last executing test programs: 2m48.370298199s ago: executing program 0 (id=496): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1e5003, 0x0) 2m48.20748168s ago: executing program 0 (id=499): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0x15, 0x5, "597e86b201"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x89, 0x2}}) 2m45.983002385s ago: executing program 0 (id=511): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 2m45.743750858s ago: executing program 0 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m45.691145478s ago: executing program 0 (id=521): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xe, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0x3, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0xc5c, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4ad, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1d, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x10001, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) 2m45.461080646s ago: executing program 0 (id=522): syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x84, 0x70, 0x76, 0x10, 0xfe9, 0xdb01, 0x53a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0xf2, 0xa0, 0x2, [{{0x9, 0x4, 0x23, 0x8, 0x1, 0x58, 0x2f, 0x42, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) 2m45.319139384s ago: executing program 32 (id=522): syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x84, 0x70, 0x76, 0x10, 0xfe9, 0xdb01, 0x53a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0xf2, 0xa0, 0x2, [{{0x9, 0x4, 0x23, 0x8, 0x1, 0x58, 0x2f, 0x42, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) 1m31.523159134s ago: executing program 2 (id=1884): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x4, 0xfa00, {r1, 0x2}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200), r1, 0x0, 0x2, 0x4}}, 0x20) 1m31.305944753s ago: executing program 2 (id=1885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040801"], 0x14}}, 0x0) 1m31.197968347s ago: executing program 2 (id=1887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 1m30.505325616s ago: executing program 2 (id=1892): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 1m30.404066628s ago: executing program 2 (id=1893): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00') 1m30.125842154s ago: executing program 2 (id=1897): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 1m29.817503724s ago: executing program 33 (id=1897): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 45.890985282s ago: executing program 5 (id=2506): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x27) 39.70183736s ago: executing program 5 (id=2506): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x27) 31.980046596s ago: executing program 5 (id=2506): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x27) 25.799155721s ago: executing program 4 (id=2784): timer_create(0x9, 0x0, &(0x7f0000000500)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_delete(r0) 24.991501353s ago: executing program 4 (id=2789): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x9) 23.791077817s ago: executing program 5 (id=2506): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x27) 22.757879484s ago: executing program 4 (id=2808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000040000001801000020696c25000000207b1af8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 22.625830293s ago: executing program 4 (id=2810): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 22.531738448s ago: executing program 4 (id=2811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000feffffff8c0400"]) 22.079302591s ago: executing program 4 (id=2818): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x44) 21.848845449s ago: executing program 34 (id=2818): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x44) 12.918152665s ago: executing program 5 (id=2506): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x27) 4.076268073s ago: executing program 5 (id=2506): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x27) 3.179738953s ago: executing program 3 (id=3008): memfd_create(&(0x7f00000000c0)='#! ', 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) 3.098204464s ago: executing program 3 (id=3010): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xfffd, 0x0) 2.845184901s ago: executing program 1 (id=3015): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$TCXONC(r0, 0x540a, 0x2) 2.693421591s ago: executing program 1 (id=3016): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r1, r2, r3, 0x0, 0x100000, 0x1, 0xf7ffffff, 0x82, 0x69cc, 0x0, 0x1, 0x401}) 2.51849037s ago: executing program 1 (id=3019): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000680)={0x28, 0x4, r1, r1, 0x1c, 0x3, 0x2}) 2.407482254s ago: executing program 1 (id=3022): creat(&(0x7f0000000580)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x9}, @main=@item_012={0x1, 0x0, 0x9, "c5"}]}}, 0x0}, 0x0) fanotify_init(0xf00, 0x0) 2.17430541s ago: executing program 3 (id=3026): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x18, &(0x7f0000000680)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) 797.839138ms ago: executing program 6 (id=3035): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"]) 664.25248ms ago: executing program 6 (id=3036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0x2}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) 584.638482ms ago: executing program 6 (id=3037): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004e40)="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", 0x481}], 0x1}}], 0x1, 0x8090) 570.668387ms ago: executing program 1 (id=3038): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x800) 542.040061ms ago: executing program 7 (id=3039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 462.55419ms ago: executing program 6 (id=3040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x6}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0xfe}) 409.221116ms ago: executing program 3 (id=3041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8080) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) 392.21349ms ago: executing program 7 (id=3042): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 384.676402ms ago: executing program 1 (id=3043): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="4a7a7caf0f0690713cee8b2dc3f1ce1852407a6a8a426097297d5431c998c929bd7d5d1bd75e37be9cfb9c5873daf8aa67a81f6715e496c22c2269ce035e6647f103686f71f3de947988b7d876e0641cce3d48723b6429a95d60532fc9fcfb33e60444129c10d39754a551ecd534eda25f81c893d25975948dfcc14e7e8ee07838c2656cee26924b914044a705c3058764cebe19b9d7f8f87b17b09f0c"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000580)}], 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 257.103808ms ago: executing program 7 (id=3044): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 232.446142ms ago: executing program 3 (id=3045): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800000000000000000000000000200080"], 0x158) write$binfmt_elf64(r0, &(0x7f000001dac0)=ANY=[@ANYBLOB="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"], 0xee0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 196.778688ms ago: executing program 6 (id=3046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x140}], 0x1, 0x40800) 174.160238ms ago: executing program 7 (id=3047): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0xcc4e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 121.451714ms ago: executing program 7 (id=3048): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0xa}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 97.105844ms ago: executing program 6 (id=3049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x2, 0x46, 0x68, 0x0, 0x0, 0x21, 0x0, @remote, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, "b2a985", 0x5}, "d5747fec6f655f423e423224190a6f61f0915d9edb0752f1431a910bb6bbecff4ed4"}}}}, 0x58) 90.289883ms ago: executing program 3 (id=3050): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x2400) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x50, 0x2}, @period={0x59, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 7 (id=3051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) kernel console output (not intermixed with test programs): ble [ 211.351867][ T30] audit: type=1400 audit(1748870741.793:772): avc: denied { unmount } for pid=10139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 211.645421][ T30] audit: type=1400 audit(1748870742.083:773): avc: denied { read } for pid=11078 comm="syz.5.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.730429][ T30] audit: type=1400 audit(1748870742.173:774): avc: denied { mounton } for pid=11080 comm="syz.4.2307" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 211.860737][ T30] audit: type=1400 audit(1748870742.303:775): avc: denied { create } for pid=11087 comm="syz.5.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 211.907142][T11092] batadv_slave_0: entered promiscuous mode [ 211.920128][ T30] audit: type=1400 audit(1748870742.333:776): avc: denied { write } for pid=11087 comm="syz.5.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 211.968727][T11096] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.130892][T11090] batadv_slave_0: left promiscuous mode [ 212.139742][ T30] audit: type=1400 audit(1748870742.573:777): avc: denied { create } for pid=11105 comm="syz.5.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.192006][ T30] audit: type=1400 audit(1748870742.613:778): avc: denied { bind } for pid=11105 comm="syz.5.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.272731][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'. [ 212.299732][T11115] unknown channel width for channel at 909000KHz? [ 212.408143][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 212.624857][T11138] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 213.155942][ T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 213.183396][T11178] syzkaller1: entered promiscuous mode [ 213.192470][T11178] syzkaller1: entered allmulticast mode [ 213.339887][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 213.352195][ T10] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 213.367094][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.384853][ T10] usb 7-1: config 0 descriptor?? [ 213.390443][T11161] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 213.547096][T11197] kvm: apic: phys broadcast and lowest prio [ 213.802228][ T10] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 213.973860][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 213.973877][ T30] audit: type=1400 audit(1748870744.413:786): avc: denied { getopt } for pid=11210 comm="syz.5.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.003999][ T5867] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 214.020955][ T5868] usb 7-1: USB disconnect, device number 5 [ 214.056823][ T30] audit: type=1400 audit(1748870744.503:787): avc: denied { mount } for pid=11212 comm="syz.5.2368" name="/" dev="autofs" ino=34700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 214.084253][ T30] audit: type=1400 audit(1748870744.523:788): avc: denied { unmount } for pid=7056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 214.135923][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 214.185841][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 214.193584][ T5867] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.205455][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.217148][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.228694][ T5867] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.242062][ T5867] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.259912][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.299413][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 214.316292][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.334653][ T10] usb 2-1: Product: syz [ 214.339079][ T10] usb 2-1: Manufacturer: syz [ 214.343687][ T10] usb 2-1: SerialNumber: syz [ 214.358253][ T10] usb 2-1: config 0 descriptor?? [ 214.485282][ T5867] usb 5-1: GET_CAPABILITIES returned 0 [ 214.495070][ T5867] usbtmc 5-1:16.0: can't read capabilities [ 214.607124][ T5871] usb 2-1: USB disconnect, device number 32 [ 214.689648][ T5867] usb 5-1: USB disconnect, device number 28 [ 215.054159][ T30] audit: type=1400 audit(1748870745.493:789): avc: denied { mount } for pid=11255 comm="syz.6.2388" name="/" dev="hugetlbfs" ino=35675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 215.100844][ T30] audit: type=1400 audit(1748870745.543:790): avc: denied { unmount } for pid=10139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 215.105058][T11258] loop2: detected capacity change from 0 to 7 [ 215.145259][T11258] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 215.151569][T11258] loop2: partition table partially beyond EOD, truncated [ 215.158835][T11258] loop2: p1 size 127 extends beyond EOD, truncated [ 215.265709][ T5871] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 215.355322][ T30] audit: type=1400 audit(1748870745.793:791): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 215.417986][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 215.429403][ T5871] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 215.446212][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.457777][ T5871] usb 6-1: config 0 has no interface number 0 [ 215.463865][ T5871] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 215.479016][ T5871] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 215.488887][ T5871] usb 6-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 215.506649][ T5871] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 215.518197][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.526454][ T5871] usb 6-1: Product: syz [ 215.530612][ T5871] usb 6-1: Manufacturer: syz [ 215.535282][ T5871] usb 6-1: SerialNumber: syz [ 215.542556][ T5871] usb 6-1: config 0 descriptor?? [ 215.548418][T11254] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 215.764783][ T5871] usb 6-1: NFC: intf ffff88801eae4000 id ffffffff8f561f20 [ 215.789095][ T5871] usb 6-1: USB disconnect, device number 24 [ 215.810557][ T30] audit: type=1400 audit(1748870746.253:792): avc: denied { setopt } for pid=11284 comm="syz.6.2400" lport=52846 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 216.295879][ T5871] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 216.327083][ T30] audit: type=1400 audit(1748870746.773:793): avc: denied { write } for pid=11307 comm="syz.3.2412" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.510260][ T5871] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.522026][ T5871] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.533159][ T5871] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.546883][ T5871] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.556373][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.565925][ T5867] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 216.628653][ T5871] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.640235][ T5871] usb 7-1: invalid MIDI out EP 0 [ 216.726006][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 216.729967][ T5871] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 216.734707][ T5867] usb 2-1: config 0 has no interfaces? [ 216.760481][ T5867] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 216.783892][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.792770][ T5867] usb 2-1: Product: syz [ 216.799763][ T5867] usb 2-1: Manufacturer: syz [ 216.805613][ T5867] usb 2-1: SerialNumber: syz [ 216.815050][ T5867] usb 2-1: config 0 descriptor?? [ 216.878573][ T5871] usb 7-1: USB disconnect, device number 6 [ 217.060110][ T5871] usb 2-1: USB disconnect, device number 33 [ 217.206666][T11347] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 217.206666][T11347] The task syz.4.2427 (11347) triggered the difference, watch for misbehavior. [ 217.689358][ T30] audit: type=1326 audit(1748870748.133:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceae18e969 code=0x7ffc0000 [ 217.737585][ T30] audit: type=1326 audit(1748870748.133:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceae18e969 code=0x7ffc0000 [ 218.137935][T11388] dlm: non-version read from control device 4 [ 218.245973][ T5898] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 218.273822][T11393] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 218.445861][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 218.469493][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.490729][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.503338][ T5898] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 218.515972][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.527174][ T5898] usb 2-1: config 0 descriptor?? [ 218.615898][ T5871] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 218.767337][ T5871] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.779626][ T5871] usb 6-1: config 0 has no interface number 0 [ 218.786034][ T5871] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 218.800399][ T5871] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 218.812761][ T5871] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.835726][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.855336][ T5871] usb 6-1: config 0 descriptor?? [ 218.876484][T11395] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 218.900102][ T5871] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 218.954479][ T5898] savu 0003:1E7D:2D5A.001A: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 219.114744][ T5867] usb 6-1: USB disconnect, device number 25 [ 219.163477][ T10] usb 2-1: USB disconnect, device number 34 [ 219.387980][T11438] vlan0: entered allmulticast mode [ 219.393129][T11438] erspan0: entered allmulticast mode [ 220.034651][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 220.034668][ T30] audit: type=1400 audit(1748870750.473:812): avc: denied { map } for pid=11474 comm="syz.1.2486" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.063761][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.082449][ T30] audit: type=1400 audit(1748870750.473:813): avc: denied { execute } for pid=11474 comm="syz.1.2486" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.088092][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'. [ 220.135962][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2487'. [ 220.155343][T11479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.184530][T11477] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.193631][T11477] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.202365][T11477] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.211164][T11477] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.236215][ T5867] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 220.395848][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 220.407857][ T5867] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 220.425459][ T5867] usb 7-1: config 0 has no interface number 0 [ 220.436123][ T5867] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 220.446025][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.465468][ T5867] usb 7-1: Product: syz [ 220.473335][ T5867] usb 7-1: Manufacturer: syz [ 220.488332][ T5867] usb 7-1: SerialNumber: syz [ 220.499043][ T5867] usb 7-1: config 0 descriptor?? [ 220.510366][ T5867] smsc95xx v2.0.0 [ 220.646365][ T5871] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 220.712358][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2499'. [ 220.735686][ T5898] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 220.768884][ T5905] kernel write not supported for file /1045/attr/exec (pid: 5905 comm: kworker/1:6) [ 220.832935][ T5871] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 220.845308][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.864999][ T5871] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 220.874765][ T5871] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 220.886946][ T5871] usb 4-1: Manufacturer: syz [ 220.904594][ T5898] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.916356][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.924629][ T5871] usb 4-1: config 0 descriptor?? [ 220.935757][ T5898] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 220.947613][ T5871] igorplugusb 4-1:0.0: incorrect number of endpoints [ 220.956052][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.987914][ T5898] usb 2-1: config 0 descriptor?? [ 221.167170][ T10] usb 4-1: USB disconnect, device number 25 [ 221.238128][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.251681][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.325986][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 221.339266][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.354620][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.413157][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.415888][ T5898] lg-g15 0003:046D:C222.001B: hidraw0: USB HID v0.03 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 221.423715][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.514869][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.528347][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 221.541494][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.553700][ T5867] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 221.575219][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.584688][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.593999][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.602233][ T5867] usb 7-1: USB disconnect, device number 7 [ 221.612106][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.620879][ T5871] usb 2-1: USB disconnect, device number 35 [ 221.630528][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.742085][ T36] bridge_slave_1: left allmulticast mode [ 221.748616][ T36] bridge_slave_1: left promiscuous mode [ 221.754362][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.763887][ T36] bridge_slave_0: left allmulticast mode [ 221.770534][ T36] bridge_slave_0: left promiscuous mode [ 221.776770][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.045338][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.057440][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.067364][ T36] bond0 (unregistering): Released all slaves [ 222.079235][ T36] bond1 (unregistering): Released all slaves [ 222.275778][ T5871] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 222.438282][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 222.460006][ T5871] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 222.474017][ T5871] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 222.483124][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 222.492221][ T5871] usb 5-1: config 1 has no interface number 0 [ 222.498783][ T5871] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.510128][ T5871] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 222.542721][ T5871] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 222.579539][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.629889][ T5871] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 222.649568][ T36] hsr_slave_0: left promiscuous mode [ 222.668689][ T36] hsr_slave_1: left promiscuous mode [ 222.674560][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.686300][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.705810][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.713233][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.746528][ T36] veth1_macvtap: left promiscuous mode [ 222.752080][ T36] veth0_macvtap: left promiscuous mode [ 222.760201][ T36] veth1_vlan: left promiscuous mode [ 222.765514][ T36] veth0_vlan: left promiscuous mode [ 222.820845][ T5871] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 223.278843][ T5905] usb 5-1: USB disconnect, device number 29 [ 223.287233][ T5905] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 223.307525][ T36] team0 (unregistering): Port device team_slave_1 removed [ 223.366805][ T36] team0 (unregistering): Port device team_slave_0 removed [ 223.685783][ T5826] Bluetooth: hci4: command tx timeout [ 223.893027][ T30] audit: type=1800 audit(1748870754.333:814): pid=11549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.1.2520" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 223.920561][T11517] chnl_net:caif_netlink_parms(): no params data found [ 223.930772][ T30] audit: type=1400 audit(1748870754.373:815): avc: denied { firmware_load } for pid=11548 comm="syz.1.2520" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 223.932117][T11549] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 223.965905][T11549] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 223.980166][T11549] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 223.989406][ T30] audit: type=1400 audit(1748870754.423:816): avc: denied { firmware_load } for pid=11548 comm="syz.1.2520" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 224.099088][ T5867] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 224.117352][T11517] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.124564][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.131828][T11517] bridge_slave_0: entered allmulticast mode [ 224.139392][T11517] bridge_slave_0: entered promiscuous mode [ 224.147466][T11517] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.154654][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.162287][T11517] bridge_slave_1: entered allmulticast mode [ 224.169766][T11517] bridge_slave_1: entered promiscuous mode [ 224.206495][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.219482][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.245906][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 224.256881][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 224.270493][ T5867] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 224.286427][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.290592][T11517] team0: Port device team_slave_0 added [ 224.294598][ T5867] usb 5-1: Product: syz [ 224.302950][T11517] team0: Port device team_slave_1 added [ 224.310189][ T5867] usb 5-1: Manufacturer: syz [ 224.316180][ T5867] usb 5-1: SerialNumber: syz [ 224.325451][ T5867] usb 5-1: config 0 descriptor?? [ 224.353929][ T36] IPVS: stop unused estimator thread 0... [ 224.364904][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.374120][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.382573][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 224.401273][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.425829][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 224.426743][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.438304][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.442869][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 224.464175][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.464569][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.488398][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.499966][ T9] usb 4-1: Product: syz [ 224.504179][ T9] usb 4-1: Manufacturer: syz [ 224.508807][ T9] usb 4-1: SerialNumber: syz [ 224.530111][ T9] usb 4-1: config 0 descriptor?? [ 224.549573][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 224.570069][ T30] audit: type=1400 audit(1748870755.013:817): avc: denied { create } for pid=11590 comm="syz.1.2537" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 224.576580][T11517] hsr_slave_0: entered promiscuous mode [ 224.597587][T11517] hsr_slave_1: entered promiscuous mode [ 224.603879][T11517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.625031][T11517] Cannot create hsr debugfs directory [ 224.744955][ T5867] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 224.782593][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.797135][ T5867] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 224.809900][ T5867] usb 5-1: media controller created [ 224.861980][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.904486][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2543'. [ 225.154224][T11517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.167735][T11517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.182123][T11517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.193488][T11517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.230718][ T30] audit: type=1400 audit(1748870755.673:818): avc: denied { write } for pid=11618 comm="syz.6.2550" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 225.272975][T11517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.295322][T11517] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.306551][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.313659][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.330019][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.337171][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.426355][ T5867] zl10353_read_register: readreg error (reg=127, ret==0) [ 225.427708][T11576] dtv5100: wlen = 0, aborting. [ 225.433527][ T5867] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 225.459195][ T5867] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 225.471864][ T5867] usb 5-1: USB disconnect, device number 30 [ 225.510779][ T5867] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 225.537516][T11517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.607724][ T9] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 225.613634][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 225.638353][ T9] usb 4-1: USB disconnect, device number 26 [ 225.754717][T11517] veth0_vlan: entered promiscuous mode [ 225.764014][T11517] veth1_vlan: entered promiscuous mode [ 225.772588][ T5826] Bluetooth: hci4: command tx timeout [ 225.794228][T11517] veth0_macvtap: entered promiscuous mode [ 225.803425][T11517] veth1_macvtap: entered promiscuous mode [ 225.819396][T11517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.831965][T11517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.842142][T11517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.853814][T11517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.862575][T11517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.871595][T11517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.923462][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.935010][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.965038][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.974529][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.300253][T11646] could not open pipe file descriptor [ 226.387348][T11652] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 226.699067][ T30] audit: type=1400 audit(1748870757.133:819): avc: denied { setattr } for pid=11660 comm="syz.6.2565" name="/" dev="configfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.790414][ T30] audit: type=1400 audit(1748870757.233:820): avc: denied { map } for pid=11662 comm="syz.4.2566" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 227.378411][ T30] audit: type=1400 audit(1748870757.823:821): avc: denied { watch } for pid=11681 comm="syz.6.2572" path="/137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.422940][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.443099][ T30] audit: type=1400 audit(1748870757.823:822): avc: denied { watch_sb watch_reads } for pid=11681 comm="syz.6.2572" path="/137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.489110][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.535842][ T30] audit: type=1400 audit(1748870757.963:823): avc: denied { ioctl } for pid=11689 comm="syz.4.2576" path="socket:[39285]" dev="sockfs" ino=39285 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.905240][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.905811][ T5867] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 227.953735][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.962881][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.971971][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.981054][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.990144][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.999230][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 228.008312][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 228.017404][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 228.026510][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 228.035567][T11707] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 228.173154][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 228.183261][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 228.217592][ T5867] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 228.235794][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.243816][ T5867] usb 4-1: Product: syz [ 228.285656][ T5867] usb 4-1: Manufacturer: syz [ 228.290302][ T5867] usb 4-1: SerialNumber: syz [ 228.312252][ T5867] usb 4-1: config 0 descriptor?? [ 228.338455][T11698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.355855][T11698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.493468][ T30] audit: type=1400 audit(1748870758.933:824): avc: denied { nlmsg_read } for pid=11714 comm="syz.6.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.523396][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.533732][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.542139][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.550399][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.560537][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.590479][T11698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.615422][T11698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.643262][T11721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2589'. [ 228.658154][T11720] GUP no longer grows the stack in syz.6.2588 (11720): 200000004000-20000000a000 (200000002000) [ 228.659541][T11721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2589'. [ 228.687113][T11720] CPU: 1 UID: 0 PID: 11720 Comm: syz.6.2588 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 228.687144][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.687155][T11720] Call Trace: [ 228.687161][T11720] [ 228.687168][T11720] dump_stack_lvl+0x16c/0x1f0 [ 228.687197][T11720] gup_vma_lookup+0x1d2/0x220 [ 228.687225][T11720] __get_user_pages+0x271/0x3b80 [ 228.687263][T11720] ? __pfx___get_user_pages+0x10/0x10 [ 228.687298][T11720] get_user_pages_remote+0x258/0xb20 [ 228.687324][T11720] ? __pfx_mtree_load+0x10/0x10 [ 228.687348][T11720] ? __pfx_get_user_pages_remote+0x10/0x10 [ 228.687384][T11720] __access_remote_vm+0x246/0x810 [ 228.687410][T11720] ? do_raw_spin_lock+0x12c/0x2b0 [ 228.687435][T11720] ? __pfx___access_remote_vm+0x10/0x10 [ 228.687472][T11720] proc_pid_cmdline_read+0x4de/0x900 [ 228.687497][T11720] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 228.687522][T11720] ? rw_verify_area+0xcf/0x680 [ 228.687552][T11720] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 228.687568][T11720] vfs_readv+0x5c1/0x8b0 [ 228.687588][T11720] ? __pfx_vfs_readv+0x10/0x10 [ 228.687603][T11720] ? kmem_cache_free+0x2d1/0x4d0 [ 228.687636][T11720] ? __fget_files+0x20e/0x3c0 [ 228.687663][T11720] ? do_preadv+0x1a6/0x270 [ 228.687678][T11720] do_preadv+0x1a6/0x270 [ 228.687696][T11720] ? __pfx_do_preadv+0x10/0x10 [ 228.687719][T11720] do_syscall_64+0xcd/0x4c0 [ 228.687745][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.687763][T11720] RIP: 0033:0x7fa89ef8e969 [ 228.687777][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.687794][T11720] RSP: 002b:00007fa89fec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 228.687810][T11720] RAX: ffffffffffffffda RBX: 00007fa89f1b5fa0 RCX: 00007fa89ef8e969 [ 228.687822][T11720] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 228.687833][T11720] RBP: 00007fa89f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 228.687844][T11720] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 228.687854][T11720] R13: 0000000000000000 R14: 00007fa89f1b5fa0 R15: 00007ffc6bcb7d68 [ 228.687879][T11720] [ 228.913308][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.020787][T11716] chnl_net:caif_netlink_parms(): no params data found [ 229.138491][ T30] audit: type=1400 audit(1748870759.583:825): avc: denied { read } for pid=11732 comm="syz.6.2594" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.164703][ T5867] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 229.167433][ T30] audit: type=1400 audit(1748870759.613:826): avc: denied { open } for pid=11732 comm="syz.6.2594" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.285585][T11716] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.305177][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.313924][T11716] bridge_slave_0: entered allmulticast mode [ 229.334022][T11716] bridge_slave_0: entered promiscuous mode [ 229.343266][T11716] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.350451][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.357835][T11716] bridge_slave_1: entered allmulticast mode [ 229.369021][T11716] bridge_slave_1: entered promiscuous mode [ 229.417059][T11716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.430027][T11716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.465119][T11716] team0: Port device team_slave_0 added [ 229.473909][T11716] team0: Port device team_slave_1 added [ 229.503258][T11716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.511090][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.536952][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.545099][T11716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.557463][T11716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.564572][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.591669][T11716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.592605][ T5867] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 229.635014][ T5867] usb 4-1: USB disconnect, device number 27 [ 229.635571][T11716] hsr_slave_0: entered promiscuous mode [ 229.647743][T11716] hsr_slave_1: entered promiscuous mode [ 229.653805][T11716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.661541][T11716] Cannot create hsr debugfs directory [ 229.861886][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.918072][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.976153][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.070365][ T49] bridge_slave_1: left allmulticast mode [ 230.076996][ T49] bridge_slave_1: left promiscuous mode [ 230.082703][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.092568][ T49] bridge_slave_0: left allmulticast mode [ 230.098842][ T49] bridge_slave_0: left promiscuous mode [ 230.105967][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.360590][ T5898] kernel read not supported for file /sequencer (pid: 5898 comm: kworker/1:5) [ 230.390857][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.402570][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.413684][ T49] bond0 (unregistering): Released all slaves [ 230.645932][ T5826] Bluetooth: hci4: command tx timeout [ 230.676373][ T49] hsr_slave_0: left promiscuous mode [ 230.682080][ T49] hsr_slave_1: left promiscuous mode [ 230.688108][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.695472][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.703681][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.711143][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.734869][ T49] veth1_macvtap: left promiscuous mode [ 230.740590][ T49] veth0_macvtap: left promiscuous mode [ 230.746979][ T49] veth1_vlan: left promiscuous mode [ 230.752331][ T49] veth0_vlan: left promiscuous mode [ 231.039128][ T49] team0 (unregistering): Port device team_slave_1 removed [ 231.073517][ T49] team0 (unregistering): Port device team_slave_0 removed [ 231.289389][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.299177][T11733] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 231.419200][T11716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.428435][T11716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.444376][T11716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.458042][T11716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.543528][T11716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.561061][T11716] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.572388][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.579540][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.591831][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.598940][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.737035][T11716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.886075][T11716] veth0_vlan: entered promiscuous mode [ 231.895084][T11716] veth1_vlan: entered promiscuous mode [ 231.920083][T11716] veth0_macvtap: entered promiscuous mode [ 231.928083][T11716] veth1_macvtap: entered promiscuous mode [ 231.942271][T11716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.958261][T11716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.969152][T11716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.978540][T11716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.987321][T11716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.996068][T11716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.089156][T11733] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.095157][T11733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.101268][T11733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.107363][T11733] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 232.115097][T11733] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 232.122451][T11733] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.128512][T11733] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 232.136095][T11733] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 232.213205][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.230277][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.308444][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.333810][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.347725][ T30] audit: type=1326 audit(1748870762.793:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 232.405020][ T30] audit: type=1326 audit(1748870762.793:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 232.470716][ T30] audit: type=1326 audit(1748870762.833:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 232.542608][ T30] audit: type=1326 audit(1748870762.833:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 232.572812][ T30] audit: type=1326 audit(1748870762.833:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 232.617529][ T30] audit: type=1326 audit(1748870762.873:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 232.877462][ T30] audit: type=1326 audit(1748870763.323:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 232.935839][ T30] audit: type=1326 audit(1748870763.353:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 233.053607][ T30] audit: type=1326 audit(1748870763.493:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 233.108313][ T30] audit: type=1326 audit(1748870763.493:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89ef8e969 code=0x7ffc0000 [ 233.226416][ T5871] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 233.362036][T11810] netlink: 'syz.4.2616': attribute type 1 has an invalid length. [ 233.375886][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.399520][ T5871] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 233.411375][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.412451][T11812] IPv6: Can't replace route, no match found [ 233.422648][ T5871] usb 2-1: Product: syz [ 233.430067][ T5871] usb 2-1: Manufacturer: syz [ 233.434661][ T5871] usb 2-1: SerialNumber: syz [ 233.442121][ T5871] usb 2-1: config 0 descriptor?? [ 233.626717][T11820] net_ratelimit: 3319 callbacks suppressed [ 233.626734][T11820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.702313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.745971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 233.880026][ T5871] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 233.892061][ T5871] asix 2-1:0.0: probe with driver asix failed with error -71 [ 233.905432][ T5871] usb 2-1: USB disconnect, device number 36 [ 234.132603][ T2995] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.171242][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.181038][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.189546][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 234.356968][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 234.375983][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.405820][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.435662][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.445130][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.462370][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.476319][ T10] usb 5-1: invalid MIDI out EP 0 [ 234.513639][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.523287][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.531194][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.539093][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.550458][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.583563][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 234.657066][ T5916] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 234.718531][ T10] usb 5-1: USB disconnect, device number 31 [ 234.790204][T11850] chnl_net:caif_netlink_parms(): no params data found [ 234.825835][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 234.839627][ T5916] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 234.848790][ T5916] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 234.857936][T11867] tun0: tun_chr_ioctl cmd 1074025675 [ 234.859606][ T5916] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 234.863223][T11867] tun0: persist enabled [ 234.871955][ T5916] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 234.889166][ T5916] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 234.899990][ T5916] usb 4-1: config 0 has no interface number 0 [ 234.908359][ T5916] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 234.921626][ T5916] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 234.933092][ T5916] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.939537][T11867] tun0: tun_chr_ioctl cmd 1074025675 [ 234.950844][ T5916] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.956673][T11867] tun0: persist enabled [ 234.965864][ T5916] usb 4-1: config 0 interface 125 has no altsetting 0 [ 234.974808][ T5916] usb 4-1: config 0 interface 125 has no altsetting 2 [ 235.061843][ T5916] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 235.062790][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.078704][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.082168][T11876] input: syz1 as /devices/virtual/input/input34 [ 235.086367][T11850] bridge_slave_0: entered allmulticast mode [ 235.099605][T11850] bridge_slave_0: entered promiscuous mode [ 235.099608][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.099631][ T5916] usb 4-1: Product: syz [ 235.108018][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.117822][ T5916] usb 4-1: Manufacturer: syz [ 235.117840][ T5916] usb 4-1: SerialNumber: syz [ 235.119693][ T5916] usb 4-1: config 0 descriptor?? [ 235.146209][T11850] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.149141][ T5916] usb 4-1: selecting invalid altsetting 2 [ 235.153384][T11850] bridge_slave_1: entered allmulticast mode [ 235.166000][T11850] bridge_slave_1: entered promiscuous mode [ 235.210861][T11850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.233253][T11850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.309198][T11850] team0: Port device team_slave_0 added [ 235.355170][T11850] team0: Port device team_slave_1 added [ 235.385606][T11850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.392664][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.435713][T11850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.453542][T11850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.460900][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.493867][T11850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.691646][T11850] hsr_slave_0: entered promiscuous mode [ 235.716095][T11850] hsr_slave_1: entered promiscuous mode [ 235.723016][T11850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.738494][T11887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.746188][T11850] Cannot create hsr debugfs directory [ 236.163504][T11898] SELinux: ebitmap start bit (1074921480) is not a multiple of the map unit size (64) [ 236.179401][ T2995] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.180567][ T5916] get_1284_register timeout [ 236.195423][ C1] usb 4-1: async_complete: urb error -71 [ 236.204026][T11898] SELinux: failed to load policy [ 236.222900][ T5916] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 236.236532][T11900] SELinux: policydb string does not match my string SE Linux [ 236.247332][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.263833][ T5916] usb 4-1: USB disconnect, device number 28 [ 236.269767][T11900] SELinux: failed to load policy [ 236.293682][ T2995] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.386911][T11904] netlink: 'syz.6.2655': attribute type 29 has an invalid length. [ 236.402235][T11904] netlink: 'syz.6.2655': attribute type 29 has an invalid length. [ 236.414816][T11904] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2655'. [ 236.493130][ T2995] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.646382][ T5826] Bluetooth: hci4: command tx timeout [ 236.722574][ T2995] bridge_slave_1: left allmulticast mode [ 236.733970][ T2995] bridge_slave_1: left promiscuous mode [ 236.744925][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.770253][ T2995] bridge_slave_0: left allmulticast mode [ 236.780092][ T2995] bridge_slave_0: left promiscuous mode [ 236.843893][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.113142][ T2995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.123323][ T2995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.133078][ T2995] bond0 (unregistering): Released all slaves [ 237.491043][ T2995] hsr_slave_0: left promiscuous mode [ 237.518494][ T2995] hsr_slave_1: left promiscuous mode [ 237.527035][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.551084][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.576320][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.593925][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.625852][ T2995] veth1_macvtap: left promiscuous mode [ 237.631396][ T2995] veth0_macvtap: left promiscuous mode [ 237.642943][ T2995] veth1_vlan: left promiscuous mode [ 237.648638][ T2995] veth0_vlan: left promiscuous mode [ 237.717500][T11944] overlay: filesystem on ./bus not supported as upperdir [ 238.131125][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 238.131140][ T30] audit: type=1400 audit(1748870769.573:858): avc: denied { mount } for pid=11959 comm="syz.1.2681" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 238.254092][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2682'. [ 238.328781][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.426012][ T2995] team0 (unregistering): Port device team_slave_1 removed [ 238.456746][ T2995] team0 (unregistering): Port device team_slave_0 removed [ 238.728986][ T5826] Bluetooth: hci4: command tx timeout [ 239.077525][ T30] audit: type=1400 audit(1748870770.513:859): avc: denied { listen } for pid=11987 comm="syz.6.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.097432][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.136287][T11985] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.153743][ T30] audit: type=1400 audit(1748870770.513:860): avc: denied { accept } for pid=11987 comm="syz.6.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.224635][T11850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.255393][T11850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.282504][T11850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.331855][T11850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.414144][T12003] wireguard0: entered promiscuous mode [ 239.429840][T12003] wireguard0: entered allmulticast mode [ 239.577377][ T30] audit: type=1804 audit(1748870771.023:861): pid=12018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2701" name="/" dev="pidfs" ino=12017 res=1 errno=0 [ 239.598411][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.643996][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.683670][T11850] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.705401][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.712571][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.731998][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.739148][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.783398][T12030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2705'. [ 239.981866][T11850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.299760][T11850] veth0_vlan: entered promiscuous mode [ 240.319939][T11850] veth1_vlan: entered promiscuous mode [ 240.364716][T11850] veth0_macvtap: entered promiscuous mode [ 240.378992][T11850] veth1_macvtap: entered promiscuous mode [ 240.398963][T11850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.420477][T11850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.440799][T11850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.451386][T11850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.460896][T11850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.481921][T11850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.647006][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.660673][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.685390][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.758064][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.780106][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.805835][ T51] Bluetooth: hci4: command tx timeout [ 241.139246][ T30] audit: type=1400 audit(1748870772.583:862): avc: denied { name_bind } for pid=12104 comm="syz.6.2734" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 241.403332][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.414169][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.424028][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.433461][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.441778][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.452910][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.473399][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.487709][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.507717][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.515173][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.534121][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.542270][ T5905] hid-generic 0007:0001:0001.001C: unknown main item tag 0x0 [ 241.553455][ T5905] hid-generic 0007:0001:0001.001C: hidraw0: HID v800.0c Device [] on ÈIH›Eèáû£ÛÑ›×1eÒ alŽÃ}€`èúÆÿlw¸r1›šH‰ü*Ô_ Vˆ5ŠcÊ„ Ç{=°u;s [ 241.667561][T12120] syzkaller1: entered promiscuous mode [ 241.673157][T12120] syzkaller1: entered allmulticast mode [ 241.840087][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.608215][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.816149][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.836946][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.846734][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.856436][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.865940][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.137999][T12155] netlink: 'syz.4.2750': attribute type 4 has an invalid length. [ 243.141848][T12143] chnl_net:caif_netlink_parms(): no params data found [ 243.195255][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.279822][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.315096][T12157] netlink: 'syz.4.2751': attribute type 10 has an invalid length. [ 243.353071][T12157] bridge0: port 3(syz_tun) entered disabled state [ 243.360168][ T5867] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 243.366209][T12157] syz_tun: left allmulticast mode [ 243.375126][T12157] bridge0: port 3(syz_tun) entered disabled state [ 243.391015][T12157] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 243.438174][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 243.448587][T12143] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.462969][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.472686][T12143] bridge_slave_0: entered allmulticast mode [ 243.483117][T12143] bridge_slave_0: entered promiscuous mode [ 243.490287][ T30] audit: type=1400 audit(1748870774.933:863): avc: denied { sqpoll } for pid=12165 comm="syz.1.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.514343][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.536959][T12143] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.544103][T12143] bridge_slave_1: entered allmulticast mode [ 243.550077][ T5867] usb 7-1: Using ep0 maxpacket: 8 [ 243.559594][T12143] bridge_slave_1: entered promiscuous mode [ 243.567710][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 243.585516][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 243.608177][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 243.623403][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 243.633507][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.643437][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 243.643962][T12143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.653150][ T5867] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 243.653175][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 243.684671][ T5867] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 111 [ 243.690233][ T30] audit: type=1400 audit(1748870775.113:864): avc: denied { write } for pid=12172 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.700080][ T5867] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 243.725272][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.733728][ T5867] usb 7-1: Product: syz [ 243.738833][ T5867] usb 7-1: Manufacturer: syz [ 243.743821][ T5867] usb 7-1: SerialNumber: syz [ 243.752688][T12143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.762561][ T5867] usb 7-1: config 0 descriptor?? [ 243.772865][T12151] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 243.786960][ T5867] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.849537][ T5867] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 243.882748][T12143] team0: Port device team_slave_0 added [ 243.904790][T12143] team0: Port device team_slave_1 added [ 243.977370][ T13] bridge_slave_1: left allmulticast mode [ 243.991791][ T13] bridge_slave_1: left promiscuous mode [ 244.005800][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.017839][ T5870] usb 7-1: USB disconnect, device number 8 [ 244.035904][ T13] bridge_slave_0: left allmulticast mode [ 244.045644][ T13] bridge_slave_0: left promiscuous mode [ 244.051668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.265904][ T5871] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 244.311196][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.321229][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.331062][ T13] bond0 (unregistering): Released all slaves [ 244.350785][T12143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.367216][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.400688][T12143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.416092][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 244.421022][T12143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.432459][ T5871] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 244.432941][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.466729][ T5871] usb 2-1: config 0 has no interface number 0 [ 244.474660][ T5871] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 244.484412][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.485149][T12143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.493830][ T5871] usb 2-1: Product: syz [ 244.508234][T12190] autofs4:pid:12190:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 244.525874][T12190] autofs4:pid:12190:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 244.592159][ T5871] usb 2-1: Manufacturer: syz [ 244.605699][ T5871] usb 2-1: SerialNumber: syz [ 244.622152][ T5871] usb 2-1: config 0 descriptor?? [ 244.642834][ T5871] smsc95xx v2.0.0 [ 244.825808][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.890000][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.966152][ T5826] Bluetooth: hci4: command tx timeout [ 245.068796][ T5871] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 245.096728][ T5871] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 245.106331][T12188] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.144306][T12188] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.154791][T12188] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.163726][T12188] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.185891][T12188] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 245.243251][T12188] macsec1: left promiscuous mode [ 245.287734][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.384060][T12143] hsr_slave_0: entered promiscuous mode [ 245.393691][T12143] hsr_slave_1: entered promiscuous mode [ 245.400677][ T910] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 245.409665][T12143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.417852][T12143] Cannot create hsr debugfs directory [ 245.427943][ T30] audit: type=1400 audit(1748870776.873:865): avc: denied { read write } for pid=12204 comm="syz.6.2769" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 245.458400][ T30] audit: type=1400 audit(1748870776.873:866): avc: denied { open } for pid=12204 comm="syz.6.2769" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 245.514302][ T5871] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 245.527504][ T5871] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 245.556230][ T5871] usb 2-1: USB disconnect, device number 37 [ 245.566043][ T910] usb 5-1: Using ep0 maxpacket: 32 [ 245.579889][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.596036][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.606033][ T910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.620356][ T910] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 245.635994][ T910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.656794][ T910] usb 5-1: config 0 descriptor?? [ 245.668998][ T13] hsr_slave_0: left promiscuous mode [ 245.675918][ T30] audit: type=1400 audit(1748870777.113:867): avc: denied { read } for pid=12210 comm="syz.6.2771" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 245.699189][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.707744][ T13] hsr_slave_1: left promiscuous mode [ 245.715366][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.722845][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.730538][ T30] audit: type=1400 audit(1748870777.173:868): avc: denied { ioctl } for pid=12210 comm="syz.6.2771" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 245.731134][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.763254][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.796150][ T13] veth1_macvtap: left promiscuous mode [ 245.805704][ T13] veth0_macvtap: left promiscuous mode [ 245.811328][ T13] veth1_vlan: left promiscuous mode [ 245.827952][ T13] veth0_vlan: left promiscuous mode [ 246.084585][ T910] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001D/input/input35 [ 246.170821][ T910] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001D/input/input36 [ 246.224268][ T910] kye 0003:0458:5011.001D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 246.280595][ T13] team0 (unregistering): Port device team_slave_1 removed [ 246.334573][ T13] team0 (unregistering): Port device team_slave_0 removed [ 246.447797][ T30] audit: type=1400 audit(1748870777.883:869): avc: denied { setattr } for pid=12225 comm="syz.3.2775" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 247.047186][ T5826] Bluetooth: hci4: command tx timeout [ 247.167613][ C1] kye 0003:0458:5011.001D: usb_submit_urb(ctrl) failed: -1 [ 247.205717][T10099] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 247.387730][T12143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.396798][T10099] usb 2-1: Using ep0 maxpacket: 32 [ 247.410946][T12143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.423669][T10099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.428513][T12143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.445915][T10099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.457222][T12237] netlink: 'syz.3.2779': attribute type 13 has an invalid length. [ 247.458030][T12143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.478303][T12237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 247.490444][T10099] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 247.502259][T10099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.516092][T12237] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.523797][T12237] gretap1: entered promiscuous mode [ 247.534060][T10099] usb 2-1: config 0 descriptor?? [ 247.540155][T12237] gretap1: entered allmulticast mode [ 247.669740][T12143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.719569][T12143] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.749971][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.757131][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.800484][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.807626][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.959853][ T910] usb 5-1: USB disconnect, device number 32 [ 247.984689][T10099] savu 0003:1E7D:2D5A.001E: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 248.244186][T12143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.283189][ T910] usb 2-1: USB disconnect, device number 38 [ 248.712008][T12143] veth0_vlan: entered promiscuous mode [ 248.741683][T12143] veth1_vlan: entered promiscuous mode [ 248.802325][T12143] veth0_macvtap: entered promiscuous mode [ 248.829765][T12143] veth1_macvtap: entered promiscuous mode [ 248.836957][T12270] Bluetooth: hci6: Frame reassembly failed (-84) [ 248.857175][T12143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.868094][T12143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.876791][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 248.885893][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 248.892231][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 248.910135][T12143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.919041][T12143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.927978][T12143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.938334][T12143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.035152][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.046060][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.052395][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.061657][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.128825][ T51] Bluetooth: hci4: command tx timeout [ 249.142619][ T30] audit: type=1400 audit(1748870780.583:870): avc: denied { create } for pid=12279 comm="syz.1.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 249.168101][ T30] audit: type=1400 audit(1748870780.613:871): avc: denied { sys_admin } for pid=12279 comm="syz.1.2794" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 249.488488][T10099] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 249.677597][T10099] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 249.686278][T10099] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 249.695130][T10099] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 249.725650][T10099] usb 2-1: config 220 has no interface number 2 [ 249.731925][T10099] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 249.751333][T10099] usb 2-1: config 220 interface 0 has no altsetting 0 [ 249.758288][T10099] usb 2-1: config 220 interface 76 has no altsetting 0 [ 249.765261][T10099] usb 2-1: config 220 interface 1 has no altsetting 0 [ 249.778160][T10099] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 249.788357][T10099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.796443][T10099] usb 2-1: Product: syz [ 249.800656][T10099] usb 2-1: Manufacturer: syz [ 249.805286][T10099] usb 2-1: SerialNumber: syz [ 250.024792][T10099] usb 2-1: selecting invalid altsetting 0 [ 250.041477][T10099] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 250.061456][T10099] usb 2-1: No valid video chain found. [ 250.071726][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.089810][T10099] usb 2-1: selecting invalid altsetting 0 [ 250.100294][T10099] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 250.114774][T10099] usb 2-1: USB disconnect, device number 39 [ 250.785067][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.886543][ T5826] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 250.894053][ T5811] Bluetooth: hci6: command 0xfc11 tx timeout [ 250.900744][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.911753][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.922135][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.938677][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.956196][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.027704][T12316] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2808'. [ 251.141762][ T30] audit: type=1400 audit(1748870782.583:872): avc: denied { mount } for pid=12321 comm="syz.4.2810" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 251.169203][ T30] audit: type=1400 audit(1748870782.613:873): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 251.176162][ T5868] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 251.248940][T12309] chnl_net:caif_netlink_parms(): no params data found [ 251.368951][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 251.387039][ T5868] usb 7-1: config 6 has too many interfaces: 126, using maximum allowed: 32 [ 251.398852][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.415747][ T5868] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 251.428981][ T5868] usb 7-1: config 6 has 0 interfaces, different from the descriptor's value: 126 [ 251.439974][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.453932][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2814'. [ 251.454487][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.473147][T12334] netlink: 'syz.3.2814': attribute type 30 has an invalid length. [ 251.479344][ T5868] usb 7-1: SerialNumber: syz [ 251.495078][ T8021] bond0: (slave syz_tun): Releasing backup interface [ 251.521220][T12334] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.530848][T12334] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.540005][T12334] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.548991][T12334] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.586728][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.631494][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.639659][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.658068][T12309] bridge_slave_0: entered allmulticast mode [ 251.674273][T12309] bridge_slave_0: entered promiscuous mode [ 251.697526][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.704805][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.716843][T12309] bridge_slave_1: entered allmulticast mode [ 251.723485][T12309] bridge_slave_1: entered promiscuous mode [ 251.730101][ T5868] usb 7-1: USB disconnect, device number 9 [ 251.779398][T12309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.801868][T12309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.902333][T12309] team0: Port device team_slave_0 added [ 251.924180][T12309] team0: Port device team_slave_1 added [ 251.934483][ T49] bridge_slave_1: left allmulticast mode [ 251.940413][ T49] bridge_slave_1: left promiscuous mode [ 251.948153][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.957971][ T49] bridge_slave_0: left allmulticast mode [ 251.963675][ T49] bridge_slave_0: left promiscuous mode [ 251.969850][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.119013][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.129294][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.138938][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.150769][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.160123][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.309561][T12347] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 252.327061][T12347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 252.392816][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.409489][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.429853][ T49] bond0 (unregistering): Released all slaves [ 252.538123][T12309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.545423][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.637861][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.777010][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.785115][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.818134][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.938349][T12367] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.2829'. [ 252.960835][T12367] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.2829'. [ 252.973846][T12367] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.2829'. [ 253.044494][T12309] hsr_slave_0: entered promiscuous mode [ 253.056409][T12309] hsr_slave_1: entered promiscuous mode [ 253.056509][ T5826] Bluetooth: hci4: command tx timeout [ 253.062389][T12309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.108624][T12373] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 253.118965][T12309] Cannot create hsr debugfs directory [ 253.141723][ T49] hsr_slave_0: left promiscuous mode [ 253.142836][T12373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.158338][ T49] hsr_slave_1: left promiscuous mode [ 253.162391][T12373] overlayfs: failed to set uuid (595/file1, err=-13); falling back to uuid=null. [ 253.164104][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.186298][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.204737][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.212954][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.244479][ T49] veth1_macvtap: left promiscuous mode [ 253.250138][ T49] veth0_macvtap: left promiscuous mode [ 253.256007][ T49] veth1_vlan: left promiscuous mode [ 253.261298][ T49] veth0_vlan: left promiscuous mode [ 253.628493][ T30] audit: type=1400 audit(1748870785.063:874): avc: denied { append } for pid=12384 comm="syz.1.2836" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 253.778643][ T49] team0 (unregistering): Port device team_slave_1 removed [ 253.821017][ T49] team0 (unregistering): Port device team_slave_0 removed [ 254.257195][ T5826] Bluetooth: hci1: command tx timeout [ 254.259572][T12403] input: syz1 as /devices/virtual/input/input37 [ 254.358033][ T30] audit: type=1400 audit(1748870785.803:875): avc: denied { setopt } for pid=12404 comm="syz.6.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.382174][ T30] audit: type=1400 audit(1748870785.823:876): avc: denied { bind } for pid=12404 comm="syz.6.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.549556][ T30] audit: type=1400 audit(1748870785.993:877): avc: denied { lock } for pid=12409 comm="syz.1.2846" path="socket:[43921]" dev="sockfs" ino=43921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 254.645121][T12414] loop2: detected capacity change from 0 to 7 [ 254.659234][T12414] Dev loop2: unable to read RDB block 7 [ 254.664955][T12414] loop2: unable to read partition table [ 254.672781][T12414] loop2: partition table beyond EOD, truncated [ 254.680286][T12414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.681282][T12344] chnl_net:caif_netlink_parms(): no params data found [ 254.752012][T12418] sctp: [Deprecated]: syz.6.2848 (pid 12418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.752012][T12418] Use struct sctp_sack_info instead [ 254.802709][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.812615][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.819954][T12344] bridge_slave_0: entered allmulticast mode [ 254.829458][T12344] bridge_slave_0: entered promiscuous mode [ 254.841075][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.851394][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.858860][T12344] bridge_slave_1: entered allmulticast mode [ 254.866878][T12344] bridge_slave_1: entered promiscuous mode [ 254.933958][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.957101][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.984213][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.041687][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.059595][T12344] team0: Port device team_slave_0 added [ 255.067587][T12344] team0: Port device team_slave_1 added [ 255.098348][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.127178][ T5826] Bluetooth: hci4: command tx timeout [ 255.165498][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.172583][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.201970][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.217210][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.237143][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.244130][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.275729][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.310410][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.431961][T12344] hsr_slave_0: entered promiscuous mode [ 255.438525][T12344] hsr_slave_1: entered promiscuous mode [ 255.445175][T12344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.453189][T12344] Cannot create hsr debugfs directory [ 255.516213][T12309] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.573844][T12309] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.623996][T12309] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.685450][ T13] bridge_slave_1: left promiscuous mode [ 255.704468][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.736983][ T13] bridge_slave_0: left allmulticast mode [ 255.744537][ T13] bridge_slave_0: left promiscuous mode [ 255.763155][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.822996][T12445] input: syz1 as /devices/virtual/input/input38 [ 256.045234][ T30] audit: type=1400 audit(1748870787.483:878): avc: denied { open } for pid=12452 comm="syz.6.2863" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 256.095805][ T30] audit: type=1400 audit(1748870787.533:879): avc: denied { ioctl } for pid=12452 comm="syz.6.2863" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 256.329670][ T5826] Bluetooth: hci1: command tx timeout [ 256.359163][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.406063][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.420750][ T13] bond0 (unregistering): Released all slaves [ 256.437582][T12309] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.520896][T12460] ALSA: seq fatal error: cannot create timer (-22) [ 256.918206][ T13] hsr_slave_0: left promiscuous mode [ 256.930436][ T13] hsr_slave_1: left promiscuous mode [ 256.949031][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.968587][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.984104][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.007621][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.078617][ T13] veth1_macvtap: left promiscuous mode [ 257.090758][ T13] veth0_macvtap: left allmulticast mode [ 257.101843][ T13] veth0_macvtap: left promiscuous mode [ 257.114330][ T13] veth1_vlan: left promiscuous mode [ 257.133014][ T13] veth0_vlan: left promiscuous mode [ 257.207447][ T5826] Bluetooth: hci4: command tx timeout [ 257.559356][ T13] team0 (unregistering): Port device team_slave_1 removed [ 257.597035][ T13] team0 (unregistering): Port device team_slave_0 removed [ 257.927657][T12483] ipvlan2: left promiscuous mode [ 258.058434][T12344] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 258.109109][T12344] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 258.124631][ T30] audit: type=1400 audit(1748870789.553:880): avc: denied { relabelfrom } for pid=12484 comm="syz.6.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 258.131690][T12491] input: syz0 as /devices/virtual/input/input39 [ 258.154670][T12491] input: failed to attach handler leds to device input39, error: -6 [ 258.169509][T12344] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 258.175772][ T30] audit: type=1400 audit(1748870789.553:881): avc: denied { relabelto } for pid=12484 comm="syz.6.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 258.251886][T12344] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 258.333002][T12309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.392708][T12309] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.405878][ T5826] Bluetooth: hci1: command tx timeout [ 258.422137][ T13] IPVS: stop unused estimator thread 0... [ 258.431109][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.438224][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.450331][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.457445][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.499614][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.558118][T12309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.627997][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.673669][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.680838][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.715498][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.722648][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.763415][T12344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.779715][T12344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.933779][T12309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.975978][T10101] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 258.994640][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'. [ 259.013511][T12522] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2889'. [ 259.086170][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.150544][T10101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.168778][T10101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.222180][T10101] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.268086][T10101] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.277315][T10101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.291978][T10101] usb 2-1: config 0 descriptor?? [ 259.299161][ T5826] Bluetooth: hci4: command tx timeout [ 259.411208][T12309] veth0_vlan: entered promiscuous mode [ 259.423555][T12309] veth1_vlan: entered promiscuous mode [ 259.480388][T12309] veth0_macvtap: entered promiscuous mode [ 259.500015][T12309] veth1_macvtap: entered promiscuous mode [ 259.569726][T12309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.582295][T12309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.594627][T12309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.605355][T12309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.625484][T12309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.634568][T12309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.651584][T12344] veth0_vlan: entered promiscuous mode [ 259.669418][T12344] veth1_vlan: entered promiscuous mode [ 259.743417][T10101] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 259.749934][T12344] veth0_macvtap: entered promiscuous mode [ 259.767661][T10101] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 259.769347][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.781919][T10101] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 259.793650][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.814689][T12344] veth1_macvtap: entered promiscuous mode [ 259.853296][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.863492][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.865822][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.887169][T12197] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 259.899787][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.920132][T12344] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.934181][T12344] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.948730][T12344] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.957758][T12344] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.052943][T12196] usb 2-1: USB disconnect, device number 40 [ 260.063964][T12197] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.090082][T12197] usb 4-1: config 0 has no interface number 0 [ 260.107738][T12197] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 260.112367][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.125738][T12197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.137034][T12197] usb 4-1: config 0 descriptor?? [ 260.148101][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.157858][T12197] usb 4-1: selecting invalid altsetting 1 [ 260.164747][T12197] dvb_ttusb_budget: ttusb_init_controller: error [ 260.178994][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.187522][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.195946][T12197] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 260.256429][T12197] DVB: Unable to find symbol cx22700_attach() [ 260.298016][T12197] DVB: Unable to find symbol tda10046_attach() [ 260.304319][T12197] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 260.380370][T10101] usb 4-1: USB disconnect, device number 29 [ 260.456707][ T5868] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 260.485942][ T5826] Bluetooth: hci1: command tx timeout [ 260.617341][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 260.639909][ T30] audit: type=1400 audit(1748870792.083:882): avc: denied { read write } for pid=12565 comm="syz.1.2902" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.670665][ T30] audit: type=1400 audit(1748870792.083:883): avc: denied { open } for pid=12565 comm="syz.1.2902" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.670797][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.735787][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.741342][ T30] audit: type=1400 audit(1748870792.083:884): avc: denied { watch } for pid=12565 comm="syz.1.2902" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 260.767787][ T30] audit: type=1400 audit(1748870792.083:885): avc: denied { watch_sb } for pid=12565 comm="syz.1.2902" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.793920][ T5868] usb 7-1: SerialNumber: syz [ 260.854307][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.025728][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 261.185806][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 261.192171][ T24] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 261.200480][ T24] usb 2-1: config 1 has no interface number 0 [ 261.207046][ T24] usb 2-1: config 1 interface 242 has no altsetting 0 [ 261.215544][ T24] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 261.224627][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.233827][ T24] usb 2-1: Product: syz [ 261.238523][ T24] usb 2-1: Manufacturer: syz [ 261.243118][ T24] usb 2-1: SerialNumber: syz [ 261.421861][ T5868] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 261.444708][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.867570][T12197] usb 7-1: USB disconnect, device number 10 [ 261.874053][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.885559][T12197] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 261.896494][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.905123][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.918437][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.933166][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.979812][ T5868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5868 comm=kworker/0:5 [ 262.038944][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.123905][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.241053][T12583] chnl_net:caif_netlink_parms(): no params data found [ 262.267141][ T24] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 262.290257][ T24] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 262.302270][ T24] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 262.353806][ T24] aqc111 2-1:1.242 eth14: register 'aqc111' at usb-dummy_hcd.1-1, Aquantia AQtion USB to 5GbE Controller, 16:72:e7:e7:9a:7b [ 262.399661][ T24] usb 2-1: USB disconnect, device number 41 [ 262.413862][ T24] aqc111 2-1:1.242 eth14: unregister 'aqc111' usb-dummy_hcd.1-1, Aquantia AQtion USB to 5GbE Controller [ 262.563486][ T30] audit: type=1400 audit(1748870794.003:886): avc: denied { setopt } for pid=12609 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.591871][ T24] aqc111 2-1:1.242 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 262.601606][ T24] aqc111 2-1:1.242 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 262.611825][ T24] aqc111 2-1:1.242 eth14 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 262.645545][ T13] bridge_slave_1: left allmulticast mode [ 262.651286][ T13] bridge_slave_1: left promiscuous mode [ 262.666056][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.684879][ T13] bridge_slave_0: left allmulticast mode [ 262.694733][ T13] bridge_slave_0: left promiscuous mode [ 262.703087][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.714117][T12620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.299733][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.315090][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.328819][ T13] bond0 (unregistering): Released all slaves [ 263.344434][T12616] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 263.365648][T12616] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 263.374903][T12583] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.405106][T12583] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.412469][T12583] bridge_slave_0: entered allmulticast mode [ 263.419744][T12583] bridge_slave_0: entered promiscuous mode [ 263.431458][T12629] smc: net device bond0 applied user defined pnetid SYZ2 [ 263.457023][T12583] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.464204][T12583] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.493690][T12583] bridge_slave_1: entered allmulticast mode [ 263.512453][T12583] bridge_slave_1: entered promiscuous mode [ 263.690957][T12639] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.700720][T12583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.766784][T12196] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 263.819262][T12583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.875220][ T13] hsr_slave_0: left promiscuous mode [ 263.883127][ T13] hsr_slave_1: left promiscuous mode [ 263.891237][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.902157][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.912704][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.920444][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.935988][T12196] usb 8-1: Using ep0 maxpacket: 16 [ 263.944692][ T13] veth1_macvtap: left promiscuous mode [ 263.951206][ T13] veth0_macvtap: left promiscuous mode [ 263.951511][T12196] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 263.959525][ T13] veth1_vlan: left promiscuous mode [ 263.975659][T12196] usb 8-1: config 0 has no interface number 0 [ 263.981774][T12196] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 263.981929][ T13] veth0_vlan: left promiscuous mode [ 264.011775][ T51] Bluetooth: hci4: command tx timeout [ 264.024660][T12196] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 264.034727][T12196] usb 8-1: config 0 interface 41 has no altsetting 0 [ 264.043579][T12196] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 264.063209][T12196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.071395][T12196] usb 8-1: Product: syz [ 264.075579][T12196] usb 8-1: Manufacturer: syz [ 264.080247][T12196] usb 8-1: SerialNumber: syz [ 264.091028][T12196] usb 8-1: config 0 descriptor?? [ 264.101020][T12633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 264.110620][T12633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 264.344610][T12633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 264.372159][T12633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 264.841791][T12196] Error reading MAC address [ 264.850949][T12633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 264.858375][T12633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 264.878672][ T13] team0 (unregistering): Port device team_slave_1 removed [ 264.924764][ T13] team0 (unregistering): Port device team_slave_0 removed [ 265.085740][T12196] sr9700 8-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 265.111461][T12196] usb 8-1: USB disconnect, device number 2 [ 265.584668][T12648] syzkaller1: entered promiscuous mode [ 265.595132][T12648] syzkaller1: entered allmulticast mode [ 265.625954][T12583] team0: Port device team_slave_0 added [ 265.675567][T12583] team0: Port device team_slave_1 added [ 265.746207][T12583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.768890][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.817954][T12583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.830455][T12583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.841517][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.868115][T12583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.013532][T12583] hsr_slave_0: entered promiscuous mode [ 266.022440][T12583] hsr_slave_1: entered promiscuous mode [ 266.037897][T12583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.058778][T12583] Cannot create hsr debugfs directory [ 266.085914][ T51] Bluetooth: hci4: command tx timeout [ 266.110853][ T5868] kernel write not supported for file /snd/seq (pid: 5868 comm: kworker/0:5) [ 266.422068][ T30] audit: type=1400 audit(1748870797.863:887): avc: denied { mount } for pid=12718 comm="syz.6.2964" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 266.485774][ T30] audit: type=1400 audit(1748870797.893:888): avc: denied { remount } for pid=12718 comm="syz.6.2964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 266.547384][ T30] audit: type=1400 audit(1748870797.923:889): avc: denied { unmount } for pid=10139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 267.196996][T12583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.230058][T12583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.245202][T12754] sctp: [Deprecated]: syz.3.2980 (pid 12754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.245202][T12754] Use struct sctp_sack_info instead [ 267.271027][T12583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.301288][T12583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.350950][T12760] netlink: 'syz.3.2983': attribute type 4 has an invalid length. [ 267.379111][T12760] netlink: 'syz.3.2983': attribute type 4 has an invalid length. [ 267.444056][T12583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.468912][T12583] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.488960][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.496131][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.512707][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.519863][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.562600][T12583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.584570][T12583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.844413][T12583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.956958][T10099] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 268.013183][T12781] syz.7.2990 (12781): drop_caches: 2 [ 268.021419][T12781] syz.7.2990 (12781): drop_caches: 2 [ 268.106192][T10099] usb 4-1: Using ep0 maxpacket: 16 [ 268.112847][T10099] usb 4-1: config 0 has no interfaces? [ 268.120581][T10099] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.129951][T10099] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.138906][T10099] usb 4-1: Manufacturer: syz [ 268.145821][T10099] usb 4-1: config 0 descriptor?? [ 268.165402][T12583] veth0_vlan: entered promiscuous mode [ 268.171182][ T51] Bluetooth: hci4: command tx timeout [ 268.183569][T12583] veth1_vlan: entered promiscuous mode [ 268.202636][T12583] veth0_macvtap: entered promiscuous mode [ 268.213175][T12583] veth1_macvtap: entered promiscuous mode [ 268.228292][T12583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.240140][T12583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.252166][T12583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.261280][T12583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.271389][T12583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.280216][T12583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.338740][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.347071][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.355962][T12196] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 268.393597][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.403836][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.411844][T12776] lo: entered promiscuous mode [ 268.419562][T12776] tunl0: entered promiscuous mode [ 268.431679][T12776] gre0: entered promiscuous mode [ 268.438855][T12776] gretap0: entered promiscuous mode [ 268.444049][T12776] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.480094][ T5905] usb 4-1: USB disconnect, device number 30 [ 268.518214][T12196] usb 8-1: Using ep0 maxpacket: 8 [ 268.525508][T12196] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 268.540447][T12196] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 268.550734][T12196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.558988][T12196] usb 8-1: Product: syz [ 268.563236][T12196] usb 8-1: Manufacturer: syz [ 268.567929][T12196] usb 8-1: SerialNumber: syz [ 268.574749][T12196] usb 8-1: config 0 descriptor?? [ 268.582252][T12196] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 268.593086][T12196] usb 8-1: setting power ON [ 268.598056][T12196] dvb-usb: bulk message failed: -22 (2/0) [ 268.610167][T12196] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.620080][T12196] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 268.629424][T12196] usb 8-1: media controller created [ 268.642665][T12196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.660903][T12196] usb 8-1: selecting invalid altsetting 6 [ 268.667910][T12196] usb 8-1: digital interface selection failed (-22) [ 268.674505][T12196] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 268.683810][T12196] usb 8-1: setting power OFF [ 268.689597][T12196] dvb-usb: bulk message failed: -22 (2/0) [ 268.695435][T12196] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 268.705158][T12196] (NULL device *): no alternate interface [ 268.718615][T12196] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 268.786075][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 268.822515][T10101] usb 8-1: USB disconnect, device number 3 [ 268.937094][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 268.943288][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.954670][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.963824][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.974220][ T24] usb 2-1: config 0 descriptor?? [ 269.005831][T12196] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 269.155714][T12196] usb 7-1: Using ep0 maxpacket: 8 [ 269.162281][T12196] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 269.173611][T12196] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 269.182928][T12196] usb 7-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 269.193460][T12196] usb 7-1: Product: syz [ 269.197907][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 269.208470][T12196] usb 7-1: Manufacturer: syz [ 269.213066][T12196] usb 7-1: SerialNumber: syz [ 269.226349][T12196] usb 7-1: config 0 descriptor?? [ 269.282202][ T30] audit: type=1400 audit(1748870800.723:890): avc: denied { create } for pid=12807 comm="syz.3.2999" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.321820][ T30] audit: type=1400 audit(1748870800.763:891): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=3318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.410666][T10099] usb 2-1: USB disconnect, device number 42 [ 269.440703][T12196] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 269.473401][T12815] ip_vti0: entered promiscuous mode [ 269.481778][T12815] ip_vti0: entered allmulticast mode [ 269.577706][ T30] audit: type=1400 audit(1748870801.023:892): avc: denied { map } for pid=12818 comm="syz.7.3004" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 269.731196][ T2962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.749530][T12823] loop4: detected capacity change from 0 to 524255232 [ 270.243778][T12196] gspca_sunplus: reg_w_riv err -71 [ 270.249194][T12196] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 270.259305][T12196] usb 7-1: USB disconnect, device number 11 [ 270.618925][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3009'. [ 270.649925][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3009'. [ 270.677572][ T30] audit: type=1400 audit(1748870802.123:893): avc: denied { read } for pid=12827 comm="syz.7.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.735714][ T30] audit: type=1400 audit(1748870802.123:894): avc: denied { bind } for pid=12832 comm="syz.1.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 270.768219][ T2962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.778079][ T30] audit: type=1400 audit(1748870802.123:895): avc: denied { name_bind } for pid=12832 comm="syz.1.3011" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 270.835826][ T30] audit: type=1400 audit(1748870802.123:896): avc: denied { node_bind } for pid=12832 comm="syz.1.3011" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 270.912618][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.924173][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.936126][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.951844][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.960750][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.219117][ T2962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.261605][T12842] chnl_net:caif_netlink_parms(): no params data found [ 271.279670][T12860] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 271.364144][ T2962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.465798][T12842] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.473021][T12842] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.492154][T12842] bridge_slave_0: entered allmulticast mode [ 271.500421][T12842] bridge_slave_0: entered promiscuous mode [ 271.508507][T12842] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.515693][T12842] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.522866][T12842] bridge_slave_1: entered allmulticast mode [ 271.535005][T12842] bridge_slave_1: entered promiscuous mode [ 271.624086][T12842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.636328][T10101] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 271.654990][T12842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.670838][T12878] syzkaller1: entered promiscuous mode [ 271.676602][T12878] syzkaller1: entered allmulticast mode [ 271.720018][ T2962] bridge_slave_1: left allmulticast mode [ 271.725967][ T2962] bridge_slave_1: left promiscuous mode [ 271.731670][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.740052][ T2962] bridge_slave_0: left allmulticast mode [ 271.746121][ T2962] bridge_slave_0: left promiscuous mode [ 271.762516][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.795869][T10101] usb 2-1: Using ep0 maxpacket: 32 [ 271.802560][T12880] loop2: detected capacity change from 0 to 7 [ 271.810626][T12880] Dev loop2: unable to read RDB block 7 [ 271.816356][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 271.824516][T12880] loop2: unable to read partition table [ 271.830670][T10101] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 271.831041][T12880] loop2: partition table beyond EOD, truncated [ 271.844091][T10101] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.850875][T12880] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.872921][T10101] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 271.887307][T10101] usb 2-1: config 0 interface 0 has no altsetting 0 [ 271.897599][T10101] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 271.907103][T10101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.917552][T10101] usb 2-1: config 0 descriptor?? [ 271.978875][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 271.991159][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.009722][ T24] usb 4-1: Product: syz [ 272.013922][ T24] usb 4-1: Manufacturer: syz [ 272.042896][ T24] usb 4-1: SerialNumber: syz [ 272.058968][ T24] usb 4-1: config 0 descriptor?? [ 272.202076][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.214594][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.255171][ T2962] bond0 (unregistering): Released all slaves [ 272.294302][T12842] team0: Port device team_slave_0 added [ 272.314478][T12842] team0: Port device team_slave_1 added [ 272.350995][T10101] zeroplus 0003:0C12:0030.0020: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 272.363702][T12889] netlink: 'syz.7.3032': attribute type 1 has an invalid length. [ 272.370008][T10101] zeroplus 0003:0C12:0030.0020: no inputs found [ 272.424944][T12842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.432987][T12842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.458887][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.466535][T12842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.485293][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 272.505694][ T24] usb 4-1: Please update to version 0.2 or newer [ 272.513570][T12842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.520885][T12842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.522807][ T24] usb 4-1: Firmware: build [ 272.546758][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.557771][T12842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.591596][ T5905] usb 2-1: USB disconnect, device number 43 [ 272.688445][T12842] hsr_slave_0: entered promiscuous mode [ 272.695069][T12842] hsr_slave_1: entered promiscuous mode [ 272.701454][T12842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.709885][T12842] Cannot create hsr debugfs directory [ 272.723129][ T2962] hsr_slave_0: left promiscuous mode [ 272.738808][ T24] usb 4-1: USB disconnect, device number 31 [ 272.746040][ T2962] hsr_slave_1: left promiscuous mode [ 272.751768][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.759237][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.772552][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.780427][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.805505][ T2962] veth1_macvtap: left promiscuous mode [ 272.813998][ T2962] veth0_macvtap: left promiscuous mode [ 272.821164][ T2962] veth1_vlan: left promiscuous mode [ 272.827325][ T2962] veth0_vlan: left promiscuous mode [ 273.052049][ T5826] Bluetooth: hci4: command tx timeout [ 273.578242][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 273.655681][ T910] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 273.695519][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 273.705448][T12932] [ 273.707790][T12932] ===================================================== [ 273.714712][T12932] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 273.722158][T12932] 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 Not tainted [ 273.728910][T12932] ----------------------------------------------------- [ 273.735834][T12932] syz.3.3050/12932 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 273.743546][T12932] ffff88802880c360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 273.752243][T12932] [ 273.752243][T12932] and this task is already holding: [ 273.759583][T12932] ffff888058b25028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 273.769399][T12932] which would create a new lock dependency: [ 273.775263][T12932] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 273.783335][T12932] [ 273.783335][T12932] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 273.792761][T12932] (&dev->event_lock#2){..-.}-{3:3} [ 273.792788][T12932] [ 273.792788][T12932] ... which became SOFTIRQ-irq-safe at: [ 273.805751][T12932] lock_acquire+0x179/0x350 [ 273.810346][T12932] _raw_spin_lock_irqsave+0x3a/0x60 [ 273.815618][T12932] input_event+0x70/0xb0 [ 273.819929][T12932] atp_complete_geyser_3_4+0xca9/0x16f0 [ 273.825547][T12932] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 273.830994][T12932] usb_hcd_giveback_urb+0x39b/0x450 [ 273.836263][T12932] dummy_timer+0x180e/0x3a20 [ 273.840926][T12932] __hrtimer_run_queues+0x1ff/0xad0 [ 273.846198][T12932] hrtimer_run_softirq+0x17d/0x350 [ 273.851388][T12932] handle_softirqs+0x219/0x8e0 [ 273.856840][T12932] __irq_exit_rcu+0x109/0x170 [ 273.861583][T12932] irq_exit_rcu+0x9/0x30 [ 273.865901][T12932] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 273.871605][T12932] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.877652][T12932] _raw_spin_unlock_irqrestore+0x31/0x80 [ 273.883352][T12932] kfence_guarded_free+0x152/0x5c0 [ 273.888533][T12932] __kfence_free+0xb1/0x1d0 [ 273.893106][T12932] kmem_cache_free+0x487/0x4d0 [ 273.897939][T12932] putname+0x154/0x1a0 [ 273.902076][T12932] do_sys_openat2+0x152/0x1d0 [ 273.906823][T12932] __x64_sys_openat+0x174/0x210 [ 273.911751][T12932] do_syscall_64+0xcd/0x4c0 [ 273.916342][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.922301][T12932] [ 273.922301][T12932] to a SOFTIRQ-irq-unsafe lock: [ 273.929297][T12932] (tasklist_lock){.+.+}-{3:3} [ 273.929318][T12932] [ 273.929318][T12932] ... which became SOFTIRQ-irq-unsafe at: [ 273.941914][T12932] ... [ 273.941919][T12932] lock_acquire+0x179/0x350 [ 273.949052][T12932] _raw_read_lock+0x5f/0x70 [ 273.953621][T12932] __do_wait+0x105/0x890 [ 273.957935][T12932] do_wait+0x21e/0x5a0 [ 273.962071][T12932] kernel_wait+0x9f/0x160 [ 273.966469][T12932] call_usermodehelper_exec_work+0xf1/0x170 [ 273.972434][T12932] process_one_work+0x9cf/0x1b70 [ 273.977442][T12932] worker_thread+0x6c8/0xf10 [ 273.982103][T12932] kthread+0x3c5/0x780 [ 273.986245][T12932] ret_from_fork+0x5d7/0x6f0 [ 273.990903][T12932] ret_from_fork_asm+0x1a/0x30 [ 273.995732][T12932] [ 273.995732][T12932] other info that might help us debug this: [ 273.995732][T12932] [ 274.005937][T12932] Chain exists of: [ 274.005937][T12932] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 274.005937][T12932] [ 274.019476][T12932] Possible interrupt unsafe locking scenario: [ 274.019476][T12932] [ 274.027771][T12932] CPU0 CPU1 [ 274.033113][T12932] ---- ---- [ 274.038456][T12932] lock(tasklist_lock); [ 274.042677][T12932] local_irq_disable(); [ 274.049418][T12932] lock(&dev->event_lock#2); [ 274.056598][T12932] lock(&client->buffer_lock); [ 274.063946][T12932] [ 274.067375][T12932] lock(&dev->event_lock#2); [ 274.072215][T12932] [ 274.072215][T12932] *** DEADLOCK *** [ 274.072215][T12932] [ 274.080341][T12932] 7 locks held by syz.3.3050/12932: [ 274.085511][T12932] #0: ffff888146bb4118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 274.094642][T12932] #1: ffff888146b03230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 274.104743][T12932] #2: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 274.114403][T12932] #3: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 274.124130][T12932] #4: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 274.133246][T12932] #5: ffff888058b25028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 274.143494][T12932] #6: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 274.152528][T12932] [ 274.152528][T12932] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 274.162911][T12932] -> (&dev->event_lock#2){..-.}-{3:3} { [ 274.168555][T12932] IN-SOFTIRQ-W at: [ 274.172601][T12932] lock_acquire+0x179/0x350 [ 274.178999][T12932] _raw_spin_lock_irqsave+0x3a/0x60 [ 274.186017][T12932] input_event+0x70/0xb0 [ 274.192066][T12932] atp_complete_geyser_3_4+0xca9/0x16f0 [ 274.199422][T12932] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 274.206604][T12932] usb_hcd_giveback_urb+0x39b/0x450 [ 274.213697][T12932] dummy_timer+0x180e/0x3a20 [ 274.220102][T12932] __hrtimer_run_queues+0x1ff/0xad0 [ 274.227109][T12932] hrtimer_run_softirq+0x17d/0x350 [ 274.234029][T12932] handle_softirqs+0x219/0x8e0 [ 274.240627][T12932] __irq_exit_rcu+0x109/0x170 [ 274.247116][T12932] irq_exit_rcu+0x9/0x30 [ 274.253180][T12932] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 274.260723][T12932] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.268515][T12932] _raw_spin_unlock_irqrestore+0x31/0x80 [ 274.275957][T12932] kfence_guarded_free+0x152/0x5c0 [ 274.282875][T12932] __kfence_free+0xb1/0x1d0 [ 274.289188][T12932] kmem_cache_free+0x487/0x4d0 [ 274.295760][T12932] putname+0x154/0x1a0 [ 274.301636][T12932] do_sys_openat2+0x152/0x1d0 [ 274.308129][T12932] __x64_sys_openat+0x174/0x210 [ 274.314786][T12932] do_syscall_64+0xcd/0x4c0 [ 274.321097][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.328795][T12932] INITIAL USE at: [ 274.332754][T12932] lock_acquire+0x179/0x350 [ 274.338980][T12932] _raw_spin_lock_irqsave+0x3a/0x60 [ 274.345907][T12932] input_inject_event+0x9f/0x390 [ 274.352585][T12932] led_set_brightness+0x214/0x290 [ 274.359343][T12932] kbd_led_trigger_activate+0xcb/0x110 [ 274.366549][T12932] led_trigger_set+0x597/0xc50 [ 274.373035][T12932] led_trigger_set_default+0x1bd/0x2a0 [ 274.380216][T12932] led_classdev_register_ext+0x7b8/0xa10 [ 274.387572][T12932] input_leds_connect+0x552/0x8e0 [ 274.394315][T12932] input_attach_handler.isra.0+0x184/0x260 [ 274.401841][T12932] input_register_device+0xa84/0x1130 [ 274.408934][T12932] atkbd_connect+0x5da/0xa20 [ 274.415246][T12932] serio_driver_probe+0x77/0xb0 [ 274.421816][T12932] really_probe+0x23e/0xa90 [ 274.428046][T12932] __driver_probe_device+0x1de/0x440 [ 274.435053][T12932] driver_probe_device+0x4c/0x1b0 [ 274.441799][T12932] __driver_attach+0x283/0x580 [ 274.448285][T12932] bus_for_each_dev+0x13b/0x1d0 [ 274.454856][T12932] serio_handle_event+0x247/0xa50 [ 274.461599][T12932] process_one_work+0x9cf/0x1b70 [ 274.468261][T12932] worker_thread+0x6c8/0xf10 [ 274.474577][T12932] kthread+0x3c5/0x780 [ 274.480372][T12932] ret_from_fork+0x5d7/0x6f0 [ 274.486694][T12932] ret_from_fork_asm+0x1a/0x30 [ 274.493177][T12932] } [ 274.495743][T12932] ... key at: [] __key.7+0x0/0x40 [ 274.502936][T12932] -> (&client->buffer_lock){....}-{3:3} { [ 274.508667][T12932] INITIAL USE at: [ 274.512553][T12932] lock_acquire+0x179/0x350 [ 274.518607][T12932] _raw_spin_lock+0x2e/0x40 [ 274.524656][T12932] evdev_pass_values+0x10e/0x9b0 [ 274.531139][T12932] evdev_events+0x1bb/0x390 [ 274.537189][T12932] input_pass_values+0x6c7/0x890 [ 274.543689][T12932] input_handle_event+0xf00/0x14d0 [ 274.550345][T12932] input_inject_event+0x1cd/0x390 [ 274.556928][T12932] evdev_write+0x457/0x750 [ 274.562891][T12932] vfs_write+0x29d/0x1150 [ 274.568767][T12932] ksys_write+0x1f8/0x250 [ 274.574639][T12932] do_syscall_64+0xcd/0x4c0 [ 274.580717][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.588167][T12932] } [ 274.590644][T12932] ... key at: [] __key.1+0x0/0x40 [ 274.597752][T12932] ... acquired at: [ 274.601533][T12932] _raw_spin_lock+0x2e/0x40 [ 274.606209][T12932] evdev_pass_values+0x10e/0x9b0 [ 274.611305][T12932] evdev_events+0x1bb/0x390 [ 274.615965][T12932] input_pass_values+0x6c7/0x890 [ 274.621058][T12932] input_handle_event+0xf00/0x14d0 [ 274.626329][T12932] input_inject_event+0x1cd/0x390 [ 274.631521][T12932] evdev_write+0x457/0x750 [ 274.636094][T12932] vfs_write+0x29d/0x1150 [ 274.640579][T12932] ksys_write+0x1f8/0x250 [ 274.645076][T12932] do_syscall_64+0xcd/0x4c0 [ 274.649742][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.655805][T12932] [ 274.658109][T12932] [ 274.658109][T12932] the dependencies between the lock to be acquired [ 274.658116][T12932] and SOFTIRQ-irq-unsafe lock: [ 274.671583][T12932] -> (tasklist_lock){.+.+}-{3:3} { [ 274.676866][T12932] HARDIRQ-ON-R at: [ 274.681000][T12932] lock_acquire+0x179/0x350 [ 274.687485][T12932] _raw_read_lock+0x5f/0x70 [ 274.693990][T12932] __do_wait+0x105/0x890 [ 274.700214][T12932] do_wait+0x21e/0x5a0 [ 274.706281][T12932] kernel_wait+0x9f/0x160 [ 274.712590][T12932] call_usermodehelper_exec_work+0xf1/0x170 [ 274.720469][T12932] process_one_work+0x9cf/0x1b70 [ 274.727390][T12932] worker_thread+0x6c8/0xf10 [ 274.733977][T12932] kthread+0x3c5/0x780 [ 274.740027][T12932] ret_from_fork+0x5d7/0x6f0 [ 274.746599][T12932] ret_from_fork_asm+0x1a/0x30 [ 274.753349][T12932] SOFTIRQ-ON-R at: [ 274.757488][T12932] lock_acquire+0x179/0x350 [ 274.763973][T12932] _raw_read_lock+0x5f/0x70 [ 274.770455][T12932] __do_wait+0x105/0x890 [ 274.776686][T12932] do_wait+0x21e/0x5a0 [ 274.782741][T12932] kernel_wait+0x9f/0x160 [ 274.789050][T12932] call_usermodehelper_exec_work+0xf1/0x170 [ 274.796928][T12932] process_one_work+0x9cf/0x1b70 [ 274.803848][T12932] worker_thread+0x6c8/0xf10 [ 274.810419][T12932] kthread+0x3c5/0x780 [ 274.816470][T12932] ret_from_fork+0x5d7/0x6f0 [ 274.823046][T12932] ret_from_fork_asm+0x1a/0x30 [ 274.829788][T12932] INITIAL USE at: [ 274.833831][T12932] lock_acquire+0x179/0x350 [ 274.840235][T12932] _raw_write_lock_irq+0x36/0x50 [ 274.847065][T12932] copy_process+0x4caf/0x76a0 [ 274.853631][T12932] kernel_clone+0xfc/0x960 [ 274.859945][T12932] user_mode_thread+0xc7/0x110 [ 274.866601][T12932] rest_init+0x23/0x2b0 [ 274.872655][T12932] start_kernel+0x3ee/0x4d0 [ 274.879058][T12932] x86_64_start_reservations+0x18/0x30 [ 274.886414][T12932] x86_64_start_kernel+0x130/0x190 [ 274.893424][T12932] common_startup_64+0x13e/0x148 [ 274.900262][T12932] INITIAL READ USE at: [ 274.904744][T12932] lock_acquire+0x179/0x350 [ 274.911575][T12932] _raw_read_lock+0x5f/0x70 [ 274.918405][T12932] __do_wait+0x105/0x890 [ 274.924993][T12932] do_wait+0x21e/0x5a0 [ 274.931388][T12932] kernel_wait+0x9f/0x160 [ 274.938045][T12932] call_usermodehelper_exec_work+0xf1/0x170 [ 274.946271][T12932] process_one_work+0x9cf/0x1b70 [ 274.953540][T12932] worker_thread+0x6c8/0xf10 [ 274.960462][T12932] kthread+0x3c5/0x780 [ 274.966861][T12932] ret_from_fork+0x5d7/0x6f0 [ 274.973779][T12932] ret_from_fork_asm+0x1a/0x30 [ 274.980870][T12932] } [ 274.983520][T12932] ... key at: [] tasklist_lock+0x18/0x40 [ 274.991396][T12932] ... acquired at: [ 274.995348][T12932] _raw_read_lock+0x5f/0x70 [ 275.000007][T12932] send_sigurg+0xed/0xc80 [ 275.004495][T12932] sk_send_sigurg+0x76/0x360 [ 275.009241][T12932] unix_stream_sendmsg+0xeb3/0x11d0 [ 275.014596][T12932] ____sys_sendmsg+0xa98/0xc70 [ 275.019519][T12932] ___sys_sendmsg+0x134/0x1d0 [ 275.024351][T12932] __sys_sendmmsg+0x200/0x420 [ 275.029183][T12932] __x64_sys_sendmmsg+0x9c/0x100 [ 275.034281][T12932] do_syscall_64+0xcd/0x4c0 [ 275.038944][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.044989][T12932] [ 275.047292][T12932] -> (&f_owner->lock){....}-{3:3} { [ 275.052570][T12932] INITIAL USE at: [ 275.056532][T12932] lock_acquire+0x179/0x350 [ 275.062755][T12932] _raw_write_lock_irq+0x36/0x50 [ 275.069411][T12932] __f_setown+0x61/0x3c0 [ 275.075375][T12932] fcntl_dirnotify+0x78f/0xb50 [ 275.081859][T12932] do_fcntl+0xe62/0x15a0 [ 275.087822][T12932] __x64_sys_fcntl+0x163/0x200 [ 275.094306][T12932] do_syscall_64+0xcd/0x4c0 [ 275.100530][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.108240][T12932] INITIAL READ USE at: [ 275.112636][T12932] lock_acquire+0x179/0x350 [ 275.119306][T12932] _raw_read_lock_irqsave+0x74/0x90 [ 275.126683][T12932] send_sigurg+0x5f/0xc80 [ 275.133183][T12932] sk_send_sigurg+0x76/0x360 [ 275.139931][T12932] unix_stream_sendmsg+0xeb3/0x11d0 [ 275.147284][T12932] ____sys_sendmsg+0xa98/0xc70 [ 275.154223][T12932] ___sys_sendmsg+0x134/0x1d0 [ 275.161158][T12932] __sys_sendmsg+0x16d/0x220 [ 275.167902][T12932] do_syscall_64+0xcd/0x4c0 [ 275.174562][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.182608][T12932] } [ 275.185170][T12932] ... key at: [] __key.1+0x0/0x40 [ 275.192360][T12932] ... acquired at: [ 275.196266][T12932] _raw_read_lock_irqsave+0x74/0x90 [ 275.201628][T12932] send_sigio+0x31/0x3e0 [ 275.206036][T12932] kill_fasync+0x214/0x510 [ 275.210609][T12932] sock_wake_async+0x132/0x160 [ 275.215533][T12932] sock_def_readable+0x522/0x600 [ 275.220625][T12932] unix_stream_sendmsg+0xeeb/0x11d0 [ 275.225979][T12932] ____sys_sendmsg+0xa98/0xc70 [ 275.230903][T12932] ___sys_sendmsg+0x134/0x1d0 [ 275.235734][T12932] __sys_sendmmsg+0x200/0x420 [ 275.240571][T12932] __x64_sys_sendmmsg+0x9c/0x100 [ 275.245665][T12932] do_syscall_64+0xcd/0x4c0 [ 275.250329][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.256377][T12932] [ 275.258681][T12932] -> (&new->fa_lock){....}-{3:3} { [ 275.263797][T12932] INITIAL USE at: [ 275.267669][T12932] lock_acquire+0x179/0x350 [ 275.273730][T12932] _raw_write_lock_irq+0x36/0x50 [ 275.280215][T12932] fasync_insert_entry+0x1ca/0x2a0 [ 275.286875][T12932] fasync_helper+0x60/0xd0 [ 275.292841][T12932] sock_fasync+0x92/0x140 [ 275.298727][T12932] do_vfs_ioctl+0x12ac/0x1a60 [ 275.304953][T12932] __x64_sys_ioctl+0x114/0x210 [ 275.311266][T12932] do_syscall_64+0xcd/0x4c0 [ 275.317316][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.324761][T12932] INITIAL READ USE at: [ 275.329080][T12932] lock_acquire+0x179/0x350 [ 275.335565][T12932] _raw_read_lock_irqsave+0x74/0x90 [ 275.342829][T12932] kill_fasync+0x138/0x510 [ 275.349229][T12932] anon_pipe_read+0xb3c/0x1210 [ 275.355973][T12932] vfs_read+0xa95/0xc60 [ 275.362107][T12932] ksys_read+0x1f8/0x250 [ 275.368329][T12932] do_syscall_64+0xcd/0x4c0 [ 275.374824][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.382717][T12932] } [ 275.385203][T12932] ... key at: [] __key.0+0x0/0x40 [ 275.392305][T12932] ... acquired at: [ 275.396084][T12932] lock_acquire+0x179/0x350 [ 275.400745][T12932] _raw_read_lock_irqsave+0x74/0x90 [ 275.406112][T12932] kill_fasync+0x138/0x510 [ 275.410701][T12932] evdev_pass_values+0x619/0x9b0 [ 275.415888][T12932] evdev_events+0x1bb/0x390 [ 275.420552][T12932] input_pass_values+0x6c7/0x890 [ 275.425647][T12932] input_handle_event+0xf00/0x14d0 [ 275.430915][T12932] input_inject_event+0x1cd/0x390 [ 275.436096][T12932] evdev_write+0x457/0x750 [ 275.440673][T12932] vfs_write+0x29d/0x1150 [ 275.445157][T12932] ksys_write+0x1f8/0x250 [ 275.449642][T12932] do_syscall_64+0xcd/0x4c0 [ 275.454304][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.460353][T12932] [ 275.462656][T12932] [ 275.462656][T12932] stack backtrace: [ 275.468526][T12932] CPU: 1 UID: 0 PID: 12932 Comm: syz.3.3050 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 275.468545][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.468553][T12932] Call Trace: [ 275.468558][T12932] [ 275.468564][T12932] dump_stack_lvl+0x116/0x1f0 [ 275.468582][T12932] check_irq_usage+0x7dc/0x920 [ 275.468600][T12932] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 275.468625][T12932] ? check_path.constprop.0+0x24/0x50 [ 275.468643][T12932] ? __lock_acquire+0x1285/0x1c90 [ 275.468659][T12932] __lock_acquire+0x1285/0x1c90 [ 275.468679][T12932] lock_acquire+0x179/0x350 [ 275.468696][T12932] ? kill_fasync+0x138/0x510 [ 275.468718][T12932] _raw_read_lock_irqsave+0x74/0x90 [ 275.468734][T12932] ? kill_fasync+0x138/0x510 [ 275.468753][T12932] kill_fasync+0x138/0x510 [ 275.468772][T12932] evdev_pass_values+0x619/0x9b0 [ 275.468790][T12932] evdev_events+0x1bb/0x390 [ 275.468805][T12932] input_pass_values+0x6c7/0x890 [ 275.468822][T12932] input_handle_event+0xf00/0x14d0 [ 275.468838][T12932] ? _copy_from_user+0x59/0xd0 [ 275.468861][T12932] input_inject_event+0x1cd/0x390 [ 275.468878][T12932] evdev_write+0x457/0x750 [ 275.468895][T12932] ? __pfx_evdev_write+0x10/0x10 [ 275.468912][T12932] ? bpf_lsm_file_permission+0x9/0x10 [ 275.468931][T12932] ? security_file_permission+0x71/0x210 [ 275.468953][T12932] ? rw_verify_area+0xcf/0x680 [ 275.468975][T12932] ? __pfx_evdev_write+0x10/0x10 [ 275.468990][T12932] vfs_write+0x29d/0x1150 [ 275.469005][T12932] ? __pfx_vfs_write+0x10/0x10 [ 275.469018][T12932] ? find_held_lock+0x2b/0x80 [ 275.469031][T12932] ? __fget_files+0x204/0x3c0 [ 275.469047][T12932] ? __fget_files+0x20e/0x3c0 [ 275.469064][T12932] ksys_write+0x1f8/0x250 [ 275.469078][T12932] ? __pfx_ksys_write+0x10/0x10 [ 275.469093][T12932] ? fdget+0x187/0x210 [ 275.469109][T12932] do_syscall_64+0xcd/0x4c0 [ 275.469127][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.469141][T12932] RIP: 0033:0x7fceae18e969 [ 275.469153][T12932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.469166][T12932] RSP: 002b:00007fceabff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.469180][T12932] RAX: ffffffffffffffda RBX: 00007fceae3b5fa0 RCX: 00007fceae18e969 [ 275.469189][T12932] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 275.469198][T12932] RBP: 00007fceae210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 275.469207][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.469215][T12932] R13: 0000000000000000 R14: 00007fceae3b5fa0 R15: 00007ffd83efe698 [ 275.469229][T12932] [ 275.748692][ T5826] Bluetooth: hci4: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.785724][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 275.785741][ T30] audit: type=1400 audit(1748870806.913:899): avc: denied { write } for pid=5798 comm="syz-executor" path="pipe:[4263]" dev="pipefs" ino=4263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 276.437098][ T910] usb 2-1: device descriptor read/all, error -71 [ 276.913395][ T2962] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.968664][ T2962] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.019298][ T2962] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.088543][ T2962] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.169037][ T2962] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.198527][ T2962] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.248691][ T2962] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.298062][ T2962] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.352784][ T2962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.384388][ T2962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.431988][ T2962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.493357][ T2962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.766981][ T2962] bridge_slave_1: left allmulticast mode [ 277.772627][ T2962] bridge_slave_1: left promiscuous mode [ 277.778306][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.786294][ T2962] bridge_slave_0: left allmulticast mode [ 277.791933][ T2962] bridge_slave_0: left promiscuous mode [ 277.797842][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.806306][ T2962] bridge_slave_1: left allmulticast mode [ 277.811934][ T2962] bridge_slave_1: left promiscuous mode [ 277.817728][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.825490][ T2962] bridge_slave_0: left allmulticast mode [ 277.831332][ T2962] bridge_slave_0: left promiscuous mode [ 277.836949][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.845007][ T2962] bridge_slave_1: left allmulticast mode [ 277.851112][ T2962] bridge_slave_1: left promiscuous mode [ 277.856936][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.864499][ T2962] bridge_slave_0: left allmulticast mode [ 277.870555][ T2962] bridge_slave_0: left promiscuous mode [ 277.876530][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.884481][ T2962] bridge_slave_1: left allmulticast mode [ 277.890192][ T2962] bridge_slave_1: left promiscuous mode [ 277.895896][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.903449][ T2962] bridge_slave_0: left allmulticast mode [ 277.909240][ T2962] bridge_slave_0: left promiscuous mode [ 277.914844][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.992375][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.002004][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.011211][ T2962] bond0 (unregistering): Released all slaves [ 278.063407][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.072751][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.082345][ T2962] bond0 (unregistering): Released all slaves [ 278.120484][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.129870][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.138936][ T2962] bond0 (unregistering): Released all slaves [ 278.223319][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.235221][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.244763][ T2962] bond0 (unregistering): (slave bond1): Releasing backup interface [ 278.253815][ T2962] bond0 (unregistering): (slave bond2): Releasing backup interface [ 278.262028][ T2962] bond0 (unregistering): Released all slaves [ 278.331172][ T2962] bond1 (unregistering): Released all slaves [ 278.400468][ T2962] bond2 (unregistering): Released all slaves [ 278.598275][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.607443][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.616441][ T2962] bond0 (unregistering): (slave bond1): Releasing backup interface [ 278.624584][ T2962] bond0 (unregistering): Released all slaves [ 278.694536][ T2962] bond1 (unregistering): Released all slaves [ 278.808690][ T2962] IPVS: stopping master sync thread 7779 ... [ 279.303724][ T2962] hsr_slave_0: left promiscuous mode [ 279.309325][ T2962] hsr_slave_1: left promiscuous mode [ 279.314791][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.322235][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.329676][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.338344][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.347636][ T2962] hsr_slave_0: left promiscuous mode [ 279.353235][ T2962] hsr_slave_1: left promiscuous mode [ 279.358877][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.366390][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.373814][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.381407][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.389194][ T2962] hsr_slave_0: left promiscuous mode [ 279.394681][ T2962] hsr_slave_1: left promiscuous mode [ 279.400243][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.407650][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.416909][ T2962] hsr_slave_0: left promiscuous mode [ 279.422415][ T2962] hsr_slave_1: left promiscuous mode [ 279.427962][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.435289][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.443718][ T2962] hsr_slave_0: left promiscuous mode [ 279.449395][ T2962] hsr_slave_1: left promiscuous mode [ 279.454833][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.462358][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.473016][ T2962] veth1_macvtap: left promiscuous mode [ 279.478724][ T2962] veth0_macvtap: left promiscuous mode [ 279.484238][ T2962] veth1_vlan: left promiscuous mode [ 279.489749][ T2962] veth0_vlan: left promiscuous mode [ 279.495539][ T2962] veth1_macvtap: left promiscuous mode [ 279.501014][ T2962] veth0_macvtap: left promiscuous mode [ 279.506507][ T2962] veth1_vlan: left promiscuous mode [ 279.511702][ T2962] veth0_vlan: left promiscuous mode [ 279.613706][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 279.631561][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 279.759515][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 279.782405][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 279.853501][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 279.872532][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 280.131845][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 280.158058][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 280.535091][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 280.561524][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 281.903878][ T2962] IPVS: stop unused estimator thread 0...