last executing test programs: 3m29.117793169s ago: executing program 3 (id=2406): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="e8881b9428", 0x5}], 0x1) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) 3m28.976045132s ago: executing program 3 (id=2409): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0xfddbdf25}, 0xc) 3m28.872675575s ago: executing program 3 (id=2411): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0) 3m28.663342375s ago: executing program 3 (id=2414): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m28.46773652s ago: executing program 3 (id=2416): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 3m28.142002969s ago: executing program 3 (id=2421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000010000000000000300000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000002000000000000000000d6ac000000000000000100000000000c0015005907350081"], 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 3m27.872371983s ago: executing program 32 (id=2421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000010000000000000300000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000002000000000000000000d6ac000000000000000100000000000c0015005907350081"], 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 3m22.592557226s ago: executing program 1 (id=2485): mmap(&(0x7f0000b49000/0x2000)=nil, 0x2000, 0xb, 0x31, 0xffffffffffffffff, 0x1feae000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.53984948s ago: executing program 1 (id=2487): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x240008d4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 3m22.409954326s ago: executing program 1 (id=2490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) 3m22.320668925s ago: executing program 1 (id=2491): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x40) 3m22.255678607s ago: executing program 1 (id=2493): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 3m22.179654985s ago: executing program 1 (id=2495): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 3m7.13402774s ago: executing program 33 (id=2495): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 8.507672163s ago: executing program 0 (id=5595): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 8.439926568s ago: executing program 0 (id=5597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.307186032s ago: executing program 0 (id=5601): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) setns(r1, 0x34020000) 8.246896065s ago: executing program 0 (id=5603): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 8.16822175s ago: executing program 0 (id=5604): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 7.815818368s ago: executing program 0 (id=5613): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x2}) 7.603485418s ago: executing program 34 (id=5613): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x2}) 2.185949603s ago: executing program 6 (id=5667): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882000596aaaa02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 2.073684363s ago: executing program 4 (id=5670): r0 = io_uring_setup(0x4717, &(0x7f00000000c0)={0x0, 0xc0a5, 0x80, 0x800, 0x124}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) getpeername(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.927737979s ago: executing program 6 (id=5672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000600)="f30f22a2f2363e0f300fc79a590a0bc8b8edc6aa86ef66bafc0cb0afee673e360f73d41cd3dd0f01c966baf80cb8ca2dca87ef66bafc0c66ed670f38c87332653e36650f350f32", 0x47}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.807670334s ago: executing program 2 (id=5675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2060, 0x0, {0x3, r3}}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 1.752950478s ago: executing program 4 (id=5676): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 1.633619701s ago: executing program 4 (id=5677): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000010000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f000000e000/0x3000)=nil, 0x3000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) 1.504459698s ago: executing program 4 (id=5678): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) shutdown(r0, 0x1) write(r0, &(0x7f0000000640)='W', 0x1) 1.395049998s ago: executing program 6 (id=5679): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x72, [[0x5, 0x8001, 0xb, 0x0, 0x7, 0x1ff, 0x7, 0xd], [0x401, 0x6, 0x42ba, 0x0, 0x9, 0xfffffff7, 0x8001, 0x10], [0x863, 0x3, 0x5, 0x7, 0xffffffff, 0x504, 0x3, 0x7]], '\x00', [{0x3, 0xa14d, 0x1, 0x1, 0x1, 0x1}, {0x10, 0x7, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x1, 0x1}, {0x8000, 0x2}, {0x10000, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7, 0xffff0000, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x200, 0x1, 0x1, 0x1}]}) 1.28357242s ago: executing program 5 (id=5680): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.272332696s ago: executing program 4 (id=5681): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14d22000) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 1.153729488s ago: executing program 5 (id=5682): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0xb3c, &(0x7f00000000c0)={0x0, 0x45d6, 0x1, 0x4, 0x7}) 988.672029ms ago: executing program 5 (id=5683): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 899.0912ms ago: executing program 5 (id=5684): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x0, 0x7ffffff5, 0x3, 0x0, 0x0, 0x473f, 0x1}) 880.145853ms ago: executing program 2 (id=5685): syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) close(r0) 573.851645ms ago: executing program 2 (id=5686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 497.628844ms ago: executing program 5 (id=5687): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 424.826901ms ago: executing program 2 (id=5688): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x1e, 0x402, 0xfffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 409.768687ms ago: executing program 6 (id=5689): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 398.420854ms ago: executing program 5 (id=5690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ftruncate(r0, 0x3) 319.284326ms ago: executing program 4 (id=5691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcfffdff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000840)={0x24, &(0x7f0000000600)={0x20, 0x9, 0x1, "d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000a00)={0x0, 0x18, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 247.659537ms ago: executing program 2 (id=5692): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 234.612995ms ago: executing program 6 (id=5693): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x13d, 0x9, 0x0, 0x6, 0x18, "737b27e90e2947801cf3a246ada40a9fd86000"}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 113.169907ms ago: executing program 2 (id=5694): bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x22, 0x4, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0xd6, 0x90, 0x22, 0x40, 0xb48, 0x1009, 0x6806, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0xc, 0xa0, 0x32, [{{0x9, 0x4, 0x33, 0xfb, 0x0, 0xad, 0x55, 0x17, 0x2}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) fspick(0xffffffffffffff9c, 0x0, 0xf) syz_usb_disconnect(r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) 0s ago: executing program 6 (id=5695): r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x0 [ 311.359710][ T30] audit: type=1400 audit(1766373489.163:732): avc: denied { relabelfrom } for pid=15291 comm="syz.5.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 311.384738][ T30] audit: type=1400 audit(1766373489.163:733): avc: denied { relabelto } for pid=15291 comm="syz.5.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 311.694095][ T5828] usb 3-1: 0:2 : does not exist [ 312.312459][ T5828] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 312.354920][ T5828] usb 3-1: USB disconnect, device number 55 [ 312.370841][ T30] audit: type=1400 audit(1766373490.173:734): avc: denied { read } for pid=15324 comm="syz.6.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.414634][T11149] udevd[11149]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.899248][ T5828] IPVS: starting estimator thread 0... [ 312.983283][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 313.005867][T15338] IPVS: using max 46 ests per chain, 110400 per kthread [ 313.145083][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.164274][ T24] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.185803][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.200005][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.209507][ T24] usb 6-1: Product: syz [ 313.213822][ T24] usb 6-1: Manufacturer: syz [ 313.218414][ T24] usb 6-1: SerialNumber: syz [ 313.262078][T15319] kexec: Could not allocate control_code_buffer [ 313.353071][ T5828] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 313.519256][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.535130][T15366] netlink: 'syz.2.4051': attribute type 1 has an invalid length. [ 313.537411][ T5828] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.552455][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.573459][ T5828] usb 7-1: config 0 descriptor?? [ 313.801708][ C0] hrtimer: interrupt took 9591 ns [ 313.996057][ T5828] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor [ 314.055325][ T5828] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0040/input/input60 [ 314.244741][ T24] cdc_ncm 6-1:1.0: bind() failure [ 314.260968][ T5828] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 314.288658][ T24] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 314.321741][ T24] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 314.347155][ T24] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 314.380025][ T24] usb 6-1: USB disconnect, device number 24 [ 314.673258][ T30] audit: type=1400 audit(1766373492.483:735): avc: denied { setopt } for pid=15408 comm="syz.4.4069" lport=48109 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 314.867820][ T24] usb 7-1: USB disconnect, device number 14 acpid: input device has been disconnected, fd 3 [ 314.963139][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 315.122916][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 315.129896][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 315.139771][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 315.150428][ T9] usb 3-1: config 1 has no interface number 1 [ 315.156603][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 315.167925][ T9] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.181032][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 315.190708][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 315.200110][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.208342][ T9] usb 3-1: Product: syz [ 315.212551][ T9] usb 3-1: Manufacturer: syz [ 315.217222][ T9] usb 3-1: SerialNumber: syz [ 315.224379][T15415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.485028][ T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 315.617275][T15430] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 315.709376][ T9] usb 3-1: USB disconnect, device number 56 [ 316.176288][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.076451][T15485] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4104'. [ 317.588579][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4119'. [ 317.706102][ T30] audit: type=1400 audit(1766373495.513:736): avc: denied { module_load } for pid=15519 comm="syz.6.4123" path="/285/bus" dev="tmpfs" ino=1485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 317.724236][T15521] Invalid ELF header magic: != ELF [ 317.736698][ T5891] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 317.808698][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4126'. [ 317.823231][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4126'. [ 317.893396][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 317.900542][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.925267][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.936495][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 317.961562][ T5891] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 317.971188][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.981017][T15538] input: syz1 as /devices/virtual/input/input61 [ 317.992689][ T5891] usb 6-1: config 0 descriptor?? [ 318.265883][ T30] audit: type=1400 audit(1766373496.073:737): avc: denied { ioctl } for pid=15553 comm="syz.6.4139" path="socket:[57879]" dev="sockfs" ino=57879 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 318.417634][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.429018][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.469295][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.477930][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.487803][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.495952][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.519525][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.531071][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.558641][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.575706][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.588050][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.601418][ T5891] cougar 0003:060B:500A.0041: unknown main item tag 0x0 [ 318.615314][ T5891] cougar 0003:060B:500A.0041: unexpected long global item [ 318.625233][ T5891] cougar 0003:060B:500A.0041: parse failed [ 318.632482][ T5891] cougar 0003:060B:500A.0041: probe with driver cougar failed with error -22 [ 318.675629][ T5828] usb 6-1: USB disconnect, device number 25 [ 319.086794][ T9266] libceph: connect (1)[c::]:6789 error -101 [ 319.094096][ T9266] libceph: mon0 (1)[c::]:6789 connect error [ 319.103898][T15599] ceph: No mds server is up or the cluster is laggy [ 319.106150][ T9266] libceph: connect (1)[c::]:6789 error -101 [ 319.118338][ T9266] libceph: mon0 (1)[c::]:6789 connect error [ 319.427206][ T30] audit: type=1400 audit(1766373497.233:738): avc: denied { remount } for pid=15619 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 319.501677][T15625] pim6reg1: entered promiscuous mode [ 319.508747][T15625] pim6reg1: entered allmulticast mode [ 319.582922][ T5891] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 319.632993][ T9266] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 319.641457][ T30] audit: type=1326 audit(1766373497.443:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1f98f749 code=0x7ffc0000 [ 319.667137][ T30] audit: type=1326 audit(1766373497.443:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1f98f749 code=0x7ffc0000 [ 319.696664][ T30] audit: type=1326 audit(1766373497.453:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb1f98f749 code=0x7ffc0000 [ 319.720798][ T30] audit: type=1326 audit(1766373497.453:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1f98f749 code=0x7ffc0000 [ 319.753051][ T5828] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 319.761303][ T30] audit: type=1326 audit(1766373497.453:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb1f98f749 code=0x7ffc0000 [ 319.785719][ T30] audit: type=1326 audit(1766373497.473:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1f98f749 code=0x7ffc0000 [ 319.815949][ T5891] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 319.822945][ T9266] usb 3-1: Using ep0 maxpacket: 32 [ 319.833253][ T5891] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 319.844624][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.854276][ T5891] usb 6-1: Product: syz [ 319.858444][ T5891] usb 6-1: Manufacturer: syz [ 319.864110][ T5891] usb 6-1: SerialNumber: syz [ 319.864473][ T30] audit: type=1326 audit(1766373497.473:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1f98f749 code=0x7ffc0000 [ 319.864662][ T9266] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.905771][ T5891] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 319.913136][ T9266] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 319.924278][ T9266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.935854][ T9266] usb 3-1: config 0 descriptor?? [ 319.942917][ T5828] usb 7-1: Using ep0 maxpacket: 8 [ 319.949284][ T5828] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 319.968794][ T5828] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.981981][ T5828] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.992235][ T5828] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.002580][ T5828] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.015745][ T5828] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.025520][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.255439][ T5828] usb 7-1: usb_control_msg returned -32 [ 320.261085][ T5828] usbtmc 7-1:16.0: can't read capabilities [ 320.330489][ T5891] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 320.341949][ T5891] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 320.351008][ T5891] usb 6-1: media controller created [ 320.368116][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.390698][ T9266] corsair-cpro 0003:1B1C:0C10.0042: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 320.482701][ T5891] usb 6-1: USB disconnect, device number 26 [ 320.628999][T15654] usbtmc 7-1:16.0: control status returned 0 [ 320.777627][ T9266] corsair-cpro 0003:1B1C:0C10.0042: probe with driver corsair-cpro failed with error -71 [ 320.791308][ T9266] usb 3-1: USB disconnect, device number 57 [ 320.830600][ T5891] usb 7-1: USB disconnect, device number 15 [ 322.172927][ T5891] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 322.262738][T15733] input: syz1 as /devices/virtual/input/input62 [ 322.269212][T15733] input: failed to attach handler leds to device input62, error: -6 [ 322.325710][ T5891] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 322.352946][ T5891] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 322.372306][ T5891] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 322.387640][ T5891] usb 7-1: config 220 has no interface number 2 [ 322.394304][ T5891] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 322.418289][ T5891] usb 7-1: config 220 interface 0 has no altsetting 0 [ 322.425207][ T5891] usb 7-1: config 220 interface 76 has no altsetting 0 [ 322.435310][ T5891] usb 7-1: config 220 interface 1 has no altsetting 0 [ 322.444852][ T5891] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 322.454206][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.462916][ T5891] usb 7-1: Product: syz [ 322.467578][ T5891] usb 7-1: Manufacturer: syz [ 322.472356][ T5891] usb 7-1: SerialNumber: syz [ 322.555062][T15746] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4224'. [ 322.578882][ T11] block nbd1: Possible stuck request ffff888026758000: control (read@0,1024B). Runtime 120 seconds [ 322.590415][ T11] block nbd1: Possible stuck request ffff888026758200: control (read@1024,1024B). Runtime 120 seconds [ 322.601552][ T11] block nbd1: Possible stuck request ffff888026758400: control (read@2048,1024B). Runtime 120 seconds [ 322.613463][ T11] block nbd1: Possible stuck request ffff888026758600: control (read@3072,1024B). Runtime 120 seconds [ 322.696730][ T5891] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 322.704179][ T5891] uvcvideo 7-1:220.0: No valid video chain found. [ 322.712192][ T5891] usb 7-1: selecting invalid altsetting 0 [ 322.725655][ T5891] usb 7-1: selecting invalid altsetting 0 [ 322.731413][ T5891] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 322.743037][ T5891] usb 7-1: USB disconnect, device number 16 [ 322.951348][T15765] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 323.142816][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 323.148973][ T30] audit: type=1400 audit(1766373500.943:751): avc: denied { create } for pid=15771 comm="syz.0.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 323.171523][ T30] audit: type=1400 audit(1766373500.983:752): avc: denied { write } for pid=15771 comm="syz.0.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 323.991680][ T30] audit: type=1400 audit(1766373501.793:753): avc: denied { create } for pid=15796 comm="syz.5.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 324.123619][T15803] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4250'. [ 324.553406][T15828] netlink: zone id is out of range [ 324.748154][T15835] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 324.855236][T15839] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4265'. [ 325.252060][T15857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4274'. [ 325.451027][T15865] Invalid argument reading file caps for ./file0 [ 325.718450][T15881] loop2: detected capacity change from 0 to 1 [ 325.729978][T15881] Dev loop2: unable to read RDB block 1 [ 325.735807][T15881] loop2: unable to read partition table [ 325.741638][T15881] loop2: partition table beyond EOD, truncated [ 325.748449][T15881] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 326.002149][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4292'. [ 326.048179][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4293'. [ 326.372991][ T9266] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 326.539610][ T9266] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.575468][ T9266] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.600814][ T9266] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 326.622768][ T9266] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 326.635831][ T9266] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 326.640227][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4309'. [ 326.647714][ T9266] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.671571][ T9266] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.711255][ T9266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.733006][ T9266] usb 6-1: Product: syz [ 326.737189][ T9266] usb 6-1: Manufacturer: syz [ 326.753235][ T9266] usb 6-1: SerialNumber: syz [ 326.762452][T15905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 326.909504][T15947] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.996244][T15905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 327.008946][T15947] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.116541][T15947] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.177353][ T30] audit: type=1400 audit(1766373504.983:754): avc: denied { mounton } for pid=15959 comm="syz.2.4322" path="/690/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 327.226419][T15947] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.254604][ T30] audit: type=1400 audit(1766373505.063:755): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 327.373594][ T3782] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.397018][ T3697] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.421934][ T3697] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.455453][ T3782] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.594560][T15976] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4328'. [ 327.633878][T15905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 327.635919][T15978] netlink: 'syz.6.4329': attribute type 1 has an invalid length. [ 327.650350][T15978] netlink: 'syz.6.4329': attribute type 6 has an invalid length. [ 327.658243][T15978] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4329'. [ 327.732507][ T30] audit: type=1400 audit(1766373505.533:756): avc: denied { remount } for pid=15981 comm="syz.6.4331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 327.850591][ T9266] cdc_ncm 6-1:1.0: bind() failure [ 327.862584][ T9266] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 327.874375][ T9266] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 327.885088][ T9266] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 327.898775][ T9266] usb 6-1: USB disconnect, device number 27 [ 327.926606][T15986] pim6reg1: entered promiscuous mode [ 327.931916][T15986] pim6reg1: entered allmulticast mode [ 328.583036][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 328.709981][T16020] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.746311][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 328.754543][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 328.764990][ T9] usb 3-1: config 0 has no interface number 0 [ 328.773070][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 328.782234][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.797475][ T9] usb 3-1: Product: syz [ 328.801641][ T9] usb 3-1: Manufacturer: syz [ 328.815643][T16020] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.816123][ T9] usb 3-1: SerialNumber: syz [ 328.841451][ T9] usb 3-1: config 0 descriptor?? [ 328.853568][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 328.883954][T16020] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.976463][T16020] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.069283][ T3417] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.083462][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 329.108464][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 329.109132][ T7078] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.128765][ T7078] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.150480][ T7078] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.503763][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 329.505227][ T5919] usb 3-1: USB disconnect, device number 58 [ 329.535858][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 329.563203][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 329.575875][ T5919] quatech2 3-1:0.51: device disconnected [ 329.729358][T16063] bridge1: entered promiscuous mode [ 329.734905][T16063] bridge1: entered allmulticast mode [ 329.746583][T16063] team0: Port device bridge1 added [ 329.755575][T16063] bridge0: port 3(team0) entered blocking state [ 329.762666][T16063] bridge0: port 3(team0) entered disabled state [ 329.770460][T16063] team0: entered allmulticast mode [ 329.775896][T16063] team_slave_0: entered allmulticast mode [ 329.781736][T16063] team_slave_1: entered allmulticast mode [ 329.789586][T16063] team0: entered promiscuous mode [ 329.795380][T16063] team_slave_0: entered promiscuous mode [ 329.801408][T16063] team_slave_1: entered promiscuous mode [ 329.812101][T16063] bridge0: port 3(team0) entered blocking state [ 329.818504][T16063] bridge0: port 3(team0) entered forwarding state [ 330.731270][T16114] ªªªªªª: renamed from wg2 (while UP) [ 330.943604][ T5919] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 331.103041][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 331.112324][ T5919] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 331.136327][ T5919] usb 3-1: config 0 has no interface number 0 [ 331.145494][ T5919] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.157273][ T5919] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 331.169515][ T5919] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 331.187143][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 331.195387][ T5919] usb 3-1: Product: syz [ 331.199594][ T5919] usb 3-1: SerialNumber: syz [ 331.209388][ T5919] usb 3-1: config 0 descriptor?? [ 331.219880][ T5919] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 331.232087][ T5919] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input63 [ 331.338123][ T5919] kernel write not supported for file /uhid (pid: 5919 comm: kworker/1:7) [ 331.426067][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.426085][ T9] usb 3-1: USB disconnect, device number 59 [ 331.439171][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 331.457573][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 acpid: input device has been disconnected, fd 3 [ 331.592101][T16157] SELinux: failed to load policy [ 331.658596][T16161] kvm: user requested TSC rate below hardware speed [ 331.814107][ T30] audit: type=1400 audit(1766373509.623:757): avc: denied { append } for pid=16166 comm="syz.5.4417" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 331.872276][ T30] audit: type=1400 audit(1766373509.643:758): avc: denied { map } for pid=16166 comm="syz.5.4417" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 331.935125][ T30] audit: type=1400 audit(1766373509.643:759): avc: denied { write execute } for pid=16166 comm="syz.5.4417" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 331.959685][ T30] audit: type=1400 audit(1766373509.653:760): avc: denied { write } for pid=16170 comm="syz.6.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 332.178560][T16184] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4425'. [ 332.518972][T16201] lo: Caught tx_queue_len zero misconfig [ 332.916507][T16229] blktrace: Concurrent blktraces are not allowed on loop10 [ 333.119649][T16237] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.179534][ T30] audit: type=1400 audit(1766373510.983:761): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 333.514612][ T30] audit: type=1326 audit(1766373511.323:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.6.4464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd89af8f749 code=0x0 [ 333.713074][ T5919] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 333.803806][ T5811] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 333.825778][T16282] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4472'. [ 333.864934][ T5919] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.876335][ T5919] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.889386][ T5919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.899453][ T5919] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 333.908693][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.918974][ T5919] usb 6-1: config 0 descriptor?? [ 333.985128][ T5811] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 333.995286][ T5811] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 334.011564][ T5811] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 334.024093][ T5811] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 334.035012][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.043762][ T5811] usb 3-1: Product: syz [ 334.047972][ T5811] usb 3-1: Manufacturer: syz [ 334.052621][ T5811] usb 3-1: SerialNumber: syz [ 334.073380][ T5811] usb 3-1: config 0 descriptor?? [ 334.079972][T16267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 334.088267][T16267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 334.102714][ T5811] usb 3-1: ucan: probing device on interface #0 [ 334.231586][T16298] bond1: invalid ARP target 0.0.0.0 specified for addition [ 334.238959][T16298] bond1: option arp_ip_target: invalid value (0) [ 334.248364][T16298] bond1 (unregistering): Released all slaves [ 334.343786][ T5919] holtek 0003:1241:5015.0043: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 334.378386][ T5919] holtek 0003:1241:5015.0043: no inputs found [ 334.540733][ T5919] usb 6-1: USB disconnect, device number 28 [ 334.711873][ T5811] ucan 3-1:0.0 can0: registered device [ 334.762939][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 334.908902][ T5811] ucan 3-1:0.0 can0: firmware string: ¹i™ü“c±.èöÌ©râ. -Ócí® [ 334.917938][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.931808][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.941866][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.951194][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.960250][ T9] usb 7-1: SerialNumber: syz [ 335.177173][ T5811] usb 3-1: USB disconnect, device number 60 [ 335.213151][ T9] usb 7-1: 0:2 : does not exist [ 335.235289][ T9] usb 7-1: usbmixer: too many channels (61) in unit 5 [ 335.259422][ T9] usb 7-1: USB disconnect, device number 17 [ 335.642911][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 335.793244][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 335.799948][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.811907][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.821819][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 335.828582][ T9] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 335.837760][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.848504][ T9] usb 6-1: config 0 descriptor?? [ 335.972987][ T5811] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 336.122999][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 336.129188][ T5811] usb 3-1: config 1 has an invalid interface number: 79 but max is 0 [ 336.137358][ T5811] usb 3-1: config 1 has no interface number 0 [ 336.143669][ T5811] usb 3-1: config 1 interface 79 has no altsetting 0 [ 336.152045][ T5811] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=34.45 [ 336.161222][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.169301][ T5811] usb 3-1: Product: syz [ 336.173643][ T5811] usb 3-1: Manufacturer: syz [ 336.178283][ T5811] usb 3-1: SerialNumber: syz [ 336.272300][ T9] hid (null): global environment stack underflow [ 336.278902][ T9] hid (null): unknown global tag 0xe [ 336.285862][ T9] hid (null): report_id 62470 is invalid [ 336.299310][ T9] hid (null): report_id 0 is invalid [ 336.306109][ T9] hid (null): global environment stack underflow [ 336.312544][ T9] hid (null): unknown global tag 0xc [ 336.317973][ T9] hid (null): unknown global tag 0xe [ 336.323587][ T9] hid (null): report_id 1478990255 is invalid [ 336.329770][ T9] hid (null): report_id 17176 is invalid [ 336.344319][ T9] hid_parser_main: 443 callbacks suppressed [ 336.344339][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.357505][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.364513][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.371522][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.378598][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.386204][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.393353][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.405618][ T5811] usb_ehset_test 3-1:1.79: probe with driver usb_ehset_test failed with error -32 [ 336.414932][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.421888][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.431351][T16371] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4501'. [ 336.441841][ T5811] usb 3-1: USB disconnect, device number 61 [ 336.447842][ T9] cougar 0003:060B:500A.0044: unknown main item tag 0x0 [ 336.458728][ T9] cougar 0003:060B:500A.0044: unexpected long global item [ 336.466946][ T9] cougar 0003:060B:500A.0044: parse failed [ 336.467623][T16370] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4501'. [ 336.472925][ T9] cougar 0003:060B:500A.0044: probe with driver cougar failed with error -22 [ 336.528901][ T5828] usb 6-1: USB disconnect, device number 29 [ 336.557469][T16373] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 336.569401][T16373] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 336.579161][T16373] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4502'. [ 337.264282][T16409] syzkaller1: entered promiscuous mode [ 337.279313][T16409] syzkaller1: entered allmulticast mode [ 337.764769][ T30] audit: type=1400 audit(1766373515.573:763): avc: denied { ioctl } for pid=16443 comm="syz.0.4533" path="socket:[61789]" dev="sockfs" ino=61789 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 338.076241][T16462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.079393][ T30] audit: type=1400 audit(1766373515.883:764): avc: denied { ioctl } for pid=16463 comm="syz.0.4543" path="socket:[60910]" dev="sockfs" ino=60910 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 338.503179][ T5919] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 338.519426][ T30] audit: type=1400 audit(1766373516.323:765): avc: denied { create } for pid=16488 comm="syz.6.4554" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 338.652991][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 338.660372][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.670175][ T5919] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 338.679850][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.688783][ T5919] usb 3-1: Product: syz [ 338.693269][ T5919] usb 3-1: Manufacturer: syz [ 338.697880][ T5919] usb 3-1: SerialNumber: syz [ 338.714106][ T5919] usb 3-1: config 0 descriptor?? [ 339.130754][ T5919] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 339.799125][ T9] usb 3-1: USB disconnect, device number 62 [ 340.567808][ T9] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.946072][T16574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.148741][T16574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.316348][T16574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.510241][T16574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.632608][ T7078] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.648213][ T7078] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.656603][ T5919] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 341.669352][ T7078] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.688482][ T7078] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.749052][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4589'. [ 341.813249][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 341.821581][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.835390][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.847211][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 341.861608][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 341.872225][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.884930][ T5919] usb 3-1: config 0 descriptor?? [ 342.243399][ T5812] Bluetooth: hci0: command 0x1003 tx timeout [ 342.243889][ T5135] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.303518][ T5919] HID 045e:07da: Invalid code 65791 type 1 [ 342.315230][ T5919] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0046/input/input64 [ 342.332140][ T5919] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 342.524704][ T9] usb 3-1: USB disconnect, device number 63 acpid: input device has been disconnected, fd 3 [ 342.636175][T16653] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4608'. [ 343.619571][T16711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4631'. [ 343.689039][T16717] Invalid argument reading file caps for ./file0 [ 343.815497][ T30] audit: type=1400 audit(1766373521.623:766): avc: denied { connect } for pid=16727 comm="syz.6.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 343.907829][T16731] trusted_key: syz.6.4639 sent an empty control message without MSG_MORE. [ 345.982634][T16837] lo speed is unknown, defaulting to 1000 [ 346.012911][ T5811] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 346.222013][ T5811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.237558][ T5811] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 346.256089][ T5811] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.276461][ T5811] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.286284][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.294425][ T5811] usb 7-1: Product: syz [ 346.298590][ T5811] usb 7-1: Manufacturer: syz [ 346.303305][ T5811] usb 7-1: SerialNumber: syz [ 346.656543][T16862] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4693'. [ 346.714063][T16864] lo speed is unknown, defaulting to 1000 [ 347.242973][ T9266] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 347.337510][ T5811] cdc_ncm 7-1:1.0: bind() failure [ 347.345542][ T5811] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 347.358542][ T5811] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 347.424512][ T9266] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.432744][ T9266] usb 6-1: config 0 has no interface number 0 [ 347.441366][ T9266] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 347.454622][ T9266] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 347.467190][ T9266] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 347.477391][ T9266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.520676][ T5811] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 347.541356][ T9266] usb 6-1: config 0 descriptor?? [ 347.560648][ T5811] usb 7-1: USB disconnect, device number 18 [ 347.568709][T16872] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 347.601897][ T9266] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 347.861195][ T5811] usb 6-1: USB disconnect, device number 30 [ 347.867311][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 347.957491][T16886] loop6: detected capacity change from 0 to 524287999 [ 348.109757][ T30] audit: type=1400 audit(1766373525.913:767): avc: denied { associate } for pid=16891 comm="syz.4.4705" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 348.172181][ T30] audit: type=1400 audit(1766373525.963:768): avc: denied { map_create } for pid=16892 comm="syz.6.4706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.278767][ T30] audit: type=1400 audit(1766373526.083:769): avc: denied { prog_load } for pid=16896 comm="syz.4.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.311455][ T30] audit: type=1400 audit(1766373526.083:770): avc: denied { bpf } for pid=16896 comm="syz.4.4708" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 348.392248][ T30] audit: type=1400 audit(1766373526.083:771): avc: denied { perfmon } for pid=16896 comm="syz.4.4708" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 348.451957][ T30] audit: type=1400 audit(1766373526.083:772): avc: denied { prog_run } for pid=16896 comm="syz.4.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.518977][ T30] audit: type=1400 audit(1766373526.303:773): avc: denied { map_read map_write } for pid=16899 comm="syz.6.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.741762][T16902] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 348.773902][T16904] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4712'. [ 348.979857][T16902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.031985][T16910] bond1: (slave geneve2): making interface the new active one [ 349.091864][T16910] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 349.108365][ T3697] netdevsim netdevsim4 ªªªªª»: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.117112][ T3697] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.183079][ T3697] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.191895][ T3697] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.444842][T16927] ubi0: attaching mtd0 [ 349.470164][T16927] ubi0: scanning is finished [ 349.488208][T16927] ubi0: empty MTD device detected [ 349.662454][T16927] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 349.682633][T16927] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 349.689994][T16927] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 349.697478][T16927] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 349.704986][T16927] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 349.711824][T16927] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 349.719981][T16927] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 762082125 [ 349.742369][T16927] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 349.774196][T16928] ubi0: background thread "ubi_bgt0d" started, PID 16928 [ 350.184065][ T30] audit: type=1400 audit(1766373527.993:774): avc: denied { name_bind } for pid=16936 comm="syz.6.4724" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 350.262958][ T30] audit: type=1400 audit(1766373528.033:775): avc: denied { lock } for pid=16938 comm="syz.4.4725" path="socket:[63983]" dev="sockfs" ino=63983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 350.458421][T16945] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4727'. [ 350.853045][ T9266] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 351.017774][ T9266] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 351.031805][ T9266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.040497][ T9266] usb 6-1: Product: syz [ 351.045251][ T9266] usb 6-1: Manufacturer: syz [ 351.049847][ T9266] usb 6-1: SerialNumber: syz [ 351.057292][ T9266] usb 6-1: config 0 descriptor?? [ 351.276014][ T9266] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 351.298402][ T9266] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 351.308907][ T9266] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 351.324944][ T9266] usb 6-1: USB disconnect, device number 31 [ 351.680108][T16973] netlink: 'syz.4.4738': attribute type 9 has an invalid length. [ 351.692363][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4738'. [ 351.709147][T16973] macvlan0: entered promiscuous mode [ 351.714824][T16973] macvlan0: entered allmulticast mode [ 351.720196][T16973] hsr0: entered allmulticast mode [ 351.725398][T16973] hsr_slave_0: entered allmulticast mode [ 351.731316][T16973] hsr_slave_1: entered allmulticast mode [ 351.748331][T16973] netlink: 'syz.4.4738': attribute type 9 has an invalid length. [ 351.756135][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4738'. [ 351.770502][T16973] macvlan1: entered promiscuous mode [ 351.776225][T16973] macvlan1: entered allmulticast mode [ 351.896438][ T30] audit: type=1400 audit(1766373529.703:776): avc: denied { allowed } for pid=16978 comm="syz.4.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 352.579874][T16995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4747'. [ 352.662615][ T11] block nbd1: Possible stuck request ffff888026758000: control (read@0,1024B). Runtime 150 seconds [ 352.674621][ T11] block nbd1: Possible stuck request ffff888026758200: control (read@1024,1024B). Runtime 150 seconds [ 352.685710][ T11] block nbd1: Possible stuck request ffff888026758400: control (read@2048,1024B). Runtime 150 seconds [ 352.701711][ T11] block nbd1: Possible stuck request ffff888026758600: control (read@3072,1024B). Runtime 150 seconds [ 352.879308][T17004] netlink: 'syz.4.4751': attribute type 1 has an invalid length. [ 352.952577][T17006] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 352.963592][T17006] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 352.975807][T17006] bond2: (slave vxcan1): making interface the new active one [ 352.985329][T17006] bond2: (slave vxcan1): Enslaving as an active interface with an up link [ 353.073141][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4753'. [ 353.100400][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4753'. [ 353.117610][T17013] netlink: 'syz.5.4754': attribute type 9 has an invalid length. [ 353.164251][T17013] netlink: 'syz.5.4754': attribute type 11 has an invalid length. [ 353.187869][T17013] netlink: 'syz.5.4754': attribute type 12 has an invalid length. [ 353.202116][T17013] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.4754'. [ 353.217104][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4754'. [ 353.439839][ T30] audit: type=1400 audit(1766373531.243:777): avc: denied { block_suspend } for pid=17028 comm="syz.4.4760" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.797054][T17045] input: syz0 as /devices/virtual/input/input65 [ 354.187150][T17061] netlink: 67 bytes leftover after parsing attributes in process `syz.6.4773'. [ 354.193186][ T5947] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 354.353125][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 354.369314][ T5947] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 354.406580][ T5947] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 354.415243][ T5947] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 354.419605][ T30] audit: type=1400 audit(1766373532.213:778): avc: denied { read } for pid=17065 comm="syz.6.4777" dev="nsfs" ino=4026533396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 354.446944][ T5947] usb 3-1: config 166 has no interface number 0 [ 354.453307][ T5947] usb 3-1: config 166 has no interface number 1 [ 354.459689][ T5947] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 354.471076][ T5947] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 354.482325][ T5947] usb 3-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 354.496905][ T5947] usb 3-1: config 166 interface 177 has no altsetting 0 [ 354.503954][ T5947] usb 3-1: config 166 interface 34 has no altsetting 0 [ 354.518003][ T5947] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 354.538017][ T30] audit: type=1400 audit(1766373532.213:779): avc: denied { open } for pid=17065 comm="syz.6.4777" path="net:[4026533396]" dev="nsfs" ino=4026533396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 354.585671][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.643365][ T5947] usb 3-1: Product: syz [ 354.662966][ T5947] usb 3-1: Manufacturer: syz [ 354.667576][ T5947] usb 3-1: SerialNumber: syz [ 354.901365][ T30] audit: type=1400 audit(1766373532.703:780): avc: denied { read } for pid=17082 comm="syz.5.4783" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 354.944128][ T5947] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 354.946710][ T30] audit: type=1400 audit(1766373532.743:781): avc: denied { open } for pid=17082 comm="syz.5.4783" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 355.062510][ T5947] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 355.109416][ T30] audit: type=1400 audit(1766373532.743:782): avc: denied { write } for pid=17082 comm="syz.5.4783" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 355.142159][ T5947] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 355.183213][ T5947] uvcvideo 3-1:166.34: No valid video chain found. [ 355.188734][ T30] audit: type=1400 audit(1766373532.743:783): avc: denied { ioctl } for pid=17082 comm="syz.5.4783" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 355.199825][ T5947] usb 3-1: USB disconnect, device number 64 [ 355.418019][T17097] netlink: 'syz.6.4786': attribute type 13 has an invalid length. [ 355.447096][T17097] netlink: 'syz.6.4786': attribute type 17 has an invalid length. [ 355.505330][T17097] syz_tun: left promiscuous mode [ 355.569174][T17097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.573428][ T5947] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 356.754519][ T5947] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 356.833416][ T5947] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.842478][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.893370][ T5947] usb 7-1: Product: syz [ 356.898043][ T5947] usb 7-1: Manufacturer: syz [ 356.902699][ T5947] usb 7-1: SerialNumber: syz [ 357.341021][T17055] Set syz1 is full, maxelem 65536 reached [ 357.817102][T17164] SELinux: ebitmap: map size 5 does not match my size 64 (high bit was 6) [ 357.849936][T17164] SELinux: failed to load policy [ 357.988960][ T5947] cdc_ncm 7-1:1.0: bind() failure [ 358.001143][ T5947] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 358.011109][ T5947] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 358.030709][ T5947] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 358.054656][ T5947] usb 7-1: USB disconnect, device number 19 [ 358.350484][T17188] lo speed is unknown, defaulting to 1000 [ 358.768994][T17197] lo speed is unknown, defaulting to 1000 [ 359.086192][ T30] audit: type=1400 audit(1766373536.883:784): avc: denied { name_bind } for pid=17211 comm="syz.5.4826" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 359.182775][T17216] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 359.230335][T17216] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 359.432236][T17205] lo speed is unknown, defaulting to 1000 [ 359.504892][T17207] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4824'. [ 359.655750][ T5811] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 359.805129][ T30] audit: type=1400 audit(1766373537.613:785): avc: denied { watch watch_reads } for pid=17227 comm="syz.5.4832" path="/454/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 359.833726][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 359.841131][ T5811] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 359.893139][ T5811] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 359.893462][T17231] overlayfs: failed to clone lowerpath [ 359.932589][ T5811] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.945351][ T5811] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 359.970578][ T5811] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 360.000024][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.032871][ T5811] usb 3-1: Product: syz [ 360.037085][ T5811] usb 3-1: Manufacturer: syz [ 360.075267][ T5811] usb 3-1: SerialNumber: syz [ 360.104094][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 360.128655][ T5811] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input66 [ 360.326566][ T5811] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 360.335817][ T5811] (id 0x00) [ 360.402982][ T5811] rc_core: IR keymap rc-imon-pad not found [ 360.409906][ T5811] Registered IR keymap rc-empty [ 360.432977][ T5811] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 360.493137][ T5811] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 360.609090][ T5811] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 360.654620][ T5811] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input67 [ 360.697974][ T5811] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:65> initialized [ 360.778251][ T5811] usb 3-1: USB disconnect, device number 65 acpid: input device has been disconnected, fd 3 acpid: input device has been disconnected, fd 10 [ 361.609885][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4851'. [ 362.415668][ T30] audit: type=1400 audit(1766373540.223:786): avc: denied { sqpoll } for pid=17319 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 362.968861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 363.703617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 364.053082][ T5811] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 364.103627][ T30] audit: type=1326 audit(1766373541.913:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9958f749 code=0x7ffc0000 [ 364.163060][ T30] audit: type=1326 audit(1766373541.913:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9958f749 code=0x7ffc0000 [ 364.179144][T17367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 364.204321][ T30] audit: type=1326 audit(1766373541.913:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9e9958f749 code=0x7ffc0000 [ 364.267330][ T5811] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 364.276563][ T30] audit: type=1326 audit(1766373541.913:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9958f749 code=0x7ffc0000 [ 364.299958][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.299983][ T5811] usb 7-1: Product: syz [ 364.299997][ T5811] usb 7-1: Manufacturer: syz [ 364.300011][ T5811] usb 7-1: SerialNumber: syz [ 364.301946][ T5811] usb 7-1: config 0 descriptor?? [ 364.359794][ T30] audit: type=1326 audit(1766373541.913:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17372 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9e995c2005 code=0x7ffc0000 [ 364.407137][ T30] audit: type=1326 audit(1766373541.913:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e99591667 code=0x7ffc0000 [ 364.422642][T17377] bond2: entered allmulticast mode [ 364.431324][ T30] audit: type=1326 audit(1766373541.913:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9958f749 code=0x7ffc0000 [ 364.459625][ T30] audit: type=1326 audit(1766373541.913:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9958f749 code=0x7ffc0000 [ 364.483676][ T30] audit: type=1326 audit(1766373541.913:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.5.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f9e9958f749 code=0x7ffc0000 [ 364.507956][ T30] audit: type=1400 audit(1766373542.063:796): avc: denied { read open } for pid=17374 comm="syz.0.4888" path="/" dev="configfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.624188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 364.644346][T17386] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 364.677809][T17389] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.4895'. [ 364.689054][T17389] netlink: Conntrack attr has 4 unknown bytes [ 364.765312][ T5811] airspy 7-1:0.0: Board ID: 00 [ 364.771449][ T5811] airspy 7-1:0.0: Firmware version: [ 364.829275][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4899'. [ 365.165816][T17415] netlink: 'syz.5.4907': attribute type 8 has an invalid length. [ 365.203204][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4907'. [ 365.479718][T17427] lo speed is unknown, defaulting to 1000 [ 365.569968][ T5811] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 365.580349][ T5811] airspy 7-1:0.0: Registered as swradio24 [ 365.589066][ T5811] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 365.621720][ T5811] usb 7-1: USB disconnect, device number 20 [ 365.704957][T17435] overlayfs: missing 'lowerdir' [ 365.746252][ T5947] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 365.916065][ T5947] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 365.925093][ T5947] usb 6-1: config 0 has no interface number 0 [ 365.933435][ T5947] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 365.942770][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.951555][ T5947] usb 6-1: Product: syz [ 365.956382][ T5947] usb 6-1: Manufacturer: syz [ 365.961022][ T5947] usb 6-1: SerialNumber: syz [ 365.968326][ T5947] usb 6-1: config 0 descriptor?? [ 365.980097][ T5947] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 365.991873][ T5947] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22 [ 366.256756][ T9266] usb 6-1: USB disconnect, device number 32 [ 367.472937][ T5947] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 367.573103][ T5828] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 367.592001][T17513] bridge: RTM_NEWNEIGH with invalid ether address [ 367.643775][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 367.650469][ T5947] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 367.659333][ T5947] usb 6-1: config 0 has no interface number 0 [ 367.666285][ T5947] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 95, changing to 10 [ 367.677723][ T5947] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid maxpacket 24934, setting to 1024 [ 367.694079][ T5947] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 367.703621][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.711881][ T5947] usb 6-1: Product: syz [ 367.716266][ T5947] usb 6-1: Manufacturer: syz [ 367.720931][ T5947] usb 6-1: SerialNumber: syz [ 367.727982][ T5947] usb 6-1: config 0 descriptor?? [ 367.733232][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 367.739591][ T5947] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 367.748928][ T5828] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 367.758576][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.767141][ T5828] usb 3-1: Product: syz [ 367.772335][ T5828] usb 3-1: Manufacturer: syz [ 367.780052][ T5828] usb 3-1: SerialNumber: syz [ 367.790638][ T5828] usb 3-1: config 0 descriptor?? [ 367.798574][ T5828] gspca_main: sq905-2.14.0 probing 2770:9120 [ 367.929146][T17526] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4954'. [ 368.317832][T17545] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4963'. [ 368.397123][T17549] overlayfs: failed to clone upperpath [ 368.561919][ T5947] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 368.804016][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.811123][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.818209][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.825322][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.832388][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.839460][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.846562][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.853644][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.858828][ T5828] gspca_sq905: bulk read fail (-22) len 0/4 [ 368.860658][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.876220][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.878892][ T5828] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 368.883355][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.883589][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.883670][ T5947] usb 6-1: USB disconnect, device number 33 [ 368.891148][ C0] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 368.891164][ C0] gspca_main: Resubmit URB failed with error -19 [ 368.992309][ T5828] hid_parser_main: 74 callbacks suppressed [ 368.992328][ T5828] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 369.027584][ T5828] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.075934][ T5828] usb 3-1: USB disconnect, device number 66 [ 369.352156][T17553] ceph: No mds server is up or the cluster is laggy [ 369.358978][T17556] ceph: No mds server is up or the cluster is laggy [ 369.558918][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 369.558934][ T30] audit: type=1326 audit(1766373547.363:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.4.4977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff78c78f749 code=0x0 [ 370.088990][ T30] audit: type=1400 audit(1766373547.893:808): avc: denied { write } for pid=17602 comm="syz.6.4986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.109607][ T30] audit: type=1400 audit(1766373547.923:809): avc: denied { shutdown } for pid=17602 comm="syz.6.4986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.514562][ T30] audit: type=1400 audit(1766373548.323:810): avc: denied { write } for pid=17622 comm="syz.6.4994" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 370.602770][ T30] audit: type=1400 audit(1766373548.403:811): avc: denied { read } for pid=17626 comm="syz.6.4996" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 371.081079][T17652] netlink: 'syz.4.5006': attribute type 7 has an invalid length. [ 371.089522][T17652] netlink: 'syz.4.5006': attribute type 8 has an invalid length. [ 371.097927][T17652] netlink: 'syz.4.5006': attribute type 7 has an invalid length. [ 371.106294][T17652] netlink: 208740 bytes leftover after parsing attributes in process `syz.4.5006'. [ 371.194300][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 371.376531][T17669] 9pnet: p9_errstr2errno: server reported unknown error [ 371.377057][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.410871][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.425440][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.434961][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.449245][ T9] usb 3-1: Product: syz [ 371.454719][ T9] usb 3-1: Manufacturer: syz [ 371.459311][ T9] usb 3-1: SerialNumber: syz [ 372.490426][ T9] cdc_ncm 3-1:1.0: bind() failure [ 372.497991][T17716] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 372.519249][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 372.549357][ T9] cdc_ncm 3-1:1.1: bind() failure [ 372.573296][ T9] usb 3-1: USB disconnect, device number 67 [ 372.813213][ T5828] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 372.903790][T17739] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5032'. [ 372.974505][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.990603][ T5828] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.003258][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.019369][ T5828] usb 6-1: config 0 descriptor?? [ 373.247845][T17723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.285286][T17723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.451394][T17770] netlink: 'syz.0.5040': attribute type 15 has an invalid length. [ 373.460147][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5040'. [ 373.489414][ T7078] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 373.489488][T17770] netlink: 'syz.0.5040': attribute type 15 has an invalid length. [ 373.499927][ T7078] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 373.507566][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5040'. [ 373.527158][ T7078] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 373.528840][ T5828] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 373.541712][ T7078] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 373.584133][ T5828] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0048/input/input69 [ 373.683952][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5041'. [ 373.764763][ T5828] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 374.022987][ T5828] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 374.116289][ T9] usb 6-1: USB disconnect, device number 34 acpid: input device has been disconnected, fd 3 [ 374.174629][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.196026][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.212915][ T5828] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 374.228807][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.243474][ T5828] usb 7-1: config 0 descriptor?? [ 374.513155][T17801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5053'. [ 374.673597][ T5828] pyra 0003:1E7D:2CF6.0049: unknown main item tag 0x0 [ 374.680406][ T5828] pyra 0003:1E7D:2CF6.0049: unknown main item tag 0x0 [ 374.733014][ T5828] pyra 0003:1E7D:2CF6.0049: unknown main item tag 0x0 [ 374.749988][ T5828] pyra 0003:1E7D:2CF6.0049: unknown main item tag 0x0 [ 374.796579][ T5828] pyra 0003:1E7D:2CF6.0049: unknown main item tag 0x0 [ 374.815062][ T5828] pyra 0003:1E7D:2CF6.0049: unknown main item tag 0x0 [ 374.829164][ T5828] pyra 0003:1E7D:2CF6.0049: unknown main item tag 0x0 [ 374.888266][T11149] udevd[11149]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 374.898366][ T5828] pyra 0003:1E7D:2CF6.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 375.327183][ T5828] pyra 0003:1E7D:2CF6.0049: couldn't init struct pyra_device [ 375.335813][ T5828] pyra 0003:1E7D:2CF6.0049: couldn't install mouse [ 375.350653][ T5828] pyra 0003:1E7D:2CF6.0049: probe with driver pyra failed with error -32 [ 375.376325][ T5828] usb 7-1: USB disconnect, device number 21 [ 375.722917][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 375.904494][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 375.920517][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.942237][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 375.958507][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.972881][ T9] usb 3-1: Product: syz [ 375.986685][ T9] usb 3-1: Manufacturer: syz [ 375.998983][ T9] usb 3-1: SerialNumber: syz [ 376.023000][ T9] usb 3-1: config 0 descriptor?? [ 376.104439][T17849] loop3: detected capacity change from 0 to 7 [ 376.111478][T17849] Dev loop3: unable to read RDB block 7 [ 376.117507][T17849] loop3: unable to read partition table [ 376.124153][T17849] loop3: partition table beyond EOD, truncated [ 376.130337][T17849] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 376.431655][ T9] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 376.834539][ T9] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 376.852797][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 377.035785][T17892] team_slave_0: left promiscuous mode [ 377.039604][ T24] usb 3-1: USB disconnect, device number 68 [ 377.042699][T17892] team_slave_1: left promiscuous mode [ 377.132926][ T5828] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 377.191148][T17892] team0 (unregistering): Port device team_slave_0 removed [ 377.207182][T17892] team0 (unregistering): Port device team_slave_1 removed [ 377.222875][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 377.295912][ T5828] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 377.305726][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.319990][ T5828] usb 7-1: config 0 descriptor?? [ 377.351980][ T30] audit: type=1400 audit(1766373555.153:812): avc: denied { mounton } for pid=17898 comm="syz.0.5094" path="/proc/2142/task" dev="proc" ino=68030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 377.410950][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.420688][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.429624][ T9] usb 6-1: Product: syz [ 377.434804][ T9] usb 6-1: Manufacturer: syz [ 377.439401][ T9] usb 6-1: SerialNumber: syz [ 377.451745][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.473413][T17904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5096'. [ 377.512376][ T5947] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.551447][ T5828] kaweth 7-1:0.0: Firmware present in device. [ 377.742491][ T5828] kaweth 7-1:0.0: Statistics collection: 0 [ 377.752314][ T5828] kaweth 7-1:0.0: Multicast filter limit: 0 [ 377.752405][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5100'. [ 377.778282][ T5828] kaweth 7-1:0.0: MTU: 0 [ 377.784206][ T5828] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 378.151607][ T9266] usb 6-1: USB disconnect, device number 35 [ 378.351994][ T5828] kaweth 7-1:0.0: kaweth interface created at eth5 [ 378.533567][ T5828] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 378.541179][T17938] Invalid ELF header magic: != ELF [ 378.575861][ T5947] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 378.596196][ T5947] ath9k_htc: Failed to initialize the device [ 378.614071][ T9266] usb 6-1: ath9k_htc: USB layer deinitialized [ 378.616554][ T9] usb 7-1: USB disconnect, device number 22 [ 378.647907][T17942] netlink: 'syz.4.5111': attribute type 12 has an invalid length. [ 378.658252][T17942] netlink: 'syz.4.5111': attribute type 29 has an invalid length. [ 378.678716][T17942] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5111'. [ 378.692921][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 378.698879][T17942] netlink: 'syz.4.5111': attribute type 2 has an invalid length. [ 378.700521][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 378.714835][T17942] netlink: 'syz.4.5111': attribute type 3 has an invalid length. [ 378.736136][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 378.762625][T17942] netlink: 15 bytes leftover after parsing attributes in process `syz.4.5111'. [ 378.777749][ T5828] usb 3-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 378.786908][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.813578][ T5828] usb 3-1: config 0 descriptor?? [ 378.865203][ T30] audit: type=1400 audit(1766373556.673:813): avc: denied { setopt } for pid=17950 comm="syz.4.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.063029][ T9266] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 379.231135][ T9266] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 379.246348][ T9266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.250100][T17973] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 379.266542][ T9266] usb 6-1: Product: syz [ 379.275160][ T9266] usb 6-1: Manufacturer: syz [ 379.287923][ T9266] usb 6-1: SerialNumber: syz [ 379.322244][ T5828] hid_mf 0003:0079:1803.004A: unknown main item tag 0x0 [ 379.339197][ T5828] hid_mf 0003:0079:1803.004A: unknown main item tag 0x0 [ 379.355826][ T5828] hid_mf 0003:0079:1803.004A: unknown main item tag 0x0 [ 379.384350][ T5828] hid_mf 0003:0079:1803.004A: hidraw0: USB HID v0.05 Device [HID 0079:1803] on usb-dummy_hcd.2-1/input0 [ 379.419188][ T5828] hid_mf 0003:0079:1803.004A: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 379.603537][ T5811] usb 3-1: USB disconnect, device number 69 [ 379.735408][ T9266] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 379.752905][ T9266] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 380.387400][ T9266] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 380.409868][ T9266] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 380.427207][ T9266] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 380.437751][ T9266] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 380.454240][ T9266] usb 6-1: USB disconnect, device number 36 [ 380.901426][T18014] comedi comedi3: pcm3724: I/O port conflict (0x4f27,16) [ 381.005087][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5137'. [ 381.072911][ T5828] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 381.224542][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.247681][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.263726][ T5828] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 381.275989][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.326018][ T5828] usb 7-1: config 0 descriptor?? [ 381.759813][ T5828] hid_parser_main: 2 callbacks suppressed [ 381.759834][ T5828] cm6533_jd 0003:0D8C:0022.004B: unknown main item tag 0x0 [ 381.774591][ T5828] cm6533_jd 0003:0D8C:0022.004B: unknown main item tag 0x0 [ 381.788190][ T5828] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.004B/input/input70 [ 381.817198][ T5828] cm6533_jd 0003:0D8C:0022.004B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 382.020139][ T5828] usb 7-1: USB disconnect, device number 23 acpid: input device has been disconnected, fd 3 [ 382.250806][T18072] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.334043][T18075] netlink: 'syz.5.5161': attribute type 4 has an invalid length. [ 382.725164][ T11] block nbd1: Possible stuck request ffff888026758000: control (read@0,1024B). Runtime 180 seconds [ 382.736964][ T11] block nbd1: Possible stuck request ffff888026758200: control (read@1024,1024B). Runtime 180 seconds [ 382.748256][ T11] block nbd1: Possible stuck request ffff888026758400: control (read@2048,1024B). Runtime 180 seconds [ 382.759928][ T11] block nbd1: Possible stuck request ffff888026758600: control (read@3072,1024B). Runtime 180 seconds [ 382.812958][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 382.963102][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 382.969964][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.987534][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.018055][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 383.037605][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.070448][ T9] usb 6-1: config 0 descriptor?? [ 383.095460][ T9] hub 6-1:0.0: USB hub found [ 383.112089][T18112] bridge_slave_0: left allmulticast mode [ 383.156832][T18112] bridge_slave_0: left promiscuous mode [ 383.193107][T18112] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.302018][ T9] hub 6-1:0.0: 1 port detected [ 383.308272][T18112] bridge_slave_1: left allmulticast mode [ 383.326596][T18112] bridge_slave_1: left promiscuous mode [ 383.332382][T18112] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.353396][T18112] bond0: (slave bond_slave_0): Releasing backup interface [ 383.365302][T18112] bond0: (slave bond_slave_1): Releasing backup interface [ 383.376379][T18112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.382755][T18129] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5183'. [ 383.385892][T18112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.411825][T18112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.423052][T18112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.442160][T18112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.679223][ T30] audit: type=1400 audit(1766373561.483:814): avc: denied { create } for pid=18143 comm="syz.6.5187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 383.717452][ T9] usb 6-1: USB disconnect, device number 37 [ 383.748070][T18146] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5188'. [ 384.189600][ T30] audit: type=1400 audit(1766373561.993:815): avc: denied { accept } for pid=18168 comm="syz.2.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 384.281265][T18174] input: syz0 as /devices/virtual/input/input71 [ 384.537767][ T30] audit: type=1326 audit(1766373562.343:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.2.5203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2ccf8f749 code=0x0 [ 384.722443][T18195] netlink: 'syz.5.5206': attribute type 4 has an invalid length. [ 384.759275][T18195] netlink: 'syz.5.5206': attribute type 4 has an invalid length. [ 384.881670][ T30] audit: type=1400 audit(1766373562.683:817): avc: denied { read } for pid=18200 comm="syz.5.5209" path="socket:[67427]" dev="sockfs" ino=67427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 385.588335][ T30] audit: type=1400 audit(1766373563.393:818): avc: denied { read } for pid=18239 comm="syz.5.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 385.645438][ T30] audit: type=1400 audit(1766373563.393:819): avc: denied { bind } for pid=18239 comm="syz.5.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 385.690053][ T30] audit: type=1400 audit(1766373563.483:820): avc: denied { getopt } for pid=18243 comm="syz.5.5224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 386.379419][T18274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5231'. [ 386.575654][T18281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5231'. [ 386.650325][T11149] udevd[11149]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 386.660441][T18281] nbd: device at index 64 is going down [ 386.694131][T11149] udevd[11149]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 386.936620][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5246'. [ 387.207853][T18323] input: syz0 as /devices/virtual/input/input72 acpid: input device has been disconnected, fd 3 [ 387.317902][T18327] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 387.331657][ T30] audit: type=1400 audit(1766373565.143:821): avc: denied { relabelto } for pid=18326 comm="syz.6.5254" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 387.379456][ T30] audit: type=1400 audit(1766373565.173:822): avc: denied { associate } for pid=18326 comm="syz.6.5254" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 387.539754][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5258'. [ 387.820942][T18353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5264'. [ 388.004272][ T5828] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 388.112184][ T30] audit: type=1400 audit(1766373565.913:823): avc: denied { mounton } for pid=18377 comm="syz.6.5276" path="/527/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 388.164573][ T5828] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.183199][ T5828] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.203994][ T5828] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.214366][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.244867][T18347] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.269271][ T5828] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.427633][T18392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.435339][T18392] IPv6: NLM_F_CREATE should be set when creating new route [ 388.442553][T18392] IPv6: NLM_F_CREATE should be set when creating new route [ 388.450579][T18392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.514862][ T5947] usb 3-1: USB disconnect, device number 70 [ 389.065238][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5291'. [ 389.085876][T18413] lo speed is unknown, defaulting to 1000 [ 389.499104][T18429] overlayfs: failed to clone upperpath [ 389.962887][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 390.112957][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 390.119453][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.130439][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.140297][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.153320][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.162481][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.174832][ T9] usb 6-1: config 0 descriptor?? [ 390.255317][T18441] : entered promiscuous mode [ 390.642927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 390.667238][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 390.677763][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.004C/input/input73 [ 390.713036][ T9] microsoft 0003:045E:07DA.004C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 390.870404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 390.881818][ T9] usb 6-1: USB disconnect, device number 38 acpid: input device has been disconnected, fd 3 [ 390.923582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 390.932066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 390.953153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.596666][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 391.596682][ T30] audit: type=1400 audit(1766373569.403:832): avc: denied { wake_alarm } for pid=18478 comm="syz.6.5320" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.855321][T18493] netlink: 'syz.5.5326': attribute type 29 has an invalid length. [ 391.875240][T18493] netlink: 'syz.5.5326': attribute type 29 has an invalid length. [ 392.570749][T18518] netlink: 'syz.5.5339': attribute type 1 has an invalid length. [ 392.577229][T18519] netlink: 'syz.2.5337': attribute type 1 has an invalid length. [ 392.592664][T18516] ip6gre1: entered promiscuous mode [ 392.810456][ T30] audit: type=1326 audit(1766373570.613:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18531 comm="syz.4.5345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff78c78f749 code=0x0 [ 392.845766][T18519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.949833][T18524] bond1: (slave geneve2): making interface the new active one [ 392.958778][T18524] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 392.974531][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5340'. [ 392.995000][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.017473][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.039444][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.054900][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.255897][T18547] kvm: MONITOR instruction emulated as NOP! [ 393.281200][ T9266] kernel read not supported for file /eth0 (pid: 9266 comm: kworker/1:8) [ 393.760550][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5362'. [ 393.804681][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5363'. [ 393.823375][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5362'. [ 393.843257][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5363'. [ 393.886809][T18584] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 393.896261][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5363'. [ 393.896317][ T1869] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 394.023138][ T30] audit: type=1400 audit(1766373571.833:834): avc: denied { create } for pid=18583 comm="syz.2.5365" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 394.023571][ T30] audit: type=1400 audit(1766373571.833:835): avc: denied { associate } for pid=18583 comm="syz.2.5365" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 394.123930][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5363'. [ 394.234862][ T3417] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 394.255508][ T3417] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 394.271520][ T3417] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 394.473551][ T30] audit: type=1400 audit(1766373571.833:836): avc: denied { mounton } for pid=18583 comm="syz.2.5365" path="/825/bus" dev="tmpfs" ino=4238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 394.473993][ T30] audit: type=1400 audit(1766373571.833:837): avc: denied { add_name } for pid=18583 comm="syz.2.5365" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 394.589526][ T30] audit: type=1400 audit(1766373571.833:838): avc: denied { setattr } for pid=18583 comm="syz.2.5365" name="work" dev="tmpfs" ino=4239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 394.787625][ T30] audit: type=1400 audit(1766373571.833:839): avc: denied { write open } for pid=18583 comm="syz.2.5365" path=2F202864656C6574656429 dev="tmpfs" ino=4240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 394.855479][T18607] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.5375'. [ 394.977192][ T30] audit: type=1400 audit(1766373571.833:840): avc: denied { create } for pid=18583 comm="syz.2.5365" name="#27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 394.979938][ T30] audit: type=1400 audit(1766373571.833:841): avc: denied { remove_name } for pid=18583 comm="syz.2.5365" name="#27" dev="tmpfs" ino=4241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 395.633188][ T9266] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 395.943428][ T9266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.956573][ T9266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.982421][ T9266] usb 7-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 395.997183][ T9266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.023874][ T9266] usb 7-1: config 0 descriptor?? [ 396.441837][ T9266] hid (null): invalid report_count 18376 [ 396.449609][T18666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5399'. [ 396.462273][ T9266] uclogic 0003:5543:0042.004D: unknown main item tag 0x6 [ 396.472496][ T9266] uclogic 0003:5543:0042.004D: invalid report_count 18376 [ 396.480452][ T9266] uclogic 0003:5543:0042.004D: item 0 2 1 9 parsing failed [ 396.488641][ T9266] uclogic 0003:5543:0042.004D: parse failed [ 396.494945][ T9266] uclogic 0003:5543:0042.004D: probe with driver uclogic failed with error -22 [ 396.704663][ T9266] usb 7-1: USB disconnect, device number 24 [ 397.005954][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 397.005971][ T30] audit: type=1326 audit(1766373574.813:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18658 comm="syz.2.5396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ccf8f749 code=0x7fc00000 [ 397.333182][ T5919] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 397.493062][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 397.505208][ T5919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 397.540925][ T5919] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 397.571139][ T5919] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 397.626544][ T5919] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.652883][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 397.676227][ T5919] usb 6-1: SerialNumber: syz [ 397.704705][T18684] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 397.943227][ T5919] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 397.958211][ T5919] usb 6-1: USB disconnect, device number 39 [ 398.028066][T18705] ip6tnl1: entered promiscuous mode [ 398.237265][T18710] sock: sock_timestamping_bind_phc: sock not bind to device [ 398.557454][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5419'. [ 398.586725][ T151] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.586819][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5419'. [ 398.595766][ T151] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.613867][ T151] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.625403][ T151] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.078737][T18723] input: syz1 as /devices/virtual/input/input74 [ 399.525748][ T30] audit: type=1400 audit(1766373577.333:848): avc: denied { node_bind } for pid=18747 comm="syz.5.5433" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 400.453902][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 400.632711][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 400.647770][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 400.686277][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 400.705608][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.727125][ T9] usb 3-1: config 0 descriptor?? [ 400.767205][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input75 [ 400.969496][ T5169] bcm5974 3-1:0.0: could not read from device [ 401.002580][ T9] bcm5974 3-1:0.0: could not read from device [ 401.037046][ T5169] bcm5974 3-1:0.0: could not read from device [ 401.053760][ T9] input: failed to attach handler mousedev to device input75, error: -5 [ 401.077630][ T5169] bcm5974 3-1:0.0: could not read from device [ 401.092409][ T9] usb 3-1: USB disconnect, device number 71 [ 401.182966][T18801] input: syz0 as /devices/virtual/input/input76 [ 401.466089][T18808] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5455'. [ 402.030226][T18841] netlink: 51 bytes leftover after parsing attributes in process `syz.5.5469'. [ 402.149155][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5471'. [ 402.168086][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5471'. [ 402.183521][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5471'. [ 402.192601][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5471'. [ 403.381689][T18907] syzkaller1: entered promiscuous mode [ 403.398045][ T30] audit: type=1326 audit(1766373581.203:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.5.5494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e9958f749 code=0x0 [ 403.402933][T18907] syzkaller1: entered allmulticast mode [ 404.107525][ T30] audit: type=1326 audit(1766373581.913:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18951 comm="syz.4.5504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78c78f749 code=0x0 [ 404.325268][ T30] audit: type=1400 audit(1766373582.133:851): avc: denied { sys_admin } for pid=18962 comm="syz.6.5509" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 404.723350][ T5891] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 404.895351][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 404.906778][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 404.921977][ T5891] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 404.933245][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.954407][ T5891] usb 6-1: config 0 descriptor?? [ 404.966445][T18974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 404.988557][T18998] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.996139][T18998] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.089500][T18998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.102078][T18998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.168071][T18998] ip6tnl1: left promiscuous mode [ 405.174908][ T3417] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.205894][ T5891] usbhid 6-1:0.0: can't add hid device: -71 [ 405.214863][ T3417] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.224282][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 405.232223][ T3417] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.249214][ T5891] usb 6-1: USB disconnect, device number 40 [ 405.256038][ T3417] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.418943][T19015] netlink: 'syz.4.5531': attribute type 10 has an invalid length. [ 405.429131][T19015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5531'. [ 405.488456][T19017] 9p: Bad value for 'rfdno' [ 405.722940][ T5891] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 405.792909][ T5919] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 405.879798][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 405.895894][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 405.927686][ T5891] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 405.941792][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.953023][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 405.961552][ T5891] usb 6-1: config 0 descriptor?? [ 405.968750][ T5919] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 405.981896][ T5919] usb 7-1: config 0 has no interface number 0 [ 405.989164][ T5919] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 406.008539][ T5919] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 406.032218][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.040771][ T5919] usb 7-1: Product: syz [ 406.053314][ T5919] usb 7-1: Manufacturer: syz [ 406.057950][ T5919] usb 7-1: SerialNumber: syz [ 406.074846][ T5919] usb 7-1: config 0 descriptor?? [ 406.380131][T18974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.399301][T18974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.420293][ T5891] betop 0003:20BC:5500.004E: reserved main item tag 0xe [ 406.429846][ T5891] betop 0003:20BC:5500.004E: unexpected long global item [ 406.439460][ T5891] betop 0003:20BC:5500.004E: parse failed [ 406.445711][ T5891] betop 0003:20BC:5500.004E: probe with driver betop failed with error -22 [ 406.647374][ T5891] usb 6-1: USB disconnect, device number 41 [ 406.692992][ T5919] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 406.727335][ T5919] usb 7-1: USB disconnect, device number 25 [ 406.998477][ T30] audit: type=1400 audit(1766373584.803:852): avc: denied { create } for pid=19060 comm="syz.2.5550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.020673][ T30] audit: type=1400 audit(1766373584.823:853): avc: denied { write } for pid=19060 comm="syz.2.5550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.045787][ T30] audit: type=1400 audit(1766373584.823:854): avc: denied { nlmsg_write } for pid=19060 comm="syz.2.5550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.157063][T19066] netlink: 'syz.2.5552': attribute type 4 has an invalid length. [ 407.172788][T19066] netlink: 'syz.2.5552': attribute type 4 has an invalid length. [ 407.288250][T19072] netlink: 'syz.2.5554': attribute type 30 has an invalid length. [ 407.805194][T19098] wg1: entered promiscuous mode [ 407.810159][T19098] wg1: entered allmulticast mode [ 408.001858][T19106] lo speed is unknown, defaulting to 1000 [ 408.840116][T19129] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 408.863455][ T30] audit: type=1400 audit(1766373586.673:855): avc: denied { watch watch_reads } for pid=19130 comm="syz.5.5580" path="/proc/1366/fdinfo" dev="proc" ino=73149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 408.936364][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5581'. [ 408.967019][T19137] netlink: 67 bytes leftover after parsing attributes in process `syz.6.5581'. [ 409.028371][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5583'. [ 409.158812][T19150] team0: Port device team_slave_0 removed [ 409.319078][ T30] audit: type=1400 audit(1766373587.123:856): avc: denied { read } for pid=19154 comm="syz.2.5589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 409.767121][T19182] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 409.777989][T19182] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 410.027271][T16435] bond0: (slave syz_tun): Releasing backup interface [ 410.147574][ T6846] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 410.192891][ T6846] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 410.213023][ T6846] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.297957][ T6846] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 410.323374][ T6846] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 410.343834][ T6846] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.418625][ T6846] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 410.439824][ T6846] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 410.463959][ T6846] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.544080][ T6846] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 410.568096][ T6846] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 410.596449][ T6846] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.640770][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.656344][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.667177][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.681088][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.688688][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.717745][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.725361][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.738479][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.754968][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.772713][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.822170][T19211] lo speed is unknown, defaulting to 1000 [ 411.124026][ T5135] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 411.131082][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 411.252600][ T6846] bridge_slave_1: left allmulticast mode [ 411.292361][ T6846] bridge_slave_1: left promiscuous mode [ 411.316130][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.355130][ T6846] bridge_slave_0: left allmulticast mode [ 411.361858][ T6846] bridge_slave_0: left promiscuous mode [ 411.383365][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.533273][ T5947] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 411.719268][ T5947] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.742837][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.751035][ T5947] usb 3-1: Product: syz [ 411.755570][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 411.767190][ T5947] usb 3-1: Manufacturer: syz [ 411.774009][ T5947] usb 3-1: SerialNumber: syz [ 411.790400][ T5947] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 411.807524][ T5811] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 411.929833][ T6846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.943052][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 411.944268][ T6846] bond0 (unregistering): Released all slaves [ 411.961794][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.962470][ T6846] bond1 (unregistering): Released all slaves [ 411.984292][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 411.996037][ T6846] bond2 (unregistering): Released all slaves [ 411.996969][ T9] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 412.012552][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.022769][ T9] usb 7-1: Product: syz [ 412.027033][ T9] usb 7-1: Manufacturer: syz [ 412.031715][ T9] usb 7-1: SerialNumber: syz [ 412.045495][ T9] usb 7-1: config 0 descriptor?? [ 412.054876][ T9] ati_remote 7-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 412.420318][ T5891] usb 7-1: USB disconnect, device number 26 [ 412.528434][T19211] chnl_net:caif_netlink_parms(): no params data found [ 412.756032][ T5891] usb 3-1: USB disconnect, device number 72 [ 412.804122][ T5135] Bluetooth: hci3: command tx timeout [ 412.811080][ T11] block nbd1: Possible stuck request ffff888026758000: control (read@0,1024B). Runtime 210 seconds [ 412.821912][ T11] block nbd1: Possible stuck request ffff888026758200: control (read@1024,1024B). Runtime 210 seconds [ 412.833035][ T11] block nbd1: Possible stuck request ffff888026758400: control (read@2048,1024B). Runtime 210 seconds [ 412.844160][ T11] block nbd1: Possible stuck request ffff888026758600: control (read@3072,1024B). Runtime 210 seconds [ 412.887541][ T5811] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 412.906591][ T5811] ath9k_htc: Failed to initialize the device [ 412.913474][ T5891] usb 3-1: ath9k_htc: USB layer deinitialized [ 412.970211][T19211] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.987797][T19211] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.997561][T19211] bridge_slave_0: entered allmulticast mode [ 413.019043][T19211] bridge_slave_0: entered promiscuous mode [ 413.036899][T19211] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.053081][T19211] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.073565][T19211] bridge_slave_1: entered allmulticast mode [ 413.102239][T19211] bridge_slave_1: entered promiscuous mode [ 413.202562][T19289] loop9: detected capacity change from 0 to 7 [ 413.209784][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.218879][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.226500][T19289] Dev loop9: unable to read RDB block 7 [ 413.232128][T19289] loop9: unable to read partition table [ 413.238901][T19289] loop9: partition table beyond EOD, truncated [ 413.246584][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.254825][T19289] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.264323][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.272167][ T6846] batman_adv: batadv0: Removing interface: vlan1 [ 413.316759][ T6846] veth1_vlan: left promiscuous mode [ 413.330318][ T6846] veth0_vlan: left promiscuous mode [ 413.557693][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5642'. [ 414.022021][ T6846] team0 (unregistering): Port device team_slave_1 removed [ 414.084795][ T6846] team0 (unregistering): Port device team_slave_0 removed [ 414.398927][T19312] netlink: 'syz.4.5646': attribute type 14 has an invalid length. [ 414.407124][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5646'. [ 414.421615][T19211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.432977][ T5828] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 414.436303][T19211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.470291][T19312] netlink: 'syz.4.5646': attribute type 14 has an invalid length. [ 414.487804][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5646'. [ 414.518866][T19211] team0: Port device team_slave_0 added [ 414.544512][T19211] team0: Port device team_slave_1 added [ 414.597376][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 414.611785][ T5828] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 414.631200][ T5828] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 414.654810][T19211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.672550][T19211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.698898][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 414.715413][ T5828] usb 3-1: Product: syz [ 414.720769][ T5828] usb 3-1: Manufacturer: syz [ 414.726530][ T5828] usb 3-1: SerialNumber: syz [ 414.732426][T19211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.749893][ T5828] usb 3-1: config 0 descriptor?? [ 414.773686][T19332] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 414.794109][T19211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.801736][T19211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.879945][T19211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.893553][ T5135] Bluetooth: hci3: command tx timeout [ 415.000917][T19343] SELinux: ebitmap: truncated map [ 415.087069][T19211] hsr_slave_0: entered promiscuous mode [ 415.094254][ T5828] usb 3-1: USB disconnect, device number 73 [ 415.108092][T19211] hsr_slave_1: entered promiscuous mode [ 415.138883][T19343] SELinux: failed to load policy [ 415.144741][T19211] debugfs: 'hsr0' already exists in 'hsr' [ 415.150463][T19211] Cannot create hsr debugfs directory [ 415.171640][ T6846] IPVS: stop unused estimator thread 0... [ 415.346423][T19369] input: syz0 as /devices/virtual/input/input78 [ 415.584812][T19211] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 415.609137][T19211] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 415.699128][T19372] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 415.736903][T19372] bond1: (slave lo): Enslaving as a backup interface with an up link [ 415.764147][T19372] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 415.812192][T19211] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 415.850678][T19211] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 415.851929][T19385] netlink: 'syz.6.5667': attribute type 9 has an invalid length. [ 415.894882][T19385] netlink: 'syz.6.5667': attribute type 11 has an invalid length. [ 415.908727][T19385] netlink: 'syz.6.5667': attribute type 12 has an invalid length. [ 415.930712][T19385] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.5667'. [ 415.967042][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5667'. [ 416.082184][T19211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.094401][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5671'. [ 416.134221][T19211] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.194704][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.201834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.237776][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.245041][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.453331][ T30] audit: type=1400 audit(1766373594.263:857): avc: denied { override_creds } for pid=19422 comm="syz.2.5675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 416.837682][T19211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.962940][ T5135] Bluetooth: hci3: command tx timeout [ 417.391545][T19211] veth0_vlan: entered promiscuous mode [ 417.423091][T19211] veth1_vlan: entered promiscuous mode [ 417.481821][T19211] veth0_macvtap: entered promiscuous mode [ 417.517821][T19211] veth1_macvtap: entered promiscuous mode [ 417.580055][T19211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.620707][T19211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.636792][ T3697] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.660026][T19476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5689'. [ 417.673338][T19476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5689'. [ 417.683632][ T3697] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.707037][ T151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.726752][ T151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.851129][ T1869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.869775][ T1869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.943237][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.951136][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.982058][ T30] audit: type=1400 audit(1766373595.783:858): avc: denied { mounton } for pid=19211 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 417.984551][T19211] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 418.017986][T19211] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 418.024899][ T30] audit: type=1400 audit(1766373595.783:859): avc: denied { add_name } for pid=19211 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 418.026392][T19211] CPU: 0 UID: 0 PID: 19211 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 418.061995][T19211] Tainted: [L]=SOFTLOCKUP [ 418.066297][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.076334][T19211] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 418.082041][T19211] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 418.101626][T19211] RSP: 0018:ffffc9000bdafae0 EFLAGS: 00010202 [ 418.107670][T19211] RAX: dffffc0000000000 RBX: ffff88805a179960 RCX: ffffffff826a4375 [ 418.115620][T19211] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 418.123579][T19211] RBP: ffff88805a1799f8 R08: 0000000000000005 R09: 0000000000000000 [ 418.131528][T19211] R10: 00000000ffffffea R11: ffffffff82288a74 R12: 1ffff920017b5f6b [ 418.139475][T19211] R13: 0000000000000000 R14: ffff8880299bea40 R15: 0000000000000038 [ 418.147426][T19211] FS: 000055557a17f500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 418.156333][T19211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.162897][T19211] CR2: 00007fcf5d265da0 CR3: 000000006cca1000 CR4: 00000000003526f0 [ 418.170860][T19211] Call Trace: [ 418.174144][T19211] [ 418.177056][T19211] __kernfs_new_node+0x7b4/0x990 [ 418.181984][T19211] ? __pfx___kernfs_new_node+0x10/0x10 [ 418.187433][T19211] ? find_held_lock+0x2b/0x80 [ 418.192118][T19211] ? kernfs_root+0xee/0x2a0 [ 418.196612][T19211] kernfs_new_node+0x13c/0x1e0 [ 418.201364][T19211] ? kasan_save_track+0x14/0x30 [ 418.206208][T19211] kernfs_create_dir_ns+0x4c/0x1a0 [ 418.211303][T19211] cgroup_mkdir+0x40f/0x12e0 [ 418.215876][T19211] ? __pfx_cgroup_mkdir+0x10/0x10 [ 418.220878][T19211] kernfs_iop_mkdir+0x111/0x190 [ 418.225712][T19211] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 418.230725][T19211] vfs_mkdir+0x731/0xb60 [ 418.234952][T19211] do_mkdirat+0x442/0x5e0 [ 418.239268][T19211] ? __pfx_do_mkdirat+0x10/0x10 [ 418.244106][T19211] ? getname_flags.part.0+0x1c5/0x550 [ 418.249457][T19211] __x64_sys_mkdirat+0x83/0xb0 [ 418.254206][T19211] do_syscall_64+0xcd/0xf80 [ 418.258697][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.264568][T19211] RIP: 0033:0x7fcf5d38de97 [ 418.268965][T19211] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.288551][T19211] RSP: 002b:00007ffdfe7ef4d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 418.296940][T19211] RAX: ffffffffffffffda RBX: 00007ffdfe7ef530 RCX: 00007fcf5d38de97 [ 418.304888][T19211] RDX: 00000000000001ff RSI: 00007ffdfe7ef530 RDI: 00000000ffffff9c [ 418.312837][T19211] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffdfe7ef227 [ 418.320789][T19211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 418.328747][T19211] R13: 0000000000000003 R14: 00007ffdfe7ef9a8 R15: 0000000000000000 [ 418.336702][T19211] [ 418.339695][T19211] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.344538][T19211] ---[ end trace 0000000000000000 ]--- [ 418.376295][ T30] audit: type=1400 audit(1766373595.783:860): avc: denied { create } for pid=19211 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 418.432660][T19211] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 418.437093][ T30] audit: type=1400 audit(1766373595.783:861): avc: denied { associate } for pid=19211 comm="syz-executor" name="syz7" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 418.438488][T19211] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 418.481246][T19211] RSP: 0018:ffffc9000bdafae0 EFLAGS: 00010202 [ 418.508926][ T30] audit: type=1400 audit(1766373595.863:862): avc: denied { write } for pid=5796 comm="syz-executor" path="pipe:[4702]" dev="pipefs" ino=4702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 418.573030][T19211] RAX: dffffc0000000000 RBX: ffff88805a179960 RCX: ffffffff826a4375 [ 418.581033][T19211] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 418.602860][ T5872] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 418.604327][T19211] RBP: ffff88805a1799f8 R08: 0000000000000005 R09: 0000000000000000 [ 418.632869][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 418.640550][T19211] R10: 00000000ffffffea R11: ffffffff82288a74 R12: 1ffff920017b5f6b [ 418.651171][T19211] R13: 0000000000000000 R14: ffff8880299bea40 R15: 0000000000000038 [ 418.663473][T19211] FS: 000055557a17f500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 418.672442][T19211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.682877][T19211] CR2: 00007ffe07d659c0 CR3: 000000006cca1000 CR4: 00000000003526f0 [ 418.690883][T19211] Kernel panic - not syncing: Fatal exception [ 418.697198][T19211] Kernel Offset: disabled [ 418.701497][T19211] Rebooting in 86400 seconds..