last executing test programs: 39.689098252s ago: executing program 3 (id=3396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 34.300110993s ago: executing program 3 (id=3396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 26.438412075s ago: executing program 3 (id=3396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 17.993351054s ago: executing program 3 (id=3396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 9.503316002s ago: executing program 3 (id=3396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 3.456010801s ago: executing program 2 (id=3798): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 2.829585411s ago: executing program 1 (id=3811): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.558747868s ago: executing program 2 (id=3815): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 2.544892196s ago: executing program 1 (id=3816): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 2.462810803s ago: executing program 2 (id=3817): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)="745c71f4d2ec", 0x6}], 0x1, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0x0) 2.40033979s ago: executing program 2 (id=3819): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2.399751209s ago: executing program 1 (id=3820): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x86, 0xfa, 0xcf, 0x40, 0x6f8, 0x1, 0xd101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xaf, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x9e, 0xff, 0x3, 0xab, 0x68, 0xda, 0x7, [], [{{0x9, 0x5, 0xf, 0x3, 0x0, 0xc, 0x9, 0x7}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xd, 0x0, 0x3}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 2.21613551s ago: executing program 2 (id=3822): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4000, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4}}}}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x478, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 2.19824268s ago: executing program 0 (id=3823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000633a77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 2.085228364s ago: executing program 0 (id=3824): r0 = io_uring_setup(0x6813, &(0x7f0000000780)={0x0, 0x9860, 0x0, 0x0, 0xffffffff}) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.993701941s ago: executing program 0 (id=3825): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 1.465705937s ago: executing program 0 (id=3826): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000780)=@sack_info={0x0, 0x6, 0xc}, 0xc) 1.357126293s ago: executing program 0 (id=3827): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) 1.328233201s ago: executing program 0 (id=3828): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_vhci(0x0, 0x15) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.148328495s ago: executing program 4 (id=3832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.090401067s ago: executing program 4 (id=3833): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="8fd6032e42e1e60450b9071516560313587d89775e2c6003f14df6c398e06562a2b66d5889b49ef24f109b56185fe4ef7327cc2a1001ac649e88e542bd46c73047aa0c69c6cafd2d06209a1103720653035021b9a38cd449a170507e71ab378f5cbfc782de67406a1e2e5cbce300dd022d5b6a15a0f8034d2aa27ec310f39e63aed7c573ea018eac8823f2a88f321eb6bf4455ff955a9549df0535bb0ec1d34e7f65c44ad173e835f65c2347e008c9289f3e39612f28495ad51bc23c63ae4ffdfeb6f905d5d7b86058f246f05740e2adf845"}, {&(0x7f0000000100)="40a681186b2989387bf0ce05934b494def9ba167d3e9f367f8441a834772748ac2c33d2a623ffd7d4d9d041e5447b5b1c6181c26"}, {&(0x7f0000000600)="df37020000fb413a00aa45c368f6d341fd64b475b6632e58e9e878691ce1a8fa2fc7"}, {&(0x7f0000000340)="b4b001b898d182a5002b91abc22b77cd0924fd17882ee395b6fb7853f81d1de305f76452680ac35d8ae3e91d3efe9e27248ee86effbcd662d6ffccb475933470fd2c8e35e314b53dc1d643ceebde5ad58fe7df871d36ddc9"}, {&(0x7f00000003c0)="53cbea7694163a80b924c080cf1d34f3fcdf4e426e7fec8aac428f368543d235c53c8aab3df7e2d6a3df41c6aa18ff581c0f966bc884e17242cb94d7262f505eb922de891e19f30f3ba94edc3c9d10a55f2a53d735918c0838c2aa92ed4fe1e6cbbc50610040843bc946"}], 0x0, &(0x7f0000000580)=[@cred, @cred], 0x0, 0x80}}, {{&(0x7f00000006c0)=@file={0x1, './file0/file0\x00'}, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)="c188b535ad6af88913a80cb1e9a9b30a2ca5d1c7814397f589daa13c0200000094729d2105afad86bf7fffb0fcf4b0274df41bca"}, {&(0x7f0000000740)="4ea50911e68114722d3e4e1eb834348a"}, {&(0x7f0000000780)="a56bfec4ef6447ca814da2fe35c32b250f099f43e0684cfbae62d8cca721a5abfc47181675e8a0ee07805974ed8dff73afcdcaef6b627b55d5cb76dd8ad4308a80967a9415a3171a9533f594c78fe19fe7b769f891c72c7d50610ce7d7f7794087b1faaac88b0d874324b6e79b7642ac4e906469fa21303773d75ea66c983db1ec548940288483875a8072bddb1c4acd28f1057621ce78"}], 0x0, &(0x7f0000000880)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred], 0x0, 0x20044041}}], 0x37, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendto(r0, &(0x7f0000000140)="f8", 0x1, 0x4, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 1.033660001s ago: executing program 4 (id=3834): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r0, r2, 0x0) 997.130759ms ago: executing program 4 (id=3835): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c1) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 925.153175ms ago: executing program 4 (id=3836): r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r0, 0x0) 920.891665ms ago: executing program 3 (id=3396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 120.997309ms ago: executing program 1 (id=3837): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"e50d1af80100007ea25fdd00ff00000008007effffff7f00", r1, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r0, 0x2180}, {r1, 0x100a}, {r2, 0x4090}], 0x3, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 120.508522ms ago: executing program 2 (id=3838): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x10000000000000) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 120.291119ms ago: executing program 4 (id=3839): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) 63.169904ms ago: executing program 1 (id=3840): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x7f, 0x0, 0x0, 0x8a9d, 0x0, 0x0, 0x15, 0x41}) 0s ago: executing program 1 (id=3841): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r2) tkill(r0, 0x12) kernel console output (not intermixed with test programs): [ 236.380308][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.414646][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.433049][ T5868] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.442208][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.456968][ T5868] usb 1-1: SerialNumber: syz [ 236.544203][ T5896] m920x_read = error: -19 [ 236.548640][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 236.629982][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.642705][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.665356][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.685623][ T5868] usb 1-1: 0:2 : does not exist [ 236.691999][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.707163][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.710429][T13510] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.722760][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.725001][ T5868] usb 1-1: USB disconnect, device number 33 [ 236.730226][ T5896] m920x_read = error: -19 [ 236.740503][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 236.764535][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.771895][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.779324][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.786715][ T5857] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 236.800956][ T5857] HID 045e:07da: Invalid code 65791 type 1 [ 236.806691][T13510] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 236.807178][ T5857] HID 045e:07da: Invalid code 768 type 1 [ 236.819717][ T5857] HID 045e:07da: Invalid code 769 type 1 [ 236.825451][ T5857] HID 045e:07da: Invalid code 770 type 1 [ 236.831696][ T5857] HID 045e:07da: Invalid code 771 type 1 [ 236.861686][ T5857] HID 045e:07da: Invalid code 772 type 1 [ 236.873722][ T5857] HID 045e:07da: Invalid code 773 type 1 [ 236.884324][ T5857] HID 045e:07da: Invalid code 774 type 1 [ 236.891967][ T5857] HID 045e:07da: Invalid code 775 type 1 [ 236.903652][ T5857] HID 045e:07da: Invalid code 776 type 1 [ 236.919096][ T5857] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001F/input/input64 [ 236.930782][ T5896] m920x_read = error: -19 [ 236.935235][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 237.009429][ T5857] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 237.036313][ T5857] usb 5-1: USB disconnect, device number 27 [ 237.094315][ T5896] m920x_read = error: -19 [ 237.098688][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 237.120132][T13520] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:6401:0100 with DS=0xe7 [ 237.264260][ T5857] m920x_read = error: -19 [ 237.268692][ T5857] dvb-usb: error -19 while querying for an remote control event. [ 237.394203][ T5868] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 237.434100][ T5859] m920x_read = error: -19 [ 237.438459][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 237.527885][T13539] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3330'. [ 237.565363][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.576056][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.586864][ T5868] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.598251][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.614389][ T5860] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 237.616484][ T5859] m920x_read = error: -19 [ 237.629983][ T5868] usb 4-1: SerialNumber: syz [ 237.640640][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 237.654141][ T971] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 237.702143][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3334'. [ 237.775916][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.797501][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.807371][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 237.813544][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.814090][ T5859] m920x_read = error: -19 [ 237.827454][ T5860] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.836659][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 237.840305][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.858108][ T971] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.871103][ T971] usb 3-1: config 179 has no interface number 0 [ 237.880236][ T5868] usb 4-1: 0:2 : does not exist [ 237.889763][ T5868] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 237.897539][ T971] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 237.915026][ T5860] usb 2-1: config 0 descriptor?? [ 237.923124][ T5868] usb 4-1: USB disconnect, device number 35 [ 237.929223][ T971] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 237.947471][ T971] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.961782][ T971] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 237.979872][ T971] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.994420][ T971] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 238.003476][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.017644][ T5859] m920x_read = error: -19 [ 238.022066][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 238.030929][T13536] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 238.184130][ T5859] m920x_read = error: -19 [ 238.188508][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 238.272434][ T5868] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input65 [ 238.324408][ T5896] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 238.348605][ T5860] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 238.361167][ T5860] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 238.364158][ T5857] m920x_read = error: -19 [ 238.379679][ T5857] dvb-usb: error -19 while querying for an remote control event. [ 238.475558][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 238.491299][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.501696][ T5896] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.502780][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.517015][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.534138][ T5896] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 238.543305][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.554057][ T5857] m920x_read = error: -19 [ 238.558416][ T5857] dvb-usb: error -19 while querying for an remote control event. [ 238.574118][ T5896] usb 5-1: config 0 descriptor?? [ 238.616700][ T5857] usb 2-1: USB disconnect, device number 30 [ 238.648440][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 238.648453][ T30] audit: type=1400 audit(1746188859.359:725): avc: denied { mounton } for pid=13570 comm="syz.3.3346" path="/613/bus" dev="tmpfs" ino=3136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 238.744108][ T5859] m920x_read = error: -19 [ 238.750095][T13573] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3347'. [ 238.759504][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 238.791824][ T5859] usb 3-1: USB disconnect, device number 31 [ 238.791870][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 238.806457][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 238.845654][ T30] audit: type=1400 audit(1746188859.559:726): avc: denied { nlmsg_write } for pid=13576 comm="syz.3.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 238.924190][ T5857] m920x_read = error: -19 [ 238.928560][ T5857] dvb-usb: error -19 while querying for an remote control event. [ 238.952354][ T30] audit: type=1326 audit(1746188859.659:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13582 comm="syz.0.3352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd14b8e969 code=0x0 [ 238.963137][T13585] ip_vti0: Master is either lo or non-ether device [ 239.019170][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.029641][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.037762][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.046374][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.053857][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.061425][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.068973][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.078824][ T5896] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x0 [ 239.091248][ T5896] holtek_mouse 0003:04D9:A067.0021: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0 [ 239.103087][ T5859] m920x_read = error: -19 [ 239.108463][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 239.255884][ T5859] usb 5-1: USB disconnect, device number 28 [ 239.274653][ T5857] m920x_read = error: -19 [ 239.279025][ T5857] dvb-usb: error -19 while querying for an remote control event. [ 239.354131][T13598] bridge0: entered promiscuous mode [ 239.360411][T13598] bridge0: port 3(macvlan3) entered blocking state [ 239.373809][T13598] bridge0: port 3(macvlan3) entered disabled state [ 239.379785][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'. [ 239.385248][T13598] macvlan3: entered allmulticast mode [ 239.437307][T13598] macvlan3: left allmulticast mode [ 239.447199][T13598] bridge0: left promiscuous mode [ 239.464536][ T5896] m920x_read = error: -19 [ 239.469507][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 239.634379][ T5896] m920x_read = error: -19 [ 239.640538][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 239.761948][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3371'. [ 239.804344][ T5896] m920x_read = error: -19 [ 239.808714][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 240.030098][ T5896] m920x_read = error: -19 [ 240.044129][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 240.147786][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 240.192535][T13641] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.209440][ T5859] m920x_read = error: -19 [ 240.221590][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 240.384552][ T5859] m920x_read = error: -19 [ 240.390523][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 240.404972][ T5896] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 240.564307][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 240.581360][ T5896] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 240.591181][ T5896] usb 2-1: config 0 has no interface number 0 [ 240.597934][ T5859] m920x_read = error: -19 [ 240.603286][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 240.619737][ T5896] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 240.635314][ T5896] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 240.647174][ T5896] usb 2-1: config 0 interface 126 has no altsetting 0 [ 240.663434][ T5896] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 240.674078][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.682131][ T5896] usb 2-1: Product: syz [ 240.686528][ T5896] usb 2-1: Manufacturer: syz [ 240.691186][ T5896] usb 2-1: SerialNumber: syz [ 240.698580][ T5896] usb 2-1: config 0 descriptor?? [ 240.704310][T13643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.711616][T13643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.785187][ T5859] m920x_read = error: -19 [ 240.789559][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 240.824657][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'. [ 240.895434][ T5888] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 240.974248][ T5859] m920x_read = error: -19 [ 240.978706][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 241.061366][ T5888] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 241.071185][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.094163][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.122223][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 241.136935][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.150283][ T5896] ir_usb 2-1:0.126: IR Dongle converter detected [ 241.157209][ T5859] m920x_read = error: -19 [ 241.161576][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 241.164302][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.195495][ T5888] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 241.209881][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.218854][ T5888] usb 1-1: Product: syz [ 241.223125][ T5888] usb 1-1: Manufacturer: syz [ 241.234226][ T5888] usb 1-1: SerialNumber: syz [ 241.244678][ T5888] usb 1-1: config 0 descriptor?? [ 241.258293][ T5888] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 241.334214][ T5859] m920x_read = error: -19 [ 241.338597][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 241.372048][ T5896] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 241.504262][ T5896] m920x_read = error: -19 [ 241.512982][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 241.589778][ T5860] usb 2-1: USB disconnect, device number 31 [ 241.604814][ T5860] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 241.613285][ T5860] ir_usb 2-1:0.126: device disconnected [ 241.624032][ T5818] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 241.663058][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.677678][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.690970][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.700734][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.711970][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.724328][ T5896] m920x_read = error: -19 [ 241.729803][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 241.734509][ T30] audit: type=1400 audit(1746188862.439:728): avc: denied { mounton } for pid=13690 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 241.777609][T13690] lo speed is unknown, defaulting to 1000 [ 241.915414][ T5896] m920x_read = error: -19 [ 241.921322][T13702] netlink: 'syz.4.3404': attribute type 5 has an invalid length. [ 241.929827][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 241.944207][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'. [ 242.079784][ T5888] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input66 [ 242.104135][ T5896] m920x_read = error: -19 [ 242.108957][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 242.277344][T13690] chnl_net:caif_netlink_parms(): no params data found [ 242.296961][ T5896] m920x_read = error: -19 [ 242.308132][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 242.334080][ T5859] usb 1-1: USB disconnect, device number 34 [ 242.393426][T13690] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.411146][T13690] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.418954][T13690] bridge_slave_0: entered allmulticast mode [ 242.426352][T13690] bridge_slave_0: entered promiscuous mode [ 242.434760][T13690] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.441999][T13690] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.449418][T13690] bridge_slave_1: entered allmulticast mode [ 242.456791][T13690] bridge_slave_1: entered promiscuous mode [ 242.494950][T13690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.504192][ T24] m920x_read = error: -19 [ 242.508526][ T24] dvb-usb: error -19 while querying for an remote control event. [ 242.518552][T13690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.532198][T13734] netlink: 'syz.2.3415': attribute type 3 has an invalid length. [ 242.589131][T13690] team0: Port device team_slave_0 added [ 242.602298][T13690] team0: Port device team_slave_1 added [ 242.668819][T13690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.681581][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.710041][ T5859] m920x_read = error: -19 [ 242.714174][T13690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.714548][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 242.726697][T13690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.752747][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.779407][T13690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.851503][T13690] hsr_slave_0: entered promiscuous mode [ 242.879091][T13690] hsr_slave_1: entered promiscuous mode [ 242.891798][T13690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.900035][T13690] Cannot create hsr debugfs directory [ 242.915358][ T5859] m920x_read = error: -19 [ 242.919754][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 243.066024][ T55] Bluetooth: hci0: unexpected event for opcode 0x203c [ 243.117376][ T5859] m920x_read = error: -19 [ 243.121744][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 243.221851][T13690] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.294087][ T5859] m920x_read = error: -19 [ 243.319617][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 243.345972][T13690] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.420216][T13690] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.514310][ T24] m920x_read = error: -19 [ 243.522582][ T24] dvb-usb: error -19 while querying for an remote control event. [ 243.535350][T13690] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.602942][T13781] lo speed is unknown, defaulting to 1000 [ 243.617819][T13786] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 243.627786][T13786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.641088][T13786] overlayfs: failed to get uuid (737/file1, err=-13); falling back to uuid=null. [ 243.685304][ T24] m920x_read = error: -19 [ 243.689669][ T24] dvb-usb: error -19 while querying for an remote control event. [ 243.764117][ T55] Bluetooth: hci2: command tx timeout [ 243.894441][ T5896] m920x_read = error: -19 [ 243.898969][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 243.916075][T13690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.950836][T13690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.993078][T13690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.009199][T13690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.094103][ T24] m920x_read = error: -19 [ 244.098517][ T24] dvb-usb: error -19 while querying for an remote control event. [ 244.202914][T13690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.214171][ T5896] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 244.247665][T13690] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.272978][T13258] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.280149][T13258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.284082][ T5859] m920x_read = error: -19 [ 244.291705][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 244.305503][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.312630][T13292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.384303][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 244.391011][ T5896] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 244.399909][ T5896] usb 2-1: config 0 has no interface number 0 [ 244.406211][ T5896] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.417318][ T5896] usb 2-1: config 0 interface 85 has no altsetting 0 [ 244.432279][ T5896] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 244.442131][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.456223][ T5857] m920x_read = error: -19 [ 244.460610][ T5857] dvb-usb: error -19 while querying for an remote control event. [ 244.484713][ T5896] usb 2-1: Product: syz [ 244.488888][ T5896] usb 2-1: Manufacturer: syz [ 244.503693][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 244.511720][ T5896] usb 2-1: SerialNumber: syz [ 244.547395][ T5896] usb 2-1: config 0 descriptor?? [ 244.624083][ T5859] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 244.644246][ T47] m920x_read = error: -19 [ 244.648712][ T47] dvb-usb: error -19 while querying for an remote control event. [ 244.695777][ T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 244.700503][T13690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.712421][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.735951][ T24] usb 3-1: config 0 descriptor?? [ 244.748568][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 244.792053][T13690] veth0_vlan: entered promiscuous mode [ 244.806403][ T5859] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 244.810613][T13690] veth1_vlan: entered promiscuous mode [ 244.822921][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.838771][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.850189][ T47] m920x_read = error: -19 [ 244.852595][T13690] veth0_macvtap: entered promiscuous mode [ 244.854732][ T47] dvb-usb: error -19 while querying for an remote control event. [ 244.868112][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 244.868137][T13690] veth1_macvtap: entered promiscuous mode [ 244.882547][ T5859] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 244.896276][ T5859] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 244.907795][ T5859] usb 5-1: Manufacturer: syz [ 244.910119][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.923465][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.924362][ T5859] usb 5-1: config 0 descriptor?? [ 244.933465][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.950534][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.954410][ T24] gp8psk: usb in 128 operation failed. [ 244.969917][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.971397][ T24] gp8psk: usb in 137 operation failed. [ 244.981230][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.991957][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.996881][T13690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.008587][ T24] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 245.012924][ T971] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 245.029094][ T24] usb 3-1: media controller created [ 245.031903][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.034734][ T47] m920x_read = error: -19 [ 245.047275][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.059541][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.060073][ T47] dvb-usb: error -19 while querying for an remote control event. [ 245.070394][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.088454][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.095298][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.099552][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.117549][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.127766][ T24] gp8psk_fe: Frontend attached [ 245.128391][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.133168][ T24] usb 3-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 245.151767][T13690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.163313][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 245.167122][T13690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.175973][ T5896] appletouch 2-1:0.85: Geyser mode initialized. [ 245.181011][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 245.194229][T13690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.198170][ T5896] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input67 [ 245.203070][T13690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.222477][ T971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 245.232801][T13690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.243138][ T971] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.252780][ T971] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.263374][ T971] usb 1-1: Product: syz [ 245.269515][ T971] usb 1-1: Manufacturer: syz [ 245.274453][ T5896] m920x_read = error: -19 [ 245.279062][ T971] usb 1-1: SerialNumber: syz [ 245.281514][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 245.286244][ T971] usb 1-1: config 0 descriptor?? [ 245.298701][T13830] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 245.306857][ T971] hub 1-1:0.0: bad descriptor, ignoring hub [ 245.312862][ T971] hub 1-1:0.0: probe with driver hub failed with error -5 [ 245.339686][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 245.350727][ T24] gp8psk: found Genpix USB device pID = 203 (hex) [ 245.364794][ T5859] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 245.370705][T13269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.382735][T13269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.382890][ T5859] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 245.399387][ T24] usb 2-1: USB disconnect, device number 32 [ 245.419043][ T24] appletouch 2-1:0.85: input: appletouch disconnected [ 245.432850][T13269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.433306][ T5859] appleir 0003:05AC:8243.0022: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 245.445146][T13269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.464155][ T5896] m920x_read = error: -19 [ 245.468595][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 245.471086][ T30] audit: type=1400 audit(1746188866.179:729): avc: denied { mounton } for pid=13690 comm="syz-executor" path="/root/syzkaller.45redb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 245.511373][ T30] audit: type=1400 audit(1746188866.219:730): avc: denied { mounton } for pid=13690 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 245.597732][ T971] usb 3-1: USB disconnect, device number 32 [ 245.634072][ T24] m920x_read = error: -19 [ 245.638515][ T24] dvb-usb: error -19 while querying for an remote control event. [ 245.649365][ T5896] usb 5-1: USB disconnect, device number 29 [ 245.668096][ T971] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 245.815812][ T24] m920x_read = error: -19 [ 245.820225][ T24] dvb-usb: error -19 while querying for an remote control event. [ 245.864972][ T9] usb 1-1: USB disconnect, device number 35 [ 245.984143][ T5896] m920x_read = error: -19 [ 245.988503][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 246.174096][ T5896] m920x_read = error: -19 [ 246.178480][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 246.354091][ T5896] m920x_read = error: -19 [ 246.361162][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 246.534133][ T24] m920x_read = error: -19 [ 246.541089][ T24] dvb-usb: error -19 while querying for an remote control event. [ 246.561484][T13854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'. [ 246.580308][T13854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'. [ 246.684597][ T971] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 246.726390][ T5896] m920x_read = error: -19 [ 246.730774][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 246.745051][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 246.762001][T13269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.844336][ T971] usb 3-1: Using ep0 maxpacket: 32 [ 246.850997][ T971] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 246.868149][ T971] usb 3-1: config 0 has no interface number 0 [ 246.882378][ T971] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.903203][ T971] usb 3-1: config 0 interface 85 has no altsetting 0 [ 246.915647][ T24] m920x_read = error: -19 [ 246.915743][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.919984][ T24] dvb-usb: error -19 while querying for an remote control event. [ 246.939112][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.952433][ T971] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 246.962109][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.986153][ T971] usb 3-1: Product: syz [ 246.990326][ T971] usb 3-1: Manufacturer: syz [ 246.995372][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.014159][ T971] usb 3-1: SerialNumber: syz [ 247.018840][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.035039][ T971] usb 3-1: config 0 descriptor?? [ 247.042669][ T9] usb 1-1: config 0 descriptor?? [ 247.084438][ T24] m920x_read = error: -19 [ 247.088799][ T24] dvb-usb: error -19 while querying for an remote control event. [ 247.265958][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.275064][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.282774][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.290245][ T24] m920x_read = error: -19 [ 247.299073][ T24] dvb-usb: error -19 while querying for an remote control event. [ 247.310604][T13850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.322657][T13850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.338485][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.349302][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.408711][T13873] lo speed is unknown, defaulting to 1000 [ 247.464094][ T24] m920x_read = error: -19 [ 247.468524][ T24] dvb-usb: error -19 while querying for an remote control event. [ 247.644154][ T5896] m920x_read = error: -19 [ 247.648587][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 247.730580][ T9] usb 1-1: string descriptor 0 read error: -22 [ 247.756896][ T971] appletouch 3-1:0.85: Geyser mode initialized. [ 247.771356][ T971] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input68 [ 247.788109][T13873] chnl_net:caif_netlink_parms(): no params data found [ 247.799947][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 247.834127][ T24] m920x_read = error: -19 [ 247.838480][ T24] dvb-usb: error -19 while querying for an remote control event. [ 247.867728][T13269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.937782][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0023/input/input69 [ 247.975093][ T971] usb 3-1: USB disconnect, device number 33 [ 248.000839][ T971] appletouch 3-1:0.85: input: appletouch disconnected [ 248.014432][ T24] m920x_read = error: -19 [ 248.017008][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0023/input/input70 [ 248.018782][ T24] dvb-usb: error -19 while querying for an remote control event. [ 248.036966][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0023/input/input71 [ 248.060063][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0023/input/input72 [ 248.079704][ T9] uclogic 0003:256C:006D.0023: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 248.133627][T13269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.141525][ T5860] usb 1-1: USB disconnect, device number 36 [ 248.150332][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.161687][T13873] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.172010][T13873] bridge_slave_0: entered allmulticast mode [ 248.185118][T13873] bridge_slave_0: entered promiscuous mode [ 248.193669][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.208003][T13873] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.219073][T13873] bridge_slave_1: entered allmulticast mode [ 248.232718][T13873] bridge_slave_1: entered promiscuous mode [ 248.252394][T13269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.264265][ T5896] m920x_read = error: -19 [ 248.268963][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 248.299941][T13873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.316678][T13873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.354193][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 248.370997][T13873] team0: Port device team_slave_0 added [ 248.392054][T13873] team0: Port device team_slave_1 added [ 248.419093][T13873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.426250][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.452114][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.454121][ T5859] m920x_read = error: -19 [ 248.459415][T13873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.463123][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 248.475141][T13873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.488538][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.515165][T13873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.539861][ T9] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 248.549260][ T9] usb 2-1: config 0 has no interface number 0 [ 248.559102][ T9] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 248.571924][ T9] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.589526][ T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 248.596055][T13903] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.608168][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.616244][ T9] usb 2-1: Product: syz [ 248.620779][ T9] usb 2-1: Manufacturer: syz [ 248.633195][ T9] usb 2-1: SerialNumber: syz [ 248.644281][ T5896] m920x_read = error: -19 [ 248.648817][ T9] usb 2-1: config 0 descriptor?? [ 248.649055][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 248.680326][T13895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 248.695387][ T9] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 248.710791][ T9] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 248.726215][T13873] hsr_slave_0: entered promiscuous mode [ 248.732439][T13873] hsr_slave_1: entered promiscuous mode [ 248.743214][T13873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.773708][T13873] Cannot create hsr debugfs directory [ 248.782086][T13269] bridge_slave_1: left allmulticast mode [ 248.790558][T13269] bridge_slave_1: left promiscuous mode [ 248.797728][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.816577][T13269] bridge_slave_0: left allmulticast mode [ 248.816725][ T47] m920x_read = error: -19 [ 248.823339][T13269] bridge_slave_0: left promiscuous mode [ 248.829853][ T47] dvb-usb: error -19 while querying for an remote control event. [ 248.832463][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.884466][ T5859] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 248.996867][ T47] m920x_read = error: -19 [ 249.001231][ T47] dvb-usb: error -19 while querying for an remote control event. [ 249.044195][ T5859] usb 3-1: Using ep0 maxpacket: 8 [ 249.050476][ T5859] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 249.054539][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 249.059799][ T5859] usb 3-1: config 0 has no interface number 0 [ 249.079897][ T5859] usb 3-1: config 0 interface 200 has no altsetting 0 [ 249.107745][ T5859] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 249.121317][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.134432][ T971] usb 2-1: USB disconnect, device number 33 [ 249.137655][ T5859] usb 3-1: Product: syz [ 249.148830][ T971] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 249.152761][ T5859] usb 3-1: Manufacturer: syz [ 249.162496][ T971] cyberjack 2-1:0.69: device disconnected [ 249.164409][ T47] m920x_read = error: -19 [ 249.164427][ T47] dvb-usb: error -19 while querying for an remote control event. [ 249.186411][ T5859] usb 3-1: SerialNumber: syz [ 249.202557][ T5859] usb 3-1: config 0 descriptor?? [ 249.217615][T13269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.229758][T13269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.241281][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 249.245913][T13269] bond0 (unregistering): Released all slaves [ 249.253447][ T9] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 249.265148][ T9] usb 1-1: Product: syz [ 249.275772][ T9] usb 1-1: config 0 descriptor?? [ 249.285558][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 249.293796][ T9] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 249.344682][ T5896] m920x_read = error: -19 [ 249.349050][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 249.427197][ T5859] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input73 [ 249.437555][ T9] IPVS: starting estimator thread 0... [ 249.443783][T13914] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.454665][ T55] Bluetooth: hci2: command tx timeout [ 249.467214][ T5859] usb 3-1: USB disconnect, device number 34 [ 249.488349][ T9] usb 1-1: USB disconnect, device number 37 [ 249.502774][ T9] ftdi_sio 1-1:0.0: device disconnected [ 249.525172][ T24] m920x_read = error: -19 [ 249.529521][ T24] dvb-usb: error -19 while querying for an remote control event. [ 249.544091][T13916] IPVS: using max 46 ests per chain, 110400 per kthread [ 249.696154][ T5859] m920x_read = error: -19 [ 249.708222][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 249.894152][ T5859] m920x_read = error: -19 [ 249.903397][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 249.916888][T13269] hsr_slave_0: left promiscuous mode [ 249.922791][T13269] hsr_slave_1: left promiscuous mode [ 249.929223][T13269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.936741][T13269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.945152][T13269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.952558][T13269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.975828][T13269] veth1_macvtap: left promiscuous mode [ 249.981700][T13269] veth0_macvtap: left promiscuous mode [ 249.987927][T13269] veth1_vlan: left promiscuous mode [ 249.993280][T13269] veth0_vlan: left promiscuous mode [ 250.074427][ T5859] m920x_read = error: -19 [ 250.078800][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 250.154248][ T9] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 250.274087][ T5859] m920x_read = error: -19 [ 250.278500][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 250.348808][ T9] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 250.378453][ T9] usb 2-1: config 7 has no interface number 0 [ 250.386795][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 250.406655][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.415869][ T9] usb 2-1: Product: syz [ 250.424550][ T9] usb 2-1: Manufacturer: syz [ 250.429187][ T9] usb 2-1: SerialNumber: syz [ 250.454397][ T5859] m920x_read = error: -19 [ 250.458735][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 250.644115][ T5859] m920x_read = error: -19 [ 250.648556][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 250.757532][T13269] team0 (unregistering): Port device team_slave_1 removed [ 250.798418][T13269] team0 (unregistering): Port device team_slave_0 removed [ 250.826483][ T24] m920x_read = error: -19 [ 250.830864][ T24] dvb-usb: error -19 while querying for an remote control event. [ 251.007677][ T5859] m920x_read = error: -19 [ 251.012355][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 251.174100][ T5859] m920x_read = error: -19 [ 251.180695][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 251.187757][T13941] lo speed is unknown, defaulting to 1000 [ 251.227068][ T9] as10x_usb: device has been detected [ 251.232779][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 251.289677][ T9] usb 2-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 251.338130][ T30] audit: type=1400 audit(1746188872.049:731): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 251.374131][ T47] m920x_read = error: -19 [ 251.378486][ T47] dvb-usb: error -19 while querying for an remote control event. [ 251.436820][T13873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.463653][T13873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.485989][T13873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.509974][T13873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.524653][ T55] Bluetooth: hci2: command tx timeout [ 251.539732][ T9] as10x_usb: error during firmware upload part1 [ 251.559958][T13934] lo speed is unknown, defaulting to 1000 [ 251.574215][ T5859] m920x_read = error: -19 [ 251.578590][ T9] Registered device Elgato EyeTV DTT Deluxe [ 251.578608][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 251.592340][ T9] usb 2-1: USB disconnect, device number 34 [ 251.642092][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 251.656105][ T9] as10x_usb: device has been disconnected [ 251.735832][T13873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.759042][T13873] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.765843][ T5859] m920x_read = error: -19 [ 251.770175][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 251.784731][T13269] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.791831][T13269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.822032][T13269] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.829163][T13269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.934129][ T5859] m920x_read = error: -19 [ 251.938669][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 251.978099][T13947] lo speed is unknown, defaulting to 1000 [ 252.114132][ T5896] m920x_read = error: -19 [ 252.118502][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 252.130748][T13873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.213056][T13873] veth0_vlan: entered promiscuous mode [ 252.235743][T13873] veth1_vlan: entered promiscuous mode [ 252.272385][T13873] veth0_macvtap: entered promiscuous mode [ 252.281708][T13873] veth1_macvtap: entered promiscuous mode [ 252.294839][ T5896] m920x_read = error: -19 [ 252.299282][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 252.310276][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.321155][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.334196][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.345100][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.355055][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.365571][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.376675][T13873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.400391][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.411381][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.421307][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.435747][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.448602][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.460298][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.470332][ T5896] m920x_read = error: -19 [ 252.474836][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 252.482669][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.493578][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.505141][T13873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.516067][T13873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.524873][T13873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.533586][T13873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.542395][T13873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.634342][ T5859] m920x_read = error: -19 [ 252.640488][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 252.814163][ T24] m920x_read = error: -19 [ 252.818535][ T24] dvb-usb: error -19 while querying for an remote control event. [ 252.853691][T13274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.862675][T13274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.994538][ T5859] m920x_read = error: -19 [ 252.998906][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 253.042300][T13274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.064005][T13274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.174852][ T5859] m920x_read = error: -19 [ 253.179222][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 253.354190][ T5859] m920x_read = error: -19 [ 253.358555][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 253.544378][ T5859] m920x_read = error: -19 [ 253.548757][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 253.725182][ T5896] m920x_read = error: -19 [ 253.729556][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 253.904348][ T5896] m920x_read = error: -19 [ 253.908722][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 254.044177][ T5859] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 254.085136][ T5896] m920x_read = error: -19 [ 254.089497][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 254.190322][ T30] audit: type=1400 audit(1746188874.899:732): avc: denied { setopt } for pid=14028 comm="syz.2.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 254.210924][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 254.218897][ T5859] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 254.227168][ T5859] usb 5-1: config 0 has no interface number 0 [ 254.236810][ T5859] usb 5-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=b8.ce [ 254.246257][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.254691][ T5896] m920x_read = error: -19 [ 254.259656][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 254.267943][ T5859] usb 5-1: Product: syz [ 254.272243][ T5859] usb 5-1: Manufacturer: syz [ 254.277075][ T5859] usb 5-1: SerialNumber: syz [ 254.285140][ T5859] usb 5-1: config 0 descriptor?? [ 254.293344][ T5859] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 254.322318][T14033] sctp: [Deprecated]: syz.1.3540 (pid 14033) Use of int in maxseg socket option. [ 254.322318][T14033] Use struct sctp_assoc_value instead [ 254.425214][ T5896] m920x_read = error: -19 [ 254.429608][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 254.478887][T14039] GUP no longer grows the stack in syz.1.3543 (14039): 200000004000-200000008000 (200000002000) [ 254.538033][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.1.3543 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 254.538063][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 254.538074][T14039] Call Trace: [ 254.538081][T14039] [ 254.538089][T14039] dump_stack_lvl+0x16c/0x1f0 [ 254.538114][T14039] gup_vma_lookup+0x1d2/0x220 [ 254.538139][T14039] __get_user_pages+0x234/0x36f0 [ 254.538172][T14039] ? __pfx___get_user_pages+0x10/0x10 [ 254.538205][T14039] get_user_pages_remote+0x258/0xb20 [ 254.538230][T14039] ? __pfx_mtree_load+0x10/0x10 [ 254.538252][T14039] ? __pfx_get_user_pages_remote+0x10/0x10 [ 254.538286][T14039] __access_remote_vm+0x233/0x9d0 [ 254.538310][T14039] ? __pfx___access_remote_vm+0x10/0x10 [ 254.538337][T14039] proc_pid_cmdline_read+0x4de/0x900 [ 254.538366][T14039] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 254.538393][T14039] ? rw_verify_area+0xcf/0x680 [ 254.538415][T14039] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 254.538441][T14039] vfs_readv+0x6bc/0x8a0 [ 254.538471][T14039] ? __pfx_vfs_readv+0x10/0x10 [ 254.538496][T14039] ? kmem_cache_free+0x2d4/0x4d0 [ 254.538535][T14039] ? __fget_files+0x20e/0x3c0 [ 254.538573][T14039] ? do_preadv+0x1af/0x270 [ 254.538595][T14039] do_preadv+0x1af/0x270 [ 254.538618][T14039] ? __pfx_do_preadv+0x10/0x10 [ 254.538648][T14039] do_syscall_64+0xcd/0x260 [ 254.538672][T14039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.538690][T14039] RIP: 0033:0x7f215638e969 [ 254.538704][T14039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.538721][T14039] RSP: 002b:00007f21571f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 254.538738][T14039] RAX: ffffffffffffffda RBX: 00007f21565b5fa0 RCX: 00007f215638e969 [ 254.538749][T14039] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 254.538760][T14039] RBP: 00007f2156410ab1 R08: 0000000000000200 R09: 0000000000000000 [ 254.538770][T14039] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 254.538780][T14039] R13: 0000000000000000 R14: 00007f21565b5fa0 R15: 00007ffebcc1f638 [ 254.538802][T14039] [ 254.604372][ T5896] m920x_read = error: -19 [ 254.767280][ T5859] gspca_sn9c20x: Write register 1001 failed -71 [ 254.773535][ T5859] gspca_sn9c20x: Device initialization failed [ 254.780149][ T5859] gspca_sn9c20x 5-1:0.167: probe with driver gspca_sn9c20x failed with error -71 [ 254.800212][ T5859] usb 5-1: USB disconnect, device number 30 [ 254.844558][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 254.946686][T13284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.004643][ T5859] m920x_read = error: -19 [ 255.009037][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 255.168212][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.178556][ T5859] m920x_read = error: -19 [ 255.182898][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 255.193693][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.204633][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.221619][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.232021][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.294033][ T30] audit: type=1400 audit(1746188875.989:733): avc: denied { compute_member } for pid=14058 comm="syz.1.3551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 255.317589][T14056] lo speed is unknown, defaulting to 1000 [ 255.364768][ T5859] m920x_read = error: -19 [ 255.369229][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 255.496031][T14066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.544083][ T5859] m920x_read = error: -19 [ 255.548525][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 255.719710][T14080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3559'. [ 255.735485][ T5859] m920x_read = error: -19 [ 255.742530][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 255.760704][T14084] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 255.767218][T14084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 255.801112][T14084] vhci_hcd vhci_hcd.0: Device attached [ 255.904072][ T47] m920x_read = error: -19 [ 255.908525][ T47] dvb-usb: error -19 while querying for an remote control event. [ 255.998537][T13284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.054201][ T5896] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 256.072109][ T971] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 256.076892][T14056] chnl_net:caif_netlink_parms(): no params data found [ 256.086979][ T47] m920x_read = error: -19 [ 256.091311][ T47] dvb-usb: error -19 while querying for an remote control event. [ 256.124622][ T9] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 256.176599][T13284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.231323][ T971] usb 1-1: config 0 has no interfaces? [ 256.243555][ T971] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 256.269211][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.283841][ T971] usb 1-1: config 0 descriptor?? [ 256.284770][ T24] m920x_read = error: -19 [ 256.297746][ T24] dvb-usb: error -19 while querying for an remote control event. [ 256.298314][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.319319][ T9] usb 2-1: config 179 has no interface number 0 [ 256.328809][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 256.329959][T13284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.340045][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 256.340073][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 256.340095][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 256.340119][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.398068][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.410961][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.414614][ T47] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 256.428629][T14095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 256.444499][T14095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 256.477446][T14056] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.485402][ T5859] m920x_read = error: -19 [ 256.489747][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 256.519857][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.529044][ T5859] usb 1-1: USB disconnect, device number 38 [ 256.539026][T14085] vhci_hcd: connection closed [ 256.540241][T13269] vhci_hcd: stop threads [ 256.552827][T14056] bridge_slave_0: entered allmulticast mode [ 256.561488][T13269] vhci_hcd: release socket [ 256.569738][T14056] bridge_slave_0: entered promiscuous mode [ 256.578842][T13269] vhci_hcd: disconnect device [ 256.588176][ T47] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 256.601113][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.610733][ T5896] vhci_hcd: vhci_device speed not set [ 256.621609][T14056] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.628985][ T47] usb 5-1: Product: syz [ 256.633290][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.644919][ T47] usb 5-1: Manufacturer: syz [ 256.649788][ T47] usb 5-1: SerialNumber: syz [ 256.657564][T14056] bridge_slave_1: entered allmulticast mode [ 256.674221][ T5857] m920x_read = error: -19 [ 256.678568][ T5857] dvb-usb: error -19 while querying for an remote control event. [ 256.687494][ T47] usb 5-1: config 0 descriptor?? [ 256.699311][T14056] bridge_slave_1: entered promiscuous mode [ 256.703861][ T971] usb 2-1: USB disconnect, device number 35 [ 256.705200][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 256.705238][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 256.786443][T14056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.810580][T14056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.855549][T14056] team0: Port device team_slave_0 added [ 256.874085][ T5859] m920x_read = error: -19 [ 256.878439][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 256.890024][T14056] team0: Port device team_slave_1 added [ 256.897312][T13284] bridge_slave_1: left allmulticast mode [ 256.912147][ T5859] usb 5-1: USB disconnect, device number 31 [ 256.923948][T13284] bridge_slave_1: left promiscuous mode [ 256.929805][T13284] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.948109][T13284] bridge_slave_0: left allmulticast mode [ 256.953837][T13284] bridge_slave_0: left promiscuous mode [ 256.960108][T13284] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.050074][ T5847] m920x_read = error: -19 [ 257.062695][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 257.211485][ T30] audit: type=1400 audit(1746188877.929:734): avc: denied { write } for pid=14129 comm="syz.2.3578" path="socket:[46886]" dev="sockfs" ino=46886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.238343][ T5859] m920x_read = error: -19 [ 257.245281][ T5859] dvb-usb: error -19 while querying for an remote control event. [ 257.273186][ T30] audit: type=1400 audit(1746188877.939:735): avc: denied { nlmsg_read } for pid=14129 comm="syz.2.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.294904][ T55] Bluetooth: hci2: command tx timeout [ 257.307975][ T30] audit: type=1400 audit(1746188877.939:736): avc: denied { nlmsg_write } for pid=14129 comm="syz.2.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.333185][ T30] audit: type=1400 audit(1746188877.939:737): avc: denied { read } for pid=14129 comm="syz.2.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.424138][ T5847] m920x_read = error: -19 [ 257.428635][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 257.562001][T13284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.572528][T13284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.582555][T13284] bond0 (unregistering): Released all slaves [ 257.594468][ T5896] m920x_read = error: -19 [ 257.598807][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 257.674929][ T971] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 257.694662][T14056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.708029][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.722851][T14154] evm: overlay not supported [ 257.733909][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.736319][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 257.758785][T14056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.774170][ T24] m920x_read = error: -19 [ 257.778520][ T24] dvb-usb: error -19 while querying for an remote control event. [ 257.834745][T14152] all (unregistering): Released all slaves [ 257.842612][ T971] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.853005][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.863853][T14056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.873531][ T971] usb 2-1: config 0 descriptor?? [ 257.879174][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.905734][T14056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.918436][ T971] cp210x 2-1:0.0: cp210x converter detected [ 257.938119][ T9] usb 3-1: config 0 interface 0 altsetting 25 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.954164][ T24] m920x_read = error: -19 [ 257.957244][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.958597][ T24] dvb-usb: error -19 while querying for an remote control event. [ 257.979352][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 257.993747][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.018356][ T9] usb 3-1: config 0 descriptor?? [ 258.103051][T14056] hsr_slave_0: entered promiscuous mode [ 258.119137][T14056] hsr_slave_1: entered promiscuous mode [ 258.130807][T14056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.139522][T14056] Cannot create hsr debugfs directory [ 258.145010][ T24] m920x_read = error: -19 [ 258.149731][ T24] dvb-usb: error -19 while querying for an remote control event. [ 258.263554][T13284] hsr_slave_0: left promiscuous mode [ 258.269936][T13284] hsr_slave_1: left promiscuous mode [ 258.276045][T13284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.283453][T13284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.292216][T13284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.310246][T13284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.324239][ T24] m920x_read = error: -19 [ 258.328591][ T24] dvb-usb: error -19 while querying for an remote control event. [ 258.340667][ T971] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 258.342830][T13284] veth1_macvtap: left promiscuous mode [ 258.358641][T13284] veth0_macvtap: left promiscuous mode [ 258.364326][T13284] veth1_vlan: left promiscuous mode [ 258.370898][T13284] veth0_vlan: left promiscuous mode [ 258.438538][ T9] logitech-djreceiver 0003:046D:C70A.0024: item fetching failed at offset 0/1 [ 258.459932][ T9] logitech-djreceiver 0003:046D:C70A.0024: logi_dj_probe: parse failed [ 258.489756][ T9] logitech-djreceiver 0003:046D:C70A.0024: probe with driver logitech-djreceiver failed with error -22 [ 258.505044][ T24] m920x_read = error: -19 [ 258.509408][ T24] dvb-usb: error -19 while querying for an remote control event. [ 258.568121][ T971] usb 2-1: cp210x converter now attached to ttyUSB0 [ 258.682946][ T24] usb 3-1: USB disconnect, device number 35 [ 258.707554][ T5896] m920x_read = error: -19 [ 258.711923][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 258.770315][ T971] usb 2-1: USB disconnect, device number 36 [ 258.780118][ T971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.810342][ T971] cp210x 2-1:0.0: device disconnected [ 258.889326][ T5896] m920x_read = error: -19 [ 258.903964][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 258.932475][T13284] team0 (unregistering): Port device team_slave_1 removed [ 258.977107][T13284] team0 (unregistering): Port device team_slave_0 removed [ 259.065269][ T5896] m920x_read = error: -19 [ 259.069717][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 259.254095][ T24] m920x_read = error: -19 [ 259.258464][ T24] dvb-usb: error -19 while querying for an remote control event. [ 259.323187][ T30] audit: type=1400 audit(1746188880.029:738): avc: denied { read } for pid=14178 comm="syz.2.3600" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.361180][ T30] audit: type=1400 audit(1746188880.029:739): avc: denied { open } for pid=14178 comm="syz.2.3600" path="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.386263][ T55] Bluetooth: hci2: command tx timeout [ 259.434235][ T24] m920x_read = error: -19 [ 259.438600][ T24] dvb-usb: error -19 while querying for an remote control event. [ 259.605149][ T24] m920x_read = error: -19 [ 259.610671][ T24] dvb-usb: error -19 while querying for an remote control event. [ 259.794283][ T24] m920x_read = error: -19 [ 259.802724][ T24] dvb-usb: error -19 while querying for an remote control event. [ 259.869954][T14211] binder: 14209:14211 ioctl c018620c 2000000001c0 returned -22 [ 259.877581][ T30] audit: type=1400 audit(1746188880.579:740): avc: denied { relabelfrom } for pid=14201 comm="syz.1.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 259.924350][ T30] audit: type=1400 audit(1746188880.589:741): avc: denied { relabelto } for pid=14201 comm="syz.1.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 259.984342][ T5896] m920x_read = error: -19 [ 259.988701][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 260.104339][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 260.118536][T14221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3618'. [ 260.128074][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'. [ 260.164648][ T47] m920x_read = error: -19 [ 260.184360][ T47] dvb-usb: error -19 while querying for an remote control event. [ 260.264147][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 260.286426][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 260.302107][ T24] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 260.319457][ T24] usb 1-1: config 0 has no interface number 0 [ 260.331127][ T24] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.342206][ T24] usb 1-1: config 0 interface 85 has no altsetting 0 [ 260.349141][ T5896] m920x_read = error: -19 [ 260.353553][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 260.363235][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 260.375107][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.383108][ T24] usb 1-1: Product: syz [ 260.388663][ T24] usb 1-1: Manufacturer: syz [ 260.393314][ T24] usb 1-1: SerialNumber: syz [ 260.401958][ T24] usb 1-1: config 0 descriptor?? [ 260.430628][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 260.450985][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.479748][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.504093][ T9] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 260.523449][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.531493][ T47] m920x_read = error: -19 [ 260.531511][ T47] dvb-usb: error -19 while querying for an remote control event. [ 260.549575][T14056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.559359][T14056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.571752][ T9] usb 5-1: config 0 descriptor?? [ 260.582290][T14056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.584027][ T5896] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 260.607253][T14056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.694098][ T5847] m920x_read = error: -19 [ 260.698492][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 260.754128][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 260.766104][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 260.773370][T14056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.786385][ T5896] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 260.786428][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.788393][ T5896] usb 3-1: config 0 descriptor?? [ 260.826939][T14056] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.834749][ T5896] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76 [ 260.845754][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.852842][T13292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.866515][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.873652][T13292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.885520][ T47] m920x_read = error: -19 [ 260.889935][ T47] dvb-usb: error -19 while querying for an remote control event. [ 261.054996][ T47] m920x_read = error: -19 [ 261.059388][ T47] dvb-usb: error -19 while querying for an remote control event. [ 261.069054][ T5896] bcm5974 3-1:0.0: could not read from device [ 261.074669][T14056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.084192][ T24] appletouch 1-1:0.85: Geyser mode initialized. [ 261.085350][T14215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.091681][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input75 [ 261.102512][T14215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.128656][ T5169] bcm5974 3-1:0.0: could not read from device [ 261.165089][ T5896] input: failed to attach handler mousedev to device input76, error: -5 [ 261.184815][T14248] input input77: cannot allocate more than FF_MAX_EFFECTS effects [ 261.188152][ T5169] bcm5974 3-1:0.0: could not read from device [ 261.201979][ T5896] usb 3-1: USB disconnect, device number 36 [ 261.237921][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 261.243891][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.253913][T14056] veth0_vlan: entered promiscuous mode [ 261.264509][ T9] usb 5-1: USB disconnect, device number 32 [ 261.275425][ T24] m920x_read = error: -19 [ 261.276120][T14056] veth1_vlan: entered promiscuous mode [ 261.289263][ T24] dvb-usb: error -19 while querying for an remote control event. [ 261.295016][ T5868] usb 1-1: USB disconnect, device number 39 [ 261.320234][ T5868] appletouch 1-1:0.85: input: appletouch disconnected [ 261.347148][T14056] veth0_macvtap: entered promiscuous mode [ 261.372166][T14056] veth1_macvtap: entered promiscuous mode [ 261.391736][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.402968][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.413726][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.425524][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.435388][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.446388][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.456255][ T55] Bluetooth: hci2: command tx timeout [ 261.463251][T14056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.465200][ T5896] m920x_read = error: -19 [ 261.478021][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.489034][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 261.497219][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.507111][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.517597][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.527588][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.538048][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.547879][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.558341][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.569728][T14056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.583098][T14056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.592075][T14056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.603111][T14056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.617481][T14056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.655614][ T5896] m920x_read = error: -19 [ 261.659950][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 261.703829][T13258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.717984][T13258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.745565][T13292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.753866][T13292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.835901][ T5896] m920x_read = error: -19 [ 261.840353][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 261.936788][T14269] No such timeout policy "syz1" [ 262.014181][ T5896] m920x_read = error: -19 [ 262.018548][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 262.117236][ T30] audit: type=1400 audit(1746188882.829:742): avc: denied { watch watch_reads } for pid=14287 comm="syz.2.3646" path="/725/file0" dev="tmpfs" ino=3715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 262.194301][ T5896] m920x_read = error: -19 [ 262.198690][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 262.333364][T14299] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 262.342660][T14299] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 262.374098][ T24] m920x_read = error: -19 [ 262.378558][ T24] dvb-usb: error -19 while querying for an remote control event. [ 262.544185][ T5896] m920x_read = error: -19 [ 262.548553][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 262.654570][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 262.714128][ T5896] m920x_read = error: -19 [ 262.719216][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 262.835583][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 262.842530][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 262.852220][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 262.862775][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 262.872862][ T24] usb 1-1: config 1 has no interface number 0 [ 262.879109][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.890705][ T5896] m920x_read = error: -19 [ 262.895111][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 262.902829][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 262.915823][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 262.924919][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.937278][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 263.050450][T13269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.062039][ T5896] m920x_read = error: -19 [ 263.071326][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 263.142895][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 263.254215][ T24] m920x_read = error: -19 [ 263.258600][ T24] dvb-usb: error -19 while querying for an remote control event. [ 263.424164][ T24] m920x_read = error: -19 [ 263.428520][ T24] dvb-usb: error -19 while querying for an remote control event. [ 263.574309][ T24] usb 1-1: USB disconnect, device number 40 [ 263.591538][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 263.601853][ T5896] m920x_read = error: -19 [ 263.611853][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 263.789631][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.794078][ T5896] m920x_read = error: -19 [ 263.801717][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 263.803287][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.818747][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.828631][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.839151][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.860991][T14331] lo speed is unknown, defaulting to 1000 [ 263.974218][ T5896] m920x_read = error: -19 [ 263.985662][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 263.994647][T14326] lo speed is unknown, defaulting to 1000 [ 264.165359][T14332] lo speed is unknown, defaulting to 1000 [ 264.174544][ T5896] m920x_read = error: -19 [ 264.178929][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 264.263782][T14339] SELinux: failed to load policy [ 264.364085][ T24] m920x_read = error: -19 [ 264.368483][ T24] dvb-usb: error -19 while querying for an remote control event. [ 264.392577][T13269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.539525][T13269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.545322][ T24] m920x_read = error: -19 [ 264.568088][T14326] chnl_net:caif_netlink_parms(): no params data found [ 264.573605][ T24] dvb-usb: error -19 while querying for an remote control event. [ 264.665291][ T30] audit: type=1326 audit(1746188885.369:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.4.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1879f8e969 code=0x7fc00000 [ 264.718537][T13269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.761948][ T24] m920x_read = error: -19 [ 264.769348][ T24] dvb-usb: error -19 while querying for an remote control event. [ 264.934227][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.934476][ T24] m920x_read = error: -19 [ 264.956315][ T24] dvb-usb: error -19 while querying for an remote control event. [ 264.964336][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.964465][T14326] bridge_slave_0: entered allmulticast mode [ 264.965666][T14326] bridge_slave_0: entered promiscuous mode [ 265.018187][T14326] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.030928][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.038819][T14326] bridge_slave_1: entered allmulticast mode [ 265.046635][T14326] bridge_slave_1: entered promiscuous mode [ 265.151242][T14326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.160515][ T24] m920x_read = error: -19 [ 265.160548][ T24] dvb-usb: error -19 while querying for an remote control event. [ 265.201720][T14326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.224231][T13269] bridge_slave_1: left allmulticast mode [ 265.230066][T13269] bridge_slave_1: left promiscuous mode [ 265.249940][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.268933][T13269] bridge_slave_0: left allmulticast mode [ 265.276760][T13269] bridge_slave_0: left promiscuous mode [ 265.283064][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.314099][ T24] m920x_read = error: -19 [ 265.319062][ T24] dvb-usb: error -19 while querying for an remote control event. [ 265.494156][ T24] m920x_read = error: -19 [ 265.498630][ T24] dvb-usb: error -19 while querying for an remote control event. [ 265.685687][ T24] m920x_read = error: -19 [ 265.690030][ T24] dvb-usb: error -19 while querying for an remote control event. [ 265.711746][T13269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.729480][T13269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.749348][T13269] bond0 (unregistering): Released all slaves [ 265.833796][T14326] team0: Port device team_slave_0 added [ 265.849884][T14326] team0: Port device team_slave_1 added [ 265.864320][ T24] m920x_read = error: -19 [ 265.868759][ T24] dvb-usb: error -19 while querying for an remote control event. [ 265.886065][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 265.924256][ T55] Bluetooth: hci2: command tx timeout [ 266.034073][ T24] m920x_read = error: -19 [ 266.038494][ T24] dvb-usb: error -19 while querying for an remote control event. [ 266.149685][T14326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.172900][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.205590][T14326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.225658][ T24] m920x_read = error: -19 [ 266.229996][ T24] dvb-usb: error -19 while querying for an remote control event. [ 266.276720][ T30] audit: type=1400 audit(1746188886.989:744): avc: denied { mounton } for pid=14401 comm="syz.0.3688" path="/733/file0" dev="tmpfs" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 266.309781][T14402] syz.0.3688: attempt to access beyond end of device [ 266.309781][T14402] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 266.332971][T14402] FAT-fs (loop1): unable to read boot sector [ 266.413860][T14326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.423649][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.425029][ T24] m920x_read = error: -19 [ 266.461387][T14326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.479547][ T24] dvb-usb: error -19 while querying for an remote control event. [ 266.656530][ T24] m920x_read = error: -19 [ 266.673963][ T24] dvb-usb: error -19 while querying for an remote control event. [ 266.722436][T14326] hsr_slave_0: entered promiscuous mode [ 266.751150][T14326] hsr_slave_1: entered promiscuous mode [ 266.777447][T14326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.795787][T14326] Cannot create hsr debugfs directory [ 266.842647][T13269] hsr_slave_0: left promiscuous mode [ 266.850193][T13269] hsr_slave_1: left promiscuous mode [ 266.856103][T13269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.868657][ T24] m920x_read = error: -19 [ 266.873105][ T24] dvb-usb: error -19 while querying for an remote control event. [ 266.873678][T13269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.926834][T13269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.937612][T13269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.941686][ T30] audit: type=1400 audit(1746188887.659:745): avc: denied { mount } for pid=14427 comm="syz.4.3699" name="/" dev="autofs" ino=48825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 266.980097][T13269] veth1_macvtap: left promiscuous mode [ 266.995224][T13269] veth0_macvtap: left promiscuous mode [ 267.024963][T13269] veth1_vlan: left promiscuous mode [ 267.034689][ T30] audit: type=1400 audit(1746188887.749:746): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 267.037397][T13269] veth0_vlan: left promiscuous mode [ 267.087525][ T24] m920x_read = error: -19 [ 267.092135][ T24] dvb-usb: error -19 while querying for an remote control event. [ 267.254072][ T24] m920x_read = error: -19 [ 267.258442][ T24] dvb-usb: error -19 while querying for an remote control event. [ 267.444085][ T24] m920x_read = error: -19 [ 267.448452][ T24] dvb-usb: error -19 while querying for an remote control event. [ 267.635720][ T24] m920x_read = error: -19 [ 267.640148][ T24] dvb-usb: error -19 while querying for an remote control event. [ 267.660276][T13269] team0 (unregistering): Port device team_slave_1 removed [ 267.696754][T13269] team0 (unregistering): Port device team_slave_0 removed [ 267.814357][ T24] m920x_read = error: -19 [ 267.818736][ T24] dvb-usb: error -19 while querying for an remote control event. [ 268.017301][ T24] m920x_read = error: -19 [ 268.021649][ T24] dvb-usb: error -19 while querying for an remote control event. [ 268.031554][ T5821] Bluetooth: hci2: command tx timeout [ 268.194530][ T24] m920x_read = error: -19 [ 268.198963][ T24] dvb-usb: error -19 while querying for an remote control event. [ 268.254363][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 268.309852][ T30] audit: type=1400 audit(1746188889.029:747): avc: denied { lock } for pid=14445 comm="syz.0.3706" path="socket:[48847]" dev="sockfs" ino=48847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 268.384187][ T24] m920x_read = error: -19 [ 268.388668][ T24] dvb-usb: error -19 while querying for an remote control event. [ 268.480790][T14450] input: syz0 as /devices/virtual/input/input78 [ 268.554688][ T24] m920x_read = error: -19 [ 268.561086][ T24] dvb-usb: error -19 while querying for an remote control event. [ 268.728036][ T47] m920x_read = error: -19 [ 268.737069][ T47] dvb-usb: error -19 while querying for an remote control event. [ 268.789149][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 268.803300][T14456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3710'. [ 268.838412][T14326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.871187][T14456] geneve2: entered promiscuous mode [ 268.876701][T14456] geneve2: entered allmulticast mode [ 268.883929][T14326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.904131][ T24] m920x_read = error: -19 [ 268.910908][ T24] dvb-usb: error -19 while querying for an remote control event. [ 268.921977][T14326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.938882][ T30] audit: type=1326 audit(1746188889.649:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14458 comm="syz.1.3711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f215638e969 code=0x0 [ 268.966603][T14326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 269.117587][ T5896] m920x_read = error: -19 [ 269.121951][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 269.136405][T14326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.178897][T14326] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.205413][T13268] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.212568][T13268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.232751][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.239863][T13268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.251487][ T30] audit: type=1400 audit(1746188889.959:749): avc: denied { accept } for pid=14469 comm="syz.2.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.304347][ T5896] m920x_read = error: -19 [ 269.309855][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 269.321278][ T30] audit: type=1400 audit(1746188889.979:750): avc: denied { sendto } for pid=5847 comm="kworker/1:3" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 269.444317][ T55] Bluetooth: hci6: command 0x1003 tx timeout [ 269.445622][ T5818] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 269.514269][ T5847] m920x_read = error: -19 [ 269.518634][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 269.634769][ T30] audit: type=1400 audit(1746188890.339:751): avc: denied { map } for pid=14488 comm="syz.2.3721" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 269.702995][T14326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.714492][ T5847] m920x_read = error: -19 [ 269.718844][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 269.788562][T14326] veth0_vlan: entered promiscuous mode [ 269.828177][T14326] veth1_vlan: entered promiscuous mode [ 269.895034][ T24] m920x_read = error: -19 [ 269.899394][ T24] dvb-usb: error -19 while querying for an remote control event. [ 269.925425][T14326] veth0_macvtap: entered promiscuous mode [ 269.959628][T14326] veth1_macvtap: entered promiscuous mode [ 270.003509][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.023562][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.042415][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.074168][ T5847] m920x_read = error: -19 [ 270.078516][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 270.086333][ T5818] Bluetooth: hci2: command tx timeout [ 270.097978][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.116352][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.131086][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.142338][T14326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.170378][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.181559][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.191475][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.201973][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.212183][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.223426][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.235631][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.248176][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.259692][T14326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.273898][ T30] audit: type=1400 audit(1746188890.989:752): avc: denied { create } for pid=14517 comm="syz.2.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 270.296597][ T5868] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 270.309449][ T5847] m920x_read = error: -19 [ 270.312114][T14326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.322857][T14326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.323082][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 270.337567][T14326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.348818][T14326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.371936][T14518] lo speed is unknown, defaulting to 1000 [ 270.379780][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 270.443614][T13292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.453948][T13292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.462570][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 270.478748][ T5868] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 270.487098][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 270.504145][ T5847] m920x_read = error: -19 [ 270.504694][ T5868] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.508977][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 270.518535][ T5868] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.536309][ T5868] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.557073][T13269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.559796][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.566454][T13269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.582236][ T5868] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.584005][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.596496][ T5868] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.621411][ T24] usb 2-1: Product: syz [ 270.629072][ T24] usb 2-1: Manufacturer: syz [ 270.629182][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.642146][ T24] usb 2-1: SerialNumber: syz [ 270.665543][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 270.672149][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.674589][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.690578][ T5896] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.692080][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.714641][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 270.724413][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.730064][ T5847] m920x_read = error: -19 [ 270.734841][ T9] usb 5-1: config 0 descriptor?? [ 270.742796][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 270.914118][ T5847] m920x_read = error: -19 [ 270.918531][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 270.927786][ T5868] usb 1-1: usb_control_msg returned -32 [ 270.933388][ T5868] usbtmc 1-1:16.0: can't read capabilities [ 271.084272][ T5847] m920x_read = error: -19 [ 271.092374][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 271.163188][ T5847] usb 2-1: USB disconnect, device number 37 [ 271.172610][ T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0025/input/input79 [ 271.237257][ T9] sony 0003:054C:03D5.0025: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 271.254143][ T47] m920x_read = error: -19 [ 271.258648][ T47] dvb-usb: error -19 while querying for an remote control event. [ 271.369834][ T47] usb 5-1: USB disconnect, device number 33 [ 271.387559][T14526] syzkaller1: entered promiscuous mode [ 271.393209][T14526] syzkaller1: entered allmulticast mode [ 271.405048][T14526] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 348 [ 271.427720][ T24] m920x_read = error: -19 [ 271.432047][ T24] dvb-usb: error -19 while querying for an remote control event. [ 271.594272][ T24] m920x_read = error: -19 [ 271.598670][ T24] dvb-usb: error -19 while querying for an remote control event. [ 271.766746][ T5896] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 271.774541][ T5896] ath9k_htc: Failed to initialize the device [ 271.784108][ T24] m920x_read = error: -19 [ 271.788513][ T5847] usb 2-1: ath9k_htc: USB layer deinitialized [ 271.794988][ T24] dvb-usb: error -19 while querying for an remote control event. [ 271.820893][T13285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.964162][ T47] m920x_read = error: -19 [ 271.968549][ T47] dvb-usb: error -19 while querying for an remote control event. [ 272.134047][ T47] m920x_read = error: -19 [ 272.138394][ T47] dvb-usb: error -19 while querying for an remote control event. [ 272.304883][ T5847] m920x_read = error: -19 [ 272.309271][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 272.434140][T14540] serio: Serial port ptm0 [ 272.462826][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.471913][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.480023][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.487846][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.494949][ T5847] m920x_read = error: -19 [ 272.499278][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 272.508054][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.534460][ T47] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 272.573119][T14544] lo speed is unknown, defaulting to 1000 [ 272.590662][T14549] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«Qے0x0000000000000004 [ 272.664172][ T5847] m920x_read = error: -19 [ 272.675079][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 272.694439][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 272.700968][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.714051][ T47] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 272.729041][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.751093][ T47] usb 3-1: config 0 descriptor?? [ 272.795043][T13285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.834900][ T24] m920x_read = error: -19 [ 272.839520][ T24] dvb-usb: error -19 while querying for an remote control event. [ 272.975314][T13285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.024198][ T5847] m920x_read = error: -19 [ 273.028652][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 273.066210][T13285] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.082738][ T5847] usb 1-1: USB disconnect, device number 41 [ 273.179592][ T47] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 273.192250][ T47] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 273.206087][ T24] m920x_read = error: -19 [ 273.224157][ T24] dvb-usb: error -19 while querying for an remote control event. [ 273.236869][ T47] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 273.268206][ T47] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 273.319254][ T47] hid-multitouch 0003:1FD2:6007.0026: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 273.407904][T14544] chnl_net:caif_netlink_parms(): no params data found [ 273.438800][ T47] m920x_read = error: -19 [ 273.443190][ T47] dvb-usb: error -19 while querying for an remote control event. [ 273.469169][ T5896] usb 3-1: USB disconnect, device number 37 [ 273.516098][T13285] bridge_slave_1: left allmulticast mode [ 273.521853][T13285] bridge_slave_1: left promiscuous mode [ 273.532564][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.548047][T13285] bridge_slave_0: left allmulticast mode [ 273.564495][T13285] bridge_slave_0: left promiscuous mode [ 273.570314][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.644688][ T5847] m920x_read = error: -19 [ 273.649051][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 273.698893][ T5888] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 273.804780][ T5868] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 273.826946][ T5896] m920x_read = error: -19 [ 273.831278][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 273.866607][ T5888] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 273.877132][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.889025][ T5888] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.905262][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.920953][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.940061][ T5888] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 273.947631][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.958544][ T5888] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.970467][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.970776][T13285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.989006][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 274.003415][ T5888] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 274.004342][ T5896] m920x_read = error: -19 [ 274.011487][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 274.025515][T13285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.027032][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 274.036313][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 274.052936][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 274.066335][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.068087][T13285] bond0 (unregistering): Released all slaves [ 274.083567][ T5888] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.106887][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 274.126447][ T5888] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 274.138853][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.151655][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.159846][ T5868] usb 2-1: Product: syz [ 274.165684][ T5868] usb 2-1: Manufacturer: syz [ 274.171094][ T5868] usb 2-1: SerialNumber: syz [ 274.178221][ T5888] usb 5-1: string descriptor 0 read error: -22 [ 274.182506][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'. [ 274.184625][ T5888] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 274.215360][ T47] m920x_read = error: -19 [ 274.219872][ T47] dvb-usb: error -19 while querying for an remote control event. [ 274.257655][ T5868] usb 2-1: config 0 descriptor?? [ 274.290794][ T5868] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.304168][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.334142][ T5868] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 274.351238][ T5888] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 274.394110][ T24] m920x_read = error: -19 [ 274.399463][ T24] dvb-usb: error -19 while querying for an remote control event. [ 274.399553][T14544] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.422351][T14544] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.429744][T14544] bridge_slave_0: entered allmulticast mode [ 274.441315][T14544] bridge_slave_0: entered promiscuous mode [ 274.449517][T14544] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.460454][T14544] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.490418][T14544] bridge_slave_1: entered allmulticast mode [ 274.498991][T14544] bridge_slave_1: entered promiscuous mode [ 274.564413][ T55] Bluetooth: hci2: command tx timeout [ 274.574070][ T24] m920x_read = error: -19 [ 274.579268][ T24] dvb-usb: error -19 while querying for an remote control event. [ 274.679206][T14544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.757070][T14544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.930204][T14544] team0: Port device team_slave_0 added [ 274.957632][T14544] team0: Port device team_slave_1 added [ 275.023137][ T5868] em28xx 2-1:0.0: chip ID is em2874 [ 275.101745][T14544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.111645][T14544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.159134][ T24] m920x_read = error: -19 [ 275.163476][ T24] dvb-usb: error -19 while querying for an remote control event. [ 275.171449][T14544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.208380][T13285] hsr_slave_0: left promiscuous mode [ 275.215004][T13285] hsr_slave_1: left promiscuous mode [ 275.220765][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.262337][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.293226][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.307167][T13285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.343466][T13285] veth1_macvtap: left promiscuous mode [ 275.359773][T13285] veth0_macvtap: left promiscuous mode [ 275.371996][T13285] veth1_vlan: left promiscuous mode [ 275.375794][ T24] m920x_read = error: -19 [ 275.381847][T13285] veth0_vlan: left promiscuous mode [ 275.388752][ T24] dvb-usb: error -19 while querying for an remote control event. [ 275.564362][ T24] m920x_read = error: -19 [ 275.572325][ T24] dvb-usb: error -19 while querying for an remote control event. [ 275.744249][ T24] m920x_read = error: -19 [ 275.750821][ T24] dvb-usb: error -19 while querying for an remote control event. [ 275.827089][ T24] usb 5-1: USB disconnect, device number 34 [ 275.897507][ T30] audit: type=1400 audit(1746188896.619:753): avc: denied { module_load } for pid=14626 comm="syz.4.3774" path="/sys/kernel/notes" dev="sysfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 275.897570][T14627] Invalid ELF header magic: != ELF [ 275.921505][ T47] m920x_read = error: -19 [ 275.921528][ T47] dvb-usb: error -19 while querying for an remote control event. [ 275.943426][T13285] team0 (unregistering): Port device team_slave_1 removed [ 275.974670][T13285] team0 (unregistering): Port device team_slave_0 removed [ 276.074474][ T24] m920x_read = error: -19 [ 276.078843][ T24] dvb-usb: error -19 while querying for an remote control event. [ 276.264950][ T47] m920x_read = error: -19 [ 276.269355][ T47] dvb-usb: error -19 while querying for an remote control event. [ 276.366016][T14544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.372988][T14544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.432250][T14544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.444228][ T24] m920x_read = error: -19 [ 276.448612][ T24] dvb-usb: error -19 while querying for an remote control event. [ 276.597127][ T5888] usb 2-1: USB disconnect, device number 38 [ 276.615054][ T5888] em28xx 2-1:0.0: Disconnecting em28xx [ 276.631010][ T5888] em28xx 2-1:0.0: Freeing device [ 276.644697][ T55] Bluetooth: hci2: command tx timeout [ 276.650747][ T24] m920x_read = error: -19 [ 276.655169][ T24] dvb-usb: error -19 while querying for an remote control event. [ 276.687145][T14544] hsr_slave_0: entered promiscuous mode [ 276.705136][T14544] hsr_slave_1: entered promiscuous mode [ 276.711237][T14544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.720742][T14544] Cannot create hsr debugfs directory [ 276.765321][T14649] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 276.765321][T14649] The task syz.1.3784 (14649) triggered the difference, watch for misbehavior. [ 276.834067][ T47] m920x_read = error: -19 [ 276.838473][ T47] dvb-usb: error -19 while querying for an remote control event. [ 276.911090][ T30] audit: type=1326 audit(1746188897.619:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd14b8e969 code=0x0 [ 277.014207][ T47] m920x_read = error: -19 [ 277.018576][ T47] dvb-usb: error -19 while querying for an remote control event. [ 277.194524][ T24] m920x_read = error: -19 [ 277.200168][ T24] dvb-usb: error -19 while querying for an remote control event. [ 277.244381][T14544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.253916][T14544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.266958][T14544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.279265][T14544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.360891][T14544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.384128][ T5896] m920x_read = error: -19 [ 277.388519][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 277.404952][T14544] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.419159][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.426301][T13292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.441888][T13285] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.449053][T13285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.565171][ T5896] m920x_read = error: -19 [ 277.569665][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 277.744698][ T5896] m920x_read = error: -19 [ 277.749071][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 277.780960][T14544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.843490][T14544] veth0_vlan: entered promiscuous mode [ 277.856224][T14544] veth1_vlan: entered promiscuous mode [ 277.893950][T14544] veth0_macvtap: entered promiscuous mode [ 277.911541][T14544] veth1_macvtap: entered promiscuous mode [ 277.934198][ T5896] m920x_read = error: -19 [ 277.938622][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 277.957406][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.974161][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.993932][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.007859][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.025462][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.038740][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.049965][T14544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.066918][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.078028][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.088313][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.098978][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.108879][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.119418][ T5896] m920x_read = error: -19 [ 278.123726][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 278.140395][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.150254][T14544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.162818][T14544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.176175][T14544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.198671][T14716] sp0: Synchronizing with TNC [ 278.205255][T14544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.220881][T14544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.232204][T14544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.241177][T14544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.298199][ T24] m920x_read = error: -19 [ 278.302551][ T24] dvb-usb: error -19 while querying for an remote control event. [ 278.303181][T14719] sp0: Synchronizing with TNC [ 278.340748][ T9] kernel write not supported for file /1769/loginuid (pid: 9 comm: kworker/0:0) [ 278.349832][T13274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.359990][T13274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.425432][T13274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.433265][T13274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.480707][ T30] audit: type=1804 audit(1746188899.179:755): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3816" name="/" dev="pidfs" ino=14726 res=1 errno=0 [ 278.504208][ T24] m920x_read = error: -19 [ 278.509710][ T24] dvb-usb: error -19 while querying for an remote control event. [ 278.674195][ T5896] m920x_read = error: -19 [ 278.678578][ T5896] dvb-usb: error -19 while querying for an remote control event. [ 278.844185][ T5847] m920x_read = error: -19 [ 278.848563][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 278.864071][ T24] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 278.891486][ T30] audit: type=1400 audit(1746188899.599:756): avc: denied { watch } for pid=14743 comm="syz.0.3824" path="/764/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 278.940426][ T30] audit: type=1400 audit(1746188899.599:757): avc: denied { watch_sb } for pid=14743 comm="syz.0.3824" path="/764/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.016173][ T5847] m920x_read = error: -19 [ 279.020528][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 279.094082][ T5896] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 279.104294][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.115043][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 279.134527][ T24] usb 2-1: config 175 has an invalid interface number: 158 but max is 0 [ 279.142889][ T24] usb 2-1: config 175 has no interface number 0 [ 279.154028][ T24] usb 2-1: config 175 interface 158 altsetting 255 endpoint 0xF has invalid wMaxPacketSize 0 [ 279.174061][ T24] usb 2-1: config 175 interface 158 altsetting 255 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 279.185704][ T24] usb 2-1: config 175 interface 158 has no altsetting 0 [ 279.204727][ T5847] m920x_read = error: -19 [ 279.209072][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 279.221053][ T24] usb 2-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=d1.01 [ 279.239126][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.254331][ T24] usb 2-1: Product: syz [ 279.259472][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.275339][ T24] usb 2-1: Manufacturer: syz [ 279.279962][ T24] usb 2-1: SerialNumber: syz [ 279.284904][ T5896] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 279.293958][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.317963][ T5896] usb 3-1: config 0 descriptor?? [ 279.374105][ T5889] m920x_read = error: -19 [ 279.378533][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 279.530837][ T24] usb 2-1: USB disconnect, device number 39 [ 279.564984][ T5889] m920x_read = error: -19 [ 279.569338][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 279.584613][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 279.590580][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.616063][ T5896] usb 3-1: USB disconnect, device number 38 [ 279.764269][ T5889] m920x_read = error: -19 [ 279.768639][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 279.914515][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 279.944110][ T5889] m920x_read = error: -19 [ 279.950050][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 280.078401][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 280.105276][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.114140][ T5889] m920x_read = error: -19 [ 280.121927][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 280.132678][ T9] usb 1-1: config 0 descriptor?? [ 280.149570][T13258] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.166919][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 280.314165][ T5889] m920x_read = error: -19 [ 280.318544][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 280.484136][ T5889] m920x_read = error: -19 [ 280.488498][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 280.570501][ T9] gspca_cpia1: usb_control_msg 03, error -32 [ 280.576957][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 280.583129][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 280.589595][ T9] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 280.598238][ T9] usb 1-1: USB disconnect, device number 42 [ 280.654223][ T5889] m920x_read = error: -19 [ 280.658585][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 280.824142][ T5889] m920x_read = error: -19 [ 280.828503][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 385.953944][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 385.960911][ C0] rcu: 1-...!: (1 GPs behind) idle=406c/1/0x4000000000000000 softirq=65493/65495 fqs=1 [ 385.971451][ C0] rcu: (detected by 0, t=10506 jiffies, g=50601, q=669 ncpus=2) [ 385.979162][ C0] Sending NMI from CPU 0 to CPUs 1: [ 385.979185][ C1] NMI backtrace for cpu 1 [ 385.979198][ C1] CPU: 1 UID: 0 PID: 14780 Comm: syz.4.3839 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 385.979215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 385.979222][ C1] RIP: 0010:mark_lock+0x6/0x610 [ 385.979245][ C1] Code: 80 e2 2b 8e e8 db b8 6a 03 e9 4a fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 f0 48 83 ec 70 65 48 8b 05 5b fb 0b [ 385.979257][ C1] RSP: 0018:ffffc90000a08cd0 EFLAGS: 00000002 [ 385.979268][ C1] RAX: 000000000000000c RBX: ffff88805b588b68 RCX: 0000000000000000 [ 385.979277][ C1] RDX: 0000000000000008 RSI: ffff88805b588b68 RDI: ffff88805b588000 [ 385.979285][ C1] RBP: ffffc90000a08cd8 R08: 0000000000080000 R09: 0000000000000001 [ 385.979293][ C1] R10: 0000000000000000 R11: ffff8880b8527858 R12: 0000000000000002 [ 385.979301][ C1] R13: 0000000000000003 R14: ffff88805b588000 R15: 0000000000000000 [ 385.979309][ C1] FS: 0000000000000000(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 385.979322][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.979331][ C1] CR2: 0000001b2ef1cff8 CR3: 000000000e180000 CR4: 00000000003526f0 [ 385.979339][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.979347][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.979355][ C1] Call Trace: [ 385.979360][ C1] [ 385.979367][ C1] __lock_acquire+0x499/0x1ba0 [ 385.979386][ C1] ? find_held_lock+0x2b/0x80 [ 385.979400][ C1] ? advance_sched+0x6ec/0xc80 [ 385.979418][ C1] lock_acquire+0x179/0x350 [ 385.979435][ C1] ? __hrtimer_run_queues+0x2bc/0xad0 [ 385.979452][ C1] _raw_spin_lock_irq+0x36/0x50 [ 385.979465][ C1] ? __hrtimer_run_queues+0x2bc/0xad0 [ 385.979477][ C1] __hrtimer_run_queues+0x2bc/0xad0 [ 385.979492][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 385.979505][ C1] ? read_tsc+0x9/0x20 [ 385.979523][ C1] hrtimer_interrupt+0x397/0x8e0 [ 385.979540][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 385.979556][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 385.979571][ C1] [ 385.979576][ C1] [ 385.979581][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.979595][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 385.979608][ C1] Code: e9 2d b8 5a 00 be 03 00 00 00 5b e9 72 7f 15 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 18 ad e8 11 65 8b 05 29 ad e8 11 a9 00 01 ff 00 74 1d [ 385.979619][ C1] RSP: 0018:ffffc90003adf7e0 EFLAGS: 00000246 [ 385.979629][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff820af94b [ 385.979637][ C1] RDX: ffff88805b588000 RSI: ffffffff820af952 RDI: 0000000000000004 [ 385.979645][ C1] RBP: 00000000000001fd R08: 0000000000000004 R09: 00000000000001fd [ 385.979653][ C1] R10: 00000000000000c5 R11: 0000000000000000 R12: 0000000000000001 [ 385.979661][ C1] R13: 00000000000000c5 R14: ffff88804fbf9000 R15: 00000000000000c4 [ 385.979671][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x15b/0x560 [ 385.979696][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 385.979716][ C1] __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 385.979736][ C1] unmap_page_range+0x156e/0x4390 [ 385.979758][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 385.979772][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 385.979789][ C1] ? uprobe_munmap+0x20/0x5c0 [ 385.979806][ C1] unmap_single_vma+0x194/0x2a0 [ 385.979821][ C1] unmap_vmas+0x22c/0x490 [ 385.979837][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 385.979852][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 385.979872][ C1] exit_mmap+0x1b9/0xb90 [ 385.979888][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 385.979906][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 385.979929][ C1] __mmput+0x12a/0x410 [ 385.979946][ C1] mmput+0x62/0x70 [ 385.979959][ C1] do_exit+0x9d1/0x2c30 [ 385.979978][ C1] ? __pfx_do_exit+0x10/0x10 [ 385.979994][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 385.980008][ C1] do_group_exit+0xd3/0x2a0 [ 385.980026][ C1] __x64_sys_exit_group+0x3e/0x50 [ 385.980043][ C1] x64_sys_call+0x1530/0x1730 [ 385.980060][ C1] do_syscall_64+0xcd/0x260 [ 385.980076][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.980089][ C1] RIP: 0033:0x7f1879f8e969 [ 385.980098][ C1] Code: Unable to access opcode bytes at 0x7f1879f8e93f. [ 385.980104][ C1] RSP: 002b:00007ffcb5a18ad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 385.980115][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1879f8e969 [ 385.980124][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.980132][ C1] RBP: 00007ffcb5a18b3c R08: 00000005b5a18bcf R09: 00000000000927c0 [ 385.980140][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000333 [ 385.980147][ C1] R13: 00000000000927c0 R14: 00000000000445ef R15: 00007ffcb5a18b90 [ 385.980160][ C1] [ 385.980181][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g50601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 386.469980][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 386.479944][ C0] rcu: RCU grace-period kthread stack dump: [ 386.485825][ C0] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 386.499312][ C0] Call Trace: [ 386.502583][ C0] [ 386.505514][ C0] __schedule+0x116f/0x5de0 [ 386.510023][ C0] ? find_held_lock+0x2b/0x80 [ 386.514700][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 386.519644][ C0] ? __pfx___schedule+0x10/0x10 [ 386.524495][ C0] ? find_held_lock+0x2b/0x80 [ 386.529170][ C0] ? schedule+0x2d7/0x3a0 [ 386.533498][ C0] schedule+0xe7/0x3a0 [ 386.537562][ C0] schedule_timeout+0x123/0x290 [ 386.542405][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 386.547783][ C0] ? __pfx_process_timeout+0x10/0x10 [ 386.553068][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.558868][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 386.564328][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 386.569093][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 386.574379][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 386.579236][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 386.585037][ C0] rcu_gp_kthread+0x270/0x380 [ 386.589715][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.594913][ C0] ? rcu_is_watching+0x12/0xc0 [ 386.599678][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 386.604874][ C0] ? __kthread_parkme+0x19e/0x250 [ 386.609898][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.615095][ C0] kthread+0x3c2/0x780 [ 386.619158][ C0] ? __pfx_kthread+0x10/0x10 [ 386.623742][ C0] ? __pfx_kthread+0x10/0x10 [ 386.628323][ C0] ? __pfx_kthread+0x10/0x10 [ 386.632908][ C0] ? __pfx_kthread+0x10/0x10 [ 386.637491][ C0] ? rcu_is_watching+0x12/0xc0 [ 386.642250][ C0] ? __pfx_kthread+0x10/0x10 [ 386.646835][ C0] ret_from_fork+0x45/0x80 [ 386.651244][ C0] ? __pfx_kthread+0x10/0x10 [ 386.655842][ C0] ret_from_fork_asm+0x1a/0x30 [ 386.660617][ C0] [ 386.663628][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 386.669943][ C0] CPU: 0 UID: 0 PID: 13274 Comm: kworker/u8:31 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 386.682262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 386.692308][ C0] Workqueue: events_unbound toggle_allocation_gate [ 386.698813][ C0] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 386.705483][ C0] Code: 89 ee e8 be 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 5d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 386.725086][ C0] RSP: 0000:ffffc9000bac7938 EFLAGS: 00000293 [ 386.731145][ C0] RAX: 0000000000000000 RBX: ffff8880b853f740 RCX: ffffffff81af1bb9 [ 386.739108][ C0] RDX: ffff88807faca440 RSI: ffffffff81af1b93 RDI: 0000000000000005 [ 386.747073][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 386.755036][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170a7ee9 [ 386.762997][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b843b040 [ 386.770965][ C0] FS: 0000000000000000(0000) GS:ffff8881249e2000(0000) knlGS:0000000000000000 [ 386.779888][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.786465][ C0] CR2: 000000110c2b22a3 CR3: 000000000e180000 CR4: 00000000003526f0 [ 386.794429][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.802391][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.810352][ C0] Call Trace: [ 386.813621][ C0] [ 386.816556][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 386.821579][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 386.826687][ C0] text_poke_bp_batch+0x220/0x760 [ 386.831714][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 386.837258][ C0] ? __jump_label_patch+0x1db/0x400 [ 386.842457][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 386.848696][ C0] ? find_held_lock+0x2b/0x80 [ 386.853370][ C0] text_poke_finish+0x30/0x40 [ 386.858043][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 386.864020][ C0] jump_label_update+0x376/0x550 [ 386.868967][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 386.874863][ C0] static_key_enable+0x1a/0x20 [ 386.879626][ C0] toggle_allocation_gate+0xfa/0x280 [ 386.884912][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 386.890810][ C0] ? rcu_is_watching+0x12/0xc0 [ 386.895574][ C0] process_one_work+0x9cc/0x1b70 [ 386.900512][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 386.906668][ C0] ? __pfx_process_one_work+0x10/0x10 [ 386.912127][ C0] ? assign_work+0x1a0/0x250 [ 386.916712][ C0] worker_thread+0x6c8/0xf10 [ 386.921307][ C0] ? __pfx_worker_thread+0x10/0x10 [ 386.926411][ C0] kthread+0x3c2/0x780 [ 386.930471][ C0] ? __pfx_kthread+0x10/0x10 [ 386.935052][ C0] ? __pfx_kthread+0x10/0x10 [ 386.939632][ C0] ? __pfx_kthread+0x10/0x10 [ 386.944211][ C0] ? __pfx_kthread+0x10/0x10 [ 386.948793][ C0] ? rcu_is_watching+0x12/0xc0 [ 386.953552][ C0] ? __pfx_kthread+0x10/0x10 [ 386.958134][ C0] ret_from_fork+0x45/0x80 [ 386.962542][ C0] ? __pfx_kthread+0x10/0x10 [ 386.967123][ C0] ret_from_fork_asm+0x1a/0x30 [ 386.971899][ C0]