last executing test programs: 13.451531988s ago: executing program 3 (id=993): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000340)=0x10) 13.244465425s ago: executing program 3 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ef) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 13.078066307s ago: executing program 3 (id=999): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000104040000010000005565e7021f", @ANYRES32=0x0, @ANYBLOB="03050000000002000800250001000000050010"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12.887072542s ago: executing program 3 (id=1002): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7a, 0xa3, 0x40000023e, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x10000000000002ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x4, 0x404}, [{0x3, 0x281, 0x70, 0xff5, 0xffffffffffffff80, 0x97, 0x7}], "", ['\x00']}, 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12.738059459s ago: executing program 3 (id=1003): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 12.737452965s ago: executing program 0 (id=1013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 12.737043955s ago: executing program 2 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) acct(&(0x7f0000000040)='./mydev/v4l-touch0\x00') 12.592254631s ago: executing program 2 (id=1006): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 12.538507274s ago: executing program 0 (id=1007): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 12.295984115s ago: executing program 0 (id=1009): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) 12.271779314s ago: executing program 2 (id=1010): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 12.126973464s ago: executing program 4 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x8002, 0x5a, 0x0, 0x8001, 0x4, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x19, {0x6, 0x6, 0x9, 0x4}}]}]}}}]}, 0x64}}, 0x0) 12.116468102s ago: executing program 0 (id=1012): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 12.050397564s ago: executing program 2 (id=1014): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000480)=0x1) 11.847673127s ago: executing program 1 (id=1016): r0 = epoll_create(0x5) r1 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000040)={0x32000000}) 11.838808191s ago: executing program 4 (id=1017): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 11.769501443s ago: executing program 2 (id=1018): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 11.663871525s ago: executing program 4 (id=1019): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@hyper}) 11.655578833s ago: executing program 1 (id=1020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.598219618s ago: executing program 2 (id=1021): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$3(0x3) 11.526424781s ago: executing program 4 (id=1022): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r1, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) 11.507054921s ago: executing program 1 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x88, r1, 0xacf5e67dd0b583a1, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1, 0x2, 0x2, 0x1000}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x81, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x61}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) 11.416794457s ago: executing program 4 (id=1024): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 11.285636719s ago: executing program 1 (id=1025): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 11.271737487s ago: executing program 4 (id=1026): r0 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11.152647978s ago: executing program 3 (id=1027): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 11.128297114s ago: executing program 1 (id=1028): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="4000000005000140000000", 0xb) syz_init_net_socket$x25(0x9, 0x5, 0x0) 11.117924104s ago: executing program 0 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 10.925573957s ago: executing program 1 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) 0s ago: executing program 0 (id=1031): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsuid(0xee00) kernel console output (not intermixed with test programs): 03044][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.803132][ T5600] bridge_slave_1: entered allmulticast mode [ 69.805104][ T5600] bridge_slave_1: entered promiscuous mode [ 69.869830][ T5601] team0: Port device team_slave_0 added [ 69.908494][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.908642][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.908719][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.909005][ T5606] bridge_slave_0: entered allmulticast mode [ 69.911153][ T5606] bridge_slave_0: entered promiscuous mode [ 69.916324][ T5601] team0: Port device team_slave_1 added [ 69.953411][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.960734][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.960816][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.960904][ T5606] bridge_slave_1: entered allmulticast mode [ 69.963347][ T5606] bridge_slave_1: entered promiscuous mode [ 69.977276][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.983280][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.019200][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.020860][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.035602][ T5600] team0: Port device team_slave_0 added [ 70.037148][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.037160][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.037181][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.039675][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.039685][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.039706][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.093950][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.099429][ T5598] team0: Port device team_slave_0 added [ 70.102059][ T5600] team0: Port device team_slave_1 added [ 70.135599][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.137508][ T5598] team0: Port device team_slave_1 added [ 70.143289][ T5608] Bluetooth: hci3: command tx timeout [ 70.143454][ T52] Bluetooth: hci0: command tx timeout [ 70.157333][ T5599] team0: Port device team_slave_0 added [ 70.190892][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.190906][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.190927][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.205307][ T5599] team0: Port device team_slave_1 added [ 70.221650][ T52] Bluetooth: hci2: command tx timeout [ 70.224833][ T5608] Bluetooth: hci4: command tx timeout [ 70.225055][ T52] Bluetooth: hci1: command tx timeout [ 70.235674][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.235687][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.235707][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.236951][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.236964][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.236985][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.273407][ T5606] team0: Port device team_slave_0 added [ 70.273938][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.273950][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.273971][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.293933][ T5601] hsr_slave_0: entered promiscuous mode [ 70.294819][ T5601] hsr_slave_1: entered promiscuous mode [ 70.312756][ T5606] team0: Port device team_slave_1 added [ 70.349944][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.349958][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.349980][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.378103][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.378118][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.378139][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.420862][ T5600] hsr_slave_0: entered promiscuous mode [ 70.423179][ T5600] hsr_slave_1: entered promiscuous mode [ 70.423756][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 70.423831][ T5600] Cannot create hsr debugfs directory [ 70.424460][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.424471][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.424492][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.444489][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.444503][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.444523][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.490847][ T5598] hsr_slave_0: entered promiscuous mode [ 70.492016][ T5598] hsr_slave_1: entered promiscuous mode [ 70.492763][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 70.492780][ T5598] Cannot create hsr debugfs directory [ 70.610328][ T5606] hsr_slave_0: entered promiscuous mode [ 70.611369][ T5606] hsr_slave_1: entered promiscuous mode [ 70.612415][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 70.612433][ T5606] Cannot create hsr debugfs directory [ 70.670148][ T5599] hsr_slave_0: entered promiscuous mode [ 70.670641][ T5599] hsr_slave_1: entered promiscuous mode [ 70.671308][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 70.671320][ T5599] Cannot create hsr debugfs directory [ 71.012003][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.020348][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.021481][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.032712][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.035617][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.043329][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.046325][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.053750][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.105320][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.105383][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.132933][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.136294][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.137125][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.140191][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.140786][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.151076][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.159442][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.166524][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.255458][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.259307][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.260145][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.264654][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.266091][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.272977][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.290854][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.301234][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.385205][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.388515][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.396709][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.413259][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.422981][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.423754][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.426807][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.427351][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.429426][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.495179][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.530904][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.549206][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.549314][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.573842][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.576033][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.576573][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.578834][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.581287][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.581338][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.628744][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.635318][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.635988][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.642533][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.674656][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.692057][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.692116][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.713341][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.725315][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.752678][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.752731][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.754710][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.754766][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.776748][ T5601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.776768][ T5601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.830417][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.844085][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 71.844100][ T31] audit: type=1400 audit(1791312950.235:152): avc: denied { sys_module } for pid=5601 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.844290][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.844381][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.877573][ T5599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.877594][ T5599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.961282][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.992050][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.992216][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.027875][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.027959][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.089591][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.159175][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.185994][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.186084][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.217578][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.217665][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.235704][ T5608] Bluetooth: hci3: command tx timeout [ 72.235784][ T52] Bluetooth: hci0: command tx timeout [ 72.302352][ T5608] Bluetooth: hci4: command tx timeout [ 72.302381][ T5608] Bluetooth: hci2: command tx timeout [ 72.302475][ T52] Bluetooth: hci1: command tx timeout [ 72.786414][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.859630][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.935437][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.028737][ T5599] veth0_vlan: entered promiscuous mode [ 73.075186][ T5599] veth1_vlan: entered promiscuous mode [ 73.105862][ T5598] veth0_vlan: entered promiscuous mode [ 73.143950][ T5598] veth1_vlan: entered promiscuous mode [ 73.195221][ T5599] veth0_macvtap: entered promiscuous mode [ 73.218373][ T5599] veth1_macvtap: entered promiscuous mode [ 73.297370][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.311149][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.313726][ T5598] veth0_macvtap: entered promiscuous mode [ 73.324230][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.349578][ T5598] veth1_macvtap: entered promiscuous mode [ 73.399339][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.425929][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.445134][ T139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.467240][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.493226][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.493266][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.493297][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.564723][ T5606] veth0_vlan: entered promiscuous mode [ 73.592920][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.593037][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.593072][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.593501][ T5601] veth0_vlan: entered promiscuous mode [ 73.600247][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.600272][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.630024][ T5606] veth1_vlan: entered promiscuous mode [ 73.705823][ T5601] veth1_vlan: entered promiscuous mode [ 73.716875][ T5600] veth0_vlan: entered promiscuous mode [ 73.723057][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.723074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.729460][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.729477][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.772051][ T5600] veth1_vlan: entered promiscuous mode [ 73.775838][ T31] audit: type=1400 audit(1791312952.165:153): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.4iERfw/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.776993][ T31] audit: type=1400 audit(1791312952.165:154): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.778885][ T31] audit: type=1400 audit(1791312952.165:155): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.4iERfw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.780908][ T31] audit: type=1400 audit(1791312952.165:156): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.833054][ T139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861660][ T31] audit: type=1400 audit(1791312952.225:157): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.4iERfw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.861707][ T31] audit: type=1400 audit(1791312952.235:158): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.4iERfw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.869264][ T31] audit: type=1400 audit(1791312952.255:159): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.869674][ T5606] veth0_macvtap: entered promiscuous mode [ 73.875766][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.875783][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.884329][ T5606] veth1_macvtap: entered promiscuous mode [ 73.887813][ T31] audit: type=1400 audit(1791312952.275:160): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.897806][ T31] audit: type=1400 audit(1791312952.285:161): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="gadgetfs" ino=6909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.905510][ T5601] veth0_macvtap: entered promiscuous mode [ 73.960823][ T5601] veth1_macvtap: entered promiscuous mode [ 73.988953][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.001139][ T5600] veth0_macvtap: entered promiscuous mode [ 74.011703][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.035815][ T5600] veth1_macvtap: entered promiscuous mode [ 74.055739][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.105506][ T139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.105551][ T139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.105584][ T139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.105614][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.105932][ T5599] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.111212][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.194729][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.234989][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.241895][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.244240][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.244328][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.244361][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.302664][ T5607] Bluetooth: hci0: command tx timeout [ 74.302693][ T5607] Bluetooth: hci3: command tx timeout [ 74.332178][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.332220][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.332254][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.332287][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.391714][ T52] Bluetooth: hci1: command tx timeout [ 74.391744][ T52] Bluetooth: hci2: command tx timeout [ 74.391762][ T52] Bluetooth: hci4: command tx timeout [ 74.437038][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.437057][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.547975][ T5798] rdma_op ffff888075e80a38 conn xmit_rdma 0000000000000000 [ 74.589229][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.589246][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.686645][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.686664][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.778712][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.778730][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.866659][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.866677][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959699][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.959719][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.207709][ T5825] Bluetooth: MGMT ver 1.23 [ 75.904018][ T5868] capability: warning: `syz.4.36' uses deprecated v2 capabilities in a way that may be insecure [ 76.382883][ T5607] Bluetooth: hci3: command tx timeout [ 76.382914][ T5607] Bluetooth: hci0: command tx timeout [ 76.424875][ T5890] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 76.424897][ T5890] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 76.456658][ T5892] warning: `syz.1.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.462644][ T52] Bluetooth: hci4: command tx timeout [ 76.462671][ T52] Bluetooth: hci2: command tx timeout [ 76.462691][ T52] Bluetooth: hci1: command tx timeout [ 76.716575][ T5901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.174387][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 77.174539][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 77.284045][ T4930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.453227][ T4930] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 77.456597][ T4930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.456641][ T4930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.456663][ T4930] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.456686][ T4930] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.456726][ T4930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.808334][ T31] kauditd_printk_skb: 73 callbacks suppressed [ 77.808351][ T31] audit: type=1400 audit(1791312956.195:235): avc: denied { read } for pid=5926 comm="syz.1.63" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.813886][ T31] audit: type=1400 audit(1791312956.195:236): avc: denied { open } for pid=5926 comm="syz.1.63" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.934620][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 77.989586][ T4930] gud 5-1:1.0: No supported pixel formats found [ 77.989615][ T4930] gud 5-1:1.0: probe with driver gud failed with error -22 [ 78.076500][ T31] audit: type=1400 audit(1791312956.465:237): avc: denied { create } for pid=5937 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.215180][ T31] audit: type=1400 audit(1791312956.605:238): avc: denied { create } for pid=5943 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.237811][ T9] usb 5-1: USB disconnect, device number 2 [ 78.240971][ T5711] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.247188][ T31] audit: type=1400 audit(1791312956.635:239): avc: denied { ioctl } for pid=5943 comm="syz.2.71" path="socket:[8994]" dev="sockfs" ino=8994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.329119][ T31] audit: type=1400 audit(1791312956.715:240): avc: denied { write } for pid=5937 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.336624][ T5947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.69'. [ 78.336642][ T5947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.69'. [ 78.336653][ T5947] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 78.441826][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 78.446145][ T5711] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 78.447139][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.447167][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.447188][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.447226][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.467606][ T5711] usb 4-1: config 0 descriptor?? [ 78.528022][ T31] audit: type=1400 audit(1791312956.915:241): avc: denied { mmap_zero } for pid=5952 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 78.561378][ T31] audit: type=1400 audit(1791312956.945:242): avc: denied { setopt } for pid=5951 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.705827][ T31] audit: type=1400 audit(1791312957.095:243): avc: denied { create } for pid=5957 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.710672][ T31] audit: type=1400 audit(1791312957.095:244): avc: denied { setopt } for pid=5957 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.929703][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929739][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929763][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929786][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929808][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929830][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929852][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929874][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929896][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 78.929918][ T5711] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 79.034079][ T5711] asus 0003:0B05:17E0.0001: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input0 [ 79.248571][ T9] usb 4-1: USB disconnect, device number 2 [ 79.355590][ T5965] fido_id[5965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 80.141993][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.181678][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 80.291676][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 80.295566][ T5819] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.298105][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.298134][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.298157][ T5819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.298195][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.314200][ T5819] usb 1-1: config 0 descriptor?? [ 80.335403][ T9] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 80.351748][ T9] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 80.351771][ T9] usb 4-1: Product: syz [ 80.351786][ T9] usb 4-1: Manufacturer: syz [ 80.351800][ T9] usb 4-1: SerialNumber: syz [ 80.401185][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 80.767593][ T5819] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 80.770937][ T5819] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 80.827273][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 80.827338][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 80.937836][ T6022] Zero length message leads to an empty skb [ 80.948824][ T5819] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 80.968271][ T5819] usb 1-1: USB disconnect, device number 2 [ 81.033181][ T6024] fido_id[6024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 81.051950][ T5813] usb 4-1: USB disconnect, device number 3 [ 81.217929][ T6036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.112'. [ 81.345769][ T25] cfg80211: failed to load regulatory.db [ 81.718444][ T6069] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 81.771961][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.905329][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 81.927668][ T5813] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 81.933347][ T5813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 81.933372][ T5813] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 81.941307][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.941330][ T5813] usb 3-1: Product: syz [ 81.941344][ T5813] usb 3-1: Manufacturer: syz [ 81.941358][ T5813] usb 3-1: SerialNumber: syz [ 82.015315][ T6087] [U]  [ 82.015328][ T6087] [U] K{ [ 82.015336][ T6087] [U] t 1ŠFfˊ`GJgo/mC [ 82.015356][ T6087] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 82.015375][ T6087] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 82.015403][ T6087] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 82.015450][ T6087] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 82.015474][ T6087] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 82.015491][ T6087] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 82.015513][ T6087] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 82.015628][ T6087] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 82.015644][ T6087] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 82.015657][ T6087] [U] 22Ʃx?0;3u [ 82.015677][ T6087] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 82.015700][ T6087] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 82.015721][ T6087] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 82.015733][ T6087] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 82.015747][ T6087] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 82.015758][ T6087] [U] ec [ 82.015768][ T6087] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 82.017659][ T6086] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 82.232562][ T5813] usb 3-1: Limiting number of CPorts to U8_MAX [ 82.345352][ T6096] sctp: [Deprecated]: syz.3.141 (pid 6096) Use of int in maxseg socket option. [ 82.345352][ T6096] Use struct sctp_assoc_value instead [ 82.443095][ C0] usb 3-1: short aprc response received [ 82.604958][ T6108] Bluetooth: MGMT ver 1.23 [ 82.646141][ T5813] usb 3-1: failed to set cport flags for port 0 [ 82.646339][ T5813] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 82.738729][ T5813] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 82.778160][ T5813] usb 3-1: USB disconnect, device number 2 [ 82.816314][ T6120] netlink: 'syz.1.154': attribute type 18 has an invalid length. [ 82.820219][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 82.820235][ T31] audit: type=1400 audit(1791312961.205:273): avc: denied { mounton } for pid=6115 comm="syz.0.150" path="/22/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.913001][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.913043][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.913075][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.913105][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.248100][ T31] audit: type=1400 audit(1791312961.635:274): avc: denied { create } for pid=6146 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.300195][ T31] audit: type=1400 audit(1791312961.685:275): avc: denied { write } for pid=6146 comm="syz.3.167" path="socket:[10365]" dev="sockfs" ino=10365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.421650][ T5813] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 83.460475][ T6155] netlink: 'syz.4.171': attribute type 3 has an invalid length. [ 83.466115][ T31] audit: type=1400 audit(1791312961.855:276): avc: denied { read write } for pid=6154 comm="syz.3.170" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.467327][ T31] audit: type=1400 audit(1791312961.855:277): avc: denied { open } for pid=6154 comm="syz.3.170" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.477494][ T31] audit: type=1400 audit(1791312961.865:278): avc: denied { ioctl } for pid=6154 comm="syz.3.170" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.489822][ T6157] input: syz0 as /devices/virtual/input/input5 [ 83.573396][ T5813] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 83.574344][ T5813] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 83.574376][ T5813] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.574403][ T5813] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.574432][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.590488][ T5813] usb 1-1: config 0 descriptor?? [ 83.591883][ T6142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.735179][ T31] audit: type=1400 audit(1791312962.125:279): avc: denied { name_bind } for pid=6166 comm="syz.3.176" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.738012][ T31] audit: type=1400 audit(1791312962.125:280): avc: denied { node_bind } for pid=6166 comm="syz.3.176" saddr=::ffff:172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 83.848878][ T31] audit: type=1400 audit(1791312962.235:281): avc: denied { write } for pid=6174 comm="syz.3.180" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.012555][ T6184] netlink: 'syz.1.182': attribute type 9 has an invalid length. [ 84.067432][ T5813] kye 0003:0458:501A.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 84.068122][ T5813] hid_parser_main: 24 callbacks suppressed [ 84.068139][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068163][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068186][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068209][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068231][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068254][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068275][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068298][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068320][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.068342][ T5813] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 84.081056][ T31] audit: type=1400 audit(1791312962.465:282): avc: denied { read write } for pid=6186 comm="syz.3.186" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.097592][ T5813] kye 0003:0458:501A.0003: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 84.097623][ T5813] kye 0003:0458:501A.0003: tablet-enabling feature report not found [ 84.097637][ T5813] kye 0003:0458:501A.0003: tablet enabling failed [ 84.316371][ T9] usb 1-1: USB disconnect, device number 3 [ 84.491961][ T5696] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.642151][ T5696] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 84.643054][ T5696] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 84.643079][ T5696] usb 3-1: config 0 has no interface number 0 [ 84.643117][ T5696] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.648444][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.648468][ T5696] usb 3-1: Product: syz [ 84.648483][ T5696] usb 3-1: Manufacturer: syz [ 84.648498][ T5696] usb 3-1: SerialNumber: syz [ 84.712005][ T5696] usb 3-1: config 0 descriptor?? [ 84.745181][ T5696] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 84.976819][ T5813] usb 3-1: USB disconnect, device number 3 [ 84.986593][ T5813] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 85.164539][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 85.222082][ T5696] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.393311][ T5696] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 85.394226][ T5696] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.394254][ T5696] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.394275][ T5696] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.394301][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 85.394330][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.396857][ T5696] usb 4-1: config 0 descriptor?? [ 85.462739][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.471652][ T5813] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.558513][ T6261] overlay: filesystem on ./bus not supported as upperdir [ 85.611647][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 85.612210][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.613119][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.613148][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.613170][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.613206][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.618441][ T9] usb 5-1: config 0 descriptor?? [ 85.623176][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 85.623677][ T5813] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 85.632723][ T5813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.632765][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.656107][ T5813] usb 1-1: config 0 descriptor?? [ 85.673151][ T5813] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 85.794642][ T6271] binder: 6270:6271 ioctl c0306201 2000000001c0 returned -14 [ 85.820002][ T5696] elan 0003:04F3:074D.0004: ignoring exceeding usage max [ 85.835660][ T5696] elan 0003:04F3:074D.0004: failed to start in urb: -90 [ 85.855829][ T5696] elan 0003:04F3:074D.0004: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input0 [ 86.071063][ T25] usb 4-1: USB disconnect, device number 4 [ 86.099944][ T5813] gspca_vc032x: reg_w err -71 [ 86.100022][ T5813] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 86.126667][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input7 [ 86.134658][ T5813] usb 1-1: USB disconnect, device number 4 [ 86.236430][ T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 86.344031][ T25] usb 5-1: USB disconnect, device number 3 [ 86.420937][ T6293] ipvlan2: entered allmulticast mode [ 86.420958][ T6293] bond0: entered allmulticast mode [ 86.420971][ T6293] bond_slave_0: entered allmulticast mode [ 86.420989][ T6293] bond_slave_1: entered allmulticast mode [ 86.448300][ T6293] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.448324][ T6293] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 86.448464][ T6293] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 87.209959][ T6339] sd 0:0:1:0: PR command failed: 1026 [ 87.210009][ T6339] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 87.210049][ T6339] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 87.241634][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.392403][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 87.393054][ T25] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 87.397127][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.397156][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.398919][ T25] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 87.398943][ T25] usb 1-1: Manufacturer: syz [ 87.417685][ T25] usb 1-1: config 0 descriptor?? [ 87.578373][ T6354] smpboot: CPU 1 is now offline [ 87.643664][ T6351] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 87.863738][ T5813] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.890009][ T25] hid (null): report_id 0 is invalid [ 87.900366][ T25] creative-sb0540 0003:041E:3100.0006: report_id 0 is invalid [ 87.900380][ T25] creative-sb0540 0003:041E:3100.0006: item 0 2 1 8 parsing failed [ 87.922564][ T25] creative-sb0540 0003:041E:3100.0006: parse failed [ 87.922616][ T25] creative-sb0540 0003:041E:3100.0006: probe with driver creative-sb0540 failed with error -22 [ 87.926410][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 87.926419][ T31] audit: type=1400 audit(1791312966.315:316): avc: denied { prog_load } for pid=6363 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.988767][ T31] audit: type=1400 audit(1791312966.375:317): avc: denied { prog_run } for pid=6363 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.031709][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 88.032200][ T5813] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 88.032965][ T5813] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 88.032983][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.033001][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.040535][ T5813] usb 3-1: config 0 descriptor?? [ 88.151017][ T9] usb 1-1: USB disconnect, device number 5 [ 88.319446][ T6373] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 88.492617][ T5813] hid-led 0003:1294:1320.0007: hidraw0: USB HID v0.07 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 88.555372][ T5813] hid-led 0003:1294:1320.0007: Riso Kagaku Webmail Notifier initialized [ 88.572518][ T2265] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.678977][ T31] audit: type=1400 audit(1791312967.065:318): avc: denied { block_suspend } for pid=6386 comm="syz.1.274" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.722866][ T2265] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.723924][ T2265] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 88.723950][ T2265] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.723965][ T2265] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.723986][ T2265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.847636][ T2265] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.848061][ T2265] usb 5-1: invalid MIDI out EP 0 [ 88.897517][ T5819] usb 3-1: USB disconnect, device number 4 [ 88.914797][ T50] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 88.934743][ T12] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 88.941500][ T12] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 89.086691][ T31] audit: type=1400 audit(1791312967.475:319): avc: denied { create } for pid=6393 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.126651][ T31] audit: type=1400 audit(1791312967.515:320): avc: denied { write } for pid=6375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.333688][ T5819] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.389861][ T6399] netlink: Failed to add helper -22 [ 89.389905][ T6399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.429182][ T31] audit: type=1400 audit(1791312967.815:321): avc: denied { write } for pid=6402 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.491969][ T5819] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 89.493824][ T5819] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.493842][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.493861][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.500989][ T5819] usb 1-1: config 0 descriptor?? [ 89.563751][ T2265] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 89.601213][ T2265] usb 5-1: USB disconnect, device number 4 [ 89.736884][ T6410] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 89.886923][ T6415] erspan0: entered promiscuous mode [ 89.923267][ T6419] vlan2: entered promiscuous mode [ 89.923282][ T6419] bridge0: entered promiscuous mode [ 90.013059][ T5819] holtek_mouse 0003:04D9:A070.0008: ignoring exceeding usage max [ 90.013533][ T5819] holtek_mouse 0003:04D9:A070.0008: unbalanced delimiter at end of report description [ 90.013865][ T5819] holtek_mouse 0003:04D9:A070.0008: hid parse failed: -22 [ 90.013900][ T5819] holtek_mouse 0003:04D9:A070.0008: probe with driver holtek_mouse failed with error -22 [ 90.118939][ T6424] jffs2: notice: (6424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.122754][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.149635][ T31] audit: type=1400 audit(1791312968.535:322): avc: denied { write } for pid=6423 comm="syz.4.286" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.186840][ T6429] ======================================================= [ 90.186840][ T6429] WARNING: The mand mount option has been deprecated and [ 90.186840][ T6429] and is ignored by this kernel. Remove the mand [ 90.186840][ T6429] option from the mount to silence this warning. [ 90.186840][ T6429] ======================================================= [ 90.283496][ T9] usb 1-1: USB disconnect, device number 6 [ 90.324073][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 90.327838][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 90.327856][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 90.327870][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 90.329575][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.329589][ T10] usb 4-1: Product: syz [ 90.329598][ T10] usb 4-1: Manufacturer: syz [ 90.329607][ T10] usb 4-1: SerialNumber: syz [ 90.331092][ T10] usb 4-1: config 0 descriptor?? [ 90.331497][ T6416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.345026][ T6416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.399716][ T10] usb 4-1: ucan: probing device on interface #0 [ 90.445788][ T2265] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.528947][ T31] audit: type=1400 audit(1791312968.915:323): avc: denied { map_create } for pid=6436 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.529341][ T31] audit: type=1400 audit(1791312968.915:324): avc: denied { map_read map_write } for pid=6436 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.592195][ T2265] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 90.594665][ T2265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.594680][ T2265] usb 2-1: Product: syz [ 90.594688][ T2265] usb 2-1: Manufacturer: syz [ 90.594696][ T2265] usb 2-1: SerialNumber: syz [ 90.636681][ T2265] usb 2-1: config 0 descriptor?? [ 90.639370][ T2265] ch341 2-1:0.0: ch341-uart converter detected [ 90.730650][ T31] audit: type=1400 audit(1791312969.115:325): avc: denied { write } for pid=6412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.012681][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.096110][ T10] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 91.123026][ T10] usb 4-1: USB disconnect, device number 5 [ 91.162622][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 91.166481][ T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 91.169992][ T9] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 91.178443][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.178458][ T9] usb 5-1: Product: syz [ 91.178467][ T9] usb 5-1: Manufacturer: syz [ 91.178475][ T9] usb 5-1: SerialNumber: syz [ 91.207897][ T9] usb 5-1: config 0 descriptor?? [ 91.214610][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 91.252755][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 91.294570][ T2265] usb 2-1: failed to send control message: -71 [ 91.294626][ T2265] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 91.325490][ T2265] usb 2-1: USB disconnect, device number 2 [ 91.326671][ T2265] ch341 2-1:0.0: device disconnected [ 91.356703][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.357214][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 91.357242][ T9] usb 5-1: media controller created [ 91.438405][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.455781][ T6445] dvb-usb: bulk message failed: -22 (3/0) [ 91.510814][ T9] usb 5-1: selecting invalid altsetting 7 [ 91.510833][ T9] cxusb: set interface failed [ 91.510839][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 91.600077][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 91.600088][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 91.659385][ T6466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.721610][ T9] rc_core: IR keymap rc-dvico-portable not found [ 91.721621][ T9] Registered IR keymap rc-empty [ 91.726592][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 91.730764][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 91.755821][ T6467] macsec2: entered promiscuous mode [ 91.755835][ T6467] bridge0: entered promiscuous mode [ 91.811168][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 91.811183][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 91.835575][ T9] usb 5-1: USB disconnect, device number 5 [ 92.076643][ T6466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.154784][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 92.310836][ T6487] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 92.374376][ T6466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.501308][ T6487] @0: renamed from bond_slave_1 (while UP) [ 92.638396][ T6466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.793231][ T6506] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 92.893238][ T139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.893272][ T139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.901596][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.967585][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 93.014799][ T139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.055830][ T139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.070607][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 93.076258][ T9] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 93.102220][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.102235][ T9] usb 2-1: Product: syz [ 93.102243][ T9] usb 2-1: Manufacturer: syz [ 93.102252][ T9] usb 2-1: SerialNumber: syz [ 93.105475][ T9] usb 2-1: config 0 descriptor?? [ 93.158103][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 93.158157][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 93.158169][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 93.161267][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 93.161277][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 93.208864][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.231169][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 93.231198][ T9] usb 2-1: media controller created [ 93.293936][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.342026][ T6521] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 93.357575][ T6499] dvb-usb: bulk message failed: -22 (7/0) [ 93.357588][ T6499] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 93.357614][ T6499] ttusb2: i2c transfer failed. [ 93.386252][ T9] usb 2-1: selecting invalid altsetting 3 [ 93.386264][ T9] ttusb2: set interface to alts=3 failed [ 93.517803][ T9] DVB: Unable to find symbol tda10086_attach() [ 93.517814][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 93.536977][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 93.536989][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 93.537096][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 93.537112][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 93.537142][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 93.599619][ T9] usb 2-1: USB disconnect, device number 3 [ 93.642578][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 93.642590][ T31] audit: type=1400 audit(1791312972.025:331): avc: denied { write } for pid=6493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.711010][ T6533] netlink: 'syz.4.319': attribute type 4 has an invalid length. [ 93.711025][ T6533] netlink: 224 bytes leftover after parsing attributes in process `syz.4.319'. [ 93.740594][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 93.880134][ T6540] netlink: 'syz.2.322': attribute type 12 has an invalid length. [ 93.999339][ T31] audit: type=1400 audit(1791312972.385:332): avc: denied { write } for pid=6542 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.558992][ T31] audit: type=1400 audit(1791312972.945:333): avc: denied { ioctl } for pid=6568 comm="syz.3.334" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11862 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.772710][ T6582] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.775919][ T6582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.775972][ T6582] IPv6: NLM_F_CREATE should be set when creating new route [ 94.775984][ T6582] IPv6: NLM_F_CREATE should be set when creating new route [ 94.818160][ T6582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.987300][ T31] audit: type=1400 audit(1791312973.375:334): avc: denied { read } for pid=6589 comm="syz.3.342" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.987505][ T31] audit: type=1400 audit(1791312973.375:335): avc: denied { open } for pid=6589 comm="syz.3.342" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.990540][ T31] audit: type=1400 audit(1791312973.375:336): avc: denied { append } for pid=6590 comm="syz.1.341" name="sg0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.084708][ T31] audit: type=1400 audit(1791312973.475:337): avc: denied { ioctl } for pid=6589 comm="syz.3.342" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x641f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.086384][ T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:0) [ 95.128133][ T6593] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.195247][ T31] audit: type=1400 audit(1791312973.575:338): avc: denied { write } for pid=6554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.543305][ T31] audit: type=1400 audit(1791312973.935:339): avc: denied { write } for pid=6607 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.676501][ T31] audit: type=1400 audit(1791312974.065:340): avc: denied { write } for pid=6612 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.002395][ T6559] syz.4.329 (6559): drop_caches: 2 [ 96.192275][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 96.333549][ T6645] netlink: 'syz.2.360': attribute type 6 has an invalid length. [ 96.337478][ T6639] netlink: 'syz.2.360': attribute type 6 has an invalid length. [ 96.358971][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 96.359894][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.359907][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.360991][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.361004][ T9] usb 1-1: SerialNumber: syz [ 96.426892][ T9] usb 1-1: 0:2 : does not exist [ 96.909690][ T10] usb 1-1: USB disconnect, device number 7 [ 97.011723][ T5813] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.032196][ T2265] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.163402][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 97.163812][ T5813] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 97.164606][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.164624][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.164643][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.166103][ T5813] usb 5-1: config 0 descriptor?? [ 97.170295][ T5813] hub 5-1:0.0: USB hub found [ 97.210908][ T2265] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 97.225843][ T5819] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.226484][ T2265] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 97.226502][ T2265] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.226517][ T2265] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.226533][ T2265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.294319][ T2265] usb 2-1: config 0 descriptor?? [ 97.377642][ T5813] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 97.381837][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 97.395619][ T5819] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 97.396393][ T5819] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 97.396414][ T5819] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 97.396433][ T5819] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 97.396447][ T5819] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 97.396461][ T5819] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.401016][ T5819] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 97.401031][ T5819] usb 4-1: Product: syz [ 97.401039][ T5819] usb 4-1: Manufacturer: syz [ 97.401047][ T5819] usb 4-1: SerialNumber: syz [ 97.461925][ T5819] usb 4-1: config 0 descriptor?? [ 97.520694][ T5819] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 97.535401][ T5819] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 97.725192][ T9] usb 4-1: USB disconnect, device number 6 [ 97.725325][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 97.745922][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 97.765136][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 97.799339][ T5813] hid_parser_main: 39 callbacks suppressed [ 97.799353][ T5813] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 97.828026][ T2265] input: HID 05ac:8243 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8243.0009/input/input10 [ 97.867948][ T5813] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 97.937329][ T2265] appleir 0003:05AC:8243.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 98.056705][ T2265] usb 2-1: USB disconnect, device number 4 [ 98.128180][ T9] usb 5-1: USB disconnect, device number 6 [ 98.198088][ T6688] fido_id[6688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 98.541898][ T5813] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.694395][ T5813] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.697261][ T5813] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 98.697289][ T5813] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 98.697303][ T5813] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.697576][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 98.697585][ T31] audit: type=1400 audit(1791312977.085:353): avc: denied { read } for pid=6709 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.700841][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.700855][ T5813] usb 1-1: Product: syz [ 98.700863][ T5813] usb 1-1: Manufacturer: syz [ 98.700871][ T5813] usb 1-1: SerialNumber: syz [ 98.796942][ T5813] usb 1-1: config 0 descriptor?? [ 98.801218][ T31] audit: type=1400 audit(1791312977.185:354): avc: denied { bind } for pid=6709 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.801250][ T31] audit: type=1400 audit(1791312977.185:355): avc: denied { node_bind } for pid=6709 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 98.862155][ T5813] hub 1-1:0.0: bad descriptor, ignoring hub [ 98.862172][ T5813] hub 1-1:0.0: probe with driver hub failed with error -5 [ 98.869427][ T5813] usb 1-1: selecting invalid altsetting 0 [ 99.068328][ T31] audit: type=1400 audit(1791312977.455:356): avc: denied { bind } for pid=6718 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.285076][ T5813] usb 1-1: USB disconnect, device number 8 [ 99.503434][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.652445][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 99.656170][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 99.656205][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.658271][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 99.658285][ T9] usb 5-1: Manufacturer: syz [ 99.661026][ T9] usb 5-1: config 0 descriptor?? [ 99.840135][ T31] audit: type=1400 audit(1791312978.225:357): avc: denied { create } for pid=6735 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.860987][ T9] rc_core: IR keymap rc-hauppauge not found [ 99.860997][ T9] Registered IR keymap rc-empty [ 99.863611][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 99.899130][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 99.926500][ T31] audit: type=1400 audit(1791312978.315:358): avc: denied { ioctl } for pid=6735 comm="syz.1.398" path="socket:[12533]" dev="sockfs" ino=12533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.969922][ T31] audit: type=1400 audit(1791312978.355:359): avc: denied { bind } for pid=6735 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.018678][ T31] audit: type=1400 audit(1791312978.405:360): avc: denied { write } for pid=6735 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.095193][ T9] usb 5-1: USB disconnect, device number 7 [ 100.179226][ T5607] Bluetooth: hci4: unexpected cc 0x204b length: 34 > 3 [ 100.199648][ T31] audit: type=1400 audit(1791312978.585:361): avc: denied { append } for pid=6740 comm="syz.1.400" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.487803][ T31] audit: type=1400 audit(1791312978.875:362): avc: denied { sqpoll } for pid=6747 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.392859][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.543248][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 101.544007][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.544024][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.544036][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.544050][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.544067][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.546228][ T9] usb 5-1: config 0 descriptor?? [ 101.988421][ T9] elan 0003:04F3:074D.000B: ignoring exceeding usage max [ 102.003614][ T9] elan 0003:04F3:074D.000B: failed to start in urb: -90 [ 102.041501][ T6792] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [115] [ 102.041708][ T6792] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 102.041724][ T6792] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 102.041730][ T6792] One or more global auth toks could not properly register; rc = [-22] [ 102.041757][ T6792] Error validating options; rc = [-22] [ 102.044412][ T9] elan 0003:04F3:074D.000B: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 102.347509][ T9] usb 5-1: USB disconnect, device number 8 [ 102.584328][ T6712] syz.2.390 (6712): drop_caches: 1 [ 102.600563][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 102.600584][ T6806] netlink: 'syz.3.430': attribute type 30 has an invalid length. [ 102.600593][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 102.718191][ T6810] binder: 6808:6810 ioctl c0306201 200000000180 returned -14 [ 103.131380][ T139] IPVS: starting estimator thread 0... [ 103.223246][ T6835] IPVS: using max 65 ests per chain, 156000 per kthread [ 103.340190][ T6848] kvm: kvm [6847]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 103.433080][ T6852] netlink: 96 bytes leftover after parsing attributes in process `syz.2.451'. [ 103.481733][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.516521][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 103.531776][ T5819] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.632335][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 103.635207][ T9] usb 1-1: string descriptor 0 read error: -22 [ 103.635271][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.638895][ T9] etas_es58x 1-1:1.0: Starting (null) (null) (Serial Number (null)) [ 103.639022][ T9] etas_es58x 1-1:1.0: could not retrieve the product info string [ 103.794642][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.794672][ T5819] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 103.795288][ T5819] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 103.795307][ T5819] usb 5-1: can't read configurations, error -71 [ 103.912092][ T6864] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.922819][ T6842] etas_es58x 1-1:1.0 can0: bit-timing not yet defined [ 104.052401][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 104.052413][ T31] audit: type=1400 audit(1791312982.445:374): avc: denied { create } for pid=6869 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.134506][ T31] audit: type=1400 audit(1791312982.525:375): avc: denied { setopt } for pid=6869 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.222720][ T5607] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 104.222844][ T5607] Bluetooth: hci4: Injecting HCI hardware error event [ 104.223664][ T5607] Bluetooth: hci4: hardware error 0x00 [ 104.840614][ T31] audit: type=1400 audit(1791312983.225:376): avc: denied { write } for pid=6875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.941786][ T6842] etas_es58x 1-1:1.0: es58x_free_urbs: Timeout, some TX urbs still remain [ 104.944175][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 104.944362][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 104.944538][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 104.944710][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 104.944878][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 104.944919][ T6842] etas_es58x 1-1:1.0 can0: es58x_open: Could not open the network device: -EINVAL [ 104.946613][ T6871] syz_tun: entered allmulticast mode [ 104.950262][ T9] usb 1-1: USB disconnect, device number 9 [ 104.951359][ T9] etas_es58x 1-1:1.0: Disconnecting (null) (null) [ 105.179826][ T31] audit: type=1400 audit(1791312983.565:377): avc: denied { write } for pid=6905 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.225681][ T13] IPVS: starting estimator thread 0... [ 105.313155][ T6912] IPVS: using max 64 ests per chain, 153600 per kthread [ 105.396892][ T31] audit: type=1400 audit(1791312983.785:378): avc: denied { read write } for pid=6915 comm="syz.1.475" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.397131][ T31] audit: type=1400 audit(1791312983.785:379): avc: denied { open } for pid=6915 comm="syz.1.475" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.426772][ T31] audit: type=1400 audit(1791312983.815:380): avc: denied { bind } for pid=6914 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.426803][ T31] audit: type=1400 audit(1791312983.815:381): avc: denied { name_bind } for pid=6914 comm="syz.4.474" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 105.426824][ T31] audit: type=1400 audit(1791312983.815:382): avc: denied { node_bind } for pid=6914 comm="syz.4.474" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 105.572071][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.476'. [ 105.619590][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.476'. [ 105.812352][ T31] audit: type=1400 audit(1791312984.205:383): avc: denied { watch } for pid=6930 comm="syz.2.480" path="/125/bus" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.183603][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.192714][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.192741][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.192760][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.306872][ T5607] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 107.074554][ T6994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.209408][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 107.283146][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 107.311909][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 107.484649][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 107.484944][ T7010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.477093][ T7050] ipvlan2: entered promiscuous mode [ 108.478792][ T7050] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 108.479112][ T7050] team0: Device ipvlan2 is already an upper device of the team interface [ 109.068952][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 109.068967][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 109.482125][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 109.482137][ T31] audit: type=1400 audit(1791312987.875:412): avc: denied { write } for pid=7099 comm="syz.4.549" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 109.482564][ T31] audit: type=1400 audit(1791312987.875:413): avc: denied { open } for pid=7099 comm="syz.4.549" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 109.553051][ T5819] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.702795][ T5819] usb 2-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 109.705062][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.705075][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.705100][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.705112][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 109.706617][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.706631][ T5819] usb 2-1: Product: syz [ 109.706639][ T5819] usb 2-1: Manufacturer: syz [ 109.706648][ T5819] usb 2-1: SerialNumber: syz [ 109.862548][ T5607] Bluetooth: hci5: urb ffff88802b42ec00 submission failed (90) [ 109.932151][ T31] audit: type=1400 audit(1791312988.325:414): avc: denied { write } for pid=7112 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.938974][ T31] audit: type=1400 audit(1791312988.325:415): avc: denied { read } for pid=7112 comm="syz.4.557" lport=24481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.996384][ T7116] loop5: detected capacity change from 0 to 7 [ 110.024292][ T7116] Dev loop5: unable to read RDB block 7 [ 110.024315][ T7116] loop5: AHDI p1 [ 110.024326][ T7116] loop5: partition table partially beyond EOD, truncated [ 110.082438][ T9] usb 2-1: USB disconnect, device number 5 [ 110.087284][ T31] audit: type=1400 audit(1791312988.475:416): avc: denied { append } for pid=7117 comm="syz.3.559" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.249941][ T7122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.561'. [ 110.274234][ T31] audit: type=1400 audit(1791312988.665:417): avc: denied { read } for pid=7123 comm="syz.3.562" name="video9" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.274451][ T31] audit: type=1400 audit(1791312988.665:418): avc: denied { open } for pid=7123 comm="syz.3.562" path="/dev/video9" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.278599][ T31] audit: type=1400 audit(1791312988.665:419): avc: denied { write } for pid=7123 comm="syz.3.562" name="video9" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.374873][ T5819] kernel read not supported for file /video9 (pid: 5819 comm: kworker/0:6) [ 111.145686][ T31] audit: type=1400 audit(1791312989.535:420): avc: denied { write } for pid=7173 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 111.341366][ T31] audit: type=1400 audit(1791312989.725:421): avc: denied { mount } for pid=7180 comm="syz.3.588" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.464007][ T9] kernel write not supported for file /sequencer2 (pid: 9 comm: kworker/0:0) [ 111.754075][ T7203] i2c i2c-0: delete_device: Extra parameters [ 112.448311][ T7245] vivid-000: disconnect [ 112.450114][ T7238] vivid-000: reconnect [ 113.038653][ T139] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.613454][ T5819] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.762710][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 113.763168][ T5819] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.763909][ T5819] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 113.763929][ T5819] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 113.763950][ T5819] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 113.763978][ T5819] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 113.763992][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.766892][ T5819] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 113.766907][ T5819] usb 1-1: Product: syz [ 113.766915][ T5819] usb 1-1: Manufacturer: syz [ 113.766923][ T5819] usb 1-1: SerialNumber: syz [ 113.769088][ T5819] usb 1-1: config 0 descriptor?? [ 113.770861][ T5819] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.772850][ T5819] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 113.984604][ T5819] usb 1-1: USB disconnect, device number 10 [ 113.984639][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 113.986394][ T5819] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 113.994117][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 114.143880][ T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 114.144668][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.144686][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 114.144708][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.146104][ T9] usb 4-1: config 0 descriptor?? [ 114.146533][ T7280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 114.558153][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558177][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558192][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558206][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558220][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558234][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558248][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558261][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558275][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.558289][ T9] cypress 0003:04B4:BCA1.000C: unknown main item tag 0x0 [ 114.641184][ T9] cypress 0003:04B4:BCA1.000C: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 114.784706][ T9] usb 4-1: USB disconnect, device number 7 [ 114.839895][ T7303] openvswitch: netlink: Unknown key attributes 1 [ 114.920717][ T7299] fido_id[7299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 114.936906][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 114.936916][ T31] audit: type=1400 audit(1791312993.335:428): avc: denied { write } for pid=7306 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.102903][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 115.102961][ T5607] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.259257][ T7320] netlink: 76 bytes leftover after parsing attributes in process `syz.4.651'. [ 115.395513][ T31] audit: type=1400 audit(1791312993.785:429): avc: denied { map } for pid=7323 comm="syz.0.653" path="/104/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 115.457236][ T31] audit: type=1400 audit(1791312993.845:430): avc: denied { mount } for pid=7327 comm="syz.1.655" name="/" dev="hugetlbfs" ino=15274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 115.640153][ T31] audit: type=1400 audit(1791312994.025:431): avc: denied { write } for pid=7337 comm="syz.1.660" name="cells" dev="proc" ino=4026533549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 115.675843][ T7339] kAFS: bad VL server IP address [ 115.691786][ T7340] netlink: 256 bytes leftover after parsing attributes in process `syz.2.661'. [ 115.691801][ T7340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.661'. [ 115.815087][ T31] audit: type=1400 audit(1791312994.205:432): avc: denied { ioctl } for pid=7333 comm="syz.0.658" path="mnt:[4026533930]" dev="nsfs" ino=4026533930 ioctlcmd=0x550b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.936059][ T31] audit: type=1400 audit(1791312994.325:433): avc: denied { read } for pid=7353 comm="syz.1.668" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 115.981853][ T31] audit: type=1400 audit(1791312994.375:434): avc: denied { ioctl } for pid=7353 comm="syz.1.668" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 115.985876][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'. [ 115.985896][ T7356] netlink: 52 bytes leftover after parsing attributes in process `syz.2.669'. [ 116.294573][ T31] audit: type=1400 audit(1791312994.685:435): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 116.470268][ T31] audit: type=1807 audit(1791312994.855:436): action=measure res=1 [ 116.503949][ T7382] ima: policy update completed [ 116.504057][ T31] audit: type=1802 audit(1791312994.895:437): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.0.682" res=1 errno=0 [ 117.633147][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 117.674635][ T7429] ipvlan2: entered allmulticast mode [ 117.823240][ T7432] netlink: NAT attribute has 8 unknown bytes [ 117.823259][ T7432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.899301][ T7406] syz.0.692 (7406): drop_caches: 2 [ 118.465857][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 118.465881][ T7460] netlink: 'syz.0.717': attribute type 30 has an invalid length. [ 118.465889][ T7460] netlink: 'syz.0.717': attribute type 29 has an invalid length. [ 118.465896][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 118.508411][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.664528][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 118.665316][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 118.665332][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 118.669757][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.669771][ T9] usb 2-1: Product: syz [ 118.669779][ T9] usb 2-1: Manufacturer: syz [ 118.669788][ T9] usb 2-1: SerialNumber: syz [ 118.671199][ T9] usb 2-1: config 0 descriptor?? [ 118.682885][ T7450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.682954][ T7450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.835420][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 118.937787][ T7450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.937858][ T7450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.996657][ T7473] process 'syz.4.723' launched './file0' with NULL argv: empty string added [ 119.378964][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 119.592520][ T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 119.611378][ T9] usb 2-1: USB disconnect, device number 6 [ 119.703788][ T7466] syz.3.718 (7466): drop_caches: 2 [ 120.082009][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.092359][ T5813] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 120.126105][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 120.126117][ T31] audit: type=1800 audit(1791312998.515:479): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31296 res=0 errno=0 [ 120.129736][ T31] audit: type=1800 audit(1791312998.515:480): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31319 res=0 errno=0 [ 120.230256][ T31] audit: type=1400 audit(1791312998.615:481): avc: denied { create } for pid=7521 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.252458][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 120.253090][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 120.272322][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 120.272447][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.272462][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.272475][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 120.272504][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.273786][ T5813] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 120.276808][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.276825][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.276837][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 120.276859][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.364118][ T2265] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 120.397685][ T9] usb 3-1: config 0 descriptor?? [ 120.400823][ T5813] usb 1-1: config 0 descriptor?? [ 120.414643][ T31] audit: type=1800 audit(1791312998.805:482): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122456 res=0 errno=0 [ 120.417443][ T31] audit: type=1800 audit(1791312998.805:483): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122505 res=0 errno=0 [ 120.420402][ T31] audit: type=1800 audit(1791312998.805:484): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=122534 res=0 errno=0 [ 120.443660][ T31] audit: type=1400 audit(1791312998.835:485): avc: denied { read } for pid=7521 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.490502][ T31] audit: type=1800 audit(1791312998.885:486): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=122485 res=0 errno=0 [ 120.512327][ T31] audit: type=1800 audit(1791312998.905:487): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=122463 res=0 errno=0 [ 120.534982][ T31] audit: type=1800 audit(1791312998.925:488): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=122512 res=0 errno=0 [ 120.582702][ T2265] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.596743][ T2265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.596761][ T2265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 120.623422][ T2265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.623437][ T2265] usb 4-1: Product: syz [ 120.623446][ T2265] usb 4-1: Manufacturer: syz [ 120.623454][ T2265] usb 4-1: SerialNumber: syz [ 120.651970][ T2265] usb 4-1: config 0 descriptor?? [ 120.684472][ T2265] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 120.940068][ T9] hid (null): unknown global tag 0xc [ 120.940088][ T9] hid (null): unknown global tag 0xc [ 120.940097][ T9] hid (null): report_id 0 is invalid [ 120.940105][ T9] hid (null): report_id 0 is invalid [ 120.940114][ T9] hid (null): unknown global tag 0x50 [ 120.991163][ T5813] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000D/input/input15 [ 121.017954][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000E/input/input17 [ 121.114270][ T5813] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000D/input/input16 [ 121.141408][ T2265] usb 4-1: USB disconnect, device number 8 [ 121.159898][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000E/input/input18 [ 121.248076][ T5813] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 121.317825][ T5813] usb 1-1: USB disconnect, device number 11 [ 121.336344][ T9] kye 0003:0458:5011.000E: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 121.508205][ T9] usb 3-1: USB disconnect, device number 5 [ 121.821837][ T6394] udevd[6394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.026569][ T7538] fido_id[7538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 122.073963][ T7541] fido_id[7541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 122.455510][ T7561] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 122.558472][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 122.879343][ T7580] syz.1.772 (7580): drop_caches: 1 [ 122.974995][ T7580] syz.1.772 (7580): drop_caches: 1 [ 123.488109][ T7601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.488137][ T7601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.779720][ T7601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.779743][ T7601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.954756][ T7601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.954780][ T7601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.085753][ T7631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.103824][ T7601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.103846][ T7601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.342202][ T139] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.342225][ T139] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.402613][ T43] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.402634][ T43] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.471028][ T7639] Falling back ldisc for ttyS3. [ 124.511750][ T139] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.511771][ T139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.511796][ T139] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.511810][ T139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.542428][ T5607] Bluetooth: hci0: command tx timeout [ 124.668676][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 124.668702][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 124.711860][ T43] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.712317][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.712338][ T43] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.712357][ T43] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.773182][ T7647] ip_tables: iptables: counters copy to user failed while replacing table [ 125.087180][ T7658] netlink: 'syz.1.807': attribute type 4 has an invalid length. [ 125.087195][ T7658] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 125.087202][ T7658] netlink: 212 bytes leftover after parsing attributes in process `syz.1.807'. [ 125.087211][ T7658] NCSI netlink: No device for ifindex 0 [ 125.090465][ T7657] netlink: 64 bytes leftover after parsing attributes in process `syz.3.806'. [ 125.611035][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead [ 125.611056][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead [ 125.611066][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead [ 125.611075][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead [ 125.611084][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead [ 125.611093][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead [ 125.611102][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead [ 125.611111][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead [ 125.611120][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead [ 125.611129][ T7673] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0003 instead [ 125.611137][ T7673] jffs2: Further such events for this erase block will not be printed [ 125.611192][ T7673] jffs2: Empty flash at 0x00000420 ends at 0x00000424 [ 125.611270][ T7673] jffs2: notice: (7673) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.779857][ T31] kauditd_printk_skb: 88 callbacks suppressed [ 125.779869][ T31] audit: type=1400 audit(1791313005.164:577): avc: denied { setattr } for pid=7671 comm="syz.4.813" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.953187][ T7682] ima: rule for LSM 'u' is undefined [ 125.953250][ T31] audit: type=1807 audit(1791313005.334:578): action=measure func=FILE_CHECK obj_type=u res=1 [ 125.953890][ T7681] ima: policy update completed [ 125.953977][ T31] audit: type=1802 audit(1791313005.344:579): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.4.816" res=1 errno=0 [ 126.157439][ T31] audit: type=1800 audit(1791313005.534:580): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.818" name="comp_algorithm" dev="sysfs" ino=20965 res=0 errno=0 [ 126.304083][ T31] audit: type=1400 audit(1791313005.694:581): avc: denied { read } for pid=7691 comm="syz.3.821" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.304115][ T31] audit: type=1400 audit(1791313005.694:582): avc: denied { open } for pid=7691 comm="syz.3.821" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.310866][ T7692] autofs4:pid:7692:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(10.3), cmd(0xc018937a) [ 126.310882][ T7692] autofs4:pid:7692:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) [ 126.310918][ T31] audit: type=1400 audit(1791313005.694:583): avc: denied { ioctl } for pid=7691 comm="syz.3.821" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.546931][ T7699] ./dev/sda1: Can't open blockdev [ 126.866034][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.1.829'. [ 127.269159][ T31] audit: type=1800 audit(1791313006.654:584): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123793 res=0 errno=0 [ 127.297448][ T31] audit: type=1800 audit(1791313006.684:585): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=123797 res=0 errno=0 [ 127.383595][ T31] audit: type=1800 audit(1791313006.774:586): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.841" name="new_device" dev="sysfs" ino=43578 res=0 errno=0 [ 127.385646][ T7738] tipc: Started in network mode [ 127.385662][ T7738] tipc: Node identity ac14140f, cluster identity 4711 [ 127.386501][ T7738] tipc: New replicast peer: 255.255.255.255 [ 127.386939][ T7738] tipc: Enabled bearer , priority 10 [ 127.541329][ T7737] si4713 0-0006: IRQ not configured. Using timeouts. [ 127.541405][ T7737] si4713 0-0006: Error while sending command 0x01 [ 127.541417][ T7737] si4713 0-0006: Failed to probe device information. [ 127.592984][ T7737] si4713 0-0006: probe with driver si4713 failed with error -5 [ 127.600117][ T7737] i2c i2c-0: new_device: Instantiated device si4713 at 0x06 [ 128.503834][ T5813] tipc: Node number set to 2886997007 [ 128.891553][ T7792] 9p: Unknown uid 00000000004294967295 [ 129.243252][ T7804] misc userio: Invalid payload size [ 129.817843][ T7830] pim6reg: entered allmulticast mode [ 129.842351][ T7830] pim6reg: left allmulticast mode [ 129.944248][ T7836] input: syz0 as /devices/virtual/input/input22 [ 130.170325][ T7846] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 131.033632][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 131.092246][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.242866][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 131.243286][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.247753][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 131.247781][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.247794][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.247808][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.247821][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.247843][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.251460][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 131.251470][ T31] audit: type=1800 audit(1791313010.634:606): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124194 res=0 errno=0 [ 131.391323][ T31] audit: type=1800 audit(1791313010.764:607): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=124223 res=0 errno=0 [ 131.391353][ T31] audit: type=1800 audit(1791313010.764:608): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=124201 res=0 errno=0 [ 131.391376][ T31] audit: type=1800 audit(1791313010.764:609): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=124202 res=0 errno=0 [ 131.391410][ T31] audit: type=1800 audit(1791313010.764:610): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=124203 res=0 errno=0 [ 131.513911][ T31] audit: type=1800 audit(1791313010.904:611): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124243 res=0 errno=0 [ 131.515101][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 131.515126][ T9] usbtmc 4-1:16.0: can't read capabilities [ 131.555376][ T31] audit: type=1800 audit(1791313010.944:612): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124260 res=0 errno=0 [ 131.660833][ T31] audit: type=1400 audit(1791313011.044:613): avc: denied { cmd } for pid=7888 comm="syz.0.912" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 131.747074][ T5719] usb 4-1: USB disconnect, device number 9 [ 131.840823][ T31] audit: type=1400 audit(1791313011.224:614): avc: denied { name_bind } for pid=7898 comm="syz.4.916" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 131.956471][ T31] audit: type=1800 audit(1791313011.344:615): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.917" name="add_local_port" dev="sysfs" ino=21804 res=0 errno=0 [ 132.181743][ T5719] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 132.344380][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.344408][ T5719] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=e5.b4 [ 132.345041][ T5719] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 132.345060][ T5719] usb 3-1: can't read configurations, error -71 [ 132.546920][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.546964][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.790743][ T7940] input: syz1 as /devices/virtual/input/input24 [ 133.286830][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.943'. [ 133.312979][ T7963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.405677][ T7966] input: syz0 as /devices/virtual/input/input25 [ 134.284641][ T8004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.964'. [ 134.284658][ T8004] netlink: 43 bytes leftover after parsing attributes in process `syz.2.964'. [ 134.284667][ T8004] netlink: 'syz.2.964': attribute type 6 has an invalid length. [ 134.284674][ T8004] netlink: 'syz.2.964': attribute type 5 has an invalid length. [ 134.284681][ T8004] netlink: 43 bytes leftover after parsing attributes in process `syz.2.964'. [ 134.403608][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 134.566925][ T8016] loop9: detected capacity change from 0 to 7 [ 134.584814][ T8016] Dev loop9: unable to read RDB block 7 [ 134.584839][ T8016] loop9: unable to read partition table [ 134.584933][ T8016] loop9: partition table beyond EOD, truncated [ 134.584962][ T8016] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 134.654754][ T8018] overlayfs: upper fs does not support file handles, falling back to index=off. [ 134.654764][ T8018] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 135.160896][ T8024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.304205][ T5719] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.378218][ T8024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.435933][ T8043] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 135.435951][ T8043] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 135.440140][ T8043] vhci_hcd vhci_hcd.0: Device attached [ 135.463627][ T5719] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 135.465243][ T5719] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.465269][ T5719] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 135.465283][ T5719] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.465295][ T5719] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.465307][ T5719] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 135.465328][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.510375][ T8030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.545332][ T5719] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 135.570284][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 135.570328][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 135.594846][ T5719] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 135.601116][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 135.601159][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 135.638302][ T5719] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 135.692543][ T5813] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.735934][ T8050] mmap: syz.3.985 (8050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.780203][ T8024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.811709][ T5719] usb 34-1: SetAddress Request (2) to port 0 [ 135.811743][ T5719] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 135.871772][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 135.873480][ T5813] usb 1-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 135.874262][ T5813] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 78, changing to 7 [ 135.875186][ T5813] usb 1-1: language id specifier not provided by device, defaulting to English [ 135.925536][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.925551][ T5813] usb 1-1: Product: 蹝樶֠晆듃㢿ƢJ䑪 [ 135.925560][ T5813] usb 1-1: SerialNumber: syz [ 136.094129][ T8024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.239679][ T8045] vhci_hcd: connection reset by peer [ 136.253641][ T12] vhci_hcd vhci_hcd.0: stop threads [ 136.253961][ T12] vhci_hcd vhci_hcd.0: release socket [ 136.274391][ T5813] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 136.285439][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 136.411349][ T9] usb 5-1: USB disconnect, device number 11 [ 136.441692][ T43] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.450049][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 136.474023][ T5813] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 136.492516][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 136.497356][ T9] keyspan 5-1:1.0: device disconnected [ 136.533450][ T43] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.558745][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 136.558756][ T31] audit: type=1800 audit(1791313015.944:675): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=124680 res=0 errno=0 [ 136.598161][ T5813] usb 1-1: USB disconnect, device number 12 [ 136.617761][ T31] audit: type=1800 audit(1791313016.004:676): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=124660 res=0 errno=0 [ 136.618323][ T31] audit: type=1800 audit(1791313016.004:677): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=124681 res=0 errno=0 [ 136.705694][ T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.746209][ T8061] udevd[8061]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.791707][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.912528][ T5607] Bluetooth: hci1: adv larger than maximum supported [ 136.912542][ T5607] Bluetooth: hci1: Malformed LE Event: 0x0d [ 137.172397][ T8076] overlayfs: upper fs does not support tmpfile. [ 137.198941][ T8078] netlink: 136 bytes leftover after parsing attributes in process `syz.4.997'. [ 137.297018][ T8085] netlink: 27 bytes leftover after parsing attributes in process `syz.3.999'. [ 137.315613][ T8083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1000'. [ 137.494986][ T31] audit: type=1400 audit(1791313016.884:678): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 137.660487][ T31] audit: type=1400 audit(1791313017.044:679): avc: denied { append } for pid=8095 comm="syz.1.1005" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.819590][ T5607] Bluetooth: hci3: link tx timeout [ 137.819603][ T5607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.849126][ T31] audit: type=1400 audit(1791313017.234:680): avc: denied { read } for pid=8101 comm="syz.0.1007" path="socket:[18975]" dev="sockfs" ino=18975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.860908][ T5607] Bluetooth: hci3: link tx timeout [ 137.860919][ T5607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.904105][ T5607] Bluetooth: hci3: link tx timeout [ 137.904116][ T5607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.904447][ T5607] Bluetooth: hci3: link tx timeout [ 137.905022][ T5607] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.055291][ T8094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.055317][ T8094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.128693][ T8109] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1009'. [ 138.361101][ T8094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.361126][ T8094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.556879][ T31] audit: type=1400 audit(1791313017.944:681): avc: denied { connect } for pid=8122 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.561243][ T8094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.561264][ T8094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.735018][ T8094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.735042][ T8094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.932491][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.932512][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.983123][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.983144][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.082800][ T43] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.082823][ T43] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.092459][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.092480][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.255518][ T31] audit: type=1800 audit(1791313018.644:682): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125616 res=0 errno=0 [ 140.011765][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 140.867280][ T5719] usb 34-1: device descriptor read/8, error -110 [ 143.875932][ C0] sched: DL replenish lagged too much [ 198.257669][ T5613] Bluetooth: hci2: command tx timeout [ 198.257699][ T5613] Bluetooth: hci1: command tx timeout [ 198.257713][ T5613] Bluetooth: hci0: command tx timeout [ 198.801870][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.081478][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 250.088521][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4970/1:b..l [ 250.096399][ C0] rcu: (detected by 0, t=10502 jiffies, g=38629, q=1738 ncpus=1) [ 250.104179][ C0] task:udevd state:R running task stack:24896 pid:4970 tgid:4970 ppid:1 task_flags:0x400140 flags:0x00080000 [ 250.117637][ C0] Call Trace: [ 250.120890][ C0] [ 250.123796][ C0] __schedule+0x1259/0x6920 [ 250.128285][ C0] ? lock_acquire+0x1d1/0x380 [ 250.132943][ C0] ? unwind_next_frame+0xbd/0x2090 [ 250.138030][ C0] ? __pfx___schedule+0x10/0x10 [ 250.142853][ C0] ? mark_held_locks+0x40/0x70 [ 250.147587][ C0] preempt_schedule_irq+0x4e/0x90 [ 250.152586][ C0] irqentry_exit+0x205/0xa10 [ 250.157151][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.163117][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 250.168306][ C0] Code: 05 cf aa a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de e7 5d 0f 0f 82 c9 02 00 00 8b 35 7e 19 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d aa a5 12 0f 85 09 03 00 00 48 83 c4 [ 250.187882][ C0] RSP: 0018:ffffc9000328f4c0 EFLAGS: 00000206 [ 250.193927][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 250.201871][ C0] RDX: 0000000000000000 RSI: ffffffff8e3691de RDI: ffffffff8c623a80 [ 250.209815][ C0] RBP: ffffffff8edec5a0 R08: 00000000453dc2ac R09: 0000000000000007 [ 250.217756][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 250.225694][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.233645][ C0] ? is_module_text_address+0x148/0x220 [ 250.239169][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.245294][ C0] is_bpf_text_address+0x36/0x1a0 [ 250.250290][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 250.255461][ C0] kernel_text_address+0x8d/0x100 [ 250.260469][ C0] __kernel_text_address+0xd/0x30 [ 250.265463][ C0] unwind_get_return_address+0x59/0xa0 [ 250.270911][ C0] arch_stack_walk+0xa6/0xf0 [ 250.275481][ C0] stack_trace_save+0x8e/0xc0 [ 250.280127][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 250.285471][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 250.290380][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 250.295285][ C0] save_stack+0x162/0x1e0 [ 250.299586][ C0] ? __pfx_save_stack+0x10/0x10 [ 250.304411][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 250.309757][ C0] ? qlist_free_all+0x47/0xf0 [ 250.314406][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 250.320007][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 250.324743][ C0] ? __kmalloc_noprof+0x32f/0x840 [ 250.329736][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 250.334474][ C0] ? tomoyo_encode+0x29/0x50 [ 250.339046][ C0] ? tomoyo_realpath_from_path+0x18c/0x690 [ 250.344835][ C0] ? tomoyo_path_perm+0x276/0x460 [ 250.349830][ C0] ? security_inode_getattr+0x116/0x280 [ 250.355349][ C0] ? vfs_statx+0x11f/0x3f0 [ 250.359740][ C0] ? vfs_fstatat+0x77/0xe0 [ 250.364136][ C0] ? __do_sys_newfstatat+0x9d/0x120 [ 250.369307][ C0] ? do_syscall_64+0x123/0x790 [ 250.374041][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.380077][ C0] ? page_ext_put+0x3e/0xd0 [ 250.384561][ C0] __reset_page_owner+0x84/0x190 [ 250.389475][ C0] __free_frozen_pages+0x79f/0x10f0 [ 250.394650][ C0] ? __free_slab+0x40/0x220 [ 250.399123][ C0] qlist_free_all+0x47/0xf0 [ 250.403607][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 250.409039][ C0] __kasan_kmalloc+0x8a/0xb0 [ 250.413603][ C0] __kmalloc_noprof+0x32f/0x840 [ 250.418427][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 250.423165][ C0] tomoyo_encode2+0xfb/0x3c0 [ 250.427729][ C0] tomoyo_encode+0x29/0x50 [ 250.432120][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 250.437729][ C0] tomoyo_path_perm+0x276/0x460 [ 250.442550][ C0] ? tomoyo_path_perm+0x262/0x460 [ 250.447548][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 250.452890][ C0] ? filename_lookup+0x3bb/0x590 [ 250.457812][ C0] ? __might_fault+0xc5/0x140 [ 250.462460][ C0] ? find_held_lock+0x2b/0x80 [ 250.467111][ C0] ? __might_fault+0xc5/0x140 [ 250.471772][ C0] ? __might_fault+0xc5/0x140 [ 250.476418][ C0] security_inode_getattr+0x116/0x280 [ 250.481761][ C0] vfs_statx+0x11f/0x3f0 [ 250.485980][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 250.490719][ C0] ? do_getname+0x191/0x390 [ 250.495191][ C0] vfs_fstatat+0x77/0xe0 [ 250.499409][ C0] __do_sys_newfstatat+0x9d/0x120 [ 250.504418][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 250.510035][ C0] ? kill_proc_info+0xa6/0x1b0 [ 250.514771][ C0] ? kill_something_info.constprop.0+0x10b/0x310 [ 250.521073][ C0] do_syscall_64+0x123/0x790 [ 250.525634][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.531495][ C0] RIP: 0033:0x7f9614b11b0a [ 250.535886][ C0] RSP: 002b:00007ffece6df708 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 250.544268][ C0] RAX: ffffffffffffffda RBX: 000055ddc91f9418 RCX: 00007f9614b11b0a [ 250.552221][ C0] RDX: 00007ffece6df710 RSI: 000055ddc91e7ef3 RDI: 00000000ffffff9c [ 250.560161][ C0] RBP: 000055dde47ff668 R08: 00065d30890c837f R09: 0000000000000001 [ 250.568099][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.576038][ C0] R13: 00007ffece6df710 R14: 0000000000000000 R15: 00065d30890c837f [ 250.583995][ C0] [ 250.586998][ C0] rcu: rcu_preempt kthread starved for 1585 jiffies! g38629 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 250.597895][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 250.607829][ C0] rcu: RCU grace-period kthread stack dump: [ 250.613685][ C0] task:rcu_preempt state:R running task stack:28984 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 250.627144][ C0] Call Trace: [ 250.630400][ C0] [ 250.633306][ C0] __schedule+0x1259/0x6920 [ 250.637781][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 250.642698][ C0] ? lock_acquire+0x1d1/0x380 [ 250.647344][ C0] ? __pfx___schedule+0x10/0x10 [ 250.652159][ C0] ? find_held_lock+0x2b/0x80 [ 250.656813][ C0] ? schedule+0x225/0x2c0 [ 250.661112][ C0] schedule+0xdd/0x2c0 [ 250.665150][ C0] schedule_timeout+0x127/0x280 [ 250.669975][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 250.675323][ C0] ? __pfx_process_timeout+0x10/0x10 [ 250.680579][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 250.686360][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 250.691800][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 250.696533][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 250.701798][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 250.706705][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 250.711872][ C0] ? rcu_is_watching+0x13/0xc0 [ 250.716610][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.722387][ C0] rcu_gp_kthread+0x17a/0x220 [ 250.727047][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 250.732214][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.738094][ C0] ? __kthread_parkme+0x18f/0x230 [ 250.743107][ C0] ? kthread+0x13a/0x450 [ 250.747328][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 250.752504][ C0] kthread+0x373/0x450 [ 250.756555][ C0] ? __pfx_kthread+0x10/0x10 [ 250.761120][ C0] ret_from_fork+0x730/0xd60 [ 250.765697][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 250.770785][ C0] ? __switch_to+0x800/0x10f0 [ 250.775448][ C0] ? __pfx_kthread+0x10/0x10 [ 250.780014][ C0] ret_from_fork_asm+0x1a/0x30 [ 250.784758][ C0] [ 250.787759][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 250.794069][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 250.805318][ C0] Tainted: [L]=SOFTLOCKUP [ 250.809615][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.819658][ C0] Workqueue: bat_events batadv_tt_purge [ 250.825193][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 250.830364][ C0] Code: 05 cf aa a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de e7 5d 0f 0f 82 c9 02 00 00 8b 35 7e 19 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d aa a5 12 0f 85 09 03 00 00 48 83 c4 [ 250.849941][ C0] RSP: 0018:ffffc900000070c8 EFLAGS: 00000206 [ 250.855979][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 250.863920][ C0] RDX: 0000000000000101 RSI: ffffffff8e3691de RDI: ffffffff8c623a80 [ 250.871864][ C0] RBP: ffffffff8edec5a0 R08: 000000007938eb5a R09: 0000000000000007 [ 250.879805][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 250.887746][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.895685][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 250.904587][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.911140][ C0] CR2: 000055dde47f9be0 CR3: 000000005be78000 CR4: 00000000003526f0 [ 250.919081][ C0] Call Trace: [ 250.922333][ C0] [ 250.925151][ C0] ? unwind_next_frame+0x3be/0x2090 [ 250.930324][ C0] ? unwind_next_frame+0x3be/0x2090 [ 250.935499][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.941623][ C0] unwind_next_frame+0xd1/0x2090 [ 250.946535][ C0] ? unwind_next_frame+0xbd/0x2090 [ 250.951619][ C0] ? kasan_save_stack+0x30/0x50 [ 250.956443][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 250.961352][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.967473][ C0] arch_stack_walk+0x94/0xf0 [ 250.972041][ C0] ? kasan_save_stack+0x30/0x50 [ 250.976864][ C0] ? skb_free_head+0xb9/0x160 [ 250.981512][ C0] stack_trace_save+0x8e/0xc0 [ 250.986157][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 250.991498][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 250.996424][ C0] ? ip_finish_output2+0x892/0x2400 [ 251.001608][ C0] kasan_save_stack+0x30/0x50 [ 251.006256][ C0] ? kasan_save_stack+0x30/0x50 [ 251.011101][ C0] kasan_save_track+0x14/0x30 [ 251.015749][ C0] kasan_save_free_info+0x3b/0x70 [ 251.020744][ C0] __kasan_slab_free+0x5f/0x80 [ 251.025492][ C0] ? napi_pp_put_page+0x380/0x390 [ 251.030489][ C0] kfree+0x22b/0x6d0 [ 251.034359][ C0] skb_free_head+0xb9/0x160 [ 251.038847][ C0] skb_release_data+0x659/0x860 [ 251.043675][ C0] consume_skb+0xc4/0x110 [ 251.047973][ C0] nft_synproxy_do_eval+0xa72/0xd30 [ 251.053156][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 251.058859][ C0] ? kfree_skbmem+0x19a/0x210 [ 251.063505][ C0] ? kasan_save_stack+0x3f/0x50 [ 251.068326][ C0] ? kasan_save_free_info+0x3b/0x70 [ 251.073505][ C0] ? __kasan_slab_free+0x5f/0x80 [ 251.078412][ C0] ? udp_rcv+0x2574/0x2d60 [ 251.082794][ C0] ? ip_protocol_deliver_rcu+0x304/0x4d0 [ 251.088403][ C0] ? ip_local_deliver_finish+0x3f2/0x6e0 [ 251.094009][ C0] ? ip_local_deliver+0x19a/0x1f0 [ 251.099018][ C0] ? __pfx_nft_objref_eval+0x10/0x10 [ 251.104280][ C0] nft_do_chain+0x2e5/0x19d0 [ 251.108844][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 251.113849][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 251.118581][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 251.123847][ C0] ? ipt_do_table+0xd7f/0x1b00 [ 251.128593][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 251.133590][ C0] nft_do_chain_ipv4+0x1d0/0x250 [ 251.138501][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 251.143931][ C0] ? iptable_mangle_hook+0x71/0x4b0 [ 251.149097][ C0] ? nf_hook.constprop.0+0x98/0x750 [ 251.154278][ C0] nf_hook_slow+0xbf/0x220 [ 251.158671][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 251.163754][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 251.169705][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 251.175307][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 251.180400][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 251.186366][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 251.191626][ C0] ip_local_deliver+0x163/0x1f0 [ 251.196449][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 251.201790][ C0] ip_rcv+0x33a/0x3c0 [ 251.205750][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 251.210223][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 251.216088][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 251.222474][ C0] ? lock_acquire+0x1d1/0x380 [ 251.227123][ C0] ? process_backlog+0x437/0x1600 [ 251.232122][ C0] ? process_backlog+0x437/0x1600 [ 251.237114][ C0] __netif_receive_skb+0x1f/0x120 [ 251.242109][ C0] process_backlog+0x487/0x1600 [ 251.246938][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 251.252283][ C0] net_rx_action+0xa40/0xf20 [ 251.256851][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 251.261934][ C0] ? mark_held_locks+0x40/0x70 [ 251.266668][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 251.271838][ C0] ? tmigr_handle_remote+0x132/0x380 [ 251.277100][ C0] ? mark_held_locks+0x40/0x70 [ 251.281832][ C0] handle_softirqs+0x1e6/0x9d0 [ 251.286568][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 251.291822][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 251.297083][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 251.302687][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 251.307599][ C0] do_softirq+0xaf/0xf0 [ 251.311738][ C0] [ 251.314641][ C0] [ 251.317542][ C0] __local_bh_enable_ip+0xff/0x120 [ 251.322622][ C0] batadv_tt_purge+0x25d/0xbd0 [ 251.327362][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 251.332619][ C0] ? lock_acquire+0x1d1/0x380 [ 251.337267][ C0] ? process_one_work+0xa2c/0x1b10 [ 251.342354][ C0] ? process_one_work+0x906/0x1b10 [ 251.347439][ C0] ? process_one_work+0x906/0x1b10 [ 251.352527][ C0] process_one_work+0xac7/0x1b10 [ 251.357443][ C0] ? __pfx_process_one_work+0x10/0x10 [ 251.362789][ C0] ? lock_acquire+0x1d1/0x380 [ 251.367453][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 251.372716][ C0] rescuer_thread+0x918/0x14e0 [ 251.377461][ C0] ? rescuer_thread+0x256/0x14e0 [ 251.382370][ C0] ? rescuer_thread+0x118/0x14e0 [ 251.387280][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 251.392460][ C0] ? __kthread_parkme+0x18f/0x230 [ 251.397471][ C0] ? kthread+0x13a/0x450 [ 251.401702][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 251.406962][ C0] kthread+0x373/0x450 [ 251.411008][ C0] ? __pfx_kthread+0x10/0x10 [ 251.415575][ C0] ret_from_fork+0x730/0xd60 [ 251.420138][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 251.425221][ C0] ? __switch_to+0x800/0x10f0 [ 251.429876][ C0] ? __pfx_kthread+0x10/0x10 [ 251.434444][ C0] ret_from_fork_asm+0x1a/0x30 [ 251.439192][ C0]