.488035][ T9661] __lock_task_sighand+0xc2/0x340 [ 167.493040][ T9661] group_send_sig_info+0x290/0x300 [ 167.498133][ T9661] ? __pfx_group_send_sig_info+0x10/0x10 [ 167.503745][ T9661] ? __pfx___lock_acquire+0x10/0x10 [ 167.508912][ T9661] ? mark_lock+0xb5/0xc60 [ 167.513212][ T9661] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 167.519010][ T9661] bpf_send_signal_common+0x3d3/0x530 [ 167.524364][ T9661] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 167.530236][ T9661] ? trace_lock_acquire+0x14e/0x1f0 [ 167.535416][ T9661] ? bpf_trace_run2+0x1c2/0x590 [ 167.540251][ T9661] bpf_send_signal+0x1d/0x30 [ 167.544822][ T9661] bpf_prog_631417f49dd64198+0x25/0x48 [ 167.550261][ T9661] bpf_trace_run2+0x231/0x590 [ 167.554922][ T9661] ? __pfx_bpf_trace_run2+0x10/0x10 [ 167.560103][ T9661] ? __pfx_mark_lock+0x10/0x10 [ 167.564851][ T9661] __bpf_trace_contention_end+0xca/0x110 [ 167.570465][ T9661] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 167.576708][ T9661] ? hlock_class+0x4e/0x130 [ 167.581209][ T9661] ? __lock_acquire+0x15a9/0x3c40 [ 167.586223][ T9661] trace_contention_end.constprop.0+0xf0/0x170 [ 167.592364][ T9661] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 167.598439][ T9661] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 167.605017][ T9661] ? lock_acquire.part.0+0x11b/0x380 [ 167.610293][ T9661] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 167.615995][ T9661] do_raw_spin_lock+0x210/0x2c0 [ 167.620830][ T9661] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.626187][ T9661] ? lock_acquire+0x2f/0xb0 [ 167.630673][ T9661] ? create_worker_cb+0xa4/0x260 [ 167.635602][ T9661] create_worker_cb+0xa4/0x260 [ 167.640350][ T9661] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.645531][ T9661] task_work_run+0x14e/0x250 [ 167.650101][ T9661] ? __pfx_task_work_run+0x10/0x10 [ 167.655190][ T9661] ? trace_lock_acquire+0x14e/0x1f0 [ 167.660367][ T9661] get_signal+0x1d3/0x26c0 [ 167.664767][ T9661] ? read_tsc+0x9/0x20 [ 167.668818][ T9661] ? ktime_get+0x1ac/0x300 [ 167.673214][ T9661] ? kvm_sched_clock_read+0x11/0x20 [ 167.678391][ T9661] ? sched_clock+0x38/0x60 [ 167.682782][ T9661] ? __pfx_get_signal+0x10/0x10 [ 167.687619][ T9661] arch_do_signal_or_restart+0x90/0x7e0 [ 167.693153][ T9661] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 167.699296][ T9661] ? rcu_is_watching+0x12/0xc0 [ 167.704047][ T9661] syscall_exit_to_user_mode+0x150/0x2a0 [ 167.709664][ T9661] do_syscall_64+0xda/0x250 [ 167.714154][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.720033][ T9661] RIP: 0033:0x7f5652b85d29 [ 167.724428][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.744016][ T9661] RSP: 002b:00007f5653a4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 167.752412][ T9661] RAX: fffffffffffffe00 RBX: 00007f5652d76080 RCX: 00007f5652b85d29 [ 167.760373][ T9661] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000007 [ 167.768322][ T9661] RBP: 00007f5652c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 167.776270][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.784220][ T9661] R13: 0000000000000000 R14: 00007f5652d76080 R15: 00007ffd05c4e268 [ 167.792176][ T9661] [ 167.806798][ T9539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.818337][ T9539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.831219][ T9539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.843010][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.875740][ T9539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.887324][ T9539] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.898545][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.910302][ T366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.918466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.928756][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.935841][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.945571][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.952642][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.994410][ T53] bridge_slave_1: left allmulticast mode [ 168.001206][ T53] bridge_slave_1: left promiscuous mode [ 168.006831][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.016413][ T53] bridge_slave_0: left allmulticast mode [ 168.022181][ T53] bridge_slave_0: left promiscuous mode [ 168.027778][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.172690][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.182898][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.192978][ T53] bond0 (unregistering): (slave team0): Releasing backup interface [ 168.203489][ T53] bond0 (unregistering): Released all slaves [ 168.235163][ T9539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.253822][ T9539] veth0_vlan: entered promiscuous mode [ 168.264507][ T9539] veth1_vlan: entered promiscuous mode [ 168.277689][ T53] tipc: Left network mode [ 168.290727][ T9539] veth0_macvtap: entered promiscuous mode [ 168.298458][ T9539] veth1_macvtap: entered promiscuous mode [ 168.308025][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.319721][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.329974][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.340419][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.350923][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.366156][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.377101][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.386929][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.397946][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.407949][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.418513][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.428850][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.439979][ T9539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.448648][ T9539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.458059][ T9539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.466828][ T9539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.492692][ T9539] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 168.506901][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.507722][ T9539] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 168.519285][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.536786][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.547353][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.592445][ T53] hsr_slave_0: left promiscuous mode [ 168.598367][ T53] hsr_slave_1: left promiscuous mode [ 168.605313][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.612869][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.620516][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.628670][ T53] veth1_macvtap: left promiscuous mode [ 168.635169][ T53] veth0_macvtap: left promiscuous mode [ 168.640752][ T53] veth1_vlan: left promiscuous mode [ 168.645959][ T53] veth0_vlan: left promiscuous mode [ 168.755331][ T53] team0 (unregistering): Port device team_slave_1 removed [ 168.774081][ T53] team0 (unregistering): Port device team_slave_0 removed [ 168.928038][ T9550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.936137][ T9550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.944044][ T9550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.957424][ T9550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.994716][ T9550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.006141][ T9550] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.015393][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.022496][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.030180][ T5865] usb 2-1: Cannot set autoneg [ 169.030849][ T366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.034902][ T5865] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 169.043059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.058568][ T5865] usb 2-1: USB disconnect, device number 17 [ 169.070799][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.077848][ T5000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.149533][ T5831] Bluetooth: hci3: command tx timeout [ 169.166440][ T9550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.185099][ T9550] veth0_vlan: entered promiscuous mode [ 169.192732][ T9550] veth1_vlan: entered promiscuous mode [ 169.206075][ T9550] veth0_macvtap: entered promiscuous mode [ 169.214929][ T9550] veth1_macvtap: entered promiscuous mode [ 169.225546][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.236206][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.247556][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.257970][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.268078][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.278520][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.288994][ T9550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.298774][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.310151][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.320449][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.330934][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.340781][ T9550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.352094][ T9550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.362309][ T9550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.372089][ T9550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.380851][ T9550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.389910][ T9550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.398596][ T9550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.421056][ T9550] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 169.435193][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.435951][ T9550] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 169.443423][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.464036][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.473088][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.549792][ T5000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.558277][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.566667][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.190037][ T5000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.198200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.503878][ T5000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.933811][ T5000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.992146][ T5000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.063627][ T5000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.135642][ T5000] bridge_slave_1: left allmulticast mode [ 172.142760][ T5000] bridge_slave_1: left promiscuous mode [ 172.148376][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.157102][ T5000] bridge_slave_0: left allmulticast mode [ 172.163867][ T5000] bridge_slave_0: left promiscuous mode [ 172.169528][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.257513][ T5000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.268529][ T5000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.278375][ T5000] bond0 (unregistering): Released all slaves [ 172.409326][ T366] net_ratelimit: 6 callbacks suppressed [ 172.409342][ T366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.423108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.504471][ T5000] hsr_slave_0: left promiscuous mode [ 172.511562][ T5000] hsr_slave_1: left promiscuous mode [ 172.517128][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.524536][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.533036][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.540462][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.549053][ T5000] veth1_macvtap: left promiscuous mode [ 172.556967][ T5000] veth0_macvtap: left promiscuous mode [ 172.562534][ T5000] veth1_vlan: left promiscuous mode [ 172.567751][ T5000] veth0_vlan: left promiscuous mode [ 172.591942][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.687705][ T5000] team0 (unregistering): Port device team_slave_1 removed [ 172.712021][ T5000] team0 (unregistering): Port device team_slave_0 removed [ 173.042410][ T5000] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.111930][ T5000] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.182372][ T5000] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.252474][ T5000] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.325813][ T5000] bridge_slave_1: left allmulticast mode [ 173.331527][ T5000] bridge_slave_1: left promiscuous mode [ 173.337141][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.345918][ T5000] bridge_slave_0: left allmulticast mode [ 173.352762][ T5000] bridge_slave_0: left promiscuous mode [ 173.358359][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.453453][ T5000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.464117][ T5000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.474140][ T5000] bond0 (unregistering): Released all slaves [ 173.541543][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.549739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.715319][ T5000] hsr_slave_0: left promiscuous mode [ 173.722331][ T5000] hsr_slave_1: left promiscuous mode [ 173.727881][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.735264][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.743519][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.752172][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.762048][ T5000] veth1_macvtap: left promiscuous mode [ 173.767524][ T5000] veth0_macvtap: left promiscuous mode [ 173.773532][ T5000] veth1_vlan: left promiscuous mode [ 173.778751][ T5000] veth0_vlan: left promiscuous mode [ 173.866017][ T5000] team0 (unregistering): Port device team_slave_1 removed [ 173.884281][ T5000] team0 (unregistering): Port device team_slave_0 removed [ 174.659546][ T3056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.667740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.630034][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.769685][ T3490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.777870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog