last executing test programs: 9m24.959605542s ago: executing program 32 (id=497): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 8m5.132721565s ago: executing program 0 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8m5.008807488s ago: executing program 0 (id=1667): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0x1212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 8m4.930026414s ago: executing program 0 (id=1668): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001500)='8', 0x1}], 0x1}}], 0x1, 0x44042) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x2, 0xb2ad}, 0x8) 8m4.847346865s ago: executing program 0 (id=1671): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 8m4.773831411s ago: executing program 0 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 8m4.364533734s ago: executing program 0 (id=1683): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 8m4.118080983s ago: executing program 33 (id=1683): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 7m38.692386064s ago: executing program 2 (id=2121): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) 7m38.566520111s ago: executing program 2 (id=2122): setns(0xc9, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x802, @remote, 0x8}, 0x1c) 7m38.524167935s ago: executing program 2 (id=2123): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x1214040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r0, &(0x7f0000000580)=""/174, 0xdf3b) 7m38.457946445s ago: executing program 2 (id=2125): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0xc) 7m38.416450755s ago: executing program 2 (id=2126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$set_reqkey_keyring(0xe, 0x0) 7m38.206611068s ago: executing program 2 (id=2127): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006000900000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 7m37.971165599s ago: executing program 34 (id=2127): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006000900000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 7m14.197103237s ago: executing program 5 (id=2454): syz_open_dev$video4linux(&(0x7f0000000480), 0x100000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) 7m14.015009936s ago: executing program 5 (id=2455): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x758, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/161, 0xa1}, 0x8}], 0x1, 0x0, 0x0) 7m13.99167392s ago: executing program 5 (id=2456): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000c4000/0xc000)=nil, 0x2000, 0x2}) 7m13.913613573s ago: executing program 5 (id=2458): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m13.828198619s ago: executing program 5 (id=2459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup3(r1, r0, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000011c0)) 7m11.946498547s ago: executing program 5 (id=2470): r0 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000100)={0x0}) 7m11.793610033s ago: executing program 35 (id=2470): r0 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000100)={0x0}) 3m47.231322888s ago: executing program 1 (id=4585): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r1, 0x101, 0x1) getdents(r1, &(0x7f00000002c0)=""/201, 0xc9) 3m46.994398866s ago: executing program 1 (id=4588): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 3m46.781210605s ago: executing program 1 (id=4591): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open(&(0x7f0000000080)='./file1\x00', 0x46c01, 0x31) 3m46.470961564s ago: executing program 1 (id=4595): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3m46.298226362s ago: executing program 1 (id=4596): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) read(r0, &(0x7f0000000000)=""/147, 0x93) 3m46.125267726s ago: executing program 1 (id=4600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3m29.754490447s ago: executing program 36 (id=4600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 47.190444513s ago: executing program 8 (id=5893): r0 = socket$inet6(0xa, 0x80001, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) getsockopt$bt_hci(r0, 0x0, 0x60, 0x0, &(0x7f0000d23000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) 46.968089879s ago: executing program 8 (id=5894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @loopback={0x60}, @mcast2}}}, 0xfdef) 46.714944609s ago: executing program 8 (id=5896): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 46.563295461s ago: executing program 8 (id=5898): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) 46.439039603s ago: executing program 8 (id=5899): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="35fc3a12f45d48e3120ec76bfe8d5ba7449af3c59c81f374329851daf843e48e30428c737ad0d7b957d1ab7dba23ca87748421", 0x33) 46.251287845s ago: executing program 8 (id=5901): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 30.979216478s ago: executing program 37 (id=5901): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 3.624929627s ago: executing program 9 (id=6281): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_ALM_READ(r0, 0x80247008, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000001c0)={0x28, 0x12, 0xf, 0x19, 0x4, 0x20000000, 0x3, 0xf8, 0xffffffffffffffff}) 3.42441768s ago: executing program 4 (id=6283): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) 3.400471543s ago: executing program 9 (id=6284): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00', 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 3.214764925s ago: executing program 4 (id=6285): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, &(0x7f00000000c0)=0xfff, 0x4) 3.170239381s ago: executing program 9 (id=6287): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.100849155s ago: executing program 3 (id=6289): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x101041, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r0, 0x0, 0x1, 0x0, 0x3, 0xbb41a, 0x2c3a4d}) 2.995760539s ago: executing program 4 (id=6290): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x4a, 0xca, 0x2f, 0x40, 0x525, 0x2888, 0xeaed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x10, 0xa0, 0x3, "", [{{0x9, 0x4, 0x8b, 0x7f, 0x0, 0x6c, 0xca, 0x18, 0x4}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="030f"]}) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.853261548s ago: executing program 9 (id=6291): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 2.823502625s ago: executing program 3 (id=6292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.67289191s ago: executing program 3 (id=6293): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 2.072364114s ago: executing program 7 (id=6298): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50) 2.024868502s ago: executing program 9 (id=6299): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r1, 0x82000000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000005c0)={0x0, 0x9, 0x3, 0x0}) 1.775553981s ago: executing program 7 (id=6301): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x6f) r2 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, 0xfffffffffffffffb, 0x1) 1.584418091s ago: executing program 7 (id=6303): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a010100000000000000000200000009000200737968310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.46308154s ago: executing program 6 (id=6305): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x2, 0x0, 0x3, 0x1}, {0xfffe, 0x7, 0x0, 0x1000000}]}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x80) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.318628497s ago: executing program 6 (id=6306): socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x4}, 0x80) 1.30677459s ago: executing program 7 (id=6307): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 1.174657955s ago: executing program 6 (id=6308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x1, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "583c60b916f697a138c2f46b73433704f96578e1a79dd9b6228c4891c4f49052", "7fb24788006e3b11029c7e33f12087b6", {"243474f4a0ae4214f91a6532498be9ee", "9d8a4680c834d4c08aa316837339c3b6"}}}}}}}}, 0x8e) 1.143248411s ago: executing program 7 (id=6309): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) 1.005243966s ago: executing program 3 (id=6310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x4000810) 932.222459ms ago: executing program 6 (id=6311): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x9, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x7, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x4, 0x7fffffff, 0x154, 0x9, 0x2, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xfffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x8, 0x10, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x2, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0xec33, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x8000, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x2, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x3, 0xa, 0x80000001, 0x35, 0x80000001, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0xb9e6, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0x200e8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x7, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x2, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x8001, 0x9, 0x4, 0x0, 0x8000, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0xf, 0x6, 0x7, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0xffff, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c73, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x1002, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0xfff, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x7, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x80, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x6, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0x1, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0xfffffff5, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x2, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x80, 0x9, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0xa, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xe, 0x7f53, 0x1ff, 0x5, 0xffffffff, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x80000000, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x4, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff1, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0x1, 0x8, 0x5, 0x7, 0x0, 0x5, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0x7, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x5, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) 757.043958ms ago: executing program 4 (id=6312): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1}) 752.773711ms ago: executing program 6 (id=6313): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = eventfd2(0x7, 0x80001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sync_file_range(r0, 0xfffffffffffffff7, 0x40, 0x1) 632.915853ms ago: executing program 3 (id=6314): io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 471.351274ms ago: executing program 9 (id=6315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x68, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, "0100000000000000"}}}}}, 0x32) 449.05088ms ago: executing program 6 (id=6316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc493}, 0x8) 278.224804ms ago: executing program 4 (id=6317): r0 = userfaultfd(0x80001) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x1c79ea37, 0x0, 0x4}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 139.647748ms ago: executing program 7 (id=6318): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 62.725543ms ago: executing program 4 (id=6319): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 0s ago: executing program 3 (id=6320): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) kernel console output (not intermixed with test programs): intel: TR: sel=0x000f, attr=0x14087, limit=0x00000000, base=0x0000000000010000 [ 540.227161][T18115] kvm_intel: EFER= 0x0000000000000000 [ 540.260149][T18115] kvm_intel: PAT = 0x0007040600070406 [ 540.287636][T18115] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 540.352758][T18115] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 540.410688][T18115] kvm_intel: *** Host State *** [ 540.438397][T18115] kvm_intel: RIP = 0xffffffff8bba63a0 RSP = 0xffffc90005ef7950 [ 540.488349][T18115] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 540.527547][T18115] kvm_intel: FSBase=00007f388ec746c0 GSBase=ffff888123eec000 TRBase=fffffe000004a000 [ 540.567956][T18115] kvm_intel: GDTBase=fffffe0000048000 IDTBase=fffffe0000000000 [ 540.608902][T18115] kvm_intel: CR0=0000000080050033 CR3=00000000560e7000 CR4=00000000003526f0 [ 540.656296][T18115] kvm_intel: Sysenter RSP=fffffe000004a000 CS:RIP=0010:ffffffff81001e70 [ 540.688927][T18115] kvm_intel: EFER= 0x0000000000000d01 [ 540.720023][T18115] kvm_intel: PAT = 0x0407050600070106 [ 540.742187][T18115] kvm_intel: *** Control State *** [ 540.771764][T18115] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 540.826474][T18115] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 540.865454][T18115] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 540.896275][T18115] kvm_intel: VMEntry: intr_info=80000080 errcode=00000000 ilen=00000000 [ 540.927907][T18115] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 540.971778][T18115] kvm_intel: reason=80000021 qualification=0000000000000000 [ 541.008370][T18115] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 541.051073][T18115] kvm_intel: TSC Offset = 0xfffffe9bd8bac3b2 [ 541.071499][T18115] kvm_intel: EPT pointer = 0x000000005616b05e [ 541.088944][T18115] kvm_intel: Virtual processor ID = 0x0001 [ 541.388944][T18159] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18159 comm=syz.4.5074 [ 541.624325][T17042] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 541.800671][T17042] usb 7-1: Using ep0 maxpacket: 8 [ 541.825292][T17042] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 541.849618][T17042] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.864939][ T24] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 541.876453][T17042] usb 7-1: config 0 has no interface number 0 [ 541.899086][T17042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.914609][T17042] usb 7-1: Product: syz [ 541.930647][T17042] usb 7-1: Manufacturer: syz [ 541.937304][T17042] usb 7-1: SerialNumber: syz [ 541.958264][T17042] usb 7-1: config 0 descriptor?? [ 541.984152][T17042] usb 7-1: selecting invalid altsetting 2 [ 542.021890][T17042] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 542.038239][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.072382][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.100894][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.141071][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.183846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 542.253842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 542.283921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 542.303898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 542.330500][T17042] usb 7-1: USB disconnect, device number 34 [ 542.402560][ T24] usb 5-1: usb_control_msg returned -32 [ 542.414704][ T24] usbtmc 5-1:16.0: can't read capabilities [ 542.643855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 542.843919][ T5698] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 542.973867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 543.015412][ T5698] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 543.042795][T18197] 8021q: VLANs not supported on lo [ 543.058350][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.098106][ T5698] usb 9-1: config 0 descriptor?? [ 543.130119][ T5698] cp210x 9-1:0.0: cp210x converter detected [ 543.548062][ T5698] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 543.558981][ T5691] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 543.673798][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 543.734099][ T5691] usb 7-1: Using ep0 maxpacket: 32 [ 543.751172][ T5691] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 543.783273][ T5698] usb 9-1: cp210x converter now attached to ttyUSB0 [ 543.798303][ T5691] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 543.818386][ T5691] usb 7-1: config 0 has no interface number 0 [ 543.835816][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.844693][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 543.852134][ T24] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 543.865072][ T5691] usb 7-1: Product: syz [ 543.874398][ T5691] usb 7-1: Manufacturer: syz [ 543.882025][ T5691] usb 7-1: SerialNumber: syz [ 543.887282][ T24] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 543.895914][ T24] usb 10-1: config 0 has no interface number 0 [ 543.908482][ T5691] usb 7-1: config 0 descriptor?? [ 543.926198][ T24] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 543.948360][ T24] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 543.968091][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.990247][ T24] usb 10-1: Product: syz [ 544.001401][T17611] usb 9-1: USB disconnect, device number 28 [ 544.016677][ T24] usb 10-1: Manufacturer: syz [ 544.032260][T17611] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 544.049569][ T24] usb 10-1: SerialNumber: syz [ 544.078371][T17611] cp210x 9-1:0.0: device disconnected [ 544.084747][ T24] usb 10-1: config 0 descriptor?? [ 544.098130][T18207] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 544.107359][T18207] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 544.336513][T18207] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 544.371863][T18207] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 544.594491][ T24] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 544.679263][ T5698] usb 5-1: USB disconnect, device number 41 [ 544.755968][ T5691] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 544.802961][T18221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5096'. [ 544.959592][ T5691] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 545.002579][ T5691] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 545.031262][ T5691] usb 7-1: USB disconnect, device number 35 [ 545.197441][ T24] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 545.215575][ T24] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 545.246533][ T24] asix 10-1:0.34: probe with driver asix failed with error -71 [ 545.268391][ T24] usb 10-1: USB disconnect, device number 6 [ 545.697081][T18235] netlink: 428 bytes leftover after parsing attributes in process `syz.6.5102'. [ 545.846450][T18235] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5102'. [ 546.160713][T18246] binder_alloc: binder_alloc_mmap_handler: 18245 200000ffe000-200001000000 already mapped failed -16 [ 546.526941][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5115'. [ 547.113319][T18286] input: syz1 as /devices/virtual/input/input58 [ 547.291557][T18289] overlay: filesystem on ./file0 is read-only [ 547.733955][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 547.776993][T18307] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5134'. [ 547.925952][ T5691] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 547.935459][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 547.960243][ T24] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 547.999895][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 548.018824][ T24] usb 7-1: config 0 has no interface number 0 [ 548.036598][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.083163][ T24] usb 7-1: config 0 descriptor?? [ 548.124303][ T5691] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 548.135277][ T5691] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 548.163962][ T5691] usb 9-1: config 0 has no interface number 0 [ 548.191023][ T5691] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 548.214502][ T5691] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 548.242737][ T5691] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 548.276406][ T5691] usb 9-1: Manufacturer: syz [ 548.298758][ T5691] usb 9-1: SerialNumber: syz [ 548.318204][ T5691] usb 9-1: config 0 descriptor?? [ 548.708743][ T24] uclogic 0003:28BD:0071.0026: pen parameters not found [ 548.716230][ T24] uclogic 0003:28BD:0071.0026: interface is invalid, ignoring [ 548.953248][ T5691] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.214/input/input59 [ 548.997418][ T24] usb 7-1: USB disconnect, device number 36 [ 549.163518][ T5691] usb 9-1: USB disconnect, device number 29 [ 550.173686][ T29] audit: type=1400 audit(1786302953.617:995): avc: denied { ioctl } for pid=18369 comm="syz.6.5158" path="socket:[70141]" dev="sockfs" ino=70141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 550.236596][ T29] audit: type=1400 audit(1786302953.687:996): avc: denied { mounton } for pid=18373 comm="syz.7.5160" path="/650/file0" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.292464][ T29] audit: type=1400 audit(1786302953.717:997): avc: denied { read } for pid=18373 comm="syz.7.5160" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.335559][ T5691] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 550.423514][T18378] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 550.447571][ T29] audit: type=1400 audit(1786302953.717:998): avc: denied { read } for pid=18373 comm="syz.7.5160" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.523709][ T5691] usb 9-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 550.548798][ T5691] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 550.571081][ T29] audit: type=1400 audit(1786302953.717:999): avc: denied { open } for pid=18373 comm="syz.7.5160" path="/650/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.604884][ T5691] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.635783][ T5691] usb 9-1: config 0 descriptor?? [ 550.649911][ T29] audit: type=1400 audit(1786302953.717:1000): avc: denied { read } for pid=18373 comm="syz.7.5160" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.673239][ T29] audit: type=1400 audit(1786302953.947:1001): avc: denied { read } for pid=18373 comm="syz.7.5160" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 550.697858][T18367] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 550.930104][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.959624][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.211654][ T5691] hid_parser_main: 21 callbacks suppressed [ 551.211680][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.253552][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.309406][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.344385][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.379079][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.402115][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.433765][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.463291][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.507652][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.542247][ T5691] uclogic 0003:5543:0064.0027: unknown main item tag 0x0 [ 551.584178][ T5691] uclogic 0003:5543:0064.0027: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.8-1/input0 [ 551.636531][ T5691] usb 9-1: USB disconnect, device number 30 [ 551.768953][T18405] fido_id[18405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 552.135344][ T29] audit: type=1400 audit(1786302955.587:1002): avc: denied { create } for pid=18417 comm="syz.9.5177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 552.236912][T18422] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 552.267911][T18422] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 552.593748][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 552.787728][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 552.803714][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 552.828401][ T24] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.892698][ T24] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.973672][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 553.016857][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.081168][ T24] usb 5-1: config 0 descriptor?? [ 553.273968][T18457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.535017][ T24] mcp2221 0003:04D8:00DD.0028: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 553.723240][T18430] i2c i2c-1: unsupported multi-msg i2c transaction [ 553.853379][ T24] usb 5-1: USB disconnect, device number 42 [ 554.143777][T18473] input: syz0 as /devices/virtual/input/input61 [ 554.706852][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5208'. [ 554.721221][T18486] netlink: 4560 bytes leftover after parsing attributes in process `syz.6.5207'. [ 554.745837][T18486] netlink: 4560 bytes leftover after parsing attributes in process `syz.6.5207'. [ 555.600462][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5222'. [ 555.806032][ T5706] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 555.820358][T18523] netlink: 'syz.9.5225': attribute type 1 has an invalid length. [ 555.870542][T18523] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.5225'. [ 555.901451][T18523] netlink: 'syz.9.5225': attribute type 1 has an invalid length. [ 555.920618][T18523] netlink: 2016 bytes leftover after parsing attributes in process `syz.9.5225'. [ 555.984268][ T5706] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.005102][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.023717][ T5706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.044000][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 556.066236][ T5706] usb 5-1: SerialNumber: syz [ 556.305212][ T5706] usb 5-1: 0:2 : does not exist [ 556.462007][ T5706] usb 5-1: USB disconnect, device number 43 [ 556.662518][ T6926] udevd[6926]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.308297][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.326212][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.850293][T18574] KVM: debugfs: duplicate directory 18574-4 [ 558.365904][ T5705] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 558.543774][ T5705] usb 9-1: Using ep0 maxpacket: 8 [ 558.564462][ T5705] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 558.586824][ T5705] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.740556][ T5705] usb 9-1: Product: syz [ 558.748428][T18603] netlink: 'syz.4.5259': attribute type 32 has an invalid length. [ 558.758713][ T5705] usb 9-1: Manufacturer: syz [ 558.773800][ T5691] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 558.774447][ T5705] usb 9-1: SerialNumber: syz [ 558.829532][T18605] loop6: detected capacity change from 0 to 2640 [ 558.839437][T18605] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.857081][ T6926] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.860330][ T5705] usb 9-1: config 0 descriptor?? [ 558.871572][T18605] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.880573][ T6926] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.889721][T18605] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.898460][ T6926] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.907318][ T6926] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.916197][T18605] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.924809][ T6926] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.935917][ T5691] usb 7-1: Using ep0 maxpacket: 16 [ 558.941953][T18605] Buffer I/O error on dev loop6, logical block 0, async page read [ 558.950492][ T5691] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 558.970772][ T5691] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 558.983153][T18605] ldm_validate_partition_table(): Disk read failed. [ 558.990336][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.002471][T18605] Dev loop6: unable to read RDB block 0 [ 559.008657][T18605] loop6: unable to read partition table [ 559.014825][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.027127][T18605] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 559.068338][ T5691] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 559.098850][ T4961] ldm_validate_partition_table(): Disk read failed. [ 559.116840][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.127705][ T4961] Dev loop6: unable to read RDB block 0 [ 559.162118][ T5691] usb 7-1: config 0 descriptor?? [ 559.184138][ T4961] loop6: unable to read partition table [ 559.273735][ T5705] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 559.373600][T18610] gadgetfs: bound to dummy_udc driver [ 559.434457][ T5705] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 559.456834][ T5705] usb 9-1: USB disconnect, device number 31 [ 559.629484][ T5691] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0029/input/input62 [ 559.847663][ T5691] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0029/input/input63 [ 560.059797][ T29] audit: type=1400 audit(1786302963.507:1003): avc: denied { read } for pid=18626 comm="syz.9.5268" name="dynamic_events" dev="tracefs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 560.292635][ T5691] kye 0003:0458:5013.0029: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 560.365730][ T5691] usb 7-1: USB disconnect, device number 37 [ 560.511617][T18636] fido_id[18636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 560.703886][T17042] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 560.881158][T17042] usb 5-1: Using ep0 maxpacket: 32 [ 560.898431][T17042] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 560.922901][T17042] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 560.944943][T17042] usb 5-1: config 0 has no interface number 0 [ 560.970209][T17042] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 561.016378][T17042] usb 5-1: config 0 interface 184 has no altsetting 0 [ 561.048172][T17042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.061700][T17042] usb 5-1: Product: syz [ 561.073678][T17042] usb 5-1: Manufacturer: syz [ 561.083874][T17042] usb 5-1: SerialNumber: syz [ 561.118843][T17042] usb 5-1: config 0 descriptor?? [ 561.134465][T18639] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.329082][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5288'. [ 561.369004][T18639] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.429198][T18669] team0: Port device team_slave_0 removed [ 561.823269][T17042] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 561.853745][T17042] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 562.051286][T18690] input: syz1 as /devices/virtual/input/input64 [ 562.080169][T17042] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 562.101827][T18688] syzkaller1: entered promiscuous mode [ 562.111598][T17042] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 562.129113][T18688] syzkaller1: entered allmulticast mode [ 562.149542][T17042] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 562.189461][T17042] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 562.222546][T17042] usb 5-1: USB disconnect, device number 44 [ 562.524262][T18701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 562.538603][T18701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 562.600756][T18701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.612594][T18701] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 562.753939][T18701] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 562.762709][T18701] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 562.804583][T18701] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 564.583836][ T5591] Bluetooth: hci4: command 0x0c1a tx timeout [ 564.583854][T18707] Bluetooth: hci3: command 0x0406 tx timeout [ 564.663865][ T5591] Bluetooth: hci1: command 0x0406 tx timeout [ 564.823997][ T5591] Bluetooth: hci5: command 0x0c1a tx timeout [ 565.154928][T18717] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 565.374863][T18723] netlink: 212892 bytes leftover after parsing attributes in process `syz.9.5308'. [ 565.674340][ T29] audit: type=1400 audit(1786302969.127:1004): avc: denied { read } for pid=18734 comm="syz.4.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 566.191600][T18756] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5323'. [ 566.744188][ T5591] Bluetooth: hci1: command 0x0406 tx timeout [ 566.907815][ T5591] Bluetooth: hci5: command 0x0c1a tx timeout [ 567.993206][T18811] input: syz0 as /devices/virtual/input/input65 [ 568.170736][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5349'. [ 568.283073][T18814] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.419799][ T24] IPVS: starting estimator thread 0... [ 568.534563][T18820] IPVS: using max 44 ests per chain, 105600 per kthread [ 568.641645][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5349'. [ 568.688688][ T5691] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 568.886688][ T5691] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 568.907367][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.924092][ T5691] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 568.942938][ T5691] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 568.983452][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.992024][ T5591] Bluetooth: hci5: command 0x0c1a tx timeout [ 569.017430][ T5691] usb 5-1: Product: syz [ 569.035281][ T5691] usb 5-1: Manufacturer: syz [ 569.044958][ T5691] usb 5-1: SerialNumber: syz [ 569.093791][ T5698] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 569.244252][ T5698] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 569.290520][ T5698] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.309514][ T5691] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 569.329868][ T5698] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.382055][ T5698] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.520882][T18835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.531523][ T5691] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 569.553207][ T6926] udevd[6926]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.581146][ T5691] usb 5-1: USB disconnect, device number 45 [ 569.663183][ T5698] usb 10-1: usb_control_msg returned -32 [ 569.696717][ T5698] usbtmc 10-1:16.0: can't read capabilities [ 569.841343][T18839] netlink: 'syz.8.5357': attribute type 3 has an invalid length. [ 569.858103][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5357'. [ 570.206690][ T5691] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 570.248752][T18852] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 570.317627][T18852] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 570.343047][ T29] audit: type=1326 audit(1786302973.787:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 570.414909][ T5691] usb 7-1: Using ep0 maxpacket: 16 [ 570.427029][ T5691] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 570.442197][ T29] audit: type=1326 audit(1786302973.817:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 570.489962][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 570.511631][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 570.544736][ T29] audit: type=1326 audit(1786302973.827:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 570.575865][ T5691] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.609992][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.626738][ T29] audit: type=1326 audit(1786302973.827:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 570.686106][ T5691] usb 7-1: config 0 descriptor?? [ 570.701190][ T5691] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input66 [ 570.731061][T18865] ipvlan2: entered promiscuous mode [ 570.737268][ T29] audit: type=1326 audit(1786302973.827:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 570.782833][T18865] team0: Device ipvlan2 failed to register rx_handler [ 570.867972][ T29] audit: type=1326 audit(1786302973.827:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 570.984558][ T29] audit: type=1326 audit(1786302973.827:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 571.055166][ T5691] usb 7-1: USB disconnect, device number 38 [ 571.061149][ C1] pxrc 7-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 571.082780][ T4946] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 571.134817][ T29] audit: type=1326 audit(1786302973.837:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8895d5e90e code=0x7ffc0000 [ 571.262301][ T29] audit: type=1326 audit(1786302973.837:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 571.299454][ T29] audit: type=1326 audit(1786302973.837:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 571.332978][ T29] audit: type=1326 audit(1786302973.837:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 571.417752][ T29] audit: type=1326 audit(1786302973.847:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.7.5367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 571.469199][T18882] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 571.769647][ T29] audit: type=1400 audit(1786302975.217:1017): avc: denied { append } for pid=18891 comm="syz.6.5380" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 571.888276][ T5691] usb 10-1: USB disconnect, device number 7 [ 572.006310][ T29] audit: type=1400 audit(1786302975.457:1018): avc: denied { remount } for pid=18897 comm="syz.9.5383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 572.189657][T18894] SELinux: invalid class [ 572.275529][T18894] SELinux: failed to load policy [ 572.825479][T18916] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 574.209740][ T5691] hid_parser_main: 390 callbacks suppressed [ 574.209761][ T5691] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 574.263923][ T5691] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 574.307967][ T5691] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 574.521403][T18971] fido_id[18971]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 575.177508][T18991] sit0: entered promiscuous mode [ 575.189769][T18991] netlink: 'syz.6.5424': attribute type 1 has an invalid length. [ 575.219723][T18991] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5424'. [ 576.084105][T17043] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 576.134870][T19016] device-mapper: ioctl: device name cannot contain '/' [ 576.293810][T17043] usb 7-1: Using ep0 maxpacket: 32 [ 576.310991][T17043] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 576.352524][T17043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.376748][T17043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.402524][T17043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.451389][T17043] usb 7-1: config 0 descriptor?? [ 576.466010][T17043] hub 7-1:0.0: USB hub found [ 576.668310][T17043] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 576.723765][T17042] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 576.763877][ T24] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 576.894135][T17042] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 576.915599][T17042] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 576.933674][T17042] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 576.934805][ T24] usb 9-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 576.954566][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 576.963690][T17042] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 576.975287][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.983701][T17042] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 576.988574][ T24] usb 9-1: config 0 descriptor?? [ 577.003672][T17042] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 577.010642][T19028] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 577.034941][T17042] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 577.053681][T17042] usb 5-1: Product: syz [ 577.059611][T17042] usb 5-1: Manufacturer: syz [ 577.070470][T17043] hid-generic 0003:046D:C31C.002B: unknown main item tag 0x0 [ 577.090831][T17042] cdc_wdm 5-1:1.0: skipping garbage [ 577.112477][T17042] cdc_wdm 5-1:1.0: skipping garbage [ 577.124240][T17043] hid-generic 0003:046D:C31C.002B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 577.144213][T17042] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 577.150562][T17042] cdc_wdm 5-1:1.0: Unknown control protocol [ 577.469519][ T24] hid (null): unknown global tag 0xc [ 577.500384][ T24] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 577.513144][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 577.531331][ T24] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 577.548650][ T5691] usb 7-1: USB disconnect, device number 39 [ 577.556059][ T24] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 577.582189][ T24] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 577.601081][ T24] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 577.629529][ T24] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 577.637226][ T24] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 577.645729][ T24] asus 0003:0B05:1ABE.002C: unknown global tag 0xc [ 577.652533][ T24] asus 0003:0B05:1ABE.002C: item 0 1 1 12 parsing failed [ 577.663686][ T24] asus 0003:0B05:1ABE.002C: Asus hid parse failed: -22 [ 577.670773][ T24] asus 0003:0B05:1ABE.002C: probe with driver asus failed with error -22 [ 577.688948][ T24] usb 9-1: USB disconnect, device number 32 [ 578.423887][T18707] Bluetooth: hci2: command 0x1003 tx timeout [ 578.428294][ T5591] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 578.448319][T19045] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 578.467947][T17042] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 578.497119][T19047] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 578.703126][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 578.703160][ T29] audit: type=1326 audit(1786302982.147:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19052 comm="syz.8.5451" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7f919e0d9 code=0x0 [ 579.305057][ T5706] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 579.562442][ T24] usb 5-1: USB disconnect, device number 46 [ 579.736378][T19073] siw: device registration error -23 [ 580.120421][ T29] audit: type=1400 audit(1786302983.567:1038): avc: denied { mounton } for pid=19085 comm="syz.4.5466" path="/1103/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 580.121067][T17042] kernel write not supported for file net/rpc/auth.unix.ip/channel (pid: 17042 comm: kworker/0:1) [ 581.264618][ T5691] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 581.443829][ T5691] usb 9-1: Using ep0 maxpacket: 8 [ 581.453961][ T5691] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 581.470312][ T5691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.483084][ T5691] usb 9-1: Product: syz [ 581.499712][ T5691] usb 9-1: Manufacturer: syz [ 581.511343][ T5691] usb 9-1: SerialNumber: syz [ 581.541094][ T5691] usb 9-1: config 0 descriptor?? [ 581.699274][ T29] audit: type=1400 audit(1786302985.147:1039): avc: denied { map } for pid=19125 comm="syz.4.5483" path="socket:[76467]" dev="sockfs" ino=76467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 581.778660][ T5691] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 582.174375][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5489'. [ 582.386211][ T5691] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 582.439181][ T5691] usb 9-1: USB disconnect, device number 33 [ 582.532325][T19146] netlink: 'syz.9.5492': attribute type 10 has an invalid length. [ 582.562577][T19146] syz_tun: entered promiscuous mode [ 582.601440][T19150] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.5494'. [ 582.604368][T19146] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 582.813877][ T1209] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 583.007312][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 583.031586][ T1209] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 583.075313][ T1209] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 583.106289][ T1209] usb 5-1: config 100 has no interface number 0 [ 583.135854][ T1209] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 583.170049][ T1209] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 583.206968][ T1209] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 583.247245][ T1209] usb 5-1: config 100 interface 173 has no altsetting 0 [ 583.287630][ T1209] usb 5-1: string descriptor 0 read error: -22 [ 583.299966][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.333372][T19148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 583.348856][T19148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 583.377054][ T1209] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 583.386643][T19172] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 583.396239][T17611] IPVS: starting estimator thread 0... [ 583.445449][ T1209] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 583.505003][T19176] IPVS: using max 43 ests per chain, 103200 per kthread [ 583.534626][ T5706] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 583.652869][T19148] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 583.679275][ T1209] usb 5-1: USB disconnect, device number 47 [ 583.704698][ T5706] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 583.714716][ T1209] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 583.733720][ T5706] usb 7-1: config index 0 descriptor too short (expected 112, got 45) [ 583.737520][ T1209] metro_usb 5-1:100.173: device disconnected [ 583.789106][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.819940][ T5706] usb 7-1: Product: syz [ 583.834884][ T5706] usb 7-1: Manufacturer: syz [ 583.851627][ T5706] usb 7-1: SerialNumber: syz [ 584.105896][T19194] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5511'. [ 584.178475][ T5706] rtl8150 7-1:1.0: couldn't reset the device [ 584.194160][ T5706] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 584.226356][ T5706] usb 7-1: USB disconnect, device number 40 [ 584.254663][T19197] netlink: 63 bytes leftover after parsing attributes in process `syz.8.5513'. [ 584.553348][T19210] loop8: detected capacity change from 0 to 8 [ 584.576411][T19210] Dev loop8: unable to read RDB block 8 [ 584.589551][T19210] loop8: unable to read partition table [ 584.604562][T19210] loop8: partition table beyond EOD, truncated [ 584.623696][T19210] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 585.119530][T19224] loop8: detected capacity change from 0 to 7 [ 585.171779][T19224] Dev loop8: unable to read RDB block 7 [ 585.212817][T19224] loop8: unable to read partition table [ 585.251373][T19224] loop8: partition table beyond EOD, truncated [ 585.286274][T19224] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 585.586798][T19237] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5532'. [ 585.843968][ T1209] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 586.015801][ T1209] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 586.053448][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.101933][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.141830][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.185589][ T1209] usb 7-1: config 0 descriptor?? [ 586.629636][ T1209] hid_parser_main: 1 callbacks suppressed [ 586.629660][ T1209] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x2 [ 586.711732][ T1209] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 586.912950][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 587.059308][T19271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5544'. [ 587.223837][ T1209] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 587.244756][ T1209] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 587.279044][ T1209] pyra 0003:1E7D:2CF6.002D: probe with driver pyra failed with error -71 [ 587.303131][ T1209] usb 7-1: USB disconnect, device number 41 [ 587.493365][ T29] audit: type=1400 audit(1786302990.937:1040): avc: denied { mounton } for pid=19279 comm="syz.9.5547" path="/syzcgroup/unified/syz9/cgroup.procs" dev="cgroup2" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 587.673021][T19284] vivid-000: disconnect [ 587.684583][T19283] vivid-000: reconnect [ 587.852598][ T29] audit: type=1400 audit(1786302991.297:1041): avc: denied { write } for pid=19285 comm="syz.9.5550" name="rd_mcp_0" dev="configfs" ino=61588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 587.902709][ T29] audit: type=1400 audit(1786302991.347:1042): avc: denied { add_name } for pid=19285 comm="syz.9.5550" name="dev0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.081620][ T29] audit: type=1400 audit(1786302991.527:1043): avc: denied { write } for pid=19285 comm="syz.9.5550" name="rd_mcp_0" dev="configfs" ino=61588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.133756][ T29] audit: type=1400 audit(1786302991.557:1044): avc: denied { remove_name } for pid=19285 comm="syz.9.5550" name="dev0" dev="configfs" ino=77055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.175345][ T29] audit: type=1400 audit(1786302991.557:1045): avc: denied { rmdir } for pid=19285 comm="syz.9.5550" name="dev0" dev="configfs" ino=77055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.486576][T19297] tap0: tun_chr_ioctl cmd 1074025675 [ 588.500648][T19297] tap0: persist enabled [ 588.528898][T19297] tap0: tun_chr_ioctl cmd 1074025675 [ 588.540430][T19297] tap0: persist disabled [ 588.963737][T17043] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 588.983760][T18707] Bluetooth: hci2: command 0x1003 tx timeout [ 588.990989][ T5591] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 589.123738][T17043] usb 5-1: Using ep0 maxpacket: 8 [ 589.145378][T17043] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 589.186124][T17043] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.217101][T17043] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.218383][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5565'. [ 589.235225][T19317] binder: 19316:19317 ioctl c0306201 200000000080 returned -14 [ 589.252216][T17043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.253135][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5565'. [ 589.279222][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5565'. [ 589.283683][T17043] usb 5-1: Product: syz [ 589.303672][T17043] usb 5-1: Manufacturer: syz [ 589.322365][T17043] usb 5-1: SerialNumber: syz [ 589.482902][T19323] netlink: 'syz.8.5568': attribute type 1 has an invalid length. [ 589.495551][T19323] netlink: 200 bytes leftover after parsing attributes in process `syz.8.5568'. [ 589.572668][T17043] usb 5-1: 6:0: cannot get min/max values for control 8 (id 6) [ 589.594384][T17043] usb 5-1: unit 4 not found! [ 589.660655][T17043] usb 5-1: USB disconnect, device number 48 [ 589.754109][ T29] audit: type=1400 audit(1786302993.197:1046): avc: denied { read } for pid=19327 comm="syz.8.5570" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 589.833099][ T29] audit: type=1400 audit(1786302993.207:1047): avc: denied { open } for pid=19327 comm="syz.8.5570" path="/568/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 589.945647][T19335] Dead loop on virtual device ip6_vti0 (net 127), fix it urgently! [ 590.525429][T19359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.813866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 590.833790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 591.410451][T17042] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 591.588574][T17042] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 591.636281][T17042] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.663226][T17042] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.688469][T17042] usb 9-1: Product: syz [ 591.704341][T17042] usb 9-1: Manufacturer: syz [ 591.719489][T17042] usb 9-1: SerialNumber: syz [ 591.727003][ T29] audit: type=1400 audit(1786302995.177:1048): avc: denied { mounton } for pid=19391 comm="syz.4.5596" path="/1134/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 591.761273][T17042] symbolserial 9-1:1.0: symbol converter detected [ 591.804355][T17042] usb 9-1: symbol converter now attached to ttyUSB0 [ 592.073504][T17611] usb 9-1: USB disconnect, device number 34 [ 592.079610][ C1] symbol ttyUSB0: symbol_int_callback - failed resubmitting read urb, error -19 [ 592.218095][T17611] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 592.261862][T17611] symbolserial 9-1:1.0: device disconnected [ 592.775564][T17042] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 592.984170][T17042] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.005583][T17042] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 593.043674][T17042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 593.062760][T17042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 593.093665][T17042] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.123696][T17042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.177574][T17042] usb 5-1: config 0 descriptor?? [ 593.194133][T19401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 593.640129][T17042] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xd [ 593.687206][T17042] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 593.760515][T19424] sit0: left promiscuous mode [ 593.812237][T19424] gtp0: left allmulticast mode [ 593.884916][T19424] vxlan0: left promiscuous mode [ 593.906753][T19424] vxlan0: left allmulticast mode [ 594.028200][ T1209] usb 5-1: USB disconnect, device number 49 [ 594.493315][T19425] geneve2: entered promiscuous mode [ 594.524181][T18186] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.547122][T18186] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.571975][T18186] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.613481][T18186] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.255227][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.272029][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.298706][ T1209] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 595.308072][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.325189][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.354307][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.370659][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.405365][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.414482][ T29] audit: type=1400 audit(1786302998.867:1049): avc: denied { write } for pid=19456 comm="syz.6.5622" path="socket:[78016]" dev="sockfs" ino=78016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 595.457652][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.468313][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.479300][T17611] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 595.489182][ T1209] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.521709][ T1209] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 595.541989][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 595.570609][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 595.584331][T19459] loop8: detected capacity change from 0 to 7 [ 595.591732][ T1209] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.607754][T17611] hid-generic 0006:0008:0001.002F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 595.626702][T19459] Dev loop8: unable to read RDB block 7 [ 595.632750][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.672648][T19459] loop8: unable to read partition table [ 595.700785][T19459] loop8: partition table beyond EOD, truncated [ 595.727748][ T1209] usb 9-1: config 0 descriptor?? [ 595.737419][T19459] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.215859][ T29] audit: type=1400 audit(1786302999.667:1050): avc: denied { watch watch_reads } for pid=19472 comm="syz.9.5629" path="pipe:[78048]" dev="pipefs" ino=78048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 596.253316][ T1209] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 596.300847][ T29] audit: type=1400 audit(1786302999.697:1051): avc: denied { relabelfrom } for pid=19472 comm="syz.9.5629" name="" dev="pipefs" ino=78052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 596.478210][T19483] device-mapper: ioctl: Invalid ioctl structure: name mypo, dev f801 [ 596.517962][T17043] usb 9-1: USB disconnect, device number 35 [ 596.524142][ T5706] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 596.603734][T17042] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 596.715607][ T5706] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 596.733874][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 596.755570][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 596.778959][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.793660][ T5706] usb 5-1: Product: syz [ 596.803668][ T5706] usb 5-1: Manufacturer: syz [ 596.813665][ T5706] usb 5-1: SerialNumber: syz [ 596.830047][ T5706] usb 5-1: config 0 descriptor?? [ 596.841824][T17042] usb 7-1: unable to get BOS descriptor or descriptor too short [ 596.854112][T19476] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 596.861711][T17042] usb 7-1: not running at top speed; connect to a high speed hub [ 596.871685][T19476] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 596.891632][T17042] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 596.912051][T17042] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 596.928579][T17042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.943971][T17042] usb 7-1: Product: syz [ 596.953452][T17042] usb 7-1: Manufacturer: syz [ 596.963283][T17042] usb 7-1: SerialNumber: syz [ 596.980726][T19479] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 597.114330][T19476] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 597.147170][T19476] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 597.212043][T17042] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.257754][T17042] usb 7-1: MIDIStreaming interface descriptor not found [ 597.435175][T17042] usb 7-1: USB disconnect, device number 42 [ 597.457184][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5639'. [ 597.690795][ T8619] udevd[8619]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.042463][T19510] block2mtd: device name too long [ 598.169759][ T5706] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 598.336206][ T5706] dm9601 5-1:0.0 eth14: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, cc:5d:5e:da:5b:d1 [ 598.387674][ T5706] usb 5-1: USB disconnect, device number 50 [ 598.465522][ T5706] dm9601 5-1:0.0 eth14: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 599.050677][ T5706] hid-generic 0006:0008:0008.0031: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 599.221872][T19550] fido_id[19550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 599.882594][T19572] geneve2: entered promiscuous mode [ 599.924056][ T1053] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 52907 - 0 [ 599.961893][ T1053] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 52907 - 0 [ 599.990232][ T1053] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 52907 - 0 [ 600.034128][ T1053] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 52907 - 0 [ 600.112326][T19580] Invalid argument reading file caps for ./file0 [ 600.348247][ T29] audit: type=1400 audit(1786303003.797:1052): avc: denied { setopt } for pid=19585 comm="syz.9.5676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 600.634766][ T5691] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 600.792694][T19597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.912880][T18190] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.920086][T18190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.989192][T19611] xt_hashlimit: size too large, truncated to 1048576 [ 601.025405][ T29] audit: type=1400 audit(1786303004.467:1053): avc: denied { create } for pid=19612 comm="syz.9.5687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 601.087216][ T29] audit: type=1400 audit(1786303004.487:1054): avc: denied { connect } for pid=19612 comm="syz.9.5687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 601.211340][T19618] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 601.247639][T19618] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 601.275543][T19618] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 601.705070][ T5691] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 601.742193][ T1209] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 601.868618][T19632] SELinux: ebitmap start bit (982102474) is not a multiple of the map unit size (64) [ 601.912721][T19632] SELinux: invalid class [ 601.920583][ T5691] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 601.954425][ T5691] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 601.992431][T19632] SELinux: failed to load policy [ 602.001907][ T5691] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 602.037887][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.372011][ T5691] usb 7-1: USB disconnect, device number 43 [ 602.690550][ T5691] lg-g15 0003:046D:C21C.0032: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 602.723170][ T5691] lg-g15 0003:046D:C21C.0032: Error getting backlight brightness: -5 [ 602.757972][ T29] audit: type=1400 audit(1786303006.197:1055): avc: denied { unmount } for pid=16967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 602.882781][ T5691] lg-g15 0003:046D:C21C.0032: probe with driver lg-g15 failed with error -5 [ 603.263191][ T29] audit: type=1800 audit(1786303006.707:1056): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5719" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 603.322061][T19693] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 603.364862][T19693] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 603.653022][T19704] kernel read not supported for file /eth0 (pid: 19704 comm: syz.6.5722) [ 603.698612][T19706] Trying to write to read-only block-device nullb0 [ 603.720893][ T29] audit: type=1800 audit(1786303007.167:1057): pid=19704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5722" name="eth0" dev="mqueue" ino=78338 res=0 errno=0 [ 604.620369][T19740] input: syz0 as /devices/virtual/input/input71 [ 604.772874][ T29] audit: type=1400 audit(1786303008.217:1058): avc: denied { listen } for pid=19745 comm="syz.9.5741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 604.796701][T19744] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 604.924447][ T29] audit: type=1400 audit(1786303008.217:1059): avc: denied { accept } for pid=19745 comm="syz.9.5741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 605.750749][ T29] audit: type=1400 audit(1786303009.197:1060): avc: denied { write } for pid=19748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.086637][ T29] audit: type=1400 audit(1786303009.527:1061): avc: denied { write } for pid=19785 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.194751][T19827] program syz.7.5768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.303359][ T29] audit: type=1400 audit(1786303010.747:1062): avc: denied { write } for pid=19796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.632187][ T29] audit: type=1400 audit(1786303011.077:1063): avc: denied { write } for pid=19838 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.766530][ T29] audit: type=1400 audit(1786303011.107:1064): avc: denied { setopt } for pid=19840 comm="syz.7.5773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 607.898480][ T29] audit: type=1400 audit(1786303011.127:1065): avc: denied { write } for pid=19840 comm="syz.7.5773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 608.286309][T19853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 608.342958][T19853] gretap0: entered allmulticast mode [ 608.887227][ T29] audit: type=1400 audit(1786303012.337:1066): avc: denied { write } for pid=19846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.994459][ T5691] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 609.140443][ T29] audit: type=1400 audit(1786303012.587:1067): avc: denied { write } for pid=19895 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.165075][T19897] netlink: 'syz.7.5789': attribute type 13 has an invalid length. [ 609.188146][ T5691] usb 7-1: Using ep0 maxpacket: 32 [ 609.204067][ T5691] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 609.228821][ T5691] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 609.247600][ T5691] usb 7-1: config 0 has no interface number 0 [ 609.274485][ T5691] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 609.346531][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.361811][ T5691] usb 7-1: Product: syz [ 609.381327][ T5691] usb 7-1: Manufacturer: syz [ 609.387319][ T5691] usb 7-1: SerialNumber: syz [ 609.392562][ T29] audit: type=1400 audit(1786303012.837:1068): avc: denied { write } for pid=19902 comm="syz.9.5792" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 609.427028][ T5691] usb 7-1: config 0 descriptor?? [ 609.445757][T19879] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 609.683845][T19879] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 609.898304][ T5691] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 609.945455][ T5691] asix 7-1:0.188: probe with driver asix failed with error -32 [ 610.057798][ T29] audit: type=1400 audit(1786303013.497:1069): avc: denied { write } for pid=19900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.283856][ T29] audit: type=1400 audit(1786303013.707:1070): avc: denied { write } for pid=19921 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.468883][T19917] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5795'. [ 610.564445][T17611] usb 7-1: USB disconnect, device number 44 [ 610.624144][ T5691] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 610.668191][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5799'. [ 610.712134][T19929] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5799'. [ 610.806353][ T5691] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 610.839807][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.881434][ T5691] usb 5-1: config 0 descriptor?? [ 610.910134][ T5691] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 611.169024][T19950] sctp: [Deprecated]: syz.6.5808 (pid 19950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.169024][T19950] Use struct sctp_sack_info instead [ 611.337056][ T29] audit: type=1400 audit(1786303014.777:1071): avc: denied { write } for pid=19954 comm="syz.9.5810" name="functions" dev="configfs" ino=44387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 611.420540][ T29] audit: type=1800 audit(1786303014.837:1072): pid=19955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5810" name="name" dev="configfs" ino=80828 res=0 errno=0 [ 611.593466][T19960] syzkaller1: entered promiscuous mode [ 611.617390][T19960] syzkaller1: entered allmulticast mode [ 611.722743][ T5691] gspca_stv06xx: I2C: Read error writing address: -71 [ 611.761731][ T5691] usb 5-1: USB disconnect, device number 51 [ 611.953703][T17611] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 612.113479][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5821'. [ 612.124103][T19974] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5819'. [ 612.135588][T19977] block nbd4: Unsupported socket: should be TCP or UNIX. [ 612.142992][T17611] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 612.158356][T17611] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.178789][T17611] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 612.224299][T17611] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.290501][T17611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 612.319602][T17611] usb 7-1: Product: syz [ 612.347695][T17611] usb 7-1: Manufacturer: syz [ 612.356600][T18707] Bluetooth: hci2: unexpected cc 0x1001 length: 1 < 9 [ 612.364797][T18707] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 612.374776][T19966] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 612.403190][T17611] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 612.437178][T17611] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 612.702525][T17611] usb 7-1: USB disconnect, device number 45 [ 612.712886][ T5597] Bluetooth: hci6: sending frame failed (-49) [ 612.726736][T18707] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 612.751770][T17611] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 612.763081][T17611] garmin_gps 7-1:1.0: device disconnected [ 613.153907][ T5706] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 613.324119][ T5706] usb 10-1: Using ep0 maxpacket: 32 [ 613.342153][ T5706] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 613.343372][T20006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.364166][ T5706] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 613.398246][ T5706] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 613.457261][ T5706] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.492236][ T5706] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 613.513342][ T5706] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 613.551891][ T5706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.563659][ T5706] usb 10-1: Product: syz [ 613.575615][ T5706] usb 10-1: Manufacturer: syz [ 613.590492][ T5706] usb 10-1: SerialNumber: syz [ 613.665385][ T5706] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 613.696045][ T5706] imon 10-1:155.0: unable to initialize intf0, err -90 [ 613.719815][ T5706] imon:imon_probe: failed to initialize context! [ 613.751911][ T5706] imon 10-1:155.0: unable to register, err -19 [ 614.073850][T17611] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 614.255876][T17611] usb 7-1: Using ep0 maxpacket: 8 [ 614.284298][T17611] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.310924][T17611] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 614.331772][T17611] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.353957][ T5591] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 614.378323][T17611] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 614.399187][T17611] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 614.409658][T17611] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.423371][T17611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.554142][ T29] audit: type=1400 audit(1786303017.987:1073): avc: denied { watch_mount watch_reads } for pid=20029 comm="syz.4.5843" path="/proc/2605/stat" dev="proc" ino=81094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 614.640700][T17611] usb 7-1: GET_CAPABILITIES returned 0 [ 614.669158][T17611] usbtmc 7-1:16.0: can't read capabilities [ 614.916746][ T5706] usb 7-1: USB disconnect, device number 46 [ 615.247244][T20053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.808627][T20066] lapbether: lapb_data_request error - 4 [ 615.988068][ T5706] usb 10-1: USB disconnect, device number 8 [ 616.327155][T20084] CIFS: Attempting to mount //127.0.0.1/share [ 616.981616][T20096] pim6reg1: entered promiscuous mode [ 617.006492][T20096] pim6reg1: entered allmulticast mode [ 617.148787][T20084] CIFS: VFS: Error connecting to socket. Aborting operation. [ 617.188445][T20084] CIFS: VFS: cifs_mount failed w/return code = -4 [ 618.032143][T20127] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 618.063401][T20127] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 618.128979][T20133] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5887'. [ 618.544541][T17611] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 618.723689][T17611] usb 7-1: Using ep0 maxpacket: 8 [ 618.739925][T17611] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.750759][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.762010][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.781340][T17611] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.818647][T17611] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.856494][ T29] audit: type=1400 audit(1786303022.307:1074): avc: denied { link } for pid=20140 comm="syz.9.5891" name="#41" dev="tmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 618.859837][T17611] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.917656][ T29] audit: type=1400 audit(1786303022.347:1075): avc: denied { rename } for pid=20140 comm="syz.9.5891" name="#42" dev="tmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 618.952547][T17611] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.989575][T17611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.243251][T17611] usb 7-1: GET_CAPABILITIES returned 0 [ 619.271081][T17611] usbtmc 7-1:16.0: can't read capabilities [ 619.282719][ T29] audit: type=1400 audit(1786303022.727:1076): avc: denied { write } for pid=20153 comm="syz.9.5897" name="functions" dev="configfs" ino=44387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 619.376577][ T29] audit: type=1400 audit(1786303022.817:1077): avc: denied { write } for pid=20153 comm="syz.9.5897" name="color_matching" dev="configfs" ino=82119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 619.599140][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.614593][T17611] usb 7-1: USB disconnect, device number 47 [ 621.584962][T20194] loop5: detected capacity change from 0 to 7 [ 621.605845][T20194] Dev loop5: unable to read RDB block 7 [ 621.617928][T20194] loop5: unable to read partition table [ 621.630053][T20194] loop5: partition table beyond EOD, truncated [ 621.681335][T20194] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 622.245099][T17043] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 622.515196][T17043] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 622.667928][ T5706] kernel read not supported for file /dsp (pid: 5706 comm: kworker/0:4) [ 622.812052][ T29] audit: type=1400 audit(1786303026.265:1078): avc: denied { read } for pid=20228 comm="syz.4.5930" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 623.002201][T20212] ceph: No mds server is up or the cluster is laggy [ 623.042744][ T5706] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 623.123937][T17043] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 623.157414][ T29] audit: type=1400 audit(1786303026.615:1079): avc: denied { ioctl } for pid=20233 comm="syz.9.5932" path="socket:[82304]" dev="sockfs" ino=82304 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 623.284406][T17043] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 623.307482][T17043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.639559][ T29] audit: type=1800 audit(1786303027.095:1080): pid=20240 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.5934" name="file1" dev="tmpfs" ino=1372 res=0 errno=0 [ 623.947958][T17043] cxacru 5-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 623.969564][T17043] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 623.987520][T17043] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 624.047658][T17043] cxacru 5-1:1.0: probe with driver cxacru failed with error -5 [ 624.084169][T17043] usb 5-1: USB disconnect, device number 52 [ 624.127143][ T29] audit: type=1326 audit(1786303027.585:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.9.5940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f388dd9e0d9 code=0x0 [ 624.549321][T20263] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 624.601886][T20266] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 624.622437][T20266] 9p: Bad value for 'rfdno' [ 624.622795][ T29] audit: type=1400 audit(1786303028.075:1082): avc: denied { mounton } for pid=20262 comm="syz.6.5944" path="/851/debug/tracing/trace_pipe" dev="tracefs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 624.826481][T17043] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 624.994401][T17043] usb 5-1: Using ep0 maxpacket: 8 [ 625.009222][T17043] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 625.030829][T17043] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.052709][T17043] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 625.085537][T17043] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 625.120028][T17043] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 625.151972][T17043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.179614][T17043] hub 5-1:1.0: bad descriptor, ignoring hub [ 625.193926][ T187] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 625.209780][T17043] hub 5-1:1.0: probe with driver hub failed with error -5 [ 625.226246][T17043] cdc_wdm 5-1:1.0: skipping garbage [ 625.231698][T17043] cdc_wdm 5-1:1.0: skipping garbage [ 625.243504][T17043] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 625.262528][T17043] cdc_wdm 5-1:1.0: Unknown control protocol [ 625.364139][ T187] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 625.392086][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.415819][ T187] usb 7-1: config 0 descriptor?? [ 625.451262][ T187] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 625.633545][ T187] gp8psk: usb in 128 operation failed. [ 625.683347][T20307] size and base must be multiples of 4 kiB [ 625.702111][T20307] CPU: 0 UID: 0 PID: 20307 Comm: syz.9.5964 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.702146][T20307] Tainted: [L]=SOFTLOCKUP [ 625.702154][T20307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 625.702169][T20307] Call Trace: [ 625.702175][T20307] [ 625.702183][T20307] dump_stack_lvl+0x100/0x190 [ 625.702212][T20307] mtrr_add.cold+0x74/0x87 [ 625.702236][T20307] mtrr_ioctl+0x25a/0xcf0 [ 625.702264][T20307] ? __pfx_mtrr_ioctl+0x10/0x10 [ 625.702293][T20307] ? __fget_files+0x215/0x3d0 [ 625.702320][T20307] ? __pfx_mtrr_ioctl+0x10/0x10 [ 625.702343][T20307] proc_reg_unlocked_ioctl+0x229/0x320 [ 625.702366][T20307] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 625.702391][T20307] __x64_sys_ioctl+0x18e/0x210 [ 625.702423][T20307] do_syscall_64+0x115/0x870 [ 625.702447][T20307] ? clear_bhb_loop+0x70/0xc0 [ 625.702469][T20307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.702488][T20307] RIP: 0033:0x7f388dd9e0d9 [ 625.702502][T20307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.702520][T20307] RSP: 002b:00007f388ec74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.702539][T20307] RAX: ffffffffffffffda RBX: 00007f388e025fa0 RCX: 00007f388dd9e0d9 [ 625.702551][T20307] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 625.702562][T20307] RBP: 00007f388de35024 R08: 0000000000000000 R09: 0000000000000000 [ 625.702573][T20307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.702584][T20307] R13: 00007f388e026038 R14: 00007f388e025fa0 R15: 00007ffd8da4ae28 [ 625.702610][T20307] [ 625.817051][ T1209] usb 5-1: USB disconnect, device number 53 [ 625.852773][ T187] gp8psk: usb in 146 operation failed. [ 625.885038][ T187] gp8psk: failed to get FW version [ 625.886422][ T187] gp8psk: FPGA Version = 224 [ 626.090126][ T187] gp8psk: usb in 138 operation failed. [ 626.097071][ T187] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 626.118501][ T187] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 626.157060][ T187] usb 7-1: USB disconnect, device number 48 [ 626.428917][T20321] SELinux: invalid class [ 626.465883][T20321] SELinux: failed to load policy [ 626.968544][T20343] sctp: [Deprecated]: syz.6.5981 (pid 20343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.968544][T20343] Use struct sctp_sack_info instead [ 627.032920][T20337] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 627.100752][T20337] batman_adv: batadv0: Interface activated: vlan0 [ 627.147748][T20337] bridge0: port 2(vlan2) entered blocking state [ 627.154168][T20337] bridge0: port 2(vlan2) entered forwarding state [ 627.818766][ T29] audit: type=1326 audit(1786303031.245:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.9.5990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f388dd9e0d9 code=0x0 [ 628.107834][T17611] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 628.275109][T17611] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 628.305163][T17611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 628.324093][T17611] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 628.366636][T17611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.402984][T17611] usb 5-1: config 0 descriptor?? [ 628.842373][T17611] hid-led 0003:1294:1320.0033: reserved main item tag 0xd [ 628.879002][T17611] hid-led 0003:1294:1320.0033: reserved main item tag 0xe [ 628.929756][T17611] hid-led 0003:1294:1320.0033: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 629.018427][T20395] netlink: 'syz.7.6002': attribute type 1 has an invalid length. [ 629.034268][T17611] hid-led 0003:1294:1320.0033: Riso Kagaku Webmail Notifier initialized [ 629.044260][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5988'. [ 629.183673][ T187] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 629.443779][ T187] usb 10-1: Using ep0 maxpacket: 8 [ 629.478182][ T187] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 629.587642][ T187] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 629.612988][ T1209] usb 5-1: USB disconnect, device number 54 [ 629.675610][ T187] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.744863][T16954] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 629.777336][ T187] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.827618][ T187] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.856620][T17611] kernel write not supported for file /bluetooth/6lowpan_control (pid: 17611 comm: kworker/1:1) [ 629.857835][T12335] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 629.908240][ T29] audit: type=1400 audit(1786303033.365:1084): avc: denied { listen } for pid=20422 comm="syz.6.6005" lport=47616 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 629.908682][ T187] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.009130][T18190] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 630.063446][ T187] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.380105][ T187] usb 10-1: usb_control_msg returned -32 [ 630.401492][ T187] usbtmc 10-1:16.0: can't read capabilities [ 630.537561][ T29] audit: type=1400 audit(1786303033.995:1085): avc: denied { unmount } for pid=20437 comm="syz.4.6012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 630.593916][ T29] audit: type=1400 audit(1786303034.035:1086): avc: denied { remount } for pid=20437 comm="syz.4.6012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 630.750937][T20441] usbtmc 10-1:16.0: INITIATE_ABORT_BULK_OUT returned 3 [ 630.751474][T20440] vxcan1: tx drop: invalid da for name 0x0000100000000000 [ 630.754837][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6011'. [ 630.957173][ T5706] usb 10-1: USB disconnect, device number 9 [ 631.358091][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6020'. [ 631.683839][ T1209] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 631.855094][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 631.871699][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 631.893449][ T1209] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 631.936338][ T1209] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 631.971681][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.003235][ T1209] usb 5-1: Product: syz [ 632.019527][ T1209] usb 5-1: Manufacturer: syz [ 632.035235][ T1209] usb 5-1: SerialNumber: syz [ 632.298039][ T1209] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 632.350298][ T1209] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 632.414212][ T29] audit: type=1400 audit(1786303035.865:1087): avc: denied { write } for pid=20473 comm="syz.7.6027" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 632.489211][ T1209] usb 5-1: 2:1 : can't get High Capability descriptor [ 632.679719][T20480] dummy_hcd dummy_hcd.0: remove, state 4 [ 632.740748][ T1209] usb 5-1: USB disconnect, device number 55 [ 632.810973][T20480] usb usb1: USB disconnect, device number 1 [ 633.755605][T20480] dummy_hcd dummy_hcd.0: stopped [ 633.772408][T20480] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 634.200816][T20509] overlay: Unknown parameter '¯ Fýu;É1Ü!íoH¨“×Sµu./file0' [ 634.515927][T20513] IPVS: Scheduler module ip_vs_ not found [ 635.226311][ T29] audit: type=1400 audit(1786303038.645:1088): avc: denied { write } for pid=20528 comm="syz.4.6053" name="/" dev="ocfs2_dlmfs" ino=82768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 635.249250][T20529] dlm: no local IP address has been set [ 635.273711][T20529] dlm: cannot start dlm midcomms -107 [ 635.281037][T20529] (syz.4.6053,20529,0):user_dlm_register:674 ERROR: status = -107 [ 635.315601][T20529] (syz.4.6053,20529,0):dlmfs_mkdir:437 ERROR: Error -107 could not register domain "file0" [ 635.334303][ T29] audit: type=1400 audit(1786303038.695:1089): avc: denied { add_name } for pid=20528 comm="syz.4.6053" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 635.355597][ T29] audit: type=1400 audit(1786303038.695:1090): avc: denied { create } for pid=20528 comm="syz.4.6053" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 635.359630][T18707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 635.376458][ T29] audit: type=1400 audit(1786303038.695:1091): avc: denied { associate } for pid=20528 comm="syz.4.6053" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 635.440698][T18707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 635.450242][T18707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 635.489171][T18707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 635.498368][T18707] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 635.791821][T20542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.105119][ T187] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 636.153738][ T1209] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 636.276242][ T187] usb 7-1: unable to get BOS descriptor or descriptor too short [ 636.293675][ T187] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 636.314057][ T187] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 636.337524][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.338693][ T1209] usb 10-1: unable to get BOS descriptor or descriptor too short [ 636.356349][ T187] usb 7-1: Product: syz [ 636.366388][ T187] usb 7-1: Manufacturer: syz [ 636.377033][ T1209] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 636.382285][ T187] usb 7-1: SerialNumber: syz [ 636.408671][ T1209] usb 10-1: config 129 has an invalid interface number: 135 but max is 0 [ 636.431709][ T1209] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 636.451316][ T1209] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 636.482609][ T1209] usb 10-1: config 129 has no interface number 0 [ 636.502377][ T1209] usb 10-1: config 129 has no interface number 1 [ 636.515999][ T1209] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 636.537986][ T1209] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 636.590635][ T1209] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 636.623803][ T1209] usb 10-1: config 129 interface 135 has no altsetting 0 [ 636.637235][ T1209] usb 10-1: config 129 interface 5 has no altsetting 0 [ 636.651543][ T187] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 636.675673][ T1209] usb 10-1: string descriptor 0 read error: -22 [ 636.682177][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.047039][T20566] input: syz1 as /devices/virtual/input/input72 [ 637.073091][ T29] audit: type=1400 audit(1786303040.525:1092): avc: denied { bind } for pid=20568 comm="syz.4.6066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 637.495395][T20578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6069'. [ 637.556809][ T29] audit: type=1400 audit(1786303041.015:1093): avc: denied { read append } for pid=20581 comm="syz.9.6071" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 637.591931][ T187] usb 7-1: failed to enable PITCH for EP 0x82 [ 637.617002][ T187] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 637.634220][ T5591] Bluetooth: hci2: command tx timeout [ 637.643673][ T187] usb 7-1: clock source 0 is not valid, cannot use [ 637.668022][ T29] audit: type=1400 audit(1786303041.035:1094): avc: denied { open } for pid=20581 comm="syz.9.6071" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 637.696478][ T29] audit: type=1400 audit(1786303041.045:1095): avc: denied { ioctl } for pid=20581 comm="syz.9.6071" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 637.739798][ T29] audit: type=1326 audit(1786303041.195:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20583 comm="syz.7.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 637.778225][ T187] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 637.798403][ T187] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 637.849357][ T29] audit: type=1326 audit(1786303041.225:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20583 comm="syz.7.6073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895d9e0d9 code=0x7ffc0000 [ 638.015373][ T1209] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.039957][ T1209] usb 10-1: MIDIStreaming interface descriptor not found [ 638.042983][ T187] usb 7-1: USB disconnect, device number 49 [ 638.459902][ T1209] usb 10-1: USB disconnect, device number 10 [ 638.713916][T20530] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.756625][T20530] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.780336][T20530] bridge_slave_0: entered allmulticast mode [ 638.817487][T20530] bridge_slave_0: entered promiscuous mode [ 638.855119][T20530] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.881482][T20530] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.932470][T20530] bridge_slave_1: entered allmulticast mode [ 638.955778][T20530] bridge_slave_1: entered promiscuous mode [ 639.062935][T20530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.129641][T20530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.202866][T20530] team0: Port device team_slave_0 added [ 639.253315][T20530] team0: Port device team_slave_1 added [ 639.304011][ T1209] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 639.328863][T20530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.346318][T20530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.403658][T20530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.432680][T20619] loop6: detected capacity change from 0 to 1 [ 639.440207][T20530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.449987][T20619] Dev loop6: unable to read RDB block 1 [ 639.463110][T20619] loop6: unable to read partition table [ 639.469595][T20530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.474099][T20619] loop6: partition table beyond EOD, [ 639.496567][ T1209] usb 7-1: Using ep0 maxpacket: 32 [ 639.513671][T20619] truncated [ 639.523675][T20619] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 639.541655][ T1209] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 639.543687][T20530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.571706][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.599445][ T1209] usb 7-1: config 0 descriptor?? [ 639.704691][ T5591] Bluetooth: hci2: command tx timeout [ 639.762942][T20530] hsr_slave_0: entered promiscuous mode [ 639.772818][T20530] hsr_slave_1: entered promiscuous mode [ 639.779610][T20530] debugfs: 'hsr0' already exists in 'hsr' [ 639.788307][T20530] Cannot create hsr debugfs directory [ 639.832621][ T1209] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 639.879389][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 639.911663][ T1209] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 639.943158][ T1209] usb 7-1: media controller created [ 640.032517][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.122754][ T1209] az6027: usb out operation failed. (-71) [ 640.145347][ T1209] az6027: usb out operation failed. (-71) [ 640.154923][ T1209] stb0899_attach: Driver disabled by Kconfig [ 640.193762][ T1209] az6027: no front-end attached [ 640.193762][ T1209] [ 640.206726][ T1209] az6027: usb out operation failed. (-71) [ 640.221878][ T1209] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 640.252682][ T1209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input73 [ 640.311181][ T1209] dvb-usb: schedule remote query interval to 400 msecs. [ 640.347314][ T1209] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 640.373012][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 640.373028][ T29] audit: type=1400 audit(1786303043.825:1105): avc: denied { watch watch_reads } for pid=20634 comm="syz.4.6091" path="/proc/2718/task/2719/net/snmp6" dev="proc" ino=4026533051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 640.424610][ T1209] usb 7-1: USB disconnect, device number 50 [ 640.553001][T20638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.587284][ T1209] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 640.855741][T20645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 640.894558][ T5691] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 641.093790][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 641.117956][ T5691] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 641.159310][ T5691] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 641.202815][ T5691] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 641.257649][ T5691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 641.293834][ T5698] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 641.309396][ T5691] usb 5-1: config 1 has no interface number 0 [ 641.337886][ T5691] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.380615][ T5691] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 641.416867][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.471014][ T5691] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 641.481516][ T5698] usb 10-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 641.510105][ T5698] usb 10-1: config 0 has an invalid interface number: 176 but max is 2 [ 641.533081][ T5698] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.545522][ T5698] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 641.556736][ T5698] usb 10-1: config 0 has no interface number 0 [ 641.563062][ T5698] usb 10-1: config 0 has no interface number 1 [ 641.784045][ T5591] Bluetooth: hci2: command tx timeout [ 641.809861][ T5691] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 641.816940][ T5698] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.849300][ T5698] usb 10-1: config 0 descriptor?? [ 641.885868][ T29] audit: type=1400 audit(1786303045.335:1106): avc: denied { write } for pid=20642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.911748][ T5698] usb 10-1: unknown number of interfaces: 2 [ 642.053655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 642.136302][ T5698] usb 5-1: USB disconnect, device number 56 [ 642.155044][ T5698] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 642.216242][ T5691] usb 10-1: USB disconnect, device number 11 [ 642.243748][ T29] audit: type=1400 audit(1786303045.675:1107): avc: denied { write } for pid=20670 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.341001][T20673] tipc: Started in network mode [ 642.363923][T20673] tipc: Node identity ac14142f, cluster identity 4711 [ 642.380538][T20673] tipc: New replicast peer: 172.20.20.170 [ 642.387949][T20673] tipc: Enabled bearer , priority 10 [ 642.931840][T20675] tipc: New replicast peer: 0.0.0.0 [ 642.980504][T20679] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6104'. [ 643.423261][ T29] audit: type=1400 audit(1786303046.875:1108): avc: denied { mounton } for pid=20697 comm="syz.6.6109" path="/891/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 643.423866][T20698] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 643.522828][ T5698] tipc: Node number set to 2886997039 [ 643.723384][T20712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 643.865043][ T5591] Bluetooth: hci2: command tx timeout [ 643.877648][ T29] audit: type=1400 audit(1786303047.335:1109): avc: denied { write } for pid=20682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.175621][ T29] audit: type=1400 audit(1786303047.635:1110): avc: denied { write } for pid=20724 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.441446][ T29] audit: type=1400 audit(1786303047.885:1111): avc: denied { map } for pid=20740 comm="syz.7.6124" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 644.556054][ T29] audit: type=1400 audit(1786303047.885:1112): avc: denied { execute } for pid=20740 comm="syz.7.6124" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 644.911087][T20530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 644.962650][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.966146][T20759] binder: 20758:20759 ioctl 4018620d 0 returned -22 [ 644.978805][T20530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.001482][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.005688][T20759] binder: 20758:20759 ioctl 4068aea3 0 returned -22 [ 645.031454][T20530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.107999][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.129497][T20530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 645.163292][T20767] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6132'. [ 645.176246][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.196695][ T29] audit: type=1400 audit(1786303048.655:1113): avc: denied { write } for pid=20742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.257095][T20775] netlink: 'syz.4.6133': attribute type 12 has an invalid length. [ 645.273528][T20775] netlink: 'syz.4.6133': attribute type 29 has an invalid length. [ 645.299899][T20775] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6133'. [ 645.321003][T20775] netlink: 'syz.4.6133': attribute type 3 has an invalid length. [ 645.342925][T20775] netlink: 'syz.4.6133': attribute type 2 has an invalid length. [ 645.368398][T20775] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6133'. [ 645.416926][ T29] audit: type=1400 audit(1786303048.875:1114): avc: denied { write } for pid=20778 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.636392][T20530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.745573][T20530] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.818373][T16954] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.825646][T16954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.926006][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.933260][T16954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.503823][ T29] audit: type=1400 audit(1786303049.955:1115): avc: denied { write } for pid=20784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.533091][T20796] nvme nvme0: rdma connection establishment failed (-104) [ 646.755885][ T29] audit: type=1400 audit(1786303050.215:1116): avc: denied { setopt } for pid=20816 comm="syz.4.6141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 646.777380][T20818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5238 sclass=netlink_xfrm_socket pid=20818 comm=syz.4.6141 [ 646.832884][ T29] audit: type=1400 audit(1786303050.225:1117): avc: denied { write } for pid=20817 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.404554][T20530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.598726][ T29] audit: type=1400 audit(1786303051.045:1118): avc: denied { write } for pid=20827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.615691][T20530] veth0_vlan: entered promiscuous mode [ 647.698693][T20530] veth1_vlan: entered promiscuous mode [ 647.859530][T20530] veth0_macvtap: entered promiscuous mode [ 647.887574][ T29] audit: type=1400 audit(1786303051.345:1119): avc: denied { write } for pid=20854 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.922848][T20530] veth1_macvtap: entered promiscuous mode [ 648.027199][T20859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.031977][T20530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.042784][T20859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 648.059450][T20859] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 648.073560][T20530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.081393][T20859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.135698][T20859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.198649][T20859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.204676][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.258333][T19154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.302469][T19154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.650147][T16954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.663307][T12290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.703204][T16954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.862629][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.916976][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.993493][ T29] audit: type=1400 audit(1786303052.445:1120): avc: denied { write } for pid=20863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.299095][ T29] audit: type=1400 audit(1786303052.745:1121): avc: denied { write } for pid=20897 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.331866][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6163'. [ 649.360833][T20902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6163'. [ 649.479873][T20902] geneve3: entered promiscuous mode [ 649.507855][T20902] geneve3: entered allmulticast mode [ 649.773715][ T187] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 649.952231][ T187] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.991758][ T187] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 650.032217][ T187] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 650.067303][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.103772][T20904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 650.111180][ T5591] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.117895][T17042] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 650.125660][T18707] Bluetooth: hci5: command 0x0c1a tx timeout [ 650.126621][ T5597] Bluetooth: hci4: command 0x0c1a tx timeout [ 650.131766][ T5591] Bluetooth: hci3: command 0x0406 tx timeout [ 650.148369][ T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.235199][ T29] audit: type=1400 audit(1786303053.695:1122): avc: denied { write } for pid=20910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.454795][T17042] usb 7-1: Using ep0 maxpacket: 16 [ 650.485452][T17042] usb 7-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 650.509116][T17042] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.566607][T17042] usb 7-1: config 0 interface 0 has no altsetting 0 [ 650.583660][T17042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.626183][T17042] usb 7-1: config 0 descriptor?? [ 650.676603][ T29] audit: type=1400 audit(1786303054.135:1123): avc: denied { write } for pid=20934 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.723819][T17611] usb 5-1: USB disconnect, device number 57 [ 651.054511][T17042] hid_parser_main: 39 callbacks suppressed [ 651.054535][T17042] cypress 0003:04B4:07B1.0034: unknown main item tag 0x6 [ 651.106959][T17042] cypress 0003:04B4:07B1.0034: ignoring exceeding usage max [ 651.141976][T17042] cypress 0003:04B4:07B1.0034: hidraw0: USB HID v0.05 Device [HID 04b4:07b1] on usb-dummy_hcd.6-1/input0 [ 651.322114][T17042] usb 7-1: USB disconnect, device number 51 [ 651.355950][T17611] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 651.508697][ T29] audit: type=1400 audit(1786303054.965:1124): avc: denied { write } for pid=20938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.573658][T17611] usb 10-1: Using ep0 maxpacket: 32 [ 651.581783][T17611] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 651.619100][T17611] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.650763][T17611] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.694274][T17611] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.753769][T17611] usb 10-1: config 0 descriptor?? [ 651.796679][ T29] audit: type=1400 audit(1786303055.225:1125): avc: denied { write } for pid=20956 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.184014][ T5597] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.207095][T17611] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 652.236260][T17611] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 652.335359][T20975] netlink: 'syz.7.6181': attribute type 4 has an invalid length. [ 652.397912][T17611] ft260 0003:0403:6030.0035: failed to retrieve chip version [ 652.436033][T17611] ft260 0003:0403:6030.0035: probe with driver ft260 failed with error -71 [ 652.535736][T17611] usb 10-1: USB disconnect, device number 12 [ 652.557608][T20978] retu-mfd 0-0001: could not read Retu revision: -5 [ 652.590056][T20978] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 652.658311][T20978] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 652.730818][T20980] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 652.797172][T20980] retu-mfd 0-0002: probe with driver retu-mfd failed with error -5 [ 652.893899][T20980] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 652.961232][T20989] xt_hashlimit: size too large, truncated to 1048576 [ 653.202348][ T29] audit: type=1400 audit(1786303056.655:1126): avc: denied { write } for pid=20967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.661953][ T29] audit: type=1400 audit(1786303057.115:1127): avc: denied { write } for pid=21005 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.983726][ T5691] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 654.193986][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 654.219928][ T5691] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 654.253030][ T5691] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 654.270368][ T5691] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.290613][ T5691] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.313032][ T5691] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.354575][ T5691] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.394344][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.633679][ T29] audit: type=1400 audit(1786303058.085:1128): avc: denied { write } for pid=21009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.699668][ T5691] usb 5-1: usb_control_msg returned -32 [ 654.715814][ T5691] usbtmc 5-1:16.0: can't read capabilities [ 654.884601][ T29] audit: type=1400 audit(1786303058.335:1129): avc: denied { write } for pid=21034 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.078285][T21042] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 655.097826][T21045] netlink: 116 bytes leftover after parsing attributes in process `syz.7.6199'. [ 655.301213][T17042] usb 5-1: USB disconnect, device number 58 [ 655.762034][ T29] audit: type=1400 audit(1786303059.215:1130): avc: denied { write } for pid=21044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.976748][ T29] audit: type=1400 audit(1786303059.425:1131): avc: denied { write } for pid=21077 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.514919][T21089] loop5: detected capacity change from 0 to 7 [ 656.657648][T21089] Dev loop5: unable to read RDB block 7 [ 656.709537][T21089] loop5: AHDI p1 p2 p3 [ 656.721891][T21089] loop5: partition table partially beyond EOD, truncated [ 656.774429][T21089] loop5: p1 start 1818582900 is beyond EOD, truncated [ 656.785001][T21097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.806714][T21089] loop5: p3 start 335544320 is beyond EOD, truncated [ 657.063292][ T29] audit: type=1400 audit(1786303060.515:1132): avc: denied { ioctl } for pid=21078 comm="syz.4.6211" path="socket:[85664]" dev="sockfs" ino=85664 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 657.187687][ T29] audit: type=1400 audit(1786303060.635:1133): avc: denied { write } for pid=21082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.310781][ T1209] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 657.401508][ T1209] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 657.478188][ T29] audit: type=1400 audit(1786303060.935:1134): avc: denied { write } for pid=21122 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.974674][T21132] file system registered [ 657.990777][ T29] audit: type=1800 audit(1786303061.445:1135): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.6228" name="c_mute_present" dev="configfs" ino=85723 res=0 errno=0 [ 658.032902][T21137] unloading [ 658.354365][T21152] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 658.681492][ T29] audit: type=1400 audit(1786303062.135:1136): avc: denied { create } for pid=21156 comm="syz.4.6233" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 658.812679][ T29] audit: type=1400 audit(1786303062.265:1137): avc: denied { write } for pid=21135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.998892][T21168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.060457][ T29] audit: type=1400 audit(1786303062.515:1138): avc: denied { read } for pid=21169 comm="syz.6.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 659.095282][ T29] audit: type=1400 audit(1786303062.555:1139): avc: denied { write } for pid=21170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.963225][T21228] netlink: 'syz.7.6261': attribute type 11 has an invalid length. [ 660.979236][T21230] sctp: [Deprecated]: syz.6.6260 (pid 21230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.979236][T21230] Use struct sctp_sack_info instead [ 661.151220][ T29] audit: type=1800 audit(1786303064.605:1140): pid=21235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.6263" name="dummy_udc" dev="gadgetfs" ino=6719 res=0 errno=0 [ 661.191638][T21238] lo: entered allmulticast mode [ 661.239638][T21238] lo: left allmulticast mode [ 661.796757][ T29] audit: type=1400 audit(1786303065.255:1141): avc: denied { getopt } for pid=21256 comm="syz.7.6272" lport=36160 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 662.362315][ T29] audit: type=1400 audit(1786303065.815:1142): avc: denied { read } for pid=21276 comm="syz.9.6281" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 662.495942][ T29] audit: type=1400 audit(1786303065.815:1143): avc: denied { open } for pid=21276 comm="syz.9.6281" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 662.610850][ T29] audit: type=1400 audit(1786303065.855:1144): avc: denied { ioctl } for pid=21276 comm="syz.9.6281" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 663.235463][T17042] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 663.505589][ T5691] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 663.638206][T17042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 663.659492][T17042] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=ea.ed [ 663.679600][ T5691] usb 4-1: Using ep0 maxpacket: 32 [ 663.685366][T17042] usb 5-1: config 1 has an invalid interface number: 139 but max is 0 [ 663.700233][ T5691] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 663.703659][T17042] usb 5-1: config 1 has no interface number 0 [ 663.725285][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.732686][T17042] usb 5-1: config 1 interface 139 has no altsetting 0 [ 663.736112][ T5691] usb 4-1: Product: syz [ 663.744819][ T5691] usb 4-1: Manufacturer: syz [ 663.750492][ T5691] usb 4-1: SerialNumber: syz [ 663.759539][T21315] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 663.768658][ T5691] usb 4-1: config 0 descriptor?? [ 663.781122][T17042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.093653][T17042] usb 5-1: Product: syz [ 664.097899][T17042] usb 5-1: Manufacturer: syz [ 664.107140][T17042] usb 5-1: SerialNumber: syz [ 664.166619][ T1209] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 664.189329][ T5691] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 664.215847][ T5691] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 664.220894][ T29] audit: type=1400 audit(1786303067.675:1145): avc: denied { write } for pid=21325 comm="syz.7.6301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 664.314185][ T5691] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 664.349758][ T5691] usb 4-1: USB disconnect, device number 6 [ 664.357241][ T1209] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 664.377899][T17042] cdc_subset 5-1:1.139: probe with driver cdc_subset failed with error -71 [ 664.400341][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.427398][ T1209] usb 10-1: Product: syz [ 664.434941][ T1209] usb 10-1: Manufacturer: syz [ 664.442851][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6303'. [ 664.462401][ T1209] usb 10-1: SerialNumber: syz [ 664.465995][T17042] usb 5-1: USB disconnect, device number 59 [ 664.487168][T21334] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6305'. [ 664.519311][ T1209] usb 10-1: config 0 descriptor?? [ 664.570746][ T1209] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 664.599404][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.639392][ T1209] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 664.670500][ T1209] usb 10-1: media controller created [ 664.705695][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.877459][ T1209] DVB: Unable to find symbol mt352_attach() [ 664.962228][ T1209] DVB: Unable to find symbol nxt6000_attach() [ 664.991504][ T1209] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 665.022006][ T1209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input74 [ 665.070256][ T1209] dvb-usb: schedule remote query interval to 1000 msecs. [ 665.103405][ T1209] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 665.188337][ T1209] dvb-usb: bulk message failed: -22 (7/0) [ 665.223049][ T1209] dvb-usb: bulk message failed: -22 (7/0) [ 665.249997][T21353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.307758][ T1209] usb 10-1: USB disconnect, device number 13 [ 665.722747][ T1209] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 665.840527][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6318'. [ 665.866465][T21372] bridge_slave_1: left allmulticast mode [ 665.891427][T21372] bridge_slave_1: left promiscuous mode [ 665.902816][T21372] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.918558][T21372] bridge_slave_0: left allmulticast mode [ 665.925731][T21372] bridge_slave_0: left promiscuous mode [ 665.929947][T21374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21374 comm=syz.4.6319 [ 665.931572][T21372] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.953917][T21372] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI [ 665.966191][T21372] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 665.975484][T21372] CPU: 1 UID: 0 PID: 21372 Comm: syz.7.6318 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.986457][T21372] Tainted: [L]=SOFTLOCKUP [ 665.990797][T21372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 666.000856][T21372] RIP: 0010:br_del_frame+0x106/0x1a0 [ 666.006154][T21372] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 36 f0 7c f7 48 8d [ 666.025839][T21372] RSP: 0018:ffffc900054cf280 EFLAGS: 00010a06 [ 666.031893][T21372] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900065b9000 [ 666.039847][T21372] RDX: 1bd5a00000000024 RSI: ffffffff8a8d82df RDI: ffffffff9123c9f8 [ 666.047801][T21372] RBP: ffffffff9123c9e0 R08: 0000000000000001 R09: 000000000000002c [ 666.056388][T21372] R10: 0000000000000200 R11: 0000000000000000 R12: dead000000000122 [ 666.064349][T21372] R13: ffff888034b6c400 R14: 000000000000001c R15: ffff888034b6c400 [ 666.072307][T21372] FS: 00007f8896bfc6c0(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 666.081245][T21372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.087830][T21372] CR2: 00007f3aafb5da08 CR3: 0000000045f65000 CR4: 00000000003526f0 [ 666.096153][T21372] Call Trace: [ 666.099432][T21372] [ 666.102368][T21372] mep_delete_implementation+0x292/0x340 [ 666.107999][T21372] br_cfm_port_del+0x14f/0x1e0 [ 666.112755][T21372] del_nbp+0x168/0xd50 [ 666.116817][T21372] br_dev_delete+0x96/0x1c0 [ 666.121310][T21372] rtnl_dellink+0x463/0xb40 [ 666.125809][T21372] ? __pfx_br_dev_delete+0x10/0x10 [ 666.130907][T21372] ? kasan_save_track+0x14/0x30 [ 666.135746][T21372] ? kasan_save_free_info+0x3b/0x70 [ 666.140923][T21372] ? __kasan_slab_free+0x5f/0x80 [ 666.146033][T21372] ? __pfx_rtnl_dellink+0x10/0x10 [ 666.151073][T21372] ? nlmon_xmit+0xa5/0xe0 [ 666.155404][T21372] ? dev_hard_start_xmit+0x121/0x760 [ 666.160671][T21372] ? __dev_queue_xmit+0x1bbf/0x4970 [ 666.165856][T21372] ? netlink_sendmsg+0x8b0/0xda0 [ 666.170791][T21372] ? sock_write_iter+0x53a/0x5b0 [ 666.175737][T21372] ? __lock_acquire+0x49f/0x1a40 [ 666.180667][T21372] ? find_held_lock+0x2b/0x80 [ 666.185325][T21372] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 666.190448][T21372] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 666.195564][T21372] ? __pfx_rtnl_dellink+0x10/0x10 [ 666.200595][T21372] rtnetlink_rcv_msg+0x95e/0xe90 [ 666.205525][T21372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 666.210999][T21372] ? ref_tracker_free+0x37e/0x6c0 [ 666.216023][T21372] netlink_rcv_skb+0x159/0x420 [ 666.220772][T21372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 666.226393][T21372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.231683][T21372] ? netlink_deliver_tap+0x1ae/0xcc0 [ 666.236967][T21372] netlink_unicast+0x585/0x850 [ 666.241715][T21372] ? __pfx_netlink_unicast+0x10/0x10 [ 666.246990][T21372] netlink_sendmsg+0x8b0/0xda0 [ 666.251754][T21372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.257036][T21372] ? selinux_socket_sendmsg+0x198/0x2f0 [ 666.262585][T21372] sock_write_iter+0x53a/0x5b0 [ 666.267345][T21372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.272645][T21372] ? __pfx_sock_write_iter+0x10/0x10 [ 666.277932][T21372] ? bpf_lsm_file_permission+0x9/0x10 [ 666.283309][T21372] ? security_file_permission+0x76/0x210 [ 666.288934][T21372] ? rw_verify_area+0xce/0x6d0 [ 666.293702][T21372] vfs_write+0x6ac/0x1050 [ 666.298017][T21372] ? __pfx_sock_write_iter+0x10/0x10 [ 666.303292][T21372] ? __pfx_vfs_write+0x10/0x10 [ 666.308032][T21372] ? find_held_lock+0x2b/0x80 [ 666.312701][T21372] ksys_write+0x1f8/0x250 [ 666.317038][T21372] ? __pfx_ksys_write+0x10/0x10 [ 666.321881][T21372] do_syscall_64+0x115/0x870 [ 666.326465][T21372] ? clear_bhb_loop+0x70/0xc0 [ 666.331141][T21372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.337020][T21372] RIP: 0033:0x7f8895d9e0d9 [ 666.341609][T21372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.361390][T21372] RSP: 002b:00007f8896bfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.369801][T21372] RAX: ffffffffffffffda RBX: 00007f8896025fa0 RCX: 00007f8895d9e0d9 [ 666.378221][T21372] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000004 [ 666.386190][T21372] RBP: 00007f8895e35024 R08: 0000000000000000 R09: 0000000000000000 [ 666.394157][T21372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.402115][T21372] R13: 00007f8896026038 R14: 00007f8896025fa0 R15: 00007ffc834d3838 [ 666.410078][T21372] [ 666.413095][T21372] Modules linked in: [ 666.418057][T21372] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 666.510379][ T29] audit: type=1400 audit(1786303069.885:1146): avc: denied { write } for pid=5578 comm="syz-executor" path="pipe:[4489]" dev="pipefs" ino=4489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 666.570097][T21372] RIP: 0010:br_del_frame+0x106/0x1a0 [ 666.580277][T21372] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 36 f0 7c f7 48 8d [ 666.753720][T21372] RSP: 0018:ffffc900054cf280 EFLAGS: 00010a06 [ 666.873840][T21372] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900065b9000 [ 666.915389][T21372] RDX: 1bd5a00000000024 RSI: ffffffff8a8d82df RDI: ffffffff9123c9f8 [ 666.924171][T21372] RBP: ffffffff9123c9e0 R08: 0000000000000001 R09: 000000000000002c [ 666.963706][T21372] R10: 0000000000000200 R11: 0000000000000000 R12: dead000000000122 [ 667.001865][T21372] R13: ffff888034b6c400 R14: 000000000000001c R15: ffff888034b6c400 [ 667.017785][T21372] FS: 00007f8896bfc6c0(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 667.055253][T21372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.070022][T21372] CR2: 0000564ab0cc0a78 CR3: 0000000045f65000 CR4: 00000000003526f0 [ 667.093745][T21372] Kernel panic - not syncing: Fatal exception [ 667.100047][T21372] Kernel Offset: disabled [ 667.104365][T21372] Rebooting in 86400 seconds..