last executing test programs: 4m28.68559725s ago: executing program 32 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4m13.08259813s ago: executing program 33 (id=1316): timer_create(0x2, &(0x7f0000000000)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) timer_gettime(r0, &(0x7f0000000180)) 3m53.622755314s ago: executing program 34 (id=1517): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) lseek(r0, 0x289e0cb5, 0x0) 3m9.417333305s ago: executing program 35 (id=2318): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_secret(0x80000) 2m30.99478338s ago: executing program 2 (id=2939): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x6) 2m30.929145107s ago: executing program 2 (id=2941): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m30.816430599s ago: executing program 2 (id=2943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) 2m30.8121367s ago: executing program 2 (id=2944): socket$nl_generic(0x11, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/213, 0xd5}], 0x1, 0xc1, 0xffffffff) 2m30.680363414s ago: executing program 2 (id=2947): openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi0\x00', 0x80882, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 2m30.627856375s ago: executing program 2 (id=2950): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_pidfd_open(0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 2m15.551053349s ago: executing program 36 (id=2950): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_pidfd_open(0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 2m12.831071128s ago: executing program 8 (id=3294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5f7, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0xc}, {0xfe, 0x5, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x8}, {0xb, 0x50, 0x7f, '\x00', 0x20}, {0x0, 0x0, 0x4}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xd6}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x6}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x1, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x4d}) 2m12.679347505s ago: executing program 8 (id=3297): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc020ff0b, 0x0) 2m12.609826539s ago: executing program 8 (id=3301): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 2m12.529135975s ago: executing program 8 (id=3303): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) 2m12.486149333s ago: executing program 8 (id=3305): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x6}) 2m12.210452738s ago: executing program 8 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m12.050175663s ago: executing program 37 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m48.483039159s ago: executing program 9 (id=3761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r1, 0xffffffffffffffff, 0x2c}, 0x20) 1m48.400897254s ago: executing program 9 (id=3765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 1m48.311746191s ago: executing program 9 (id=3767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m48.230557957s ago: executing program 9 (id=3769): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="e8dc7bb160f4812f195258a30feb79064df6b077422ee48fe38405ffe2a27510fddc89f65f9521a7cce0caf6d782cf61ba7a50a3732948dc8b7efa0a047c3f550e09d59d53c6bacf23f2a52ff03918ada8847f0a2da8bac137bc40290993752ed14449c26956c32249644168bc0297b53df2cd5675b62952ec89bb272b97696caefc6c22", 0xfffffe3a}], 0x1, 0x2, 0x5) 1m48.132460691s ago: executing program 9 (id=3770): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1m48.099678835s ago: executing program 9 (id=3772): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1m33.039747216s ago: executing program 38 (id=3772): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1m30.412845642s ago: executing program 5 (id=4028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6bdb7c03b5768397}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 1m29.079448236s ago: executing program 5 (id=4039): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3ff, 0x100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m28.94437767s ago: executing program 5 (id=4042): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1m27.84797635s ago: executing program 5 (id=4057): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m27.735627768s ago: executing program 5 (id=4058): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r0 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 1m27.328146839s ago: executing program 5 (id=4061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xc190, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @broadcast}, 0x14) 1m27.038606352s ago: executing program 39 (id=4061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xc190, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @broadcast}, 0x14) 45.840145248s ago: executing program 4 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 39.556044763s ago: executing program 3 (id=4621): r0 = socket$inet6(0xa, 0x2, 0x0) setfsuid(0xee00) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) setresuid(r1, 0x0, r1) 39.530392611s ago: executing program 3 (id=4622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) 39.501349584s ago: executing program 3 (id=4623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x40, r1, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4551df1ed02fde356dca143bb74202e4a6798329958fde5a"}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 39.47283847s ago: executing program 3 (id=4624): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(0xffffffffffffffff) 39.241215095s ago: executing program 3 (id=4625): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x70bd25, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x3c}}, 0x0) 39.203989061s ago: executing program 3 (id=4626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() 38.196879154s ago: executing program 4 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000003803afffe800000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000000aa741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af18020001000100000000001995319cff0318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e5d3de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000030bd47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032140fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb00145e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f0005d5170000dce9674a36da018dff16e70b8b14c4b7"], 0x0) 30.098937705s ago: executing program 4 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 24.168570165s ago: executing program 40 (id=4626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() 21.839183817s ago: executing program 4 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 20.753108709s ago: executing program 0 (id=4063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 19.923602059s ago: executing program 4 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 19.155822969s ago: executing program 0 (id=4063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 17.467682723s ago: executing program 0 (id=4063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 15.484221116s ago: executing program 0 (id=4063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 13.514562381s ago: executing program 7 (id=4809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x8, 0x103, &(0x7f00000000c0)="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"}) 13.215331613s ago: executing program 0 (id=4063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 8.74755881s ago: executing program 4 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 7.066678914s ago: executing program 7 (id=4809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x8, 0x103, &(0x7f00000000c0)="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"}) 6.564978954s ago: executing program 7 (id=4809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x8, 0x103, &(0x7f00000000c0)="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"}) 5.775526081s ago: executing program 7 (id=4809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x8, 0x103, &(0x7f00000000c0)="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"}) 5.370948532s ago: executing program 0 (id=4063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 4.796057862s ago: executing program 7 (id=4809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x8, 0x103, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 3.501687524s ago: executing program 7 (id=4809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x8, 0x103, &(0x7f00000000c0)="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"}) 2.086470546s ago: executing program 1 (id=4959): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.093877136s ago: executing program 6 (id=4963): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 1.066846704s ago: executing program 6 (id=4964): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x4f, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "d8e4ad6fc1d3b573e94331d0b791a724"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 1.025733913s ago: executing program 6 (id=4965): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x18}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) 205.803533ms ago: executing program 1 (id=4966): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 178.6963ms ago: executing program 1 (id=4967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100ffff00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 159.179619ms ago: executing program 6 (id=4968): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) 136.263347ms ago: executing program 1 (id=4969): io_setup(0x5, &(0x7f0000000000)) setresuid(0x0, 0xee00, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) 112.351053ms ago: executing program 6 (id=4970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 61.475743ms ago: executing program 1 (id=4971): getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 53.515881ms ago: executing program 6 (id=4972): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10002) 0s ago: executing program 1 (id=4973): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r1, 0x25, 0x8, @val=@tcx={@void, @value=r2}}, 0x1c) kernel console output (not intermixed with test programs): =2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 309.944204][ T6004] usb 2-1: config 0 descriptor?? [ 309.993776][ T6004] gspca_main: se401-2.14.0 probing 047d:5003 [ 310.020151][ T30] audit: type=1400 audit(1762768752.584:1010): avc: denied { read append } for pid=15543 comm="syz.6.4003" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 310.028885][T15541] Failed to initialize the IGMP autojoin socket (err -2) [ 310.046549][ T30] audit: type=1400 audit(1762768752.584:1011): avc: denied { open } for pid=15543 comm="syz.6.4003" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 310.084207][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 310.102829][ T9] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 310.113804][ T9] usb 6-1: config 0 has no interface number 0 [ 310.118419][ T30] audit: type=1400 audit(1762768752.584:1012): avc: denied { write } for pid=15543 comm="syz.6.4003" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 310.120217][ T9] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.144768][ T30] audit: type=1400 audit(1762768752.664:1013): avc: denied { read write } for pid=15545 comm="syz.3.4004" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.159221][ T9] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 310.183727][ T30] audit: type=1400 audit(1762768752.664:1014): avc: denied { open } for pid=15545 comm="syz.3.4004" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.194592][ T9] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 310.229846][T15549] netlink: 'syz.6.4005': attribute type 1 has an invalid length. [ 310.242810][ T9] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.322012][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 310.331409][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.341835][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.354510][ T9] usb 6-1: Product: syz [ 310.358693][ T9] usb 6-1: Manufacturer: syz [ 310.363327][ T9] usb 6-1: SerialNumber: syz [ 310.377389][ T9] usb 6-1: config 0 descriptor?? [ 310.426067][ T6004] gspca_se401: ExtraFeatures: 117 [ 310.433691][ T6004] gspca_se401: Too many frame sizes [ 310.468389][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.536740][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.558133][T15541] chnl_net:caif_netlink_parms(): no params data found [ 310.609352][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.620626][ T9] iowarrior 6-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 310.680888][ T5826] usb 2-1: USB disconnect, device number 24 [ 310.731266][ T6004] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 310.732677][T15541] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.746746][T15541] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.758599][T15541] bridge_slave_0: entered allmulticast mode [ 310.765952][T15541] bridge_slave_0: entered promiscuous mode [ 310.793447][T15541] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.802581][T15541] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.809804][T15541] bridge_slave_1: entered allmulticast mode [ 310.817138][T15541] bridge_slave_1: entered promiscuous mode [ 310.826895][ T79] usb 6-1: USB disconnect, device number 35 [ 310.892639][ T6004] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 310.906200][ T6004] usb 7-1: config 1 has no interface number 0 [ 310.906433][T15541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.915519][ T6004] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 310.933597][ T6004] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 310.944815][T15541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.954910][ T6004] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 310.966092][ T6004] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.989409][ T6004] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 310.999390][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.007617][ T6004] usb 7-1: Product: syz [ 311.012102][ T6004] usb 7-1: Manufacturer: syz [ 311.016713][ T6004] usb 7-1: SerialNumber: syz [ 311.022427][ T13] bridge_slave_1: left allmulticast mode [ 311.028062][ T13] bridge_slave_1: left promiscuous mode [ 311.035180][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.045682][T15561] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 311.053892][T15561] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 311.062704][ T13] bridge_slave_0: left allmulticast mode [ 311.069925][ T13] bridge_slave_0: left promiscuous mode [ 311.076356][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.239376][ T13] bridge0 (unregistering): left promiscuous mode [ 311.278583][T15561] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 311.286045][T15561] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 311.435496][T15583] loop8: detected capacity change from 0 to 7 [ 311.453366][T15583] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 311.460642][T15583] loop8: partition table partially beyond EOD, truncated [ 311.475614][T15583] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 311.486175][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.501794][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.512128][T15583] loop8: p2 start 956478 is beyond EOD, truncated [ 311.513062][ T13] bond0 (unregistering): Released all slaves [ 311.551095][T15541] team0: Port device team_slave_0 added [ 311.634900][ T6004] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 311.663511][T15541] team0: Port device team_slave_1 added [ 311.762235][T15541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.769228][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.798004][T15541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.816909][T15541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.824954][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.851736][T15541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.890161][T15596] netlink: 'syz.5.4023': attribute type 12 has an invalid length. [ 311.905662][T15596] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.4023'. [ 311.917733][ T6004] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 311.927633][ T6004] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 311.953642][ T51] Bluetooth: hci6: command tx timeout [ 311.957852][ T6004] usb 7-1: USB disconnect, device number 24 [ 312.013706][ T6004] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 312.208692][ T95] block nbd2: Possible stuck request ffff8880262a0000: control (read@0,1024B). Runtime 120 seconds [ 312.219964][ T95] block nbd2: Possible stuck request ffff8880262a01c0: control (read@1024,1024B). Runtime 120 seconds [ 312.231305][ T95] block nbd2: Possible stuck request ffff8880262a0380: control (read@2048,1024B). Runtime 120 seconds [ 312.242776][ T95] block nbd2: Possible stuck request ffff8880262a0540: control (read@3072,1024B). Runtime 120 seconds [ 312.295275][T15541] hsr_slave_0: entered promiscuous mode [ 312.301876][ T6004] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 312.303549][T15541] hsr_slave_1: entered promiscuous mode [ 312.317794][T15541] debugfs: 'hsr0' already exists in 'hsr' [ 312.323669][T15541] Cannot create hsr debugfs directory [ 312.332884][ T13] hsr_slave_0: left promiscuous mode [ 312.338561][ T13] hsr_slave_1: left promiscuous mode [ 312.344324][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.352818][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.360516][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.368014][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.375961][ T13] batman_adv: batadv0: Interface deactivated: macvlan3 [ 312.386359][ T13] batman_adv: batadv0: Removing interface: macvlan3 [ 312.402993][ T13] veth0_to_hsr: left allmulticast mode [ 312.408462][ T13] veth0_to_hsr: left promiscuous mode [ 312.413930][ T13] batadv_slave_1: left promiscuous mode [ 312.419578][ T13] veth1_macvtap: left promiscuous mode [ 312.425146][ T13] veth0_macvtap: left promiscuous mode [ 312.430669][ T13] veth1_vlan: left promiscuous mode [ 312.436434][ T13] veth0_vlan: left promiscuous mode [ 312.918304][ T13] team0 (unregistering): Port device team_slave_1 removed [ 312.960438][ T13] team0 (unregistering): Port device team_slave_0 removed [ 313.348891][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4038'. [ 313.508896][ T79] kernel read not supported for file /dsp (pid: 79 comm: kworker/1:1) [ 313.615573][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4044'. [ 313.701159][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 313.898178][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.914784][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.955393][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 313.991601][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 314.010969][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.019735][ T9] usb 4-1: Product: syz [ 314.024059][ T9] usb 4-1: Manufacturer: syz [ 314.029139][ T9] usb 4-1: SerialNumber: syz [ 314.036800][ T51] Bluetooth: hci6: command tx timeout [ 314.049388][T15664] vivid-007: disconnect [ 314.055883][ T9] usb 4-1: config 0 descriptor?? [ 314.070227][T15663] vivid-007: reconnect [ 314.072243][ T9] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 314.147949][T15667] vxcan1: tx address claim with dlc 0 [ 314.329914][T15541] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 314.343212][ T5885] usb 4-1: USB disconnect, device number 51 [ 314.380201][T15541] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 314.404958][T15541] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 314.429145][T15541] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 314.735664][T15541] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.778404][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.785555][T11765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.811477][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.818597][T11765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.969281][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 314.969296][ T30] audit: type=1400 audit(1762768757.544:1048): avc: denied { ioctl } for pid=15701 comm="syz.3.4059" path="socket:[55781]" dev="sockfs" ino=55781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.127158][T15706] serio: Serial port ptm0 [ 315.172161][ T30] audit: type=1400 audit(1762768757.734:1049): avc: denied { sys_module } for pid=15541 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 315.395503][T15541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.530929][ T30] audit: type=1400 audit(1762768758.094:1050): avc: denied { read } for pid=15727 comm="syz.6.4066" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 315.554337][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.562573][ C1] hrtimer: interrupt took 22438 ns [ 315.627180][ T30] audit: type=1400 audit(1762768758.134:1051): avc: denied { open } for pid=15727 comm="syz.6.4066" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 315.738084][ T30] audit: type=1400 audit(1762768758.144:1052): avc: denied { map } for pid=15727 comm="syz.6.4066" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 315.899725][ T30] audit: type=1400 audit(1762768758.464:1053): avc: denied { setopt } for pid=15740 comm="syz.1.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.056530][ T30] audit: type=1400 audit(1762768758.624:1054): avc: denied { read } for pid=15744 comm="syz.3.4070" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 316.084648][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.098774][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.101239][ T30] audit: type=1400 audit(1762768758.624:1055): avc: denied { open } for pid=15744 comm="syz.3.4070" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 316.106733][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.137423][ T5818] Bluetooth: hci6: command tx timeout [ 316.139406][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.150498][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.249566][T15749] Failed to initialize the IGMP autojoin socket (err -2) [ 316.263127][T15541] veth0_vlan: entered promiscuous mode [ 316.267650][T15541] veth1_vlan: entered promiscuous mode [ 316.345731][ T30] audit: type=1400 audit(1762768758.914:1056): avc: denied { relabelfrom } for pid=15749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 316.348591][T15541] veth0_macvtap: entered promiscuous mode [ 316.372478][ T30] audit: type=1400 audit(1762768758.914:1057): avc: denied { relabelto } for pid=15749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 316.396691][T15541] veth1_macvtap: entered promiscuous mode [ 316.421042][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.511915][T15541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.530403][T15541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.553970][T15541] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 316.556949][T15541] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 316.559331][T15541] wireguard: wg0: Could not create IPv4 socket [ 316.565066][T15541] wireguard: wg1: Could not create IPv4 socket [ 316.568502][T15541] wireguard: wg2: Could not create IPv4 socket [ 316.621518][ T5885] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 316.706228][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.706311][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.787451][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 316.790764][ T5885] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 316.790789][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.790805][ T5885] usb 4-1: Product: syz [ 316.790818][ T5885] usb 4-1: Manufacturer: syz [ 316.790830][ T5885] usb 4-1: SerialNumber: syz [ 316.797963][ T5885] usb 4-1: config 0 descriptor?? [ 316.802145][ T5885] option 4-1:0.0: GSM modem (1-port) converter detected [ 317.022697][ T6002] usb 4-1: USB disconnect, device number 52 [ 317.031955][ T6002] option 4-1:0.0: device disconnected [ 317.174948][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.187769][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.203510][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.211829][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.219312][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.248608][T15761] Failed to initialize the IGMP autojoin socket (err -2) [ 317.831419][ T9] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 317.831465][ T910] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 317.980655][T15785] netlink: 'syz.6.4081': attribute type 3 has an invalid length. [ 317.997026][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.004562][ T910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 318.005497][ T9] usb 4-1: config 0 has no interface number 0 [ 318.021286][ T910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 318.031155][ T9] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 318.038562][ T910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 318.055861][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.072058][ T910] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 318.088666][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.097031][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.100673][ T910] usb 2-1: Product: syz [ 318.121589][ T910] usb 2-1: Manufacturer: syz [ 318.122906][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 318.126291][ T910] usb 2-1: SerialNumber: syz [ 318.143372][ T910] usb 2-1: config 0 descriptor?? [ 318.147355][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 318.148855][T15776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.158114][ T9] usb 4-1: Product: syz [ 318.167611][ T9] usb 4-1: SerialNumber: syz [ 318.170570][T15776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.181872][ T910] usb 2-1: ucan: probing device on interface #0 [ 318.191700][ T9] usb 4-1: config 0 descriptor?? [ 318.206385][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 318.215079][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input64 [ 318.696568][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.696627][ T5809] usb 4-1: USB disconnect, device number 53 [ 318.703563][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 318.726645][ T5809] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 318.809299][ T910] ucan 2-1:0.0 can0: registered device [ 318.848333][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4089'. [ 319.004102][ T910] ucan 2-1:0.0 can0: firmware string: unknown [ 319.016103][ T910] usb 2-1: USB disconnect, device number 25 [ 319.087221][T15840] input: syz1 as /devices/virtual/input/input65 [ 319.311427][ T51] Bluetooth: hci4: command tx timeout [ 319.621401][ T9] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 319.753259][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4101'. [ 319.804052][ T9] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 319.829640][ T9] usb 4-1: config 0 has no interface number 0 [ 319.841415][ T9] usb 4-1: config 0 interface 117 has no altsetting 0 [ 319.863809][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=e7.12 [ 319.885015][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.901445][ T9] usb 4-1: Product: syz [ 319.911057][ T9] usb 4-1: Manufacturer: syz [ 319.915663][ T9] usb 4-1: SerialNumber: syz [ 319.957240][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.967970][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.986283][ T9] usb 4-1: config 0 descriptor?? [ 319.993657][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.000955][ T9] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 320.012501][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.027495][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.085707][T15882] Failed to initialize the IGMP autojoin socket (err -2) [ 320.601118][ T910] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 320.771118][ T910] usb 7-1: Using ep0 maxpacket: 8 [ 320.785177][ T910] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 320.813779][ T910] usb 7-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.839235][ T910] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 320.876521][ T910] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.898033][ T910] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 320.921159][ T910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.935513][ T910] usb 7-1: config 0 descriptor?? [ 320.944935][T15761] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 320.984388][T15761] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 321.010557][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 321.010572][ T30] audit: type=1400 audit(1762768763.564:1066): avc: denied { create } for pid=15929 comm="syz.1.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.043318][T15761] wireguard: wg0: Could not create IPv4 socket [ 321.072567][ T30] audit: type=1400 audit(1762768763.584:1067): avc: denied { bind } for pid=15929 comm="syz.1.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.098813][T15761] wireguard: wg1: Could not create IPv4 socket [ 321.107472][T15761] wireguard: wg2: Could not create IPv4 socket [ 321.111889][T15934] kvm: kvm [15933]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000040) = 0x0 [ 321.141665][ T30] audit: type=1400 audit(1762768763.584:1068): avc: denied { connect } for pid=15929 comm="syz.1.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.191386][ T30] audit: type=1400 audit(1762768763.584:1069): avc: denied { write } for pid=15929 comm="syz.1.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.246007][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.264869][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.286352][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.302966][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.316681][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.349945][ T910] gt683r_led 0003:1770:FF00.003F: item fetching failed at offset 2/5 [ 321.362572][T15936] Failed to initialize the IGMP autojoin socket (err -2) [ 321.370189][ T910] gt683r_led 0003:1770:FF00.003F: hid parsing failed [ 321.377648][ T910] gt683r_led 0003:1770:FF00.003F: probe with driver gt683r_led failed with error -22 [ 321.578002][ T5826] usb 7-1: USB disconnect, device number 25 [ 321.591799][ T5885] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 321.762940][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.772651][ T5885] usb 2-1: not running at top speed; connect to a high speed hub [ 321.786973][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.811421][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.844869][ T5885] usb 2-1: string descriptor 0 read error: -22 [ 321.851468][ T5885] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.860510][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.897649][ T5885] usb 2-1: 0:2 : does not exist [ 322.160079][ T30] audit: type=1400 audit(1762768764.724:1070): avc: denied { wake_alarm } for pid=15976 comm="syz.6.4115" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 322.309963][ T30] audit: type=1400 audit(1762768764.874:1071): avc: denied { setopt } for pid=15984 comm="syz.6.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.380815][ T30] audit: type=1400 audit(1762768764.944:1072): avc: denied { create } for pid=15988 comm="syz.6.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.401269][ T5892] usb 4-1: USB disconnect, device number 54 [ 322.437866][ T30] audit: type=1400 audit(1762768764.974:1073): avc: denied { write } for pid=15988 comm="syz.6.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.476379][ T30] audit: type=1400 audit(1762768764.974:1074): avc: denied { nlmsg_write } for pid=15988 comm="syz.6.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.729368][ T5885] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 322.743476][ T5885] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 322.767824][ T5885] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 322.781898][ T5885] usb 2-1: USB disconnect, device number 26 [ 322.811151][ T910] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 322.981121][ T910] usb 7-1: Using ep0 maxpacket: 16 [ 322.987879][ T910] usb 7-1: config index 0 descriptor too short (expected 65532, got 18) [ 322.996493][ T910] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 323.007083][ T910] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 323.018448][ T910] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 323.027837][ T910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.035949][ T910] usb 7-1: Product: syz [ 323.040232][ T910] usb 7-1: Manufacturer: syz [ 323.045840][ T910] usb 7-1: SerialNumber: syz [ 323.059701][ T910] r8152-cfgselector 7-1: Unknown version 0x0000 [ 323.066367][ T910] r8152-cfgselector 7-1: config 0 descriptor?? [ 323.318115][ T30] audit: type=1400 audit(1762768765.884:1075): avc: denied { ioctl } for pid=16037 comm="syz.1.4123" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56922 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 323.392308][ T5823] Bluetooth: hci5: command tx timeout [ 323.520515][ T910] r8152-cfgselector 7-1: USB disconnect, device number 26 [ 324.423818][ T910] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 324.596328][ T910] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 324.616869][T16123] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4137'. [ 324.626236][ T910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.639198][ T910] usb 7-1: Product: syz [ 324.651077][ T910] usb 7-1: Manufacturer: syz [ 324.655693][ T910] usb 7-1: SerialNumber: syz [ 324.708299][ T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0) [ 324.934170][T16148] sp0: Synchronizing with TNC [ 324.948172][T16147] [U] è`` [ 325.102693][ T910] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 325.128349][ T910] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 325.200108][T16163] netlink: 'syz.3.4149': attribute type 15 has an invalid length. [ 325.210491][T16163] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4149'. [ 325.345179][ T910] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 325.357569][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 325.365519][ T910] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 325.378726][ T910] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 325.395967][ T910] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 325.409767][ T910] usb 7-1: USB disconnect, device number 27 [ 325.471408][ T5823] Bluetooth: hci5: command tx timeout [ 325.523231][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.533701][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 325.549917][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.559283][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.567422][ T24] usb 2-1: Product: syz [ 325.571763][ T24] usb 2-1: Manufacturer: syz [ 325.576363][ T24] usb 2-1: SerialNumber: syz [ 325.581613][ T5892] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 325.751950][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 325.763683][ T5892] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 325.772220][ T5892] usb 4-1: config 0 has no interface number 0 [ 325.778331][ T5892] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 325.796066][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.804503][ T5892] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 325.816010][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.828816][ T5892] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 325.842467][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.852635][ T5892] usb 4-1: Product: syz [ 325.855889][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 325.856799][ T5892] usb 4-1: Manufacturer: syz [ 325.869738][ T5892] usb 4-1: SerialNumber: syz [ 325.885780][ T5892] usb 4-1: config 0 descriptor?? [ 325.890613][ T24] usb 2-1: USB disconnect, device number 27 [ 325.891367][T16170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 325.907941][T16170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.126876][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.136025][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.145461][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.148191][T16170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.162104][T16170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.201470][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.214512][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.224923][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.311140][ T5885] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 326.313808][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.329460][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 326.473072][ T5885] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 326.481466][ T5885] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 326.503566][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.528515][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 326.551439][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.583160][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.601746][ T5892] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 326.623941][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.634378][ T5892] asix 4-1:0.251: probe with driver asix failed with error -524 [ 326.644313][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.854516][ T5892] usb 4-1: USB disconnect, device number 55 [ 326.890461][ T5885] usb 2-1: usb_control_msg returned -71 [ 326.907256][ T5885] usbtmc 2-1:16.0: can't read capabilities [ 326.925698][ T5885] usbtmc 2-1:16.0: Failed to submit iin_urb [ 326.938817][ T5885] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -90 [ 326.953232][ T5885] usb 2-1: USB disconnect, device number 28 [ 327.033756][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.050172][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.060286][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.069369][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.090593][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.124758][T15936] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 327.125320][T16224] Failed to initialize the IGMP autojoin socket (err -2) [ 327.148038][T15936] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 327.158161][T15936] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 327.168497][T15936] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 327.560768][ T51] Bluetooth: hci5: command tx timeout [ 327.613834][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 327.613849][ T30] audit: type=1400 audit(1762768770.184:1092): avc: denied { watch } for pid=16244 comm="syz.3.4159" path="/913" dev="tmpfs" ino=4656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 327.944068][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.956759][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.967283][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.970622][T15936] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 327.975212][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.998836][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 328.039877][T15936] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 328.078169][T15936] wireguard: wg0: Could not create IPv4 socket [ 328.099731][T15936] wireguard: wg1: Could not create IPv4 socket [ 328.120230][T15936] wireguard: wg2: Could not create IPv4 socket [ 328.138220][T16260] Failed to initialize the IGMP autojoin socket (err -2) [ 328.431255][ T5823] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 329.179822][ T30] audit: type=1400 audit(1762768771.744:1093): avc: denied { create } for pid=16327 comm="syz.6.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 329.255433][ T30] audit: type=1400 audit(1762768771.794:1094): avc: denied { bind } for pid=16327 comm="syz.6.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 329.520554][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.544676][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.556429][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.566131][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.574560][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.617037][T16347] Failed to initialize the IGMP autojoin socket (err -2) [ 329.990572][T16374] binder: BC_ATTEMPT_ACQUIRE not supported [ 329.996964][ T30] audit: type=1400 audit(1762768772.554:1095): avc: denied { ioctl } for pid=16373 comm="syz.3.4187" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.047715][T16374] binder: 16373:16374 ioctl c0306201 2000000003c0 returned -22 [ 330.094479][ T5885] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 330.143030][ T30] audit: type=1400 audit(1762768772.704:1096): avc: denied { create } for pid=16383 comm="syz.1.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 330.172762][ T30] audit: type=1400 audit(1762768772.714:1097): avc: denied { write } for pid=16383 comm="syz.1.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 330.216184][ T30] audit: type=1400 audit(1762768772.774:1098): avc: denied { mount } for pid=16386 comm="syz.3.4190" name="/" dev="rpc_pipefs" ino=58245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 330.259472][ T30] audit: type=1400 audit(1762768772.784:1099): avc: denied { mounton } for pid=16386 comm="syz.3.4190" path="/924/file0" dev="rpc_pipefs" ino=58245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 330.286291][ T30] audit: type=1400 audit(1762768772.824:1100): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 330.323557][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 330.333541][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 330.346482][ T5885] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 330.357920][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.362447][T16394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.376853][ T5885] usb 7-1: Product: syz [ 330.384920][ T5885] usb 7-1: Manufacturer: syz [ 330.389532][ T5885] usb 7-1: SerialNumber: syz [ 330.408426][ T5885] usb 7-1: config 0 descriptor?? [ 330.426933][T16366] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 330.436104][T16366] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 330.664232][T16366] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 330.682297][T16366] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 330.795195][ T30] audit: type=1400 audit(1762768773.364:1101): avc: denied { create } for pid=16411 comm="syz.3.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 331.017393][T16347] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 331.042820][T16347] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 331.048853][T16422] __nla_validate_parse: 1 callbacks suppressed [ 331.048867][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 331.082660][T16347] wireguard: wg0: Could not create IPv4 socket [ 331.098920][ T5885] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 331.110445][T16347] wireguard: wg1: Could not create IPv4 socket [ 331.134139][T16347] wireguard: wg2: Could not create IPv4 socket [ 331.217874][T16430] delete_channel: no stack [ 331.309416][ T5885] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 331.327526][ T5885] usb 7-1: USB disconnect, device number 28 [ 332.166984][T16447] gtp0: entered promiscuous mode [ 332.179561][T16447] gtp0: entered allmulticast mode [ 332.901487][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 332.901503][ T30] audit: type=1400 audit(1762768775.474:1110): avc: denied { read write } for pid=16481 comm="syz.3.4228" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 332.966180][ T30] audit: type=1400 audit(1762768775.504:1111): avc: denied { open } for pid=16481 comm="syz.3.4228" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 332.989650][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.034909][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.052999][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.057829][ T30] audit: type=1400 audit(1762768775.584:1112): avc: denied { set_context_mgr } for pid=16484 comm="syz.3.4230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 333.080695][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.098751][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.106929][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.173806][T16486] Failed to initialize the IGMP autojoin socket (err -2) [ 333.648606][ T30] audit: type=1400 audit(1762768776.214:1113): avc: denied { mount } for pid=16516 comm="syz.1.4244" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 333.838711][T16528] dummy0: entered allmulticast mode [ 333.847889][T16527] dummy0: left allmulticast mode [ 334.071117][ T6004] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 334.231272][ T6004] usb 7-1: Using ep0 maxpacket: 16 [ 334.241931][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.261156][ T6004] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 334.292166][ T6004] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 334.301245][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.321461][ T6004] usb 7-1: config 0 descriptor?? [ 334.603481][ T30] audit: type=1400 audit(1762768777.174:1114): avc: denied { create } for pid=16536 comm="syz.1.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 334.630909][ T30] audit: type=1400 audit(1762768777.204:1115): avc: denied { write } for pid=16536 comm="syz.1.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 334.630942][T16538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4254'. [ 334.734985][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4257'. [ 334.935168][ T6004] usbhid 7-1:0.0: can't add hid device: -71 [ 334.942807][ T6004] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 334.963687][ T6004] usb 7-1: USB disconnect, device number 29 [ 335.151613][ T51] Bluetooth: hci4: command tx timeout [ 335.263375][T16575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4263'. [ 335.420477][T16587] netlink: 'syz.1.4269': attribute type 11 has an invalid length. [ 335.691228][ T6004] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 335.735997][ T30] audit: type=1400 audit(1762768778.304:1116): avc: denied { mount } for pid=16600 comm="syz.3.4274" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 335.759272][ T30] audit: type=1400 audit(1762768778.304:1117): avc: denied { remount } for pid=16600 comm="syz.3.4274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 335.843277][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.854319][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.864078][ T6004] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 335.873596][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.883538][ T6004] usb 2-1: config 0 descriptor?? [ 336.031218][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 336.183026][T16486] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 336.193746][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.195641][T16486] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 336.211497][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.211537][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 336.211557][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.213620][ T24] usb 4-1: config 0 descriptor?? [ 336.252627][T16486] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 336.263363][T16486] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 336.299037][ T6004] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 336.307397][ T6004] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 336.315201][ T6004] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 336.325547][ T6004] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 336.333115][ T6004] playstation 0003:054C:0DF2.0040: unknown main item tag 0x0 [ 336.342800][ T6004] playstation 0003:054C:0DF2.0040: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 336.498062][ T6004] playstation 0003:054C:0DF2.0040: Invalid byte count transferred, expected 20 got 0 [ 336.507930][ T6004] playstation 0003:054C:0DF2.0040: Failed to retrieve DualSense pairing info: -22 [ 336.519543][ T6004] playstation 0003:054C:0DF2.0040: Failed to get MAC address from DualSense [ 336.528922][ T6004] playstation 0003:054C:0DF2.0040: Failed to create dualsense. [ 336.542043][ T6004] playstation 0003:054C:0DF2.0040: probe with driver playstation failed with error -22 [ 336.670829][ T24] konepure 0003:1E7D:2DBE.0041: unknown main item tag 0x2 [ 336.700666][ T24] konepure 0003:1E7D:2DBE.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 336.713074][T16486] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 336.748480][ T5865] usb 2-1: USB disconnect, device number 29 [ 336.784359][T16486] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 336.822578][T16486] wireguard: wg0: Could not create IPv4 socket [ 336.835883][T16486] wireguard: wg1: Could not create IPv4 socket [ 336.849018][T16486] wireguard: wg2: Could not create IPv4 socket [ 336.859304][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.870491][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.879007][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.888321][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.896474][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.925662][ T9] usb 4-1: USB disconnect, device number 56 [ 336.935907][T16618] Failed to initialize the IGMP autojoin socket (err -2) [ 337.097859][ T30] audit: type=1400 audit(1762768779.664:1118): avc: denied { mount } for pid=16626 comm="syz.6.4280" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 337.125234][ T30] audit: type=1400 audit(1762768779.694:1119): avc: denied { unmount } for pid=9184 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 337.962189][T16618] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 337.986850][T16618] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 338.013304][T16618] wireguard: wg0: Could not create IPv4 socket [ 338.032589][T16618] wireguard: wg1: Could not create IPv4 socket [ 338.046981][T16618] wireguard: wg2: Could not create IPv4 socket [ 338.201152][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 338.201167][ T30] audit: type=1400 audit(1762768780.774:1121): avc: denied { write } for pid=16694 comm="syz.6.4309" name="icmp6" dev="proc" ino=4026533078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 338.521682][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 338.541145][ T910] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 338.691270][ T910] usb 2-1: Using ep0 maxpacket: 16 [ 338.693729][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.702222][ T910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.720981][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.725813][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.735901][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.747894][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 338.762688][ T910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 338.769916][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.772496][ T910] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.785410][ T9] usb 7-1: Product: syz [ 338.797772][ T9] usb 7-1: Manufacturer: syz [ 338.798793][ T910] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 338.802976][ T9] usb 7-1: SerialNumber: syz [ 338.822501][ T910] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 338.839862][ T910] usb 2-1: Manufacturer: syz [ 338.853127][ T910] usb 2-1: config 0 descriptor?? [ 338.876928][T16729] Process accounting resumed [ 339.028006][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.037340][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.065156][ T9] usb 7-1: 0:2 : does not exist [ 339.085203][ T9] usb 7-1: USB disconnect, device number 30 [ 339.132179][ T910] rc_core: IR keymap rc-hauppauge not found [ 339.138253][ T910] Registered IR keymap rc-empty [ 339.143683][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.161397][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.181857][ T910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 339.195015][ T910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 339.211471][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.231528][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.251313][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.271963][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.291394][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.321133][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.341223][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.361210][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.381189][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.401184][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.421957][ T910] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 339.452876][ T910] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 339.464251][ T910] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 339.551161][ T6004] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 339.555573][ T9] usb 2-1: USB disconnect, device number 30 [ 339.715846][ T6004] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 339.727665][ T6004] usb 7-1: config 1 has an invalid interface number: 54 but max is 2 [ 339.744412][ T6004] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.781381][ T6004] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 339.790366][ T6004] usb 7-1: config 1 has no interface number 1 [ 339.798926][ T6004] usb 7-1: config 1 interface 54 has no altsetting 0 [ 339.807732][ T6004] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.822671][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.840923][ T6004] usb 7-1: Product: syz [ 339.861921][ T6004] usb 7-1: Manufacturer: syz [ 339.866562][ T6004] usb 7-1: SerialNumber: syz [ 340.036601][ T30] audit: type=1400 audit(1762768782.604:1122): avc: denied { mount } for pid=16769 comm="syz.3.4339" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 340.067106][ T30] audit: type=1400 audit(1762768782.604:1123): avc: denied { mounton } for pid=16769 comm="syz.3.4339" path="/992/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 340.113610][ T30] audit: type=1400 audit(1762768782.604:1124): avc: denied { remount } for pid=16769 comm="syz.3.4339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 340.131486][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 340.138885][ T30] audit: type=1400 audit(1762768782.674:1125): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 340.160605][ T6004] usb 7-1: 0:2 : does not exist [ 340.185270][ T6004] usb 7-1: USB disconnect, device number 31 [ 340.410646][T16793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4346'. [ 340.412711][ T910] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 340.591293][ T910] usb 2-1: Using ep0 maxpacket: 8 [ 340.597862][ T910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 340.621162][ T910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 340.641150][ T910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.661243][ T910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.688593][ T910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.708779][ T910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.944245][ T910] usb 2-1: GET_CAPABILITIES returned 0 [ 340.971162][ T910] usbtmc 2-1:16.0: can't read capabilities [ 341.182293][ T910] usb 2-1: USB disconnect, device number 31 [ 341.212913][T16826] netlink: 'syz.3.4352': attribute type 4 has an invalid length. [ 341.651214][ T910] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 341.801195][ T910] usb 4-1: Using ep0 maxpacket: 32 [ 341.816979][ T910] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.837141][ T910] usb 4-1: config 0 has no interface number 0 [ 341.857891][ T910] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.879585][ T910] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.901199][ T910] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 341.910437][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.920537][ T910] usb 4-1: config 0 descriptor?? [ 342.275164][ T95] block nbd2: Possible stuck request ffff8880262a0000: control (read@0,1024B). Runtime 150 seconds [ 342.286096][ T95] block nbd2: Possible stuck request ffff8880262a01c0: control (read@1024,1024B). Runtime 150 seconds [ 342.297564][ T95] block nbd2: Possible stuck request ffff8880262a0380: control (read@2048,1024B). Runtime 150 seconds [ 342.308987][ T95] block nbd2: Possible stuck request ffff8880262a0540: control (read@3072,1024B). Runtime 150 seconds [ 342.340888][T16858] netlink: 'syz.6.4365': attribute type 4 has an invalid length. [ 342.359148][ T30] audit: type=1400 audit(1762768784.924:1126): avc: denied { bind } for pid=16857 comm="syz.1.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.524234][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.533278][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.545606][ T910] input: HID 28bd:0094 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0042/input/input67 [ 342.548471][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.566058][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.573675][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.594146][T16864] Failed to initialize the IGMP autojoin socket (err -2) [ 342.613896][ T910] uclogic 0003:28BD:0094.0042: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 342.711098][ T5865] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 342.757162][ T9] usb 4-1: USB disconnect, device number 57 [ 342.874802][ T5865] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 342.885918][ T5865] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 342.897340][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 342.906533][ T5865] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 342.916300][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 342.925474][ T5865] usb 2-1: Product: syz [ 342.929613][ T5865] usb 2-1: Manufacturer: syz [ 342.934590][ T5865] usb 2-1: SerialNumber: syz [ 342.940361][ T5865] usb 2-1: config 0 descriptor?? [ 342.947822][ T5865] usb 2-1: selecting invalid altsetting 0 [ 343.173497][ T24] usb 2-1: USB disconnect, device number 32 [ 343.424024][T16864] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 343.434180][T16864] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 343.445588][T16864] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 343.455668][T16864] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 343.736930][T16864] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 343.755788][T16864] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 343.775866][T16864] wireguard: wg0: Could not create IPv4 socket [ 343.785721][T16864] wireguard: wg1: Could not create IPv4 socket [ 343.794189][T16864] wireguard: wg2: Could not create IPv4 socket [ 344.137902][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.146410][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.155296][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.163384][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.172343][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.190579][T16890] Failed to initialize the IGMP autojoin socket (err -2) [ 344.272052][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 344.431244][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 344.439076][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 344.450100][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 344.457689][ T9] usb 2-1: can't read configurations, error -71 [ 344.511312][ T5818] Bluetooth: hci4: command 0x1003 tx timeout [ 344.519392][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.707048][T16890] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 344.726087][T16890] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 344.743847][T16890] wireguard: wg0: Could not create IPv4 socket [ 344.752611][T16890] wireguard: wg1: Could not create IPv4 socket [ 344.760679][T16890] wireguard: wg2: Could not create IPv4 socket [ 345.013672][ T30] audit: type=1400 audit(1762768787.584:1127): avc: denied { audit_read } for pid=16901 comm="syz.6.4375" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 345.100322][ T30] audit: type=1400 audit(1762768787.664:1128): avc: denied { getopt } for pid=16907 comm="syz.6.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.120334][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.164664][T16910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.631385][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 345.781664][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 345.789864][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 345.789909][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.789931][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.789953][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.789975][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.790011][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.790032][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.999218][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 346.008012][ T9] usbtmc 2-1:16.0: can't read capabilities [ 346.212472][ T6004] usb 2-1: USB disconnect, device number 35 [ 346.767055][T16964] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 346.782735][ T79] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 346.819104][ T30] audit: type=1400 audit(1762768789.384:1129): avc: denied { ioctl } for pid=16965 comm="syz.1.4406" path="socket:[63537]" dev="sockfs" ino=63537 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.821184][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 346.941220][ T79] usb 7-1: Using ep0 maxpacket: 32 [ 346.949958][ T79] usb 7-1: unable to get BOS descriptor or descriptor too short [ 346.958781][ T79] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 346.968671][ T79] usb 7-1: can't read configurations, error -71 [ 347.013420][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 347.020052][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.034919][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.046124][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 347.055499][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 347.064147][ T9] usb 4-1: Product: syz [ 347.068390][ T9] usb 4-1: Manufacturer: syz [ 347.078682][ T9] hub 4-1:4.0: USB hub found [ 347.285205][ T9] hub 4-1:4.0: 2 ports detected [ 347.288735][ T30] audit: type=1400 audit(1762768789.854:1130): avc: denied { listen } for pid=16980 comm="syz.1.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.538217][ T30] audit: type=1400 audit(1762768790.104:1131): avc: denied { load_policy } for pid=16994 comm="syz.6.4420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 347.559318][T16995] SELinux: failed to load policy [ 347.687357][ T9] hub 4-1:4.0: set hub depth failed [ 347.697139][ T9] usb 4-1: USB disconnect, device number 58 [ 347.858669][ T30] audit: type=1400 audit(1762768790.424:1132): avc: denied { connect } for pid=17008 comm="syz.6.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.108461][ T30] audit: type=1400 audit(1762768790.674:1133): avc: denied { create } for pid=17015 comm="syz.6.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.128654][ T30] audit: type=1400 audit(1762768790.674:1134): avc: denied { setopt } for pid=17015 comm="syz.6.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.288333][ T30] audit: type=1400 audit(1762768790.854:1135): avc: denied { append } for pid=17021 comm="syz.3.4432" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.288569][T17022] random: crng reseeded on system resumption [ 348.351390][ T30] audit: type=1400 audit(1762768790.854:1136): avc: denied { open } for pid=17021 comm="syz.3.4432" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.568824][T17030] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 348.736004][T17042] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4439'. [ 348.739153][T17039] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 348.771384][T11778] Bluetooth: hci4: Frame reassembly failed (-84) [ 349.061256][ T79] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 349.212656][ T79] usb 7-1: unable to get BOS descriptor or descriptor too short [ 349.220724][ T79] usb 7-1: not running at top speed; connect to a high speed hub [ 349.229292][ T79] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.239728][ T79] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.251339][ T79] usb 7-1: string descriptor 0 read error: -22 [ 349.258013][ T79] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.267247][ T79] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.278975][ T79] usb 7-1: 0:2 : does not exist [ 349.663224][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.672980][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.682831][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.690759][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.699433][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.719876][T17060] Failed to initialize the IGMP autojoin socket (err -2) [ 350.096181][ T79] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 350.107973][ T79] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 350.123157][ T79] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 350.133959][ T79] usb 7-1: USB disconnect, device number 34 [ 350.751224][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 351.025061][T17060] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 351.040731][T17060] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 351.050071][T17060] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 351.060109][T17060] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 351.417236][T17060] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 351.439116][T17060] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 351.458060][T17060] wireguard: wg0: Could not create IPv4 socket [ 351.468059][T17060] wireguard: wg1: Could not create IPv4 socket [ 351.478383][T17060] wireguard: wg2: Could not create IPv4 socket [ 351.584278][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 351.597333][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.607438][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.623632][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.636224][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.644038][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.687950][T17090] Failed to initialize the IGMP autojoin socket (err -2) [ 351.752518][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.781130][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.790910][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 351.818996][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.831931][ T9] usb 4-1: config 0 descriptor?? [ 352.246038][ T9] playstation 0003:054C:0DF2.0043: unknown main item tag 0x0 [ 352.257327][ T9] playstation 0003:054C:0DF2.0043: unknown main item tag 0x0 [ 352.265984][ T9] playstation 0003:054C:0DF2.0043: unknown main item tag 0x0 [ 352.277171][ T9] playstation 0003:054C:0DF2.0043: unknown main item tag 0x0 [ 352.284770][ T9] playstation 0003:054C:0DF2.0043: unknown main item tag 0x0 [ 352.294196][ T9] playstation 0003:054C:0DF2.0043: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 352.357743][T17090] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 352.377006][T17090] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 352.395031][T17090] wireguard: wg0: Could not create IPv4 socket [ 352.404117][T17090] wireguard: wg1: Could not create IPv4 socket [ 352.412227][T17090] wireguard: wg2: Could not create IPv4 socket [ 352.445381][ T9] playstation 0003:054C:0DF2.0043: Invalid byte count transferred, expected 20 got 0 [ 352.455385][ T9] playstation 0003:054C:0DF2.0043: Failed to retrieve DualSense pairing info: -22 [ 352.465182][ T9] playstation 0003:054C:0DF2.0043: Failed to get MAC address from DualSense [ 352.474182][ T9] playstation 0003:054C:0DF2.0043: Failed to create dualsense. [ 352.484751][ T9] playstation 0003:054C:0DF2.0043: probe with driver playstation failed with error -22 [ 352.662449][ T5885] usb 4-1: USB disconnect, device number 59 [ 353.278355][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 353.278379][ T30] audit: type=1400 audit(1762768795.844:1141): avc: denied { append } for pid=17113 comm="syz.3.4461" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.331165][ T30] audit: type=1400 audit(1762768795.894:1142): avc: denied { setopt } for pid=17115 comm="syz.3.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 353.536839][ T30] audit: type=1400 audit(1762768796.104:1143): avc: denied { map } for pid=17126 comm="syz.3.4467" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 353.544290][T17127] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 353.632747][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 353.639639][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 353.989050][T17149] bridge0: port 1(syz_tun) entered blocking state [ 353.996117][T17149] bridge0: port 1(syz_tun) entered disabled state [ 354.002972][T17149] syz_tun: entered allmulticast mode [ 354.009244][T17149] syz_tun: entered promiscuous mode [ 354.172687][ T30] audit: type=1400 audit(1762768796.744:1144): avc: denied { shutdown } for pid=17152 comm="syz.3.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.811123][ T5885] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 354.871157][ T6004] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 354.971409][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 354.974402][ T5885] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 354.974428][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.974446][ T5885] usb 7-1: Product: syz [ 354.974460][ T5885] usb 7-1: Manufacturer: syz [ 354.974469][ T5885] usb 7-1: SerialNumber: syz [ 354.975589][ T5885] usb 7-1: config 0 descriptor?? [ 354.977113][ T5885] gspca_main: sq930x-2.14.0 probing 2770:930c [ 355.030240][ T6004] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.040600][ T6004] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.046048][ T6004] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 355.059102][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 355.067200][ T6004] usb 2-1: SerialNumber: syz [ 355.283986][ T6004] usb 2-1: 0:2 : does not exist [ 355.304771][ T6004] usb 2-1: USB disconnect, device number 36 [ 355.355482][ T30] audit: type=1400 audit(1762768797.924:1145): avc: denied { create } for pid=17180 comm="syz.3.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 355.785221][ T5885] gspca_sq930x: ucbus_write failed -71 [ 355.790846][ T5885] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 355.802969][ T5885] usb 7-1: USB disconnect, device number 35 [ 355.820927][T17209] delete_channel: no stack [ 355.827305][ T30] audit: type=1400 audit(1762768798.394:1146): avc: denied { read } for pid=17208 comm="syz.3.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 355.846687][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.186966][T17241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4520'. [ 356.196247][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 356.841171][ T6004] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 356.991210][ T6004] usb 4-1: Using ep0 maxpacket: 16 [ 356.997967][ T6004] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.009009][ T6004] usb 4-1: config 0 interface 0 has no altsetting 0 [ 357.015998][ T6004] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 357.025216][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.034841][ T6004] usb 4-1: config 0 descriptor?? [ 357.371130][ T30] audit: type=1400 audit(1762768799.934:1147): avc: denied { create } for pid=17268 comm="syz.6.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 357.396724][ T30] audit: type=1400 audit(1762768799.934:1148): avc: denied { bind } for pid=17268 comm="syz.6.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 357.468971][ T6004] nzxt-smart2 0003:1E71:2009.0044: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 357.577508][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.588027][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.598089][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.608435][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.616669][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.648457][T17277] Failed to initialize the IGMP autojoin socket (err -2) [ 357.884835][ T5885] usb 4-1: USB disconnect, device number 60 [ 358.403161][T17277] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 358.423116][T17277] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 358.434079][T17277] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 358.443531][T17277] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 358.712282][T17277] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 358.730218][T17277] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 358.748435][T17277] wireguard: wg0: Could not create IPv4 socket [ 358.757663][T17277] wireguard: wg1: Could not create IPv4 socket [ 358.766645][T17277] wireguard: wg2: Could not create IPv4 socket [ 359.304272][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.316684][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.324860][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.333668][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.341365][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.353501][T17332] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4553'. [ 359.376169][T17329] Failed to initialize the IGMP autojoin socket (err -2) [ 359.391472][ T6004] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 359.542606][ T6004] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 359.566399][ T6004] usb 7-1: config 0 interface 0 has no altsetting 0 [ 359.578355][ T6004] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 359.590308][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 359.606683][ T6004] usb 7-1: Product: syz [ 359.611376][ T6004] usb 7-1: Manufacturer: syz [ 359.619522][ T6004] usb 7-1: SerialNumber: syz [ 359.632813][ T6004] usb 7-1: config 0 descriptor?? [ 359.638385][T17323] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 359.656221][ T6004] usb 7-1: selecting invalid altsetting 0 [ 359.867487][T17322] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 359.878125][ T6004] usb 7-1: USB disconnect, device number 36 [ 360.109901][T17329] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 360.135802][T17329] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 360.153298][T17329] wireguard: wg0: Could not create IPv4 socket [ 360.160852][T17329] wireguard: wg1: Could not create IPv4 socket [ 360.168985][T17329] wireguard: wg2: Could not create IPv4 socket [ 360.362739][T17352] batadv_slave_1: entered promiscuous mode [ 360.369863][T17352] batman_adv: batadv0: Adding interface: macsec1 [ 360.376227][T17352] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.403065][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.413587][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.424624][T17352] batman_adv: batadv0: Interface activated: macsec1 [ 360.532806][ T30] audit: type=1400 audit(1762768803.104:1149): avc: denied { create } for pid=17361 comm="syz.6.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.553508][ T30] audit: type=1400 audit(1762768803.104:1150): avc: denied { getopt } for pid=17361 comm="syz.6.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.742791][ T5809] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 360.901688][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 360.913137][ T5809] usb 2-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 360.932088][ T5809] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 360.946982][ T5809] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 360.972761][ T5809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.981957][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 360.996037][ T5809] usb 2-1: SerialNumber: syz [ 361.059644][T17396] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 361.059694][ T30] audit: type=1400 audit(1762768803.624:1151): avc: denied { read } for pid=17394 comm="syz.6.4581" path="socket:[66424]" dev="sockfs" ino=66424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 361.144797][T17400] mkiss: ax0: crc mode is auto. [ 361.209063][ T5809] usb 2-1: USB disconnect, device number 37 [ 361.283269][ T30] audit: type=1400 audit(1762768803.854:1152): avc: denied { mount } for pid=17405 comm="syz.6.4586" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 361.319027][ T30] audit: type=1400 audit(1762768803.884:1153): avc: denied { unmount } for pid=9184 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 361.406768][ T30] audit: type=1400 audit(1762768803.974:1154): avc: denied { name_bind 0x1000000 } for pid=17414 comm="syz.3.4590" path="socket:[66524]" dev="sockfs" ino=66524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 361.783319][ T30] audit: type=1400 audit(1762768804.354:1155): avc: denied { write } for pid=17425 comm="syz.1.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.876267][T17432] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4598'. [ 361.886426][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4598'. [ 362.018519][ T30] audit: type=1400 audit(1762768804.584:1156): avc: denied { mount } for pid=17441 comm="syz.1.4603" name="/" dev="ramfs" ino=66560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 362.045619][ T30] audit: type=1400 audit(1762768804.614:1157): avc: denied { unmount } for pid=13879 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 362.314393][T17448] netlink: 'syz.6.4606': attribute type 2 has an invalid length. [ 362.341948][ T5865] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 362.385172][ T30] audit: type=1400 audit(1762768804.954:1158): avc: denied { write } for pid=17451 comm="syz.6.4608" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 362.418786][ T5892] kernel read not supported for file /media3 (pid: 5892 comm: kworker/0:6) [ 362.492142][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 362.505233][ T5865] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 362.514843][ T5865] usb 2-1: config 0 has no interface number 0 [ 362.526180][ T5865] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 362.540649][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.548810][ T5865] usb 2-1: Product: syz [ 362.553292][ T5865] usb 2-1: Manufacturer: syz [ 362.558915][ T5865] usb 2-1: SerialNumber: syz [ 362.575160][ T5865] usb 2-1: config 0 descriptor?? [ 362.583621][ T5865] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 362.676825][T17467] binder: 17466:17467 ioctl 4018620d 0 returned -22 [ 362.791738][ T5865] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 362.805453][ T5865] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 363.212277][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 363.221730][ T5865] usb 2-1: USB disconnect, device number 38 [ 363.230574][ T5865] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 363.245946][ T5865] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 363.260959][ T5865] quatech2 2-1:0.51: device disconnected [ 363.536119][T17494] netlink: 'syz.6.4627': attribute type 5 has an invalid length. [ 363.753995][T17502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4631'. [ 363.791186][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 363.851204][ T6004] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 364.004494][ T6004] usb 7-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 364.013902][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.023607][ T6004] usb 7-1: config 0 descriptor?? [ 364.030231][ T6004] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 364.216879][ T5865] kernel write not supported for file /uinput (pid: 5865 comm: kworker/0:3) [ 364.433564][ T6004] gspca_sn9c20x: Write register 1001 failed -71 [ 364.439946][ T6004] gspca_sn9c20x: Device initialization failed [ 364.446209][ T6004] gspca_sn9c20x 7-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 364.456240][ T6004] usb 7-1: USB disconnect, device number 37 [ 365.363192][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.374396][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.383116][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.390983][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.401826][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.432702][T17534] Failed to initialize the IGMP autojoin socket (err -2) [ 365.603936][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 365.603951][ T30] audit: type=1400 audit(1762768808.164:1163): avc: denied { ioctl } for pid=17544 comm="syz.1.4649" path="socket:[67488]" dev="sockfs" ino=67488 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 366.132620][T17534] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 366.143326][T17534] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 366.156194][T17534] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 366.166196][T17534] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 366.437761][T17534] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 366.456983][T17534] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 366.475817][T17534] wireguard: wg0: Could not create IPv4 socket [ 366.483501][T17534] wireguard: wg1: Could not create IPv4 socket [ 366.490972][T17534] wireguard: wg2: Could not create IPv4 socket [ 367.291781][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4664'. [ 367.308138][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.308961][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4664'. [ 367.330039][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.339781][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.352219][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.359698][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.397296][T17589] Failed to initialize the IGMP autojoin socket (err -2) [ 367.760814][ T30] audit: type=1400 audit(1762768810.324:1164): avc: denied { map } for pid=17614 comm="syz.6.4676" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 367.813212][ T30] audit: type=1400 audit(1762768810.324:1165): avc: denied { execute } for pid=17614 comm="syz.6.4676" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 367.837216][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.065146][ T30] audit: type=1400 audit(1762768810.604:1166): avc: denied { setopt } for pid=17622 comm="syz.1.4680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 368.085669][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.123501][ T30] audit: type=1326 audit(1762768810.654:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40e18f6c9 code=0x7ffc0000 [ 368.192164][ T30] audit: type=1326 audit(1762768810.654:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40e18f6c9 code=0x7ffc0000 [ 368.246877][ T30] audit: type=1326 audit(1762768810.664:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff40e18f6c9 code=0x7ffc0000 [ 368.270285][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.321190][ T30] audit: type=1326 audit(1762768810.664:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40e18f6c9 code=0x7ffc0000 [ 368.362446][ T30] audit: type=1326 audit(1762768810.664:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40e18f6c9 code=0x7ffc0000 [ 368.389607][ T30] audit: type=1326 audit(1762768810.664:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.1.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff40e18f6c9 code=0x7ffc0000 [ 368.499388][T17589] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 368.523265][T17589] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 368.543618][T17589] wireguard: wg0: Could not create IPv4 socket [ 368.552371][T17589] wireguard: wg1: Could not create IPv4 socket [ 368.560700][T17589] wireguard: wg2: Could not create IPv4 socket [ 368.751515][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 368.925066][ T9] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 368.933815][ T9] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 368.943171][ T9] usb 7-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 368.953933][ T9] usb 7-1: config 220 has no interface number 2 [ 368.960523][ T9] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 368.975735][ T9] usb 7-1: config 220 interface 0 has no altsetting 0 [ 368.983838][ T9] usb 7-1: config 220 interface 76 has no altsetting 0 [ 368.995949][ T9] usb 7-1: config 220 interface 1 has no altsetting 0 [ 369.007287][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 369.017098][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.026495][ T9] usb 7-1: Product: syz [ 369.030673][ T9] usb 7-1: Manufacturer: syz [ 369.036626][ T9] usb 7-1: SerialNumber: syz [ 369.049734][ T5892] kernel read not supported for file /video37 (pid: 5892 comm: kworker/0:6) [ 369.086060][T17676] netlink: 'syz.1.4704': attribute type 9 has an invalid length. [ 369.160488][T17680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4706'. [ 369.169977][T17680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4706'. [ 369.252524][ T9] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 369.260572][ T9] uvcvideo 7-1:220.0: No valid video chain found. [ 369.267988][ T9] usb 7-1: selecting invalid altsetting 0 [ 369.284167][ T9] usb 7-1: selecting invalid altsetting 0 [ 369.289997][ T9] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 369.302155][ T9] usb 7-1: USB disconnect, device number 38 [ 369.985019][T17713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 369.991389][ T5866] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 370.162841][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.173858][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.183941][ T5866] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 370.193102][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.203602][ T5866] usb 2-1: config 0 descriptor?? [ 370.344717][T17729] netem: change failed [ 370.499732][T17735] netlink: 'syz.6.4733': attribute type 1 has an invalid length. [ 370.507856][T17735] netlink: 236 bytes leftover after parsing attributes in process `syz.6.4733'. [ 370.798771][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 370.798788][ T30] audit: type=1400 audit(1762768813.364:1182): avc: denied { create } for pid=17748 comm="syz.6.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.828314][ T30] audit: type=1400 audit(1762768813.364:1183): avc: denied { bind } for pid=17748 comm="syz.6.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.853114][ T5866] hid-led 0003:1D34:000A.0045: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 370.870968][ T5866] hid-led 0003:1D34:000A.0045: Dream Cheeky Webmail Notifier initialized [ 371.064786][ T79] usb 2-1: USB disconnect, device number 39 [ 371.149168][T17767] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4749'. [ 371.645427][ T30] audit: type=1400 audit(1762768814.214:1184): avc: denied { listen } for pid=17778 comm="syz.1.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.665251][ T30] audit: type=1400 audit(1762768814.214:1185): avc: denied { accept } for pid=17778 comm="syz.1.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 372.063339][T17773] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 372.241176][ T79] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 372.353889][ T95] block nbd2: Possible stuck request ffff8880262a0000: control (read@0,1024B). Runtime 180 seconds [ 372.364755][ T95] block nbd2: Possible stuck request ffff8880262a01c0: control (read@1024,1024B). Runtime 180 seconds [ 372.375803][ T95] block nbd2: Possible stuck request ffff8880262a0380: control (read@2048,1024B). Runtime 180 seconds [ 372.386880][ T95] block nbd2: Possible stuck request ffff8880262a0540: control (read@3072,1024B). Runtime 180 seconds [ 372.421099][ T79] usb 2-1: Using ep0 maxpacket: 8 [ 372.436667][ T79] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 372.461470][ T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.469493][ T79] usb 2-1: Product: syz [ 372.481185][ T79] usb 2-1: Manufacturer: syz [ 372.485810][ T79] usb 2-1: SerialNumber: syz [ 372.492458][ T79] usb 2-1: config 0 descriptor?? [ 372.499983][ T79] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 372.508950][ T79] pctv452e: pctv452e_power_ctrl: 1 [ 372.508950][ T79] [ 372.516424][ T79] usb 2-1: selecting invalid altsetting 3 [ 372.522338][ T79] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 372.522338][ T79] [ 372.532705][ T79] dvb-usb: bulk message failed: -22 (5/0) [ 372.539557][ T79] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.549284][ T79] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 372.557701][ T79] usb 2-1: media controller created [ 372.563475][ T79] dvb-usb: bulk message failed: -22 (8/0) [ 372.569539][ T79] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 372.577526][ T79] dvb-usb: MAC address reading failed. [ 372.590160][ T79] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.619494][ T79] DVB: Unable to find symbol stb0899_attach() [ 372.625632][ T79] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 372.672422][ T79] rc_core: IR keymap rc-tt-1500 not found [ 372.678151][ T79] Registered IR keymap rc-empty [ 372.683813][ T79] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 372.694513][ T79] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input71 [ 372.707727][ T79] dvb-usb: schedule remote query interval to 100 msecs. [ 372.711557][T17790] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 372.714753][ T79] pctv452e: pctv452e_power_ctrl: 0 [ 372.714753][ T79] [ 372.730098][ T79] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 372.741601][ T79] usb 2-1: USB disconnect, device number 40 [ 372.761913][ T79] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 373.536586][T17816] CIFS mount error: No usable UNC path provided in device string! [ 373.536586][T17816] [ 373.571313][T17816] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 373.630033][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.654301][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.663587][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.674153][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.684054][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.708223][T17819] Failed to initialize the IGMP autojoin socket (err -2) [ 374.489181][T17819] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 374.500485][T17819] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 374.511669][T17819] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 374.526158][T17819] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 374.800599][T17819] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 374.818808][T17819] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 374.837264][T17819] wireguard: wg0: Could not create IPv4 socket [ 374.845196][T17819] wireguard: wg1: Could not create IPv4 socket [ 374.853842][T17819] wireguard: wg2: Could not create IPv4 socket [ 375.281154][ T30] audit: type=1400 audit(1762768817.844:1186): avc: denied { map } for pid=17863 comm="syz.6.4786" path="socket:[70415]" dev="sockfs" ino=70415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.351066][ T30] audit: type=1400 audit(1762768817.844:1187): avc: denied { read accept } for pid=17863 comm="syz.6.4786" path="socket:[70415]" dev="sockfs" ino=70415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.405965][T17869] netlink: 'syz.1.4788': attribute type 11 has an invalid length. [ 375.437747][T17869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4788'. [ 375.528081][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.538359][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.550557][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.559686][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.576239][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.638748][T17871] Failed to initialize the IGMP autojoin socket (err -2) [ 376.261497][ T5865] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 376.270684][T17871] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 376.288641][T17871] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 376.310348][T17871] wireguard: wg0: Could not create IPv4 socket [ 376.319575][T17871] wireguard: wg1: Could not create IPv4 socket [ 376.327300][T17871] wireguard: wg2: Could not create IPv4 socket [ 376.441177][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 376.447610][ T5865] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 376.455739][ T5865] usb 7-1: config 0 has no interface number 0 [ 376.463742][ T5865] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 376.472794][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.480749][ T5865] usb 7-1: Product: syz [ 376.485018][ T5865] usb 7-1: Manufacturer: syz [ 376.489608][ T5865] usb 7-1: SerialNumber: syz [ 376.496510][ T5865] usb 7-1: config 0 descriptor?? [ 376.502959][ T5865] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 376.706941][ T5865] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 376.717819][ T5865] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 376.754478][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'. [ 377.121409][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 377.122106][ T24] usb 7-1: USB disconnect, device number 39 [ 377.136463][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 377.149089][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 377.160514][ T24] quatech2 7-1:0.51: device disconnected [ 377.901113][ T5865] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 378.082206][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 378.090550][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.103094][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.118893][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.118921][ T5865] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 378.125318][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.135083][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.154852][ T5865] usb 7-1: config 0 descriptor?? [ 378.461908][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.471241][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.480515][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.488982][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.496662][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.516045][T17923] Failed to initialize the IGMP autojoin socket (err -2) [ 378.580216][ T5865] corsair 0003:1B1C:1B02.0046: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 379.015164][ T5865] usb 7-1: USB disconnect, device number 40 [ 379.674384][ T5809] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 379.841192][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 379.847619][ T5809] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 379.858189][ T5809] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 379.866419][ T5809] usb 2-1: config 0 has no interface number 0 [ 379.873251][ T5809] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.889263][ T5809] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 379.900897][ T5809] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.913434][ T5809] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 379.922754][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 379.930744][ T5809] usb 2-1: Product: syz [ 379.941724][ T5809] usb 2-1: config 0 descriptor?? [ 379.947372][T17982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.405999][T18017] overlayfs: upper fs does not support file handles, falling back to index=off. [ 380.415988][T18017] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 380.568564][ T5809] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input72 [ 380.601947][ T51] Bluetooth: hci4: command tx timeout [ 380.788477][ T5866] usb 2-1: USB disconnect, device number 41 [ 380.788585][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 381.974143][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.988967][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.998025][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.011105][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.026197][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.075367][T18035] Failed to initialize the IGMP autojoin socket (err -2) [ 382.675652][ T5818] Bluetooth: hci4: command tx timeout [ 382.841734][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.852514][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.860465][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.868345][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.876129][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.905818][T18074] Failed to initialize the IGMP autojoin socket (err -2) [ 382.962807][T17923] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 382.994931][T17923] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 383.017060][T17923] wireguard: wg0: Could not create IPv4 socket [ 383.026403][T17923] wireguard: wg1: Could not create IPv4 socket [ 383.034710][T17923] wireguard: wg2: Could not create IPv4 socket [ 383.657829][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.668236][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.676228][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.684991][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.692469][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.721777][T18092] Failed to initialize the IGMP autojoin socket (err -2) [ 384.784125][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.793995][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.803221][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.813882][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.814754][T18151] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 384.832536][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.873681][T18146] Failed to initialize the IGMP autojoin socket (err -2) [ 385.711254][ T5818] Bluetooth: hci4: command tx timeout [ 386.535609][ T30] audit: type=1400 audit(1762768829.104:1188): avc: denied { write } for pid=18220 comm="syz.6.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 386.633181][ T30] audit: type=1400 audit(1762768829.204:1189): avc: denied { setopt } for pid=18224 comm="syz.6.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 386.681309][ T30] audit: type=1400 audit(1762768829.224:1190): avc: denied { connect } for pid=18226 comm="syz.1.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.701041][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.763214][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.773894][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.785665][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.797489][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.806433][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.829284][T18232] Failed to initialize the IGMP autojoin socket (err -2) [ 386.889230][ T30] audit: type=1400 audit(1762768829.454:1191): avc: denied { ioctl } for pid=18236 comm="syz.1.4858" path="net:[4026534185]" dev="nsfs" ino=4026534185 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 386.974728][T18241] unsupported nlmsg_type 40 [ 387.791445][ T5818] Bluetooth: hci4: command tx timeout [ 388.432541][ T30] audit: type=1400 audit(1762768830.994:1192): avc: denied { execute } for pid=18251 comm="syz.1.4865" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=72609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 388.623732][T18092] netdevsim netdevsim4 netdevsim0: renamed from eth13 [ 388.648626][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.659296][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.665414][T18260] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.668995][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.680920][T18260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.685277][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.689834][T18260] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.701154][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.704360][T18260] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.709784][T18092] netdevsim netdevsim4 netdevsim1: renamed from eth14 [ 388.716877][T18260] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.766024][T18092] netdevsim netdevsim4 netdevsim2: renamed from eth15 [ 388.780110][T18092] netdevsim netdevsim4 netdevsim3: renamed from eth16 [ 388.796634][T18259] Failed to initialize the IGMP autojoin socket (err -2) [ 388.807780][T18256] Failed to initialize the IGMP autojoin socket (err -2) [ 389.426263][T18092] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 389.451511][T18092] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 389.469399][T18092] wireguard: wg0: Could not create IPv4 socket [ 389.478387][T18092] wireguard: wg1: Could not create IPv4 socket [ 389.487737][T18260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.488147][T18092] wireguard: wg2: Could not create IPv4 socket [ 389.505426][T18260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.515290][T18260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.523628][T18260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.531271][T18260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.557736][T18287] Failed to initialize the IGMP autojoin socket (err -2) [ 390.148361][T18287] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 390.167170][T18287] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 390.184727][T18287] wireguard: wg0: Could not create IPv4 socket [ 390.192911][T18287] wireguard: wg1: Could not create IPv4 socket [ 390.200380][T18287] wireguard: wg2: Could not create IPv4 socket [ 391.084150][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.094259][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.102748][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.110538][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.118134][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.149556][T18314] Failed to initialize the IGMP autojoin socket (err -2) [ 391.371069][ T5865] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 391.532530][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 391.543250][ T5865] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 391.558734][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.579727][ T5865] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 391.860013][T18314] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 391.887504][T18314] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 391.906123][T18314] wireguard: wg0: Could not create IPv4 socket [ 391.915208][T18314] wireguard: wg1: Could not create IPv4 socket [ 391.923661][T18314] wireguard: wg2: Could not create IPv4 socket [ 392.387850][ T5865] gspca_nw80x: reg_r err -71 [ 392.392724][ T5865] nw80x 7-1:3.0: probe with driver nw80x failed with error -71 [ 392.402379][ T5865] usb 7-1: USB disconnect, device number 41 [ 394.944725][ T30] audit: type=1400 audit(1762768837.514:1193): avc: denied { create } for pid=18411 comm="syz.1.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 394.984314][T18414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4921'. [ 394.991064][ T30] audit: type=1400 audit(1762768837.514:1194): avc: denied { ioctl } for pid=18411 comm="syz.1.4920" path="socket:[75386]" dev="sockfs" ino=75386 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 395.201428][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.213258][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.224914][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.232682][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.240835][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.277044][T18423] Failed to initialize the IGMP autojoin socket (err -2) [ 395.521254][ T5809] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 395.614587][T18433] Failed to initialize the IGMP autojoin socket (err -2) [ 395.681141][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 395.702684][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.713787][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.725296][T18260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.734130][ T5809] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 395.744158][T18260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.753792][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.762126][T18260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.769958][T18260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.777561][T18260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.786602][ T5809] usb 2-1: config 0 descriptor?? [ 395.810716][T18435] Failed to initialize the IGMP autojoin socket (err -2) [ 396.201627][ T5809] corsair 0003:1B1C:1B02.0047: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 396.527388][T18260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.536247][T18260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.544286][T18260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.554193][T18260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.562807][T18260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.583912][T18445] Failed to initialize the IGMP autojoin socket (err -2) [ 396.611549][ T24] usb 2-1: USB disconnect, device number 42 [ 396.689366][ T5885] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 396.851157][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 396.858067][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 396.869637][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.882776][ T5885] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 396.892076][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.900089][ T5885] usb 7-1: Product: syz [ 396.904467][ T5885] usb 7-1: Manufacturer: syz [ 396.909051][ T5885] usb 7-1: SerialNumber: syz [ 396.917532][ T5885] usb 7-1: config 0 descriptor?? [ 396.930092][ T5885] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 396.939717][ T5885] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 397.257711][T18260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.269645][T18260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.270904][T18423] netdevsim netdevsim4 netdevsim0: renamed from eth13 [ 397.277616][T18260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.295552][T18260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.296041][T18423] netdevsim netdevsim4 netdevsim1: renamed from eth14 [ 397.311214][T18260] Bluetooth: hci4: command tx timeout [ 397.311591][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.327887][T18423] netdevsim netdevsim4 netdevsim2: renamed from eth15 [ 397.339881][T18423] netdevsim netdevsim4 netdevsim3: renamed from eth16 [ 397.356883][T18448] Failed to initialize the IGMP autojoin socket (err -2) [ 397.549425][ T5885] em28xx 7-1:0.0: chip ID is em2870 [ 397.779531][ T5885] usb 7-1: USB disconnect, device number 42 [ 397.786614][ T5885] em28xx 7-1:0.0: Disconnecting em28xx [ 397.803747][ T5885] em28xx 7-1:0.0: Freeing device [ 397.837140][T18423] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 397.858964][T18423] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 397.878956][T18423] wireguard: wg0: Could not create IPv4 socket [ 397.887874][T18423] wireguard: wg1: Could not create IPv4 socket [ 397.902880][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.903353][T18423] wireguard: wg2: Could not create IPv4 socket [ 397.918498][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.928258][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.936477][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.945770][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.973325][T18463] Failed to initialize the IGMP autojoin socket (err -2) [ 398.380324][ T30] audit: type=1400 audit(1762768840.924:1195): avc: denied { setopt } for pid=18469 comm="syz.1.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 398.556663][T18478] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4938'. [ 398.603779][ T30] audit: type=1400 audit(1762768841.174:1196): avc: denied { write } for pid=18481 comm="syz.6.4940" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 398.605277][T18478] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4938'. [ 398.639476][T18482] random: crng reseeded on system resumption [ 398.723469][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.733739][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.745172][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.755416][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.764315][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.789603][T18484] Failed to initialize the IGMP autojoin socket (err -2) [ 399.015760][T18463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 399.051476][T18463] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 399.077094][T18463] wireguard: wg0: Could not create IPv4 socket [ 399.087433][T18463] wireguard: wg1: Could not create IPv4 socket [ 399.096711][T18463] wireguard: wg2: Could not create IPv4 socket [ 400.101155][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.121332][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.130594][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.138569][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.146820][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.185505][T18513] Failed to initialize the IGMP autojoin socket (err -2) [ 400.611082][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 400.761122][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 400.769071][ T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 400.777568][ T24] usb 2-1: config 0 has no interface number 0 [ 400.783819][ T24] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 400.794912][ T24] usb 2-1: config 0 interface 196 has no altsetting 0 [ 400.804410][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 400.815876][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.824076][ T24] usb 2-1: Product: syz [ 400.828289][ T24] usb 2-1: Manufacturer: syz [ 400.834737][ T24] usb 2-1: SerialNumber: syz [ 400.843752][ T24] usb 2-1: config 0 descriptor?? [ 400.849438][T18530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.486332][ T24] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 401.500032][ T24] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 401.708117][ T5866] usb 2-1: USB disconnect, device number 43 [ 401.762439][ T5866] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 401.783145][T18513] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 401.804884][T18513] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 401.823716][T18513] wireguard: wg0: Could not create IPv4 socket [ 401.831482][T18513] wireguard: wg1: Could not create IPv4 socket [ 401.838950][T18513] wireguard: wg2: Could not create IPv4 socket [ 402.417437][ T30] audit: type=1400 audit(1762768844.984:1197): avc: denied { read } for pid=18566 comm="syz.6.4972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 402.440745][ T31] INFO: task syz.2.2950:13059 blocked for more than 143 seconds. [ 402.459158][ T31] Not tainted syzkaller #0 [ 402.459164][ T95] block nbd2: Possible stuck request ffff8880262a0000: control (read@0,1024B). Runtime 210 seconds [ 402.471025][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.476805][ T95] block nbd2: Possible stuck request ffff8880262a01c0: control (read@1024,1024B). Runtime 210 seconds SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.498745][ T30] audit: type=1400 audit(1762768845.074:1198): avc: denied { write } for pid=5798 comm="syz-executor" path="pipe:[4693]" dev="pipefs" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 402.501209][ T95] block nbd2: Possible stuck request ffff8880262a0380: control (read@2048,1024B). Runtime 210 seconds [ 402.533837][ T95] block nbd2: Possible stuck request ffff8880262a0540: control (read@3072,1024B). Runtime 210 seconds [ 402.535774][ T31] task:syz.2.2950 state:D stack:28208 pid:13059 tgid:13058 ppid:5816 task_flags:0x400040 flags:0x00080002 [ 402.682795][ T31] Call Trace: [ 402.686113][ T31] [ 402.689044][ T31] __schedule+0x1190/0x5de0 [ 402.731159][ T31] ? look_up_lock_class+0x6b/0x150 [ 402.736326][ T31] ? __lock_acquire+0x622/0x1c90 [ 402.781036][ T31] ? __pfx___schedule+0x10/0x10 [ 402.785949][ T31] ? find_held_lock+0x2b/0x80 [ 402.790631][ T31] ? schedule+0x2d7/0x3a0 [ 402.836896][ T31] ? bdev_open+0x41a/0xe40 [ 402.851087][ T31] schedule+0xe7/0x3a0 [ 402.855194][ T31] schedule_preempt_disabled+0x13/0x30 [ 402.860661][ T31] __mutex_lock+0x818/0x1060 [ 402.881129][ T31] ? bdev_open+0x41a/0xe40 [ 402.885599][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 402.890641][ T31] ? bdev_open+0x41a/0xe40 [ 402.911751][ T31] bdev_open+0x41a/0xe40 [ 402.916548][ T31] ? iput+0x35/0x40 [ 402.920383][ T31] blkdev_open+0x34e/0x4f0 [ 402.949005][ T31] do_dentry_open+0x982/0x1530 [ 402.954291][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 402.959252][ T31] vfs_open+0x82/0x3f0 [ 402.991222][ T31] path_openat+0x1de4/0x2cb0 [ 402.995867][ T31] ? __pfx_path_openat+0x10/0x10 [ 403.000815][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 403.011134][ T31] do_filp_open+0x20b/0x470 [ 403.015671][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 403.022307][ T31] ? alloc_fd+0x471/0x7d0 [ 403.026661][ T31] do_sys_openat2+0x11b/0x1d0 [ 403.032081][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.037292][ T31] ? find_held_lock+0x2b/0x80 [ 403.042266][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 403.047223][ T31] __x64_sys_openat+0x174/0x210 [ 403.052213][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 403.057584][ T31] ? do_user_addr_fault+0x843/0x1370 [ 403.062961][ T31] do_syscall_64+0xcd/0xfa0 [ 403.067443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.073433][ T31] RIP: 0033:0x7fc444f8df10 [ 403.077838][ T31] RSP: 002b:00007fc445ee1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 403.086475][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc444f8df10 [ 403.094507][ T31] RDX: 0000000000000000 RSI: 00007fc445ee1c10 RDI: 00000000ffffff9c [ 403.102743][ T31] RBP: 00007fc445ee1c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 403.110698][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 403.119226][ T31] R13: 00007fc4451e6038 R14: 00007fc4451e5fa0 R15: 00007ffdb3724348 [ 403.127487][ T31] [ 403.130543][ T31] [ 403.130543][ T31] Showing all locks held in the system: [ 403.154722][ T31] 1 lock held by khungtaskd/31: [ 403.159598][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 403.181839][ T31] 2 locks held by getty/5575: [ 403.186537][ T31] #0: ffff88814d5460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 403.221280][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 403.241359][ T31] 3 locks held by kworker/1:3/5809: [ 403.246593][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 403.281182][ T31] #1: ffffc90002fb7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 403.301270][ T31] #2: ffff88807441b240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 403.325968][ T31] 4 locks held by kworker/0:5/5885: [ 403.332126][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 403.342103][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 403.350828][ T31] #2: ffffffff8e55e728 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 403.360779][ T31] #3: ffffffff8e55e958 (free_vmap_area_lock){+.+.}-{3:3}, at: reclaim_list_global.part.0+0x23/0x1a70 [ 403.371953][ T31] 3 locks held by kworker/1:7/6004: [ 403.377309][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 403.387750][ T31] #1: ffffc9000474fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 403.400249][ T31] #2: ffff888065346240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 403.410501][ T31] 1 lock held by udevd/6600: [ 403.415162][ T31] #0: ffff888143711358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 403.424471][ T31] 1 lock held by syz.6.2019/10792: [ 403.429862][ T31] #0: ffffffff900e7388 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 403.439019][ T31] 1 lock held by syz.2.2950/13059: [ 403.444127][ T31] #0: ffff888143711358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 403.453430][ T31] 3 locks held by kbnepd bnep0/15161: [ 403.458786][ T31] #0: ffffffff9038c9b0 (bnep_session_sem){+.+.}-{4:4}, at: bnep_session+0x2244/0x2d80 [ 403.468706][ T31] #1: ffffffff900e7388 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 403.478155][ T31] #2: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 403.488180][ T31] 1 lock held by syz.3.4626/17492: [ 403.493463][ T31] #0: ffff888143711358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 403.502837][ T31] 5 locks held by syz.1.4813/17949: [ 403.508016][ T31] #0: ffff88802ab4cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 403.517565][ T31] #1: ffff88802ab4c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 403.527365][ T31] #2: ffffffff9035b208 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 403.537695][ T31] #3: ffff888031c95b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 403.547037][ T31] #4: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 403.557498][ T31] 1 lock held by syz-executor/18423: [ 403.562881][ T31] #0: ffffffff8e3cfb80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 403.572835][ T31] 1 lock held by syz-executor/18463: [ 403.578103][ T31] #0: ffffffff8e3cfb80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 403.588331][ T31] 1 lock held by syz-executor/18513: [ 403.593621][ T31] #0: ffffffff8e3cfb80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 403.603570][ T31] [ 403.605886][ T31] ============================================= [ 403.605886][ T31] [ 403.627148][ T31] NMI backtrace for cpu 1 [ 403.627163][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 403.627184][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.627194][ T31] Call Trace: [ 403.627200][ T31] [ 403.627208][ T31] dump_stack_lvl+0x116/0x1f0 [ 403.627243][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 403.627262][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 403.627288][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 403.627315][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 403.627338][ T31] watchdog+0xf3f/0x1170 [ 403.627363][ T31] ? rcu_is_watching+0x12/0xc0 [ 403.627385][ T31] ? __pfx_watchdog+0x10/0x10 [ 403.627404][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.627432][ T31] ? __kthread_parkme+0x19e/0x250 [ 403.627458][ T31] ? __pfx_watchdog+0x10/0x10 [ 403.627477][ T31] kthread+0x3c5/0x780 [ 403.627494][ T31] ? __pfx_kthread+0x10/0x10 [ 403.627512][ T31] ? rcu_is_watching+0x12/0xc0 [ 403.627533][ T31] ? __pfx_kthread+0x10/0x10 [ 403.627549][ T31] ret_from_fork+0x675/0x7d0 [ 403.627564][ T31] ? __pfx_kthread+0x10/0x10 [ 403.627580][ T31] ret_from_fork_asm+0x1a/0x30 [ 403.627615][ T31] [ 403.627627][ T31] Sending NMI from CPU 1 to CPUs 0: [ 403.756524][ C0] NMI backtrace for cpu 0 [ 403.756538][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 403.756555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.756564][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 403.756588][ C0] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 86 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 403.756603][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 403.756616][ C0] RAX: 0000000000235a49 RBX: 0000000000000000 RCX: ffffffff8b60a2a9 [ 403.756625][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b6a1 RDI: ffffffff8bf070c0 [ 403.756634][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 403.756643][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 403.756651][ C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000 [ 403.756661][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 403.756675][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.756685][ C0] CR2: 000055dead9d2ad8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 403.756695][ C0] Call Trace: [ 403.756699][ C0] [ 403.756705][ C0] default_idle+0x13/0x20 [ 403.756719][ C0] default_idle_call+0x6c/0xb0 [ 403.756733][ C0] do_idle+0x38d/0x500 [ 403.756751][ C0] ? __pfx_do_idle+0x10/0x10 [ 403.756766][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 403.756783][ C0] cpu_startup_entry+0x4f/0x60 [ 403.756798][ C0] rest_init+0x16b/0x2b0 [ 403.756812][ C0] ? acpi_subsystem_init+0x133/0x180 [ 403.756830][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 403.756849][ C0] start_kernel+0x3f6/0x4e0 [ 403.756867][ C0] x86_64_start_reservations+0x18/0x30 [ 403.756886][ C0] x86_64_start_kernel+0x130/0x190 [ 403.756905][ C0] common_startup_64+0x13e/0x148 [ 403.756924][ C0] [ 404.016091][T11779] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.146088][T11779] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.214423][T11779] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.293328][T11779] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.368915][T11779] bridge_slave_1: left allmulticast mode [ 404.374584][T11779] bridge_slave_1: left promiscuous mode [ 404.380211][T11779] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.388276][T11779] bridge_slave_0: left allmulticast mode [ 404.394087][T11779] bridge_slave_0: left promiscuous mode [ 404.399716][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.660723][T11779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.671837][T11779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.681992][T11779] bond0 (unregistering): Released all slaves [ 405.057078][T11779] hsr_slave_0: left promiscuous mode [ 405.083786][T11779] hsr_slave_1: left promiscuous mode [ 405.094986][T11779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.103288][T11779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.110666][T11779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.125571][T11779] veth1_macvtap: left promiscuous mode [ 405.131204][T11779] veth0_macvtap: left promiscuous mode [ 405.136737][T11779] veth1_vlan: left promiscuous mode [ 405.142047][T11779] veth0_vlan: left promiscuous mode [ 405.393426][T11779] team0 (unregistering): Port device team_slave_1 removed [ 405.429221][T11779] team0 (unregistering): Port device team_slave_0 removed [ 405.666997][T11744] smc: removing ib device sz1 [ 406.212436][T11779] ------------[ cut here ]------------ [ 406.217978][T11779] WARNING: CPU: 1 PID: 11779 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x289/0x310 [ 406.227674][T11779] Modules linked in: [ 406.232141][T11779] CPU: 1 UID: 0 PID: 11779 Comm: kworker/u8:49 Not tainted syzkaller #0 PREEMPT(full) [ 406.241792][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.251897][T11779] Workqueue: netns cleanup_net [ 406.256650][T11779] RIP: 0010:xfrm_state_fini+0x289/0x310 [ 406.262188][T11779] Code: c1 f7 90 0f 0b 90 e9 e7 fe ff ff e8 01 8c c1 f7 90 0f 0b 90 e9 39 ff ff ff e8 f3 8b c1 f7 90 0f 0b 90 eb 8a e8 e8 8b c1 f7 90 <0f> 0b 90 e9 d5 fd ff ff e8 8a 1a 2a f8 e9 f8 fd ff ff e8 b0 1a 2a [ 406.281912][T11779] RSP: 0018:ffffc9000596fa90 EFLAGS: 00010293 [ 406.287949][T11779] RAX: 0000000000000000 RBX: ffff888074b8c900 RCX: fffff52000b2df23 [ 406.296346][T11779] RDX: ffff888031032480 RSI: ffffffff89fb6ce8 RDI: ffff888031032904 [ 406.304549][T11779] RBP: ffff888074b8ddc0 R08: 0000000000000001 R09: 0000000000000000 [ 406.312563][T11779] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000596fbd8 [ 406.320596][T11779] R13: dffffc0000000000 R14: fffffbfff20555d0 R15: ffffffff902aae60 [ 406.328608][T11779] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 406.337535][T11779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.344124][T11779] CR2: 00007f513fd17d60 CR3: 000000000e182000 CR4: 00000000003526f0 [ 406.352164][T11779] Call Trace: [ 406.355425][T11779] [ 406.358344][T11779] ? __pfx_xfrm_net_exit+0x10/0x10 [ 406.363481][T11779] xfrm_net_exit+0x2d/0x70 [ 406.367878][T11779] ops_undo_list+0x2ee/0xab0 [ 406.372476][T11779] ? __pfx_ops_undo_list+0x10/0x10 [ 406.377579][T11779] ? cleanup_net+0x347/0x8b0 [ 406.382179][T11779] ? idr_destroy+0x62/0x2e0 [ 406.386661][T11779] cleanup_net+0x41b/0x8b0 [ 406.391190][T11779] ? __pfx_cleanup_net+0x10/0x10 [ 406.396300][T11779] ? rcu_is_watching+0x12/0xc0 [ 406.401267][T11779] process_one_work+0x9cf/0x1b70 [ 406.406205][T11779] ? __pfx_process_one_work+0x10/0x10 [ 406.411622][T11779] ? assign_work+0x1a0/0x250 [ 406.416210][T11779] worker_thread+0x6c8/0xf10 [ 406.420971][T11779] ? __kthread_parkme+0x19e/0x250 [ 406.426057][T11779] ? __pfx_worker_thread+0x10/0x10 [ 406.431172][T11779] kthread+0x3c5/0x780 [ 406.435225][T11779] ? __pfx_kthread+0x10/0x10 [ 406.439795][T11779] ? rcu_is_watching+0x12/0xc0 [ 406.444627][T11779] ? __pfx_kthread+0x10/0x10 [ 406.449224][T11779] ret_from_fork+0x675/0x7d0 [ 406.453822][T11779] ? __pfx_kthread+0x10/0x10 [ 406.458384][T11779] ret_from_fork_asm+0x1a/0x30 [ 406.463167][T11779] [ 406.466164][T11779] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 406.473502][T11779] CPU: 1 UID: 0 PID: 11779 Comm: kworker/u8:49 Not tainted syzkaller #0 PREEMPT(full) [ 406.483104][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.493149][T11779] Workqueue: netns cleanup_net [ 406.497900][T11779] Call Trace: [ 406.501169][T11779] [ 406.504092][T11779] dump_stack_lvl+0x3d/0x1f0 [ 406.508664][T11779] vpanic+0x640/0x6f0 [ 406.512631][T11779] ? xfrm_state_fini+0x289/0x310 [ 406.517540][T11779] panic+0xca/0xd0 [ 406.521236][T11779] ? __pfx_panic+0x10/0x10 [ 406.525632][T11779] ? check_panic_on_warn+0x1f/0xb0 [ 406.530734][T11779] check_panic_on_warn+0xab/0xb0 [ 406.535648][T11779] __warn+0xf6/0x3c0 [ 406.539514][T11779] ? xfrm_state_fini+0x289/0x310 [ 406.544454][T11779] report_bug+0x3c3/0x580 [ 406.548760][T11779] ? xfrm_state_fini+0x289/0x310 [ 406.553677][T11779] handle_bug+0x184/0x210 [ 406.558260][T11779] exc_invalid_op+0x17/0x50 [ 406.562756][T11779] asm_exc_invalid_op+0x1a/0x20 [ 406.567588][T11779] RIP: 0010:xfrm_state_fini+0x289/0x310 [ 406.573118][T11779] Code: c1 f7 90 0f 0b 90 e9 e7 fe ff ff e8 01 8c c1 f7 90 0f 0b 90 e9 39 ff ff ff e8 f3 8b c1 f7 90 0f 0b 90 eb 8a e8 e8 8b c1 f7 90 <0f> 0b 90 e9 d5 fd ff ff e8 8a 1a 2a f8 e9 f8 fd ff ff e8 b0 1a 2a [ 406.592708][T11779] RSP: 0018:ffffc9000596fa90 EFLAGS: 00010293 [ 406.598842][T11779] RAX: 0000000000000000 RBX: ffff888074b8c900 RCX: fffff52000b2df23 [ 406.606793][T11779] RDX: ffff888031032480 RSI: ffffffff89fb6ce8 RDI: ffff888031032904 [ 406.614745][T11779] RBP: ffff888074b8ddc0 R08: 0000000000000001 R09: 0000000000000000 [ 406.622696][T11779] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000596fbd8 [ 406.630645][T11779] R13: dffffc0000000000 R14: fffffbfff20555d0 R15: ffffffff902aae60 [ 406.638604][T11779] ? xfrm_state_fini+0x288/0x310 [ 406.643532][T11779] ? __pfx_xfrm_net_exit+0x10/0x10 [ 406.648625][T11779] xfrm_net_exit+0x2d/0x70 [ 406.653021][T11779] ops_undo_list+0x2ee/0xab0 [ 406.657604][T11779] ? __pfx_ops_undo_list+0x10/0x10 [ 406.662699][T11779] ? cleanup_net+0x347/0x8b0 [ 406.667273][T11779] ? idr_destroy+0x62/0x2e0 [ 406.671765][T11779] cleanup_net+0x41b/0x8b0 [ 406.676167][T11779] ? __pfx_cleanup_net+0x10/0x10 [ 406.681092][T11779] ? rcu_is_watching+0x12/0xc0 [ 406.685842][T11779] process_one_work+0x9cf/0x1b70 [ 406.690768][T11779] ? __pfx_process_one_work+0x10/0x10 [ 406.696141][T11779] ? assign_work+0x1a0/0x250 [ 406.700713][T11779] worker_thread+0x6c8/0xf10 [ 406.705289][T11779] ? __kthread_parkme+0x19e/0x250 [ 406.710307][T11779] ? __pfx_worker_thread+0x10/0x10 [ 406.715408][T11779] kthread+0x3c5/0x780 [ 406.719470][T11779] ? __pfx_kthread+0x10/0x10 [ 406.724055][T11779] ? rcu_is_watching+0x12/0xc0 [ 406.728818][T11779] ? __pfx_kthread+0x10/0x10 [ 406.733399][T11779] ret_from_fork+0x675/0x7d0 [ 406.737986][T11779] ? __pfx_kthread+0x10/0x10 [ 406.742564][T11779] ret_from_fork_asm+0x1a/0x30 [ 406.747357][T11779] [ 406.750565][T11779] Kernel Offset: disabled [ 406.754869][T11779] Rebooting in 86400 seconds..