last executing test programs: 2.72283113s ago: executing program 3 (id=1186): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 2.688839453s ago: executing program 3 (id=1187): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$rxrpc(0x21, 0x2, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.643390303s ago: executing program 3 (id=1188): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000380)={0x4200000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)) 2.076627185s ago: executing program 3 (id=1198): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0425001904"], 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.013079172s ago: executing program 1 (id=1199): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x50, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe725c86ec8ce9c3a8f66b00"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x0) 2.0064695s ago: executing program 3 (id=1200): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.856346977s ago: executing program 1 (id=1203): r0 = syz_io_uring_setup(0x7540, &(0x7f0000000340)={0x0, 0x9f4, 0x10100, 0x4, 0x10000000}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r2 = syz_io_uring_setup(0x34f1, &(0x7f0000000400)={0x0, 0x0, 0x40}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2003, 0x0, 0x0, 0x0, 0x0) 1.743839318s ago: executing program 1 (id=1206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.686682809s ago: executing program 1 (id=1207): r0 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) 1.637323397s ago: executing program 1 (id=1209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.334163752s ago: executing program 3 (id=1215): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, &(0x7f00000001c0)=""/103, 0x67) 1.162927057s ago: executing program 1 (id=1219): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 658.651066ms ago: executing program 4 (id=1230): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffd}]}]}]}}]}, 0x9c}}, 0x0) 632.221222ms ago: executing program 0 (id=1231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 570.562721ms ago: executing program 0 (id=1232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0x9}) 548.759908ms ago: executing program 4 (id=1233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 529.277639ms ago: executing program 2 (id=1234): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x34}}, 0x0) 454.767868ms ago: executing program 4 (id=1235): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 405.886532ms ago: executing program 2 (id=1236): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 398.424274ms ago: executing program 0 (id=1237): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6, 0x0, 0x0, 0xaba00000}]}) write$ppp(r0, &(0x7f0000000480)='\x00\x00', 0x2) 383.173151ms ago: executing program 4 (id=1238): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 271.727359ms ago: executing program 0 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 170.296411ms ago: executing program 2 (id=1240): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 139.911385ms ago: executing program 4 (id=1241): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xc00, 0x61f2c651, 0x1, 0x8}) 137.879096ms ago: executing program 0 (id=1242): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060030000000088fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 134.074527ms ago: executing program 2 (id=1243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 57.274538ms ago: executing program 2 (id=1244): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000)) 52.057087ms ago: executing program 4 (id=1245): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x2010}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 755.374µs ago: executing program 0 (id=1246): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x40044) 0s ago: executing program 2 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) kernel console output (not intermixed with test programs): v_slave_1 [ 61.131444][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.144008][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.153633][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.162685][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.177153][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 61.177166][ T29] audit: type=1400 audit(1740260867.953:139): avc: denied { ioctl } for pid=5913 comm="syz.0.11" path="socket:[6710]" dev="sockfs" ino=6710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.193223][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.230072][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.245970][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.256628][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.319138][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.339419][ T29] audit: type=1400 audit(1740260868.113:140): avc: denied { create } for pid=5917 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.342907][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.361492][ T321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.377725][ T321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.377827][ T5918] delete_channel: no stack [ 61.387222][ T321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.402897][ T321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.423279][ T29] audit: type=1400 audit(1740260868.193:141): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.yo64zm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.463948][ T29] audit: type=1400 audit(1740260868.243:142): avc: denied { create } for pid=5917 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.534345][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.560775][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.575964][ T29] audit: type=1400 audit(1740260868.243:143): avc: denied { write } for pid=5917 comm="syz.0.12" path="socket:[7867]" dev="sockfs" ino=7867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.621273][ T5922] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 61.633057][ T5922] netlink: 134708 bytes leftover after parsing attributes in process `syz.0.13'. [ 61.688054][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.706141][ T29] audit: type=1400 audit(1740260868.463:144): avc: denied { create } for pid=5925 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.730159][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.754689][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.949195][ T29] audit: type=1400 audit(1740260868.723:145): avc: denied { read write } for pid=5935 comm="syz.1.16" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.047309][ T29] audit: type=1400 audit(1740260868.723:146): avc: denied { open } for pid=5935 comm="syz.1.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.149623][ T29] audit: type=1400 audit(1740260868.773:147): avc: denied { ioctl } for pid=5935 comm="syz.1.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.230984][ T29] audit: type=1400 audit(1740260868.843:148): avc: denied { mount } for pid=5939 comm="syz.2.3" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 62.519843][ T5830] Bluetooth: hci0: command tx timeout [ 62.602446][ T5830] Bluetooth: hci1: command tx timeout [ 62.679668][ T5830] Bluetooth: hci4: command tx timeout [ 62.679856][ T5831] Bluetooth: hci2: command tx timeout [ 62.720230][ T5880] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.759817][ T5831] Bluetooth: hci3: command tx timeout [ 62.904553][ T5880] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.914583][ T5880] usb 4-1: config 0 has no interface number 0 [ 62.931016][ T5880] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.962406][ T5880] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.978463][ T5880] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 62.994121][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.069112][ T5880] usb 4-1: config 0 descriptor?? [ 63.075426][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 63.237708][ T5981] capability: warning: `syz.1.34' uses 32-bit capabilities (legacy support in use) [ 63.558269][ T5880] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0001/input/input5 [ 63.645186][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.675374][ T5880] holtek_kbd 0003:04D9:A055.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 63.827622][ T45] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 63.839969][ T45] usb 1-1: config 0 has no interface number 0 [ 63.852485][ T6002] veth3: entered allmulticast mode [ 63.857726][ T45] usb 1-1: config 0 interface 191 has no altsetting 0 [ 63.883451][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=7f.b1 [ 63.894026][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.905181][ T5854] usb 4-1: USB disconnect, device number 2 [ 63.926281][ T45] usb 1-1: Product: syz [ 63.931550][ T45] usb 1-1: Manufacturer: syz [ 63.944498][ T45] usb 1-1: SerialNumber: syz [ 63.957753][ T45] usb 1-1: config 0 descriptor?? [ 63.993572][ T45] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 64.227970][ T45] usb 1-1: USB disconnect, device number 2 [ 64.615898][ T5831] Bluetooth: hci0: command tx timeout [ 64.689340][ T5831] Bluetooth: hci1: command tx timeout [ 64.759593][ T5831] Bluetooth: hci2: command tx timeout [ 64.770147][ T5831] Bluetooth: hci4: command tx timeout [ 64.841540][ T5831] Bluetooth: hci3: command tx timeout [ 64.967108][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.159168][ T6047] netlink: 71 bytes leftover after parsing attributes in process `syz.4.66'. [ 65.380647][ T6062] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 65.420285][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.523734][ T6065] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 65.609418][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 65.626072][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.652919][ T45] usb 2-1: config 179 has no interface number 0 [ 65.673328][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 65.699630][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 65.729394][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.755419][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 65.782731][ T45] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.808944][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 65.828261][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.852280][ T6050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.891154][ T6079] warning: `syz.4.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.938678][ T6081] capability: warning: `syz.3.80' uses deprecated v2 capabilities in a way that may be insecure [ 66.241770][ T5854] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 66.408011][ T6095] mmap: syz.4.85 (6095) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.494086][ T5854] usb 2-1: USB disconnect, device number 2 [ 66.499992][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.500041][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 66.553686][ T5854] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 66.577902][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 66.577915][ T29] audit: type=1400 audit(1740260873.353:213): avc: denied { create } for pid=6101 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.633224][ T29] audit: type=1400 audit(1740260873.373:214): avc: denied { write } for pid=6104 comm="syz.2.90" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.676061][ T5867] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.699161][ T29] audit: type=1400 audit(1740260873.383:215): avc: denied { setopt } for pid=6101 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.869334][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 66.878988][ T5867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.913751][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.953658][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.963423][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.989454][ T5867] usb 4-1: Product: syz [ 66.993643][ T5867] usb 4-1: Manufacturer: syz [ 67.019341][ T5867] usb 4-1: SerialNumber: syz [ 67.378581][ T29] audit: type=1400 audit(1740260874.143:216): avc: denied { read write } for pid=6125 comm="syz.0.99" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.455669][ T5867] usb 4-1: cannot find UAC_HEADER [ 67.479905][ T29] audit: type=1400 audit(1740260874.143:217): avc: denied { open } for pid=6125 comm="syz.0.99" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.533497][ T5867] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 67.566186][ T29] audit: type=1400 audit(1740260874.283:218): avc: denied { read } for pid=6129 comm="syz.0.101" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.601401][ T5867] usb 4-1: USB disconnect, device number 3 [ 67.623033][ T29] audit: type=1400 audit(1740260874.283:219): avc: denied { open } for pid=6129 comm="syz.0.101" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.706754][ T29] audit: type=1400 audit(1740260874.283:220): avc: denied { write } for pid=6129 comm="syz.0.101" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.828470][ T6137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.854213][ T29] audit: type=1400 audit(1740260874.633:221): avc: denied { mount } for pid=6138 comm="syz.4.105" name="/" dev="configfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.933036][ T29] audit: type=1400 audit(1740260874.673:222): avc: denied { read } for pid=6138 comm="syz.4.105" name="/" dev="configfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.300468][ T5867] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 68.351614][ T6020] syz.1.51 (6020) used greatest stack depth: 21520 bytes left [ 68.470619][ T5867] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 68.480312][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.489115][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.510062][ T5867] usb 2-1: config 0 descriptor?? [ 68.525339][ T5867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 68.591995][ T6170] syz.2.119 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.632799][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 68.643943][ T5869] usb 5-1: config 129 has an invalid interface number: 222 but max is 0 [ 68.652534][ T5869] usb 5-1: config 129 has no interface number 0 [ 68.697976][ T5869] usb 5-1: config 129 interface 222 has no altsetting 0 [ 68.715481][ T5869] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=2d.74 [ 68.732628][ T5867] gp8psk: usb in 128 operation failed. [ 68.738400][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.753322][ T5869] usb 5-1: Product: syz [ 68.757848][ T5869] usb 5-1: Manufacturer: syz [ 68.765270][ T5869] usb 5-1: SerialNumber: syz [ 68.958500][ T5867] gp8psk: FW Version = 48.28.159 (0x301c9f) Build 2206/163/118 [ 68.997252][ T5869] f81534a_ctrl 5-1:129.222: failed to set register 0x116: -5 [ 69.019455][ T5869] f81534a_ctrl 5-1:129.222: failed to enable ports: -5 [ 69.026368][ T5869] f81534a_ctrl 5-1:129.222: probe with driver f81534a_ctrl failed with error -5 [ 69.054007][ T5869] usb 5-1: USB disconnect, device number 2 [ 69.164343][ T5867] gp8psk: usb in 149 operation failed. [ 69.180859][ T5867] gp8psk: failed to get FPGA version [ 69.189986][ T5867] gp8psk: usb in 138 operation failed. [ 69.198904][ T5867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 69.221655][ T5867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 69.261276][ T5867] usb 2-1: USB disconnect, device number 3 [ 69.591663][ T6210] netlink: 56 bytes leftover after parsing attributes in process `syz.3.137'. [ 69.989333][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 70.159337][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 70.175076][ T5880] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 70.187526][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.205818][ T5880] usb 4-1: Product: syz [ 70.218964][ T5880] usb 4-1: Manufacturer: syz [ 70.225949][ T5880] usb 4-1: SerialNumber: syz [ 70.237870][ T5880] r8152-cfgselector 4-1: Unknown version 0x0000 [ 70.247207][ T5880] r8152-cfgselector 4-1: config 0 descriptor?? [ 70.509732][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.673760][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.693983][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.711506][ T5867] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 70.712377][ T5854] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 70.722791][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 70.754305][ T5867] usb 3-1: SerialNumber: syz [ 70.981722][ T5867] usb 3-1: 0:2 : does not exist [ 71.029822][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.037074][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.070135][ T5867] usb 3-1: USB disconnect, device number 2 [ 71.529622][ T6276] Bluetooth: MGMT ver 1.23 [ 71.957515][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 71.957531][ T29] audit: type=1400 audit(1740260878.733:257): avc: denied { sqpoll } for pid=6283 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.309412][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.429540][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 72.478786][ T5880] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.500803][ T5880] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.519020][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 72.526613][ T5880] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 72.553748][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.582689][ T5880] usb 5-1: config 0 descriptor?? [ 72.592131][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 72.613927][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.627708][ T5869] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 72.644345][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.662123][ T5869] usb 2-1: config 0 descriptor?? [ 72.818401][ T29] audit: type=1400 audit(1740260879.593:258): avc: denied { create } for pid=6315 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.832265][ T6314] team0: Device ipvlan2 failed to register rx_handler [ 72.844932][ T29] audit: type=1400 audit(1740260879.593:259): avc: denied { bind } for pid=6315 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.011793][ T5880] playstation 0003:054C:0BA0.0002: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 73.113969][ T5869] nintendo 0003:057E:2009.0003: hidraw1: USB HID v80.09 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 73.210193][ T5880] playstation 0003:054C:0BA0.0002: Failed to retrieve feature with reportID 18: -71 [ 73.219747][ T5880] playstation 0003:054C:0BA0.0002: Failed to retrieve DualShock4 pairing info: -71 [ 73.231224][ T5869] nintendo 0003:057E:2009.0003: Failed to get joycon info; ret=-38 [ 73.239206][ T5880] playstation 0003:054C:0BA0.0002: Failed to get MAC address from DualShock4 [ 73.239645][ T5880] playstation 0003:054C:0BA0.0002: Failed to create dualshock4. [ 73.259507][ T5880] playstation 0003:054C:0BA0.0002: probe with driver playstation failed with error -71 [ 73.271535][ T5880] usb 5-1: USB disconnect, device number 3 [ 73.284396][ T5869] nintendo 0003:057E:2009.0003: Failed to retrieve controller info; ret=-38 [ 73.320704][ T5869] nintendo 0003:057E:2009.0003: Failed to initialize controller; ret=-38 [ 73.364240][ T5869] nintendo 0003:057E:2009.0003: probe - fail = -38 [ 73.383047][ T5869] nintendo 0003:057E:2009.0003: probe with driver nintendo failed with error -38 [ 73.405092][ T5869] usb 2-1: USB disconnect, device number 4 [ 73.823561][ T6343] kvm: kvm [6342]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000015) [ 73.920014][ T29] audit: type=1400 audit(1740260880.693:260): avc: denied { name_bind } for pid=6349 comm="syz.4.201" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 74.101828][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.206768][ T29] audit: type=1400 audit(1740260880.983:261): avc: denied { mount } for pid=6360 comm="syz.4.208" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.219406][ T6363] vxcan1: tx address claim with dlc 0 [ 74.242391][ T29] audit: type=1400 audit(1740260880.983:262): avc: denied { bind } for pid=6361 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.265388][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.344566][ T5869] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.416747][ T29] audit: type=1326 audit(1740260881.173:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 74.472076][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.480519][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.487981][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.495973][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.503617][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.511226][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.511827][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.529920][ T5869] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 74.538056][ T29] audit: type=1326 audit(1740260881.173:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 74.562290][ T29] audit: type=1326 audit(1740260881.193:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 74.585463][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.592391][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.601465][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.610243][ T29] audit: type=1326 audit(1740260881.193:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 74.612586][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.635468][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.650279][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.659152][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.674950][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.695958][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.708744][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.723966][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.737285][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.737613][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.746509][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.780728][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.788877][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.799351][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.810430][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.887257][ T6386] process 'syz.4.218' launched './file2' with NULL argv: empty string added [ 74.889387][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.956913][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.031065][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.044421][ T6371] chnl_net:caif_netlink_parms(): no params data found [ 75.066444][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.085878][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.129395][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.144307][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.154051][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.170398][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.170432][ T67] bridge_slave_1: left allmulticast mode [ 75.179336][ T5869] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 75.183258][ T67] bridge_slave_1: left promiscuous mode [ 75.191996][ T5869] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 75.202721][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.212822][ T5869] usb 2-1: Product: syz [ 75.212852][ T5869] usb 2-1: Manufacturer: syz [ 75.212866][ T5869] usb 2-1: SerialNumber: syz [ 75.227461][ T67] bridge_slave_0: left allmulticast mode [ 75.234109][ T67] bridge_slave_0: left promiscuous mode [ 75.234972][ T5869] usb 2-1: config 0 descriptor?? [ 75.240244][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.255366][ T5869] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 75.349353][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.424733][ T6407] syz.3.226 (6407) used greatest stack depth: 19744 bytes left [ 75.524069][ T45] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.532660][ T5869] usb 2-1: USB disconnect, device number 5 [ 75.533442][ T45] usb 1-1: config 0 has no interface number 0 [ 75.546011][ T45] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.546584][ T5869] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 75.562807][ T45] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.587294][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 75.600971][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.613423][ T45] usb 1-1: config 0 descriptor?? [ 75.643576][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.654096][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.665976][ T67] bond0 (unregistering): Released all slaves [ 75.693901][ T6411] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 75.795417][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.823517][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.839083][ T6371] bridge_slave_0: entered allmulticast mode [ 75.848032][ T6371] bridge_slave_0: entered promiscuous mode [ 75.901321][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.908447][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.929174][ T6371] bridge_slave_1: entered allmulticast mode [ 75.942345][ T6371] bridge_slave_1: entered promiscuous mode [ 76.029682][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.041137][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.041537][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 76.068276][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 76.075961][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 76.084469][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 76.092462][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 76.104510][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 76.120959][ T25] cfg80211: failed to load regulatory.db [ 76.130404][ T67] hsr_slave_0: left promiscuous mode [ 76.131278][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 76.151449][ T45] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 76.164829][ T45] hid_prodikeys: hid-prodikeys: failed to find output report [ 76.164829][ T45] [ 76.167667][ T67] hsr_slave_1: left promiscuous mode [ 76.193300][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.203063][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.212471][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.220169][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.239094][ T67] veth1_macvtap: left promiscuous mode [ 76.265787][ T67] veth0_macvtap: left promiscuous mode [ 76.280104][ T67] veth1_vlan: left promiscuous mode [ 76.285490][ T67] veth0_vlan: left promiscuous mode [ 76.308436][ T45] usb 1-1: USB disconnect, device number 3 [ 76.435474][ T6440] input: syz0 as /devices/virtual/input/input7 [ 76.520113][ T5830] Bluetooth: hci3: command tx timeout [ 76.646713][ T6446] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 76.657394][ T67] team0 (unregistering): Port device team_slave_1 removed [ 76.688386][ T67] team0 (unregistering): Port device team_slave_0 removed [ 76.950143][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 76.985302][ T6450] vlan2: entered allmulticast mode [ 76.992922][ T6450] macvlan0: entered allmulticast mode [ 76.998368][ T6450] veth1_vlan: entered allmulticast mode [ 77.007205][ T6450] macvlan0: left allmulticast mode [ 77.019341][ T6450] veth1_vlan: left allmulticast mode [ 77.052912][ T6371] team0: Port device team_slave_0 added [ 77.094097][ T6371] team0: Port device team_slave_1 added [ 77.119665][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 77.138174][ T5869] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.160391][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 77.180459][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.187406][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.213304][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.219564][ T5869] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 77.228599][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.257269][ T5869] usb 2-1: config 0 descriptor?? [ 77.290437][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.320942][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.334490][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.399387][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.480061][ T6371] hsr_slave_0: entered promiscuous mode [ 77.510338][ T6371] hsr_slave_1: entered promiscuous mode [ 77.516528][ T6371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.529940][ T6371] Cannot create hsr debugfs directory [ 77.689379][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.690004][ T5869] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 77.850700][ T5880] usb 5-1: config 0 has an invalid interface number: 81 but max is 0 [ 77.858843][ T5880] usb 5-1: config 0 has no interface number 0 [ 77.879339][ T5880] usb 5-1: config 0 interface 81 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.902390][ T5880] usb 5-1: config 0 interface 81 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.935502][ T5880] usb 5-1: config 0 interface 81 has no altsetting 0 [ 77.950730][ T5880] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 77.960570][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.980413][ T5880] usb 5-1: config 0 descriptor?? [ 78.076262][ T6371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.093714][ T6371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.114071][ T6371] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.146040][ T6371] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.155172][ T25] usb 2-1: USB disconnect, device number 6 [ 78.243475][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.257944][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.282872][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.289968][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.306098][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.313212][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.391413][ T5880] wacom 0003:056A:033B.0006: unknown main item tag 0xe [ 78.403523][ T5880] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 78.409342][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 78.409353][ T29] audit: type=1400 audit(1740260885.173:291): avc: denied { sys_module } for pid=6371 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.429387][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.453535][ T5880] wacom 0003:056A:033B.0006: hidraw0: USB HID v0.40 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input81 [ 78.476111][ T5880] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.81/0003:056A:033B.0006/input/input8 [ 78.514134][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.555658][ T6371] veth0_vlan: entered promiscuous mode [ 78.573312][ T6371] veth1_vlan: entered promiscuous mode [ 78.598064][ T6371] veth0_macvtap: entered promiscuous mode [ 78.604179][ T5830] Bluetooth: hci3: command tx timeout [ 78.610369][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 78.619388][ T5854] usb 5-1: USB disconnect, device number 4 [ 78.620432][ T6371] veth1_macvtap: entered promiscuous mode [ 78.637474][ T45] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 78.637890][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.659671][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.670114][ T45] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 78.674444][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.696196][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.704810][ T45] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 78.716517][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.736810][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.739259][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.757552][ T45] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 78.766615][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.766632][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.768132][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.792278][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.807425][ T45] usb 1-1: Product: syz [ 78.818134][ T45] usb 1-1: Manufacturer: syz [ 78.824456][ T45] usb 1-1: SerialNumber: syz [ 78.832084][ T45] usb 1-1: config 0 descriptor?? [ 78.850490][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.870063][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.893521][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.914452][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.926523][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.938012][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.948187][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.976540][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.987432][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.008134][ T29] audit: type=1400 audit(1740260885.783:292): avc: denied { bind } for pid=6494 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.028347][ T6371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.038083][ T6371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.047903][ T6371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.051849][ T45] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 79.057164][ T6371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.089967][ T5178] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 79.102474][ T5178] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 79.153435][ T5178] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 79.177082][ T5178] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 79.228130][ T321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.269322][ T321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.332330][ T321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.332464][ T29] audit: type=1400 audit(1740260886.113:293): avc: denied { wake_alarm } for pid=6502 comm="syz.1.268" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.354369][ T321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.395005][ T6477] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 79.424599][ T29] audit: type=1400 audit(1740260886.173:294): avc: denied { read append } for pid=6475 comm="syz.0.257" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.448011][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.491026][ T29] audit: type=1400 audit(1740260886.173:295): avc: denied { open } for pid=6475 comm="syz.0.257" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.514770][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.590322][ T5867] usb 1-1: USB disconnect, device number 4 [ 79.615981][ T29] audit: type=1400 audit(1740260886.173:296): avc: denied { mounton } for pid=6371 comm="syz-executor" path="/root/syzkaller.6XNQnR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 79.785996][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 79.814130][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 79.922006][ T6520] xt_hashlimit: size too large, truncated to 1048576 [ 80.608076][ T6559] netlink: 87 bytes leftover after parsing attributes in process `syz.3.291'. [ 80.608094][ T29] audit: type=1400 audit(1740260887.383:297): avc: denied { block_suspend } for pid=6558 comm="syz.2.290" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.679574][ T5830] Bluetooth: hci3: command tx timeout [ 80.709353][ T29] audit: type=1400 audit(1740260887.443:298): avc: denied { getopt } for pid=6561 comm="syz.4.292" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.729421][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.779038][ T29] audit: type=1400 audit(1740260887.553:299): avc: denied { create } for pid=6563 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.799041][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.859588][ T29] audit: type=1400 audit(1740260887.603:300): avc: denied { ioctl } for pid=6563 comm="syz.3.293" path="socket:[12699]" dev="sockfs" ino=12699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.884786][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.069367][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.189759][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 81.230224][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 81.241102][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.263566][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.279348][ T45] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 81.298605][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.312429][ T45] usb 1-1: config 0 descriptor?? [ 81.439424][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.594169][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 81.605070][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.616275][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 81.623874][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.633823][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.643649][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.653374][ T25] usb 5-1: config 0 descriptor?? [ 81.659481][ T25] hub 5-1:0.0: USB hub found [ 81.729135][ T45] ft260 0003:0403:6030.0007: item fetching failed at offset 0/2 [ 81.737061][ T45] ft260 0003:0403:6030.0007: failed to parse HID [ 81.743495][ T45] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -22 [ 81.790492][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.801549][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.811350][ T5880] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 81.820430][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.830533][ T5880] usb 2-1: config 0 descriptor?? [ 81.863434][ T25] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 81.944169][ T5854] usb 1-1: USB disconnect, device number 5 [ 82.245898][ T5880] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 82.254397][ T5880] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 82.274060][ T25] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 82.282642][ T25] hid-generic 0003:046D:C31C.0009: probe with driver hid-generic failed with error -22 [ 82.445831][ T5880] cp2112 0003:10C4:EA90.0008: Part Number: 0x6A Device Version: 0xAF [ 82.459551][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.503718][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 82.547378][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 82.610301][ T5869] usb 5-1: USB disconnect, device number 5 [ 82.633745][ T5867] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 82.645225][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.657474][ T5880] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 82.665708][ T5867] usb 3-1: config 0 descriptor?? [ 82.666258][ T5880] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 82.681828][ T5867] cp210x 3-1:0.0: cp210x converter detected [ 82.683857][ T5880] usb 2-1: USB disconnect, device number 7 [ 82.759419][ T5830] Bluetooth: hci3: command tx timeout [ 82.907595][ T6626] netlink: 96 bytes leftover after parsing attributes in process `syz.0.322'. [ 83.088734][ T5867] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 83.103617][ T5867] usb 3-1: cp210x converter now attached to ttyUSB0 [ 83.112188][ T6638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 83.289381][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.315804][ T5869] usb 3-1: USB disconnect, device number 3 [ 83.327059][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 83.356630][ T5869] cp210x 3-1:0.0: device disconnected [ 83.470494][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.484585][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.494930][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 83.504032][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.519203][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 83.519215][ T29] audit: type=1400 audit(1740260890.293:315): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.530375][ T8] usb 5-1: config 0 descriptor?? [ 83.557505][ T29] audit: type=1400 audit(1740260890.293:316): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.585682][ T29] audit: type=1400 audit(1740260890.293:317): avc: denied { create } for pid=5175 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.789429][ T29] audit: type=1400 audit(1740260890.563:318): avc: denied { write } for pid=6668 comm="syz.1.342" name="event2" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.791958][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 83.826326][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 83.837313][ T8] usb 5-1: USB disconnect, device number 6 [ 83.913508][ T29] audit: type=1400 audit(1740260890.693:319): avc: denied { create } for pid=6672 comm="syz.2.344" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.949340][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 83.964888][ T29] audit: type=1400 audit(1740260890.723:320): avc: denied { setattr } for pid=6672 comm="syz.2.344" name="file0" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.993310][ T29] audit: type=1400 audit(1740260890.733:321): avc: denied { unlink } for pid=6371 comm="syz-executor" name="file0" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.099317][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 84.110688][ T5869] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.119028][ T5869] usb 1-1: config 0 has no interface number 0 [ 84.129313][ T5869] usb 1-1: config 0 interface 184 has no altsetting 0 [ 84.147905][ T5869] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.159367][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.178192][ T5869] usb 1-1: Product: syz [ 84.188295][ T5869] usb 1-1: Manufacturer: syz [ 84.193040][ T5869] usb 1-1: SerialNumber: syz [ 84.199024][ T5869] usb 1-1: config 0 descriptor?? [ 84.204443][ T29] audit: type=1400 audit(1740260890.983:322): avc: denied { getopt } for pid=6680 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.235064][ T5869] smsc75xx v1.0.0 [ 84.386369][ T29] audit: type=1400 audit(1740260891.163:323): avc: denied { ioctl } for pid=6687 comm="syz.2.351" path="socket:[11845]" dev="sockfs" ino=11845 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.784063][ T29] audit: type=1400 audit(1740260891.563:324): avc: denied { getopt } for pid=6700 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.846436][ T5854] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.860638][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 84.875711][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 84.886282][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 84.907527][ T5869] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 84.927663][ T5869] usb 1-1: USB disconnect, device number 6 [ 85.009367][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 85.019470][ T5854] usb 3-1: config 0 has no interfaces? [ 85.040547][ T5854] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 85.051868][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.061829][ T5854] usb 3-1: Product: syz [ 85.065984][ T5854] usb 3-1: Manufacturer: syz [ 85.070816][ T5854] usb 3-1: SerialNumber: syz [ 85.076237][ T5854] usb 3-1: config 0 descriptor?? [ 85.299690][ T5869] usb 3-1: USB disconnect, device number 4 [ 85.507048][ T6728] netlink: 'syz.4.370': attribute type 5 has an invalid length. [ 85.543242][ T6730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.730707][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.879631][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 85.887597][ T5869] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.896913][ T5869] usb 1-1: config 0 has no interface number 0 [ 85.905186][ T5869] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 85.927666][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.951917][ T5869] usb 1-1: Product: syz [ 85.967400][ T5869] usb 1-1: Manufacturer: syz [ 85.974680][ T5869] usb 1-1: SerialNumber: syz [ 85.991908][ T5869] usb 1-1: config 0 descriptor?? [ 86.002875][ T5869] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 86.012786][ T5869] usb 1-1: selecting invalid altsetting 1 [ 86.018555][ T5869] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 86.042876][ T5869] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 86.057960][ T5869] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 86.067597][ T5869] usb 1-1: media controller created [ 86.098057][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.266649][ T5869] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 86.278867][ T5869] zl10353_read_register: readreg error (reg=127, ret==-71) [ 86.295545][ T5869] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 86.323107][ T5869] usb 1-1: USB disconnect, device number 7 [ 86.472915][ T6762] raw_sendmsg: syz.3.387 forgot to set AF_INET. Fix it! [ 87.056284][ T6792] sctp: [Deprecated]: syz.0.399 (pid 6792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.056284][ T6792] Use struct sctp_sack_info instead [ 88.119357][ T5830] Bluetooth: hci3: command tx timeout [ 88.451691][ T6850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.425'. [ 88.462186][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'. [ 88.525251][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 88.525265][ T29] audit: type=1326 audit(1740260895.303:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.1.426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f371958d169 code=0x0 [ 88.583445][ T6854] bond_slave_0: entered promiscuous mode [ 88.589367][ T6854] bond_slave_1: entered promiscuous mode [ 88.618331][ T29] audit: type=1400 audit(1740260895.393:339): avc: denied { write } for pid=6857 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.629262][ T6854] macvlan2: entered promiscuous mode [ 88.646132][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 88.660256][ T6854] bond0: entered promiscuous mode [ 88.673658][ T6854] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.679186][ T29] audit: type=1400 audit(1740260895.423:340): avc: denied { nlmsg_write } for pid=6857 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.716091][ T29] audit: type=1400 audit(1740260895.423:341): avc: denied { nlmsg_read } for pid=6857 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.897070][ T29] audit: type=1400 audit(1740260895.673:342): avc: denied { create } for pid=6870 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.967236][ T29] audit: type=1326 audit(1740260895.703:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 89.013727][ T29] audit: type=1326 audit(1740260895.703:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 89.041614][ T29] audit: type=1326 audit(1740260895.703:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 89.091929][ T29] audit: type=1326 audit(1740260895.703:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 89.149155][ T29] audit: type=1326 audit(1740260895.703:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf1b8d169 code=0x7ffc0000 [ 89.309638][ T6893] ubi31: attaching mtd0 [ 89.325330][ T6893] ubi31: scanning is finished [ 89.356209][ T6893] ubi31: empty MTD device detected [ 89.495740][ T6893] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 89.503384][ T6893] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 89.513512][ T6893] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 89.524155][ T6893] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 89.531911][ T6893] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 89.551795][ T6893] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 89.590698][ T6893] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3609996814 [ 89.616513][ T6893] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 89.645861][ T6900] ubi31: background thread "ubi_bgt31d" started, PID 6900 [ 89.672046][ T6907] ======================================================= [ 89.672046][ T6907] WARNING: The mand mount option has been deprecated and [ 89.672046][ T6907] and is ignored by this kernel. Remove the mand [ 89.672046][ T6907] option from the mount to silence this warning. [ 89.672046][ T6907] ======================================================= [ 89.757978][ T6912] overlayfs: overlapping lowerdir path [ 89.921201][ T6920] Device name cannot be null; rc = [-22] [ 90.074534][ T6930] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.459'. [ 90.171112][ T6935] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.462'. [ 90.553288][ T25] kernel write not supported for file /snd/seq (pid: 25 comm: kworker/1:0) [ 90.782018][ T5854] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.940493][ T5854] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 90.955436][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.973674][ T5854] usb 2-1: config 0 descriptor?? [ 90.994274][ T5854] cp210x 2-1:0.0: cp210x converter detected [ 91.414808][ T5854] usb 2-1: cp210x converter now attached to ttyUSB0 [ 91.549318][ T5880] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.625458][ T45] usb 2-1: USB disconnect, device number 8 [ 91.633702][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 91.646060][ T45] cp210x 2-1:0.0: device disconnected [ 91.731109][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.749980][ T5880] usb 1-1: config index 0 descriptor too short (expected 58522, got 159) [ 91.758441][ T5880] usb 1-1: config 191 has too many interfaces: 141, using maximum allowed: 32 [ 91.771797][ T5880] usb 1-1: config 191 has an invalid descriptor of length 0, skipping remainder of the config [ 91.782357][ T5880] usb 1-1: config 191 has 0 interfaces, different from the descriptor's value: 141 [ 91.797866][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.819571][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.835956][ T5880] usb 1-1: Product: syz [ 91.840208][ T5880] usb 1-1: Manufacturer: syz [ 91.844823][ T5880] usb 1-1: SerialNumber: syz [ 92.259388][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.509'. [ 92.279112][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 92.301539][ T7048] macsec0: entered promiscuous mode [ 92.313743][ T5880] usb 1-1: USB disconnect, device number 8 [ 92.365786][ T7051] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 92.449134][ T7053] block device autoloading is deprecated and will be removed. [ 92.472359][ T7053] syz.2.512: attempt to access beyond end of device [ 92.472359][ T7053] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 92.565972][ T7064] tmpfs: Invalid uid '0x00000000ffffffff' [ 92.996089][ T7093] program syz.2.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.054056][ T7095] hugetlbfs: syz.4.533 (7095): Using mlock ulimits for SHM_HUGETLB is obsolete [ 93.273806][ T8] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 93.309963][ T8] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.330204][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 93.669707][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.843073][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 93.862505][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.903153][ T8] usb 3-1: Product: syz [ 93.907338][ T8] usb 3-1: Manufacturer: syz [ 93.915099][ T8] usb 3-1: SerialNumber: syz [ 93.919905][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 93.919917][ T29] audit: type=1400 audit(1740260900.693:378): avc: denied { mount } for pid=7158 comm="syz.3.563" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 93.951654][ T8] usb 3-1: config 0 descriptor?? [ 93.969931][ T29] audit: type=1400 audit(1740260900.743:379): avc: denied { mounton } for pid=7158 comm="syz.3.563" path="/126/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 94.013790][ T7163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.033285][ T29] audit: type=1400 audit(1740260900.813:380): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.149455][ T7167] bond0: option resend_igmp: invalid value (7540) [ 94.165063][ T29] audit: type=1326 audit(1740260900.943:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371958d169 code=0x7ffc0000 [ 94.174171][ T7167] bond0: option resend_igmp: allowed values 0 - 255 [ 94.232318][ T5880] usb 3-1: USB disconnect, device number 5 [ 94.258624][ T29] audit: type=1326 audit(1740260900.943:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371958d169 code=0x7ffc0000 [ 94.319743][ T29] audit: type=1326 audit(1740260900.973:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f371958d169 code=0x7ffc0000 [ 94.337698][ T7174] sit1: entered allmulticast mode [ 94.376676][ T29] audit: type=1326 audit(1740260900.973:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371958d169 code=0x7ffc0000 [ 94.438480][ T29] audit: type=1326 audit(1740260900.973:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371958d169 code=0x7ffc0000 [ 94.499526][ T29] audit: type=1400 audit(1740260901.233:386): avc: denied { map } for pid=7122 comm="syz.2.544" path=2F6465762F736E642F636F6E74726F6C4333202864656C6574656429 dev="devtmpfs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.566295][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.574631][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.586991][ T7182] bridge0: entered allmulticast mode [ 94.616573][ T7186] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 94.660176][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 94.820684][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 94.836139][ T8] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 94.844560][ T8] usb 1-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 94.868763][ T8] usb 1-1: config 8 has no interface number 0 [ 94.896296][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 94.906585][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.924107][ T8] usb 1-1: Product: syz [ 94.938434][ T8] usb 1-1: Manufacturer: syz [ 94.947594][ T8] usb 1-1: SerialNumber: syz [ 94.989627][ T29] audit: type=1400 audit(1740260901.773:387): avc: denied { write } for pid=7203 comm="syz.1.584" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.165086][ T8] ipheth 1-1:8.39: Unable to find alternate settings interface [ 95.182944][ T8] usb 1-1: USB disconnect, device number 9 [ 96.088932][ T7240] gtp0: entered promiscuous mode [ 96.096084][ T7240] gtp0: entered allmulticast mode [ 96.199697][ T8] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 96.365553][ T8] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 96.373875][ T8] usb 1-1: config 0 has no interface number 1 [ 96.379368][ T5854] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.380514][ T8] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 96.396798][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.420314][ T8] usb 1-1: config 0 descriptor?? [ 96.541049][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.552897][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.562965][ T5854] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 96.574217][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.589724][ T971] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 96.590386][ T5854] usb 3-1: config 0 descriptor?? [ 96.635155][ T8] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 96.760158][ T971] usb 2-1: Using ep0 maxpacket: 32 [ 96.770839][ T971] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 96.783984][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.802294][ T971] usb 2-1: config 0 descriptor?? [ 96.826830][ T971] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 96.898145][ T45] usb 1-1: USB disconnect, device number 10 [ 96.910172][ T45] qcserial 1-1:0.2: device disconnected [ 97.016038][ T5854] holtek 0003:1241:5015.000B: unbalanced collection at end of report description [ 97.049665][ T5854] holtek 0003:1241:5015.000B: parse failed [ 97.079150][ T5854] holtek 0003:1241:5015.000B: probe with driver holtek failed with error -22 [ 97.205703][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.617'. [ 97.227466][ T5869] usb 3-1: USB disconnect, device number 6 [ 97.317397][ T7283] hsr0: entered promiscuous mode [ 97.570938][ T7296] VFS: could not find a valid V7 on nullb0. [ 97.583208][ T7298] netlink: 'syz.4.626': attribute type 16 has an invalid length. [ 97.591315][ T7298] netlink: 'syz.4.626': attribute type 3 has an invalid length. [ 97.599331][ T7298] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 97.609684][ T7298] netlink: 'syz.4.626': attribute type 2 has an invalid length. [ 97.621024][ T7298] netlink: 64022 bytes leftover after parsing attributes in process `syz.4.626'. [ 97.642870][ T971] gspca_nw80x: reg_r err -71 [ 97.647522][ T971] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 97.672519][ T971] usb 2-1: USB disconnect, device number 9 [ 97.682001][ T7296] XFS (nullb0): Invalid superblock magic number [ 98.190017][ T45] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 98.377075][ T45] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.398414][ T45] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 98.423811][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.444058][ T45] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 98.468148][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.490592][ T45] usb 5-1: config 0 descriptor?? [ 98.506167][ T7318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.926197][ T45] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0 [ 98.949363][ T45] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0 [ 98.956768][ T45] hid-u2fzero 0003:10C4:8ACF.000C: item fetching failed at offset 2/5 [ 98.977273][ T45] hid-u2fzero 0003:10C4:8ACF.000C: probe with driver hid-u2fzero failed with error -22 [ 99.031008][ T971] kernel read not supported for file /dsp1 (pid: 971 comm: kworker/0:2) [ 99.153213][ T45] usb 5-1: USB disconnect, device number 7 [ 99.399677][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 99.399691][ T29] audit: type=1400 audit(1740260906.173:401): avc: denied { getopt } for pid=7380 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.424933][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.852950][ T7410] CUSE: info not properly terminated [ 100.183422][ T29] audit: type=1400 audit(1740260906.963:402): avc: denied { read } for pid=7436 comm="syz.4.686" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.233929][ T29] audit: type=1400 audit(1740260906.963:403): avc: denied { open } for pid=7436 comm="syz.4.686" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.257329][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.299371][ T5869] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 100.411179][ T971] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.469613][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 100.480241][ T5869] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.491046][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.497657][ T5869] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 100.517189][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.531017][ T5869] usb 1-1: config 0 descriptor?? [ 100.559352][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 100.570921][ T971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.581555][ T971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.592126][ T971] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.609354][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.618284][ T971] usb 3-1: SerialNumber: syz [ 100.711472][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.728299][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.738227][ T45] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 100.747399][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.758284][ T45] usb 2-1: config 0 descriptor?? [ 100.789056][ T29] audit: type=1326 audit(1740260907.563:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf03b8d169 code=0x0 [ 100.811743][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.848057][ T971] usb 3-1: 0:2 : does not exist [ 100.860106][ T971] usb 3-1: USB disconnect, device number 7 [ 100.975195][ T5869] cougar 0003:060B:500A.000D: unexpected long global item [ 100.987228][ T5869] cougar 0003:060B:500A.000D: parse failed [ 100.994165][ T5869] cougar 0003:060B:500A.000D: probe with driver cougar failed with error -22 [ 101.160728][ T971] usb 1-1: USB disconnect, device number 11 [ 101.573241][ T45] hid-led 0003:0FC5:B080.000E: probe with driver hid-led failed with error -71 [ 101.588644][ T45] usb 2-1: USB disconnect, device number 10 [ 101.712815][ T7478] netlink: 56 bytes leftover after parsing attributes in process `syz.4.705'. [ 102.171658][ T971] IPVS: starting estimator thread 0... [ 102.299734][ T7494] IPVS: using max 26 ests per chain, 62400 per kthread [ 102.447245][ T29] audit: type=1400 audit(1740260909.223:405): avc: denied { watch } for pid=7507 comm="syz.1.720" path="/119" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.597312][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.608474][ T29] audit: type=1400 audit(1740260909.373:406): avc: denied { ioctl } for pid=7516 comm="syz.3.723" path="socket:[16894]" dev="sockfs" ino=16894 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.669939][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.702221][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.719319][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.744064][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.775912][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.806170][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.841505][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.869288][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.892452][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.079049][ T29] audit: type=1400 audit(1740260909.853:407): avc: denied { bind } for pid=7536 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 103.113833][ T29] audit: type=1400 audit(1740260909.853:408): avc: denied { name_bind } for pid=7536 comm="syz.4.732" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 103.168580][ T29] audit: type=1400 audit(1740260909.853:409): avc: denied { node_bind } for pid=7536 comm="syz.4.732" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 103.433180][ T7559] rtc_cmos 00:00: Alarms can be up to one day in the future [ 103.464567][ T7558] rtc_cmos 00:00: Alarms can be up to one day in the future [ 103.690013][ T5869] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.721431][ T7572] netlink: 'syz.4.747': attribute type 16 has an invalid length. [ 103.729184][ T7572] netlink: 'syz.4.747': attribute type 17 has an invalid length. [ 103.775808][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.782976][ T7572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.791632][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.798693][ T7572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.821305][ T7572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.881279][ T5869] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.899315][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.917328][ T5869] usb 3-1: Product: syz [ 103.921778][ T5869] usb 3-1: Manufacturer: syz [ 103.926374][ T5869] usb 3-1: SerialNumber: syz [ 103.936459][ T5869] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.964584][ T5868] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.045877][ T2945] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.064888][ T7585] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 104.095329][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.168875][ T7587] /dev/nbd1: Can't open blockdev [ 104.173126][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 104.192292][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 104.220111][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 104.240051][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 104.249638][ T5869] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 104.267921][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 104.335294][ T7594] Zero length message leads to an empty skb [ 104.411539][ T8] kernel write not supported for file /sequencer (pid: 8 comm: kworker/0:0) [ 104.421164][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 104.429047][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.490407][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.509901][ T8] usb 3-1: USB disconnect, device number 8 [ 104.524617][ T5869] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 104.549293][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.570594][ T5869] usb 1-1: config 0 descriptor?? [ 104.598146][ T29] audit: type=1400 audit(1740260911.373:410): avc: denied { read } for pid=7598 comm="syz.1.760" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.659281][ T29] audit: type=1400 audit(1740260911.373:411): avc: denied { open } for pid=7598 comm="syz.1.760" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.713174][ T29] audit: type=1400 audit(1740260911.413:412): avc: denied { ioctl } for pid=7598 comm="syz.1.760" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.992187][ T5869] kone 0003:1E7D:2CED.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 105.003633][ T5868] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 105.010938][ T5868] ath9k_htc: Failed to initialize the device [ 105.030226][ T8] usb 3-1: ath9k_htc: USB layer deinitialized [ 105.059429][ T5854] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 105.152639][ T29] audit: type=1400 audit(1740260911.933:413): avc: denied { getopt } for pid=7610 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.186572][ T5869] kone 0003:1E7D:2CED.000F: couldn't init struct kone_device [ 105.204368][ T5869] kone 0003:1E7D:2CED.000F: couldn't install mouse [ 105.221873][ T5869] kone 0003:1E7D:2CED.000F: probe with driver kone failed with error -5 [ 105.235513][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.248037][ T5869] usb 1-1: USB disconnect, device number 12 [ 105.265204][ T5854] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 105.285082][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.311645][ T5854] usb 2-1: config 0 descriptor?? [ 105.751532][ T5854] holtek_mouse 0003:04D9:A081.0010: item fetching failed at offset 3/4 [ 105.779832][ T5854] holtek_mouse 0003:04D9:A081.0010: hid parse failed: -22 [ 105.787063][ T5854] holtek_mouse 0003:04D9:A081.0010: probe with driver holtek_mouse failed with error -22 [ 105.828252][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 105.845837][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 105.868942][ T7626] netlink: 'syz.4.772': attribute type 20 has an invalid length. [ 105.899516][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.986771][ T5869] usb 2-1: USB disconnect, device number 11 [ 105.995308][ T7632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.009528][ T7632] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 106.060887][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.070922][ T45] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 106.081858][ T45] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.100894][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 106.113274][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.123500][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 106.129821][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.159353][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.179321][ T45] usb 3-1: Product: syz [ 106.183492][ T45] usb 3-1: Manufacturer: syz [ 106.188084][ T45] usb 3-1: SerialNumber: syz [ 106.202248][ T7623] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 106.209664][ T7623] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 106.317488][ T29] audit: type=1400 audit(1740260913.093:414): avc: denied { setopt } for pid=7646 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.425233][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 106.452878][ T45] usb 3-1: USB disconnect, device number 9 [ 106.539302][ T29] audit: type=1400 audit(1740260913.303:415): avc: denied { execute } for pid=7662 comm="syz.0.790" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 106.623902][ T29] audit: type=1400 audit(1740260913.343:416): avc: denied { setattr } for pid=7664 comm="syz.4.791" name="net" dev="proc" ino=17122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1 [ 106.649551][ T5868] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.708784][ T29] audit: type=1400 audit(1740260913.483:417): avc: denied { create } for pid=7672 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.735742][ T29] audit: type=1400 audit(1740260913.513:418): avc: denied { write } for pid=7672 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.810595][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.826062][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.846116][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.858484][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 106.860360][ T5868] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.880228][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 106.884419][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.902697][ T7681] openvswitch: netlink: IP tunnel TTL not specified. [ 106.911791][ T5868] usb 4-1: config 0 descriptor?? [ 107.009596][ T7687] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.802'. [ 107.018652][ T7687] openvswitch: netlink: Missing key (keys=40, expected=80) [ 107.051434][ T7690] tun0: tun_chr_ioctl cmd 2147767507 [ 107.164280][ T45] kernel read not supported for file /vcs (pid: 45 comm: kworker/1:1) [ 107.260448][ T7695] sctp: [Deprecated]: syz.1.806 (pid 7695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.260448][ T7695] Use struct sctp_sack_info instead [ 107.316186][ T29] audit: type=1400 audit(1740260914.093:419): avc: denied { append } for pid=7705 comm="syz.0.811" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.327942][ T5868] plantronics 0003:047F:FFFF.0011: item 0 4 0 11 parsing failed [ 107.359649][ T5868] plantronics 0003:047F:FFFF.0011: parse failed [ 107.365953][ T5868] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 107.609116][ T8] usb 4-1: USB disconnect, device number 5 [ 107.678135][ T7726] vlan2: entered promiscuous mode [ 107.683428][ T7726] syz_tun: entered promiscuous mode [ 107.708132][ T7726] vlan2: entered allmulticast mode [ 107.713889][ T7726] syz_tun: entered allmulticast mode [ 107.727743][ T7726] team0: Device vlan2 is up. Set it down before adding it as a team port [ 107.738993][ T7726] syz_tun: left allmulticast mode [ 107.749071][ T7726] syz_tun: left promiscuous mode [ 107.779418][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 107.820471][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 107.942728][ T45] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.957924][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.966853][ T45] usb 1-1: Product: syz [ 107.980536][ T45] usb 1-1: Manufacturer: syz [ 107.985139][ T45] usb 1-1: SerialNumber: syz [ 108.005820][ T45] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.052988][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.243807][ T7749] pim6reg: entered allmulticast mode [ 108.313189][ T7755] overlayfs: conflicting options: userxattr,metacopy=on [ 108.358018][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'. [ 108.387840][ T7759] bond1: entered promiscuous mode [ 108.428994][ T7759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.449963][ T7766] netlink: 112 bytes leftover after parsing attributes in process `syz.3.840'. [ 108.533667][ T7759] bond1 (unregistering): Released all slaves [ 108.547802][ T7766] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 108.727773][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 108.860766][ T7786] random: crng reseeded on system resumption [ 109.079445][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 109.086426][ T25] ath9k_htc: Failed to initialize the device [ 109.137593][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 109.178396][ T5869] usb 1-1: USB disconnect, device number 13 [ 109.254665][ T7798] netlink: 104 bytes leftover after parsing attributes in process `syz.2.853'. [ 109.367097][ T7805] overlayfs: missing 'workdir' [ 109.978817][ T7841] sctp: [Deprecated]: syz.2.874 (pid 7841) Use of int in max_burst socket option. [ 109.978817][ T7841] Use struct sctp_assoc_value instead [ 110.301644][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 110.301658][ T29] audit: type=1400 audit(1740260917.083:430): avc: denied { create } for pid=7850 comm="syz.2.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.379570][ T29] audit: type=1400 audit(1740260917.113:431): avc: denied { ioctl } for pid=7850 comm="syz.2.878" path="socket:[17837]" dev="sockfs" ino=17837 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.667336][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.741017][ T29] audit: type=1400 audit(1740260917.523:432): avc: denied { create } for pid=7878 comm="syz.3.891" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.775442][ T7879] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.792221][ T29] audit: type=1400 audit(1740260917.573:433): avc: denied { create } for pid=7880 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.799290][ T7879] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 110.830675][ T29] audit: type=1400 audit(1740260917.603:434): avc: denied { bind } for pid=7880 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.837256][ T7879] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.859813][ T7879] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 110.871787][ T7882] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.886236][ T7882] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 110.896069][ T7882] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.904699][ T7882] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 110.913256][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 110.956509][ T7886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.970083][ T29] audit: type=1400 audit(1740260917.753:435): avc: denied { unlink } for pid=5816 comm="syz-executor" name="file0" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.971523][ T7886] bond0: (slave bond1): Enslaving as an active interface with an up link [ 110.992662][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.105725][ T29] audit: type=1400 audit(1740260917.883:436): avc: denied { write } for pid=7896 comm="syz.3.899" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 111.110545][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.128841][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.152319][ T8] kernel write not supported for file /input/mouse0 (pid: 8 comm: kworker/0:0) [ 111.167690][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.189322][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.203350][ T5869] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 111.212490][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.231818][ T5869] usb 1-1: config 0 descriptor?? [ 111.272793][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.282555][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.289684][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.383445][ T7905] __nla_validate_parse: 2 callbacks suppressed [ 111.383462][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 111.414924][ T7905] bond1 (unregistering): Released all slaves [ 111.443487][ T5869] usbhid 1-1:0.0: can't add hid device: -71 [ 111.450558][ T5869] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.463370][ T5869] usb 1-1: USB disconnect, device number 14 [ 112.026220][ T7934] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 112.118158][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 112.137413][ T7938] bridge_slave_1: left allmulticast mode [ 112.150258][ T7938] bridge_slave_1: left promiscuous mode [ 112.155955][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.187242][ T7938] bridge_slave_0: left allmulticast mode [ 112.199920][ T7938] bridge_slave_0: left promiscuous mode [ 112.215888][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.343451][ T29] audit: type=1400 audit(1740260919.123:437): avc: denied { read } for pid=7947 comm="syz.2.921" path="socket:[18080]" dev="sockfs" ino=18080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.727614][ T29] audit: type=1400 audit(1740260919.503:438): avc: denied { connect } for pid=7964 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.789630][ T29] audit: type=1400 audit(1740260919.533:439): avc: denied { remount } for pid=7965 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.809664][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.869860][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 112.969348][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 112.978686][ T25] usb 4-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.989096][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.006470][ T25] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 113.027854][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.067831][ T25] usb 4-1: config 0 descriptor?? [ 113.496182][ T25] cypress 0003:04B4:0001.0012: hidraw0: USB HID v20.00 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0 [ 113.505782][ T8004] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.519957][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 113.725919][ T25] usb 4-1: USB disconnect, device number 6 [ 114.045441][ T8040] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 114.307150][ T8063] new mount options do not match the existing superblock, will be ignored [ 114.323652][ T8063] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 114.471690][ T8072] vxcan1: tx address claim with dest, not broadcast [ 114.604445][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 114.696379][ T8084] team0: No ports can be present during mode change [ 114.829295][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.913635][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 114.969388][ T5854] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.982858][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 114.991751][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.011955][ T5880] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 115.023042][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.035184][ T5880] usb 5-1: config 0 descriptor?? [ 115.069933][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 115.077931][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.086344][ T25] usb 2-1: config 0 has no interface number 0 [ 115.094913][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 115.104358][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.112891][ T25] usb 2-1: Product: syz [ 115.117325][ T25] usb 2-1: Manufacturer: syz [ 115.122306][ T25] usb 2-1: SerialNumber: syz [ 115.129146][ T25] usb 2-1: config 0 descriptor?? [ 115.134444][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 115.142555][ T25] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 115.151841][ T25] usb 2-1: selecting invalid altsetting 1 [ 115.157593][ T25] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.167832][ T25] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.167951][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.189135][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.197935][ T25] usb 2-1: media controller created [ 115.208250][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.216701][ T5854] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 115.226030][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.237630][ T5854] usb 4-1: config 0 descriptor?? [ 115.319357][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 115.397552][ T25] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 115.406292][ T25] zl10353_read_register: readreg error (reg=127, ret==-71) [ 115.415111][ T25] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 115.436203][ T25] usb 2-1: USB disconnect, device number 12 [ 115.447820][ T5880] hid-picolcd 0003:04D8:F002.0013: item fetching failed at offset 10/11 [ 115.457044][ T5880] hid-picolcd 0003:04D8:F002.0013: device report parse failed [ 115.464867][ T5880] hid-picolcd 0003:04D8:F002.0013: probe with driver hid-picolcd failed with error -22 [ 115.475078][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 115.484629][ T45] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 115.494967][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.503039][ T45] usb 1-1: Product: syz [ 115.507229][ T45] usb 1-1: Manufacturer: syz [ 115.511926][ T45] usb 1-1: SerialNumber: syz [ 115.518227][ T45] usb 1-1: config 0 descriptor?? [ 115.661544][ T5854] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 115.671752][ T8] usb 5-1: USB disconnect, device number 8 [ 115.728240][ T45] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 115.739082][ T5854] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 115.747540][ T5854] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 115.755996][ T5854] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 115.764484][ T5854] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 116.052392][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 116.052408][ T29] audit: type=1400 audit(1740260922.833:447): avc: denied { getopt } for pid=8098 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.081447][ T8099] tmpfs: Invalid gid '0x00000000ffffffff' [ 116.099376][ T5854] usb 4-1: USB disconnect, device number 7 [ 116.279391][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 116.338957][ T45] gspca_sunplus: reg_w_riv err -71 [ 116.344227][ T45] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 116.353566][ T45] usb 1-1: USB disconnect, device number 15 [ 116.459029][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 116.473182][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 116.778298][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 116.844620][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 117.134365][ T29] audit: type=1400 audit(1740260923.913:448): avc: denied { map } for pid=8154 comm="syz.2.1016" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 117.181003][ T29] audit: type=1400 audit(1740260923.913:449): avc: denied { execute } for pid=8154 comm="syz.2.1016" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 117.229421][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.391107][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.408427][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.431803][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.446286][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.483919][ T29] audit: type=1400 audit(1740260924.263:450): avc: denied { name_connect } for pid=8170 comm="syz.1.1024" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 117.495463][ T8147] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.541428][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.673824][ T8181] wg1: entered promiscuous mode [ 117.710252][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 117.796921][ T8] usb 4-1: USB disconnect, device number 8 [ 117.865614][ T8189] overlayfs: workdir and upperdir must be separate subtrees [ 117.943894][ T29] audit: type=1400 audit(1740260924.713:451): avc: denied { ioctl } for pid=8194 comm="syz.2.1036" path="socket:[19242]" dev="sockfs" ino=19242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.947707][ T8198] cgroup: fork rejected by pids controller in /syz4 [ 118.373822][ T4409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.431870][ T4409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.515027][ T4409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.550385][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.595048][ T4409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.687240][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.698964][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.713227][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 118.718441][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.731648][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.731647][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.731681][ T5867] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.774908][ T8223] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 118.787325][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 118.788823][ T5867] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 118.821798][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.830130][ T4409] bridge_slave_1: left allmulticast mode [ 118.839794][ T4409] bridge_slave_1: left promiscuous mode [ 118.845527][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.865260][ T4409] bridge_slave_0: left allmulticast mode [ 118.877813][ T4409] bridge_slave_0: left promiscuous mode [ 118.884807][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.895631][ T5867] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.918636][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.947690][ T29] audit: type=1400 audit(1740260925.733:452): avc: denied { connect } for pid=8226 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.971111][ T5867] usb 3-1: Product: syz [ 118.981950][ T5867] usb 3-1: Manufacturer: syz [ 118.988142][ T5867] usb 3-1: SerialNumber: syz [ 119.018922][ T29] audit: type=1400 audit(1740260925.783:453): avc: denied { open } for pid=8229 comm="syz.1.1052" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 119.063583][ T29] audit: type=1400 audit(1740260925.793:454): avc: denied { ioctl } for pid=8229 comm="syz.1.1052" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 119.237409][ T5867] cdc_ncm 3-1:1.0: bind() failure [ 119.248998][ T5867] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 119.260265][ T5867] cdc_ncm 3-1:1.1: bind() failure [ 119.275442][ T5867] usb 3-1: USB disconnect, device number 10 [ 119.396896][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.407622][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.417194][ T4409] bond0 (unregistering): Released all slaves [ 119.601035][ T8252] program syz.0.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.682352][ T8220] chnl_net:caif_netlink_parms(): no params data found [ 120.069850][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.089562][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.096879][ T8220] bridge_slave_0: entered allmulticast mode [ 120.103919][ T8220] bridge_slave_0: entered promiscuous mode [ 120.132742][ T4409] hsr_slave_0: left promiscuous mode [ 120.159178][ T4409] hsr_slave_1: left promiscuous mode [ 120.168501][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.186243][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.209824][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.236299][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.264993][ T4409] veth1_macvtap: left promiscuous mode [ 120.336131][ T4409] veth0_macvtap: left promiscuous mode [ 120.348263][ T4409] veth1_vlan: left promiscuous mode [ 120.358660][ T4409] veth0_vlan: left promiscuous mode [ 120.389161][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 120.410808][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 120.840891][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 120.867458][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 120.920107][ T5830] Bluetooth: hci4: command tx timeout [ 121.104045][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.112608][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.120200][ T8220] bridge_slave_1: entered allmulticast mode [ 121.127075][ T8220] bridge_slave_1: entered promiscuous mode [ 121.157138][ T8292] batman_adv: batadv0: Adding interface: geneve2 [ 121.177578][ T8292] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 121.223467][ T5854] kernel write not supported for file /video8 (pid: 5854 comm: kworker/1:3) [ 121.275946][ T8220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.297712][ T8220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.383565][ T8220] team0: Port device team_slave_0 added [ 121.407979][ T8220] team0: Port device team_slave_1 added [ 121.430970][ T8308] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 121.448873][ T8313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.452122][ T8308] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.517120][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.530327][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.580148][ T8220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.614982][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.624607][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.689294][ T8220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.834076][ T8220] hsr_slave_0: entered promiscuous mode [ 121.854571][ T8220] hsr_slave_1: entered promiscuous mode [ 122.177026][ T8355] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 122.184951][ T29] audit: type=1400 audit(1740260928.953:455): avc: denied { write } for pid=8353 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.329493][ T5854] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.338871][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.441220][ T8220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.451645][ T8220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.460520][ T8220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.470381][ T8220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.509322][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 122.519516][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 122.540734][ T5854] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.551058][ T45] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.563787][ T8220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.573086][ T45] usb 3-1: config 179 has no interface number 0 [ 122.580403][ T5854] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 122.592678][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.598203][ T8220] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.610586][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.618582][ T5854] usb 4-1: Product: syz [ 122.623057][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.634477][ T5854] usb 4-1: Manufacturer: syz [ 122.639076][ T5854] usb 4-1: SerialNumber: syz [ 122.644155][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.656925][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.664021][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.673232][ T5854] usb 4-1: config 0 descriptor?? [ 122.681011][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.688099][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.695703][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.707396][ T29] audit: type=1400 audit(1740260929.483:456): avc: denied { write } for pid=8374 comm="syz.0.1118" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 122.731139][ T45] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.746370][ T45] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.755762][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.769180][ T8346] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.891983][ T8382] netlink: 'syz.1.1120': attribute type 8 has an invalid length. [ 122.947348][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.999451][ T5830] Bluetooth: hci4: command tx timeout [ 123.040595][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input13 [ 123.085706][ T5854] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 123.087114][ T8390] misc userio: Invalid payload size [ 123.105994][ T8390] misc userio: Invalid payload size [ 123.111591][ T8390] misc userio: Invalid payload size [ 123.217631][ T8] kernel read not supported for file /dsp (pid: 8 comm: kworker/0:0) [ 123.227125][ T8220] veth0_vlan: entered promiscuous mode [ 123.270011][ T8220] veth1_vlan: entered promiscuous mode [ 123.296912][ T5854] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 123.331268][ T5854] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 123.340353][ T8220] veth0_macvtap: entered promiscuous mode [ 123.343050][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1126'. [ 123.348367][ T8220] veth1_macvtap: entered promiscuous mode [ 123.386844][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.420075][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.430148][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.445574][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.456235][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.467375][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.477711][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.482557][ T45] usb 3-1: USB disconnect, device number 11 [ 123.488149][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.488181][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 123.515578][ T5854] usb 4-1: USB disconnect, device number 9 [ 123.525236][ T45] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 123.559413][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.590182][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.605306][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.632638][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.670123][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.680752][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.691549][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.702943][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.712786][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.723936][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.735532][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.750918][ T8220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.784049][ T8220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.811157][ T8220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.826031][ T8220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.902774][ T321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.931925][ T321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.955516][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.985424][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.601681][ T29] audit: type=1326 audit(1740260931.383:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.4.1145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd98c38d169 code=0x0 [ 124.624500][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.079573][ T5830] Bluetooth: hci4: command tx timeout [ 125.512277][ T8469] tipc: Started in network mode [ 125.517340][ T8469] tipc: Node identity ac141441, cluster identity 4711 [ 125.532542][ T8469] tipc: Enabling of bearer rejected, failed to enable media [ 125.730103][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.910180][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 125.935166][ T8] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 125.951296][ T29] audit: type=1400 audit(1740260932.733:458): avc: denied { read } for pid=8492 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.971085][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.005124][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.015223][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.029288][ T8] usb 4-1: Product: syz [ 126.029913][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.033440][ T8] usb 4-1: Manufacturer: syz [ 126.033457][ T8] usb 4-1: SerialNumber: syz [ 126.182958][ T8501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.209489][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 126.225039][ T45] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 126.236656][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.253375][ T45] usb 3-1: Product: syz [ 126.258675][ T45] usb 3-1: Manufacturer: syz [ 126.265667][ T45] usb 3-1: SerialNumber: syz [ 126.274805][ T45] usb 3-1: config 0 descriptor?? [ 126.283488][ T45] gspca_main: sq930x-2.14.0 probing 2770:930c [ 126.300191][ T8] usb 4-1: unknown interface protocol 0xff, assuming v1 [ 126.307152][ T8] usb 4-1: cannot find UAC_HEADER [ 126.309351][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 126.323571][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1169'. [ 126.333022][ T8] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 126.353542][ T8] usb 4-1: USB disconnect, device number 10 [ 126.496786][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 126.510281][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 126.529050][ T25] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 126.543864][ T25] usb 2-1: Product: syz [ 126.548103][ T25] usb 2-1: Manufacturer: syz [ 126.554699][ T25] usb 2-1: SerialNumber: syz [ 126.566764][ T25] usb 2-1: config 0 descriptor?? [ 126.583742][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 126.598832][ T8511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 126.911613][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 126.950321][ T29] audit: type=1400 audit(1740260933.733:459): avc: denied { ioctl } for pid=8523 comm="syz.3.1179" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.975284][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.059479][ T5880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.110077][ T45] gspca_sq930x: ucbus_write failed -71 [ 127.115628][ T45] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 127.128881][ T45] usb 3-1: USB disconnect, device number 12 [ 127.159369][ T5830] Bluetooth: hci4: command tx timeout [ 127.199788][ T25] gspca_zc3xx: reg_w_i err -71 [ 127.204868][ T25] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 127.234488][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.257409][ T25] usb 2-1: USB disconnect, device number 13 [ 127.269715][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.299367][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.330038][ T5880] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 127.342517][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.359890][ T5880] usb 5-1: config 0 descriptor?? [ 127.692386][ T8552] sch_tbf: peakrate 2646 is lower than or equals to rate 17014499898028217207 ! [ 127.780575][ T5880] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 127.801266][ T5880] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 127.810188][ T5880] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 127.829449][ T5880] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 127.839273][ T5880] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 127.865005][ T5880] aureal 0003:0755:2626.0015: hidraw0: USB HID v0.0b Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0 [ 127.881623][ T8558] netlink: 'syz.1.1195': attribute type 5 has an invalid length. [ 128.000074][ T29] audit: type=1326 audit(1740260934.773:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64f678d169 code=0x0 [ 128.018823][ T5880] usb 5-1: USB disconnect, device number 9 [ 128.057944][ T8572] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1201'. [ 128.127123][ T29] audit: type=1400 audit(1740260934.903:461): avc: denied { setopt } for pid=8573 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.176247][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 128.185687][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 128.604149][ T8600] netlink: 'syz.4.1214': attribute type 5 has an invalid length. [ 128.808012][ T8608] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.817255][ T8608] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.826060][ T8608] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.834808][ T8608] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.843686][ T8608] vxlan0: entered promiscuous mode [ 128.848793][ T8608] vxlan0: entered allmulticast mode [ 128.909559][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.948197][ T29] audit: type=1400 audit(1740260935.723:462): avc: denied { write } for pid=8616 comm="syz.0.1222" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 129.069302][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 129.070054][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.075625][ T25] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 129.107330][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 129.120008][ T25] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 129.159462][ T25] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 129.182856][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.192670][ T25] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 129.206354][ T25] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 129.216066][ T25] usb 4-1: Product: syz [ 129.220556][ T25] usb 4-1: Manufacturer: syz [ 129.227381][ T25] usb 4-1: SerialNumber: syz [ 129.236758][ T25] usb 4-1: config 0 descriptor?? [ 129.251161][ T25] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 129.254212][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 129.265895][ T25] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 129.276828][ T8] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 129.304286][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.319619][ T8] usb 2-1: Product: syz [ 129.323786][ T8] usb 2-1: Manufacturer: syz [ 129.328376][ T8] usb 2-1: SerialNumber: syz [ 129.351007][ T8] usb 2-1: config 0 descriptor?? [ 129.361868][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 129.517988][ T25] usb 4-1: USB disconnect, device number 11 [ 129.527841][ T25] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 129.715899][ T8651] tipc: Started in network mode [ 129.722799][ T8651] tipc: Node identity ac141441, cluster identity 4711 [ 129.733501][ T8651] tipc: Enabled bearer , priority 10 [ 129.768448][ T8] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 129.776074][ T29] audit: type=1400 audit(1740260936.553:463): avc: denied { watch_reads } for pid=8654 comm="syz.2.1240" path="/205" dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 129.799942][ T8] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 129.810475][ T8] usb 2-1: USB disconnect, device number 14 [ 129.839417][ T8651] syz.4.1238 (8651) used greatest stack depth: 19584 bytes left [ 129.891683][ T8660] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.898426][ T8660] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.992408][ T29] audit: type=1400 audit(1740260936.773:464): avc: denied { bind } for pid=8666 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.998429][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 235.039183][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 235.039202][ C1] rcu: 0-...!: (1 GPs behind) idle=8854/1/0x4000000000000000 softirq=23404/23407 fqs=0 [ 235.039754][ C1] rcu: (detected by 1, t=10502 jiffies, g=19053, q=290 ncpus=2) [ 235.039772][ C1] Sending NMI from CPU 1 to CPUs 0: [ 235.039795][ C0] NMI backtrace for cpu 0 [ 235.039805][ C0] CPU: 0 UID: 0 PID: 8669 Comm: syz.0.1246 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 235.039821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.039829][ C0] RIP: 0010:kasan_check_range+0x105/0x1a0 [ 235.039851][ C0] Code: 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 c1 ec ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 41 80 38 00 74 f2 eb b2 41 bc 08 00 00 00 [ 235.039864][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00000046 [ 235.039876][ C0] RAX: fffffbfff2dd8599 RBX: fffffbfff2dd859a RCX: ffffffff8195b5de [ 235.039885][ C0] RDX: fffffbfff2dd859a RSI: 0000000000000008 RDI: ffffffff96ec2cc8 [ 235.039894][ C0] RBP: fffffbfff2dd8599 R08: 0000000000000000 R09: fffffbfff2dd8599 [ 235.039903][ C0] R10: ffffffff96ec2ccf R11: 0000000000000002 R12: ffff888024b72f79 [ 235.039912][ C0] R13: ffff888024b72440 R14: 0000000000000002 R15: ffff888024b72f80 [ 235.039921][ C0] FS: 00007f64f76406c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 235.039935][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.039944][ C0] CR2: 000000110c266982 CR3: 00000000757b0000 CR4: 00000000003526f0 [ 235.039953][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.039961][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.039969][ C0] Call Trace: [ 235.039974][ C0] [ 235.039980][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 235.040001][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 235.040018][ C0] ? nmi_handle+0x1ac/0x5d0 [ 235.040036][ C0] ? kasan_check_range+0x105/0x1a0 [ 235.040052][ C0] ? default_do_nmi+0x6a/0x160 [ 235.040070][ C0] ? exc_nmi+0x170/0x1e0 [ 235.040088][ C0] ? end_repeat_nmi+0xf/0x53 [ 235.040107][ C0] ? hlock_class+0x4e/0x130 [ 235.040122][ C0] ? kasan_check_range+0x105/0x1a0 [ 235.040138][ C0] ? kasan_check_range+0x105/0x1a0 [ 235.040155][ C0] ? kasan_check_range+0x105/0x1a0 [ 235.040171][ C0] [ 235.040175][ C0] [ 235.040179][ C0] hlock_class+0x4e/0x130 [ 235.040193][ C0] __lock_acquire+0x15a9/0x3c40 [ 235.040213][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 235.040230][ C0] ? advance_sched+0x6d2/0xc60 [ 235.040250][ C0] lock_acquire.part.0+0x11b/0x380 [ 235.040267][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 235.040281][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 235.040298][ C0] ? rcu_is_watching+0x12/0xc0 [ 235.040313][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 235.040327][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 235.040339][ C0] ? lock_acquire+0x2f/0xb0 [ 235.040355][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 235.040368][ C0] ? __pfx_advance_sched+0x10/0x10 [ 235.040385][ C0] _raw_spin_lock_irq+0x36/0x50 [ 235.040398][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 235.040410][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 235.040425][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 235.040438][ C0] ? read_tsc+0x9/0x20 [ 235.040452][ C0] ? rcu_is_watching+0x12/0xc0 [ 235.040466][ C0] hrtimer_interrupt+0x392/0x8e0 [ 235.040483][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 235.040502][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 235.040515][ C0] [ 235.040519][ C0] [ 235.040524][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.040542][ C0] RIP: 0010:console_flush_all+0x9a4/0xc60 [ 235.040556][ C0] Code: 00 e8 70 01 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 9e 44 20 00 48 85 db 0f 85 55 01 00 00 e8 60 49 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 a5 5e 83 [ 235.040568][ C0] RSP: 0018:ffffc900030e6e10 EFLAGS: 00000246 [ 235.040578][ C0] RAX: ffffffff8eeabff8 RBX: 0000000000000000 RCX: ffffc9000bdb9000 [ 235.040587][ C0] RDX: 0000000000080000 RSI: ffffffff81999690 RDI: 0000000000000007 [ 235.040595][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 235.040603][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8eeabff8 [ 235.040611][ C0] R13: ffffffff8eeabfa0 R14: ffffc900030e6ea0 R15: dffffc0000000000 [ 235.040623][ C0] ? console_flush_all+0x9a0/0xc60 [ 235.040639][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 235.040652][ C0] ? find_held_lock+0x2d/0x110 [ 235.040667][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 235.040683][ C0] console_unlock+0xd9/0x210 [ 235.040695][ C0] ? __pfx_console_unlock+0x10/0x10 [ 235.040709][ C0] ? lock_acquire+0x2f/0xb0 [ 235.040730][ C0] ? vprintk_emit+0x638/0x6f0 [ 235.040744][ C0] vprintk_emit+0x424/0x6f0 [ 235.040757][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 235.040769][ C0] ? __pfx_lock_release+0x10/0x10 [ 235.040785][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 235.040802][ C0] _printk+0xc8/0x100 [ 235.040818][ C0] ? __pfx__printk+0x10/0x10 [ 235.040835][ C0] ? ___ratelimit+0x24c/0x570 [ 235.040849][ C0] ? __pfx____ratelimit+0x10/0x10 [ 235.040862][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 235.040876][ C0] __nla_validate_parse+0x753/0x2880 [ 235.040893][ C0] ? arch_stack_walk+0xa7/0x100 [ 235.040906][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 235.040924][ C0] __nla_parse+0x40/0x60 [ 235.040938][ C0] rtnl_dellink+0x195/0xaa0 [ 235.040955][ C0] ? __pfx_rtnl_dellink+0x10/0x10 [ 235.040983][ C0] ? cred_has_capability.isra.0+0x192/0x2f0 [ 235.041000][ C0] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 235.041019][ C0] ? find_held_lock+0x2d/0x110 [ 235.041034][ C0] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 235.041049][ C0] ? __pfx_lock_release+0x10/0x10 [ 235.041065][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 235.041081][ C0] ? __pfx_rtnl_dellink+0x10/0x10 [ 235.041096][ C0] rtnetlink_rcv_msg+0x95b/0xea0 [ 235.041113][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.041133][ C0] netlink_rcv_skb+0x16b/0x440 [ 235.041148][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.041165][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.041184][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 235.041201][ C0] netlink_unicast+0x53c/0x7f0 [ 235.041217][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 235.041235][ C0] netlink_sendmsg+0x8b8/0xd70 [ 235.041251][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.041269][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 235.041282][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 235.041299][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.041315][ C0] ___sys_sendmsg+0x135/0x1e0 [ 235.041332][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.041351][ C0] ? __pfx_lock_release+0x10/0x10 [ 235.041368][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 235.041384][ C0] ? __fget_files+0x206/0x3a0 [ 235.041399][ C0] __sys_sendmsg+0x16e/0x220 [ 235.041414][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.041431][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 235.041451][ C0] do_syscall_64+0xcd/0x250 [ 235.041467][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.041483][ C0] RIP: 0033:0x7f64f678d169 [ 235.041494][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.041506][ C0] RSP: 002b:00007f64f7640038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.041518][ C0] RAX: ffffffffffffffda RBX: 00007f64f69a5fa0 RCX: 00007f64f678d169 [ 235.041527][ C0] RDX: 0000000000040044 RSI: 0000400000000200 RDI: 0000000000000003 [ 235.041535][ C0] RBP: 00007f64f680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 235.041543][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.041551][ C0] R13: 0000000000000000 R14: 00007f64f69a5fa0 R15: 00007ffe6fbe0668 [ 235.041564][ C0] [ 235.041793][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g19053 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 235.041812][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 235.041821][ C1] rcu: RCU grace-period kthread stack dump: [ 235.041827][ C1] task:rcu_preempt state:R running task stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 235.041883][ C1] Call Trace: [ 235.041890][ C1] [ 235.041900][ C1] __schedule+0xf43/0x5890 [ 235.041918][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 235.041952][ C1] ? __pfx___schedule+0x10/0x10 [ 235.041970][ C1] ? schedule+0x298/0x350 [ 235.041992][ C1] ? __pfx_lock_release+0x10/0x10 [ 235.042018][ C1] ? lock_acquire+0x2f/0xb0 [ 235.042039][ C1] ? schedule+0x1fd/0x350 [ 235.042059][ C1] schedule+0xe7/0x350 [ 235.042077][ C1] schedule_timeout+0x124/0x280 [ 235.042101][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 235.042126][ C1] ? __pfx_process_timeout+0x10/0x10 [ 235.042149][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 235.042167][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 235.042194][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 235.042219][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 235.042242][ C1] ? rcu_gp_init+0xc82/0x1630 [ 235.042266][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 235.042289][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.042310][ C1] rcu_gp_kthread+0x271/0x380 [ 235.042333][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.042358][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.042379][ C1] ? __kthread_parkme+0x148/0x220 [ 235.042397][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.042421][ C1] kthread+0x3af/0x750 [ 235.042442][ C1] ? __pfx_kthread+0x10/0x10 [ 235.042465][ C1] ? __pfx_kthread+0x10/0x10 [ 235.042486][ C1] ret_from_fork+0x45/0x80 [ 235.042507][ C1] ? __pfx_kthread+0x10/0x10 [ 235.042527][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.042556][ C1] [ 235.042563][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 235.042570][ C1] CPU: 1 UID: 0 PID: 2945 Comm: kworker/u8:6 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 235.042588][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.042599][ C1] Workqueue: events_unbound toggle_allocation_gate [ 235.042618][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 235.042643][ C1] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 44 f9 49 7e 65 8b 05 45 f9 49 7e a9 00 01 [ 235.042659][ C1] RSP: 0018:ffffc9000bdb7920 EFLAGS: 00000202 [ 235.042673][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add19a [ 235.042684][ C1] RDX: ffff888031242440 RSI: 0000000000000000 RDI: 0000000000000005 [ 235.042695][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 235.042705][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d41 [ 235.042716][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 235.042726][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 235.042744][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.042755][ C1] CR2: 0000001b2d61dff8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 235.042767][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.042777][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.042788][ C1] Call Trace: [ 235.042793][ C1] [ 235.042800][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 235.042819][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 235.042838][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 235.042864][ C1] ? timekeeping_advance+0x72e/0xa90 [ 235.042884][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 235.042904][ C1] ? __asan_memcpy+0x3c/0x60 [ 235.042936][ C1] ? rcu_is_watching+0x12/0xc0 [ 235.042957][ C1] ? update_process_times+0x178/0x2d0 [ 235.042988][ C1] ? __pfx_update_process_times+0x10/0x10 [ 235.043011][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 235.043030][ C1] ? update_wall_time+0x1c/0x40 [ 235.043053][ C1] ? tick_nohz_handler+0x376/0x530 [ 235.043073][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 235.043090][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 235.043114][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 235.043130][ C1] ? read_tsc+0x9/0x20 [ 235.043154][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 235.043181][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 235.043207][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 235.043225][ C1] [ 235.043231][ C1] [ 235.043238][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.043266][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 235.043285][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 235.043311][ C1] smp_call_function_many_cond+0x4c4/0x12c0 [ 235.043337][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 235.043354][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 235.043372][ C1] text_poke_bp_batch+0x22b/0x760 [ 235.043393][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 235.043413][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 235.043431][ C1] ? text_poke_queue+0xef/0x180 [ 235.043456][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 235.043483][ C1] text_poke_finish+0x30/0x40 [ 235.043500][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 235.043519][ C1] jump_label_update+0x1d7/0x400 [ 235.043542][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 235.043563][ C1] static_key_enable+0x1a/0x20 [ 235.043582][ C1] toggle_allocation_gate+0xfc/0x260 [ 235.043600][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 235.043617][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 235.043637][ C1] ? process_one_work+0x921/0x1ba0 [ 235.043659][ C1] ? lock_acquire+0x2f/0xb0 [ 235.043679][ C1] ? process_one_work+0x921/0x1ba0 [ 235.043704][ C1] process_one_work+0x9c5/0x1ba0 [ 235.043731][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 235.043753][ C1] ? __pfx_process_one_work+0x10/0x10 [ 235.043781][ C1] ? assign_work+0x1a0/0x250 [ 235.043805][ C1] worker_thread+0x6c8/0xf00 [ 235.043833][ C1] ? __kthread_parkme+0x148/0x220 [ 235.043850][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.043873][ C1] kthread+0x3af/0x750 [ 235.043893][ C1] ? __pfx_kthread+0x10/0x10 [ 235.043912][ C1] ? lock_acquire+0x2f/0xb0 [ 235.043937][ C1] ? __pfx_kthread+0x10/0x10 [ 235.043957][ C1] ret_from_fork+0x45/0x80 [ 235.043982][ C1] ? __pfx_kthread+0x10/0x10 [ 235.044002][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.044031][ C1] [ 375.907385][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [kworker/u8:6:2945] [ 375.907406][ C1] Modules linked in: [ 375.907415][ C1] irq event stamp: 4535876 [ 375.907420][ C1] hardirqs last enabled at (4535875): [] irqentry_exit+0x3b/0x90 [ 375.907448][ C1] hardirqs last disabled at (4535876): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 375.907469][ C1] softirqs last enabled at (4535874): [] handle_softirqs+0x5bb/0x8f0 [ 375.907496][ C1] softirqs last disabled at (4535853): [] __irq_exit_rcu+0x109/0x170 [ 375.907523][ C1] CPU: 1 UID: 0 PID: 2945 Comm: kworker/u8:6 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 375.907542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.907553][ C1] Workqueue: events_unbound toggle_allocation_gate [ 375.907571][ C1] RIP: 0010:write_comp_data+0x8b/0x90 [ 375.907595][ C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 375.907610][ C1] RSP: 0018:ffffc9000bdb7920 EFLAGS: 00000293 [ 375.907623][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add19a [ 375.907634][ C1] RDX: ffff888031242440 RSI: 0000000000000000 RDI: 0000000000000005 [ 375.907644][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 375.907654][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d41 [ 375.907664][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 375.907675][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 375.907691][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.907702][ C1] CR2: 0000001b2d61dff8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 375.907713][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.907722][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.907732][ C1] Call Trace: [ 375.907739][ C1] [ 375.907747][ C1] ? watchdog_timer_fn+0x570/0x7d0 [ 375.907765][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 375.907780][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 375.907804][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 375.907820][ C1] ? read_tsc+0x9/0x20 [ 375.907844][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 375.907870][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 375.907896][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 375.907912][ C1] [ 375.907918][ C1] [ 375.907924][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.907953][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 375.907972][ C1] ? write_comp_data+0x8b/0x90 [ 375.907994][ C1] smp_call_function_many_cond+0x4ea/0x12c0 [ 375.908021][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 375.908037][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 375.908055][ C1] text_poke_bp_batch+0x22b/0x760 [ 375.908075][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 375.908095][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 375.908113][ C1] ? text_poke_queue+0xef/0x180 [ 375.908143][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 375.908169][ C1] text_poke_finish+0x30/0x40 [ 375.908186][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 375.908205][ C1] jump_label_update+0x1d7/0x400 [ 375.908227][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 375.908248][ C1] static_key_enable+0x1a/0x20 [ 375.908266][ C1] toggle_allocation_gate+0xfc/0x260 [ 375.908284][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 375.908300][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 375.908320][ C1] ? process_one_work+0x921/0x1ba0 [ 375.908342][ C1] ? lock_acquire+0x2f/0xb0 [ 375.908362][ C1] ? process_one_work+0x921/0x1ba0 [ 375.908386][ C1] process_one_work+0x9c5/0x1ba0 [ 375.908414][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 375.908435][ C1] ? __pfx_process_one_work+0x10/0x10 [ 375.908462][ C1] ? assign_work+0x1a0/0x250 [ 375.908484][ C1] worker_thread+0x6c8/0xf00 [ 375.908511][ C1] ? __kthread_parkme+0x148/0x220 [ 375.908528][ C1] ? __pfx_worker_thread+0x10/0x10 [ 375.908549][ C1] kthread+0x3af/0x750 [ 375.908568][ C1] ? __pfx_kthread+0x10/0x10 [ 375.908586][ C1] ? lock_acquire+0x2f/0xb0 [ 375.908610][ C1] ? __pfx_kthread+0x10/0x10 [ 375.908629][ C1] ret_from_fork+0x45/0x80 [ 375.908648][ C1] ? __pfx_kthread+0x10/0x10 [ 375.908667][ C1] ret_from_fork_asm+0x1a/0x30 [ 375.908696][ C1] [ 375.908702][ C1] Sending NMI from CPU 1 to CPUs 0: [ 375.908725][ C0] NMI backtrace for cpu 0 [ 375.908731][ C0] CPU: 0 UID: 0 PID: 8669 Comm: syz.0.1246 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 375.908746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.908753][ C0] RIP: 0010:__lock_acquire+0x588/0x3c40 [ 375.908771][ C0] Code: 8b 15 14 24 6c 7e 85 d2 0f 84 15 0b 00 00 49 8d bd c0 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 fe 48 c1 ee 03 0f b6 14 16 <84> d2 74 09 80 fa 03 0f 8e 1c 36 00 00 41 8b 95 c0 0a 00 00 85 d2 [ 375.908782][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00000802 [ 375.908792][ C0] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffff888024b72f58 [ 375.908801][ C0] RDX: 0000000000000000 RSI: 1ffff1100496e5e0 RDI: ffff888024b72f00 [ 375.908809][ C0] RBP: dffffc0000000000 R08: 0000000000000002 R09: fffffbfff2dd8599 [ 375.908817][ C0] R10: ffffffff96ec2ccf R11: 0000000000000002 R12: ffff888024b72f79 [ 375.908826][ C0] R13: ffff888024b72440 R14: 0000000000000040 R15: ffff888024b72f80 [ 375.908834][ C0] FS: 00007f64f76406c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 375.908848][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.908856][ C0] CR2: 000000110c266982 CR3: 00000000757b0000 CR4: 00000000003526f0 [ 375.908883][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.908891][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.908899][ C0] Call Trace: [ 375.908903][ C0] [ 375.908908][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 375.908927][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 375.908943][ C0] ? nmi_handle+0x1ac/0x5d0 [ 375.908960][ C0] ? __lock_acquire+0x588/0x3c40 [ 375.908976][ C0] ? default_do_nmi+0x6a/0x160 [ 375.908994][ C0] ? exc_nmi+0x170/0x1e0 [ 375.909010][ C0] ? end_repeat_nmi+0xf/0x53 [ 375.909030][ C0] ? __lock_acquire+0x588/0x3c40 [ 375.909046][ C0] ? __lock_acquire+0x588/0x3c40 [ 375.909062][ C0] ? __lock_acquire+0x588/0x3c40 [ 375.909078][ C0] [ 375.909083][ C0] [ 375.909090][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 375.909106][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 375.909123][ C0] ? advance_sched+0x6d2/0xc60 [ 375.909143][ C0] lock_acquire.part.0+0x11b/0x380 [ 375.909159][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 375.909172][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 375.909189][ C0] ? rcu_is_watching+0x12/0xc0 [ 375.909203][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 375.909217][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 375.909230][ C0] ? lock_acquire+0x2f/0xb0 [ 375.909245][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 375.909258][ C0] ? __pfx_advance_sched+0x10/0x10 [ 375.909275][ C0] _raw_spin_lock_irq+0x36/0x50 [ 375.909287][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 375.909299][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 375.909319][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 375.909331][ C0] ? read_tsc+0x9/0x20 [ 375.909344][ C0] ? rcu_is_watching+0x12/0xc0 [ 375.909358][ C0] hrtimer_interrupt+0x392/0x8e0 [ 375.909374][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 375.909393][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 375.909406][ C0] [ 375.909410][ C0] [ 375.909415][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.909432][ C0] RIP: 0010:console_flush_all+0x9a4/0xc60 [ 375.909446][ C0] Code: 00 e8 70 01 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 9e 44 20 00 48 85 db 0f 85 55 01 00 00 e8 60 49 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 a5 5e 83 [ 375.909457][ C0] RSP: 0018:ffffc900030e6e10 EFLAGS: 00000246 [ 375.909467][ C0] RAX: ffffffff8eeabff8 RBX: 0000000000000000 RCX: ffffc9000bdb9000 [ 375.909475][ C0] RDX: 0000000000080000 RSI: ffffffff81999690 RDI: 0000000000000007 [ 375.909483][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 375.909491][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8eeabff8 [ 375.909498][ C0] R13: ffffffff8eeabfa0 R14: ffffc900030e6ea0 R15: dffffc0000000000 [ 375.909509][ C0] ? console_flush_all+0x9a0/0xc60 [ 375.909526][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 375.909538][ C0] ? find_held_lock+0x2d/0x110 [ 375.909553][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 375.909569][ C0] console_unlock+0xd9/0x210 [ 375.909581][ C0] ? __pfx_console_unlock+0x10/0x10 [ 375.909594][ C0] ? lock_acquire+0x2f/0xb0 [ 375.909609][ C0] ? vprintk_emit+0x638/0x6f0 [ 375.909622][ C0] vprintk_emit+0x424/0x6f0 [ 375.909635][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 375.909648][ C0] ? __pfx_lock_release+0x10/0x10 [ 375.909663][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 375.909679][ C0] _printk+0xc8/0x100 [ 375.909695][ C0] ? __pfx__printk+0x10/0x10 [ 375.909711][ C0] ? ___ratelimit+0x24c/0x570 [ 375.909725][ C0] ? __pfx____ratelimit+0x10/0x10 [ 375.909737][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 375.909752][ C0] __nla_validate_parse+0x753/0x2880 [ 375.909768][ C0] ? arch_stack_walk+0xa7/0x100 [ 375.909781][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 375.909797][ C0] __nla_parse+0x40/0x60 [ 375.909811][ C0] rtnl_dellink+0x195/0xaa0 [ 375.909828][ C0] ? __pfx_rtnl_dellink+0x10/0x10 [ 375.909855][ C0] ? cred_has_capability.isra.0+0x192/0x2f0 [ 375.909878][ C0] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 375.909897][ C0] ? find_held_lock+0x2d/0x110 [ 375.909910][ C0] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 375.909926][ C0] ? __pfx_lock_release+0x10/0x10 [ 375.909942][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 375.909958][ C0] ? __pfx_rtnl_dellink+0x10/0x10 [ 375.909972][ C0] rtnetlink_rcv_msg+0x95b/0xea0 [ 375.909989][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 375.910008][ C0] netlink_rcv_skb+0x16b/0x440 [ 375.910024][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 375.910040][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.910059][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 375.910076][ C0] netlink_unicast+0x53c/0x7f0 [ 375.910092][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 375.910109][ C0] netlink_sendmsg+0x8b8/0xd70 [ 375.910125][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.910143][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 375.910157][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 375.910173][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.910189][ C0] ___sys_sendmsg+0x135/0x1e0 [ 375.910206][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.910225][ C0] ? __pfx_lock_release+0x10/0x10 [ 375.910241][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 375.910257][ C0] ? __fget_files+0x206/0x3a0 [ 375.910271][ C0] __sys_sendmsg+0x16e/0x220 [ 375.910287][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.910303][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 375.910322][ C0] do_syscall_64+0xcd/0x250 [ 375.910338][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.910354][ C0] RIP: 0033:0x7f64f678d169 [ 375.910366][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.910377][ C0] RSP: 002b:00007f64f7640038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.910389][ C0] RAX: ffffffffffffffda RBX: 00007f64f69a5fa0 RCX: 00007f64f678d169 [ 375.910397][ C0] RDX: 0000000000040044 RSI: 0000400000000200 RDI: 0000000000000003 [ 375.910405][ C0] RBP: 00007f64f680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 375.910413][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.910420][ C0] R13: 0000000000000000 R14: 00007f64f69a5fa0 R15: 00007ffe6fbe0668 [ 375.910433][ C0] [ 375.910722][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 375.910734][ C1] CPU: 1 UID: 0 PID: 2945 Comm: kworker/u8:6 Tainted: G L 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 375.910755][ C1] Tainted: [L]=SOFTLOCKUP [ 375.910761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.910772][ C1] Workqueue: events_unbound toggle_allocation_gate [ 375.910788][ C1] Call Trace: [ 375.910795][ C1] [ 375.910802][ C1] dump_stack_lvl+0x3d/0x1f0 [ 375.910822][ C1] panic+0x71d/0x800 [ 375.910840][ C1] ? __pfx_panic+0x10/0x10 [ 375.910856][ C1] ? __pfx__printk+0x10/0x10 [ 375.910881][ C1] ? irq_work_claim+0x76/0xa0 [ 375.910905][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.910925][ C1] ? irq_work_queue+0x2a/0x80 [ 375.910948][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 375.910963][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 375.910982][ C1] watchdog_timer_fn+0x603/0x7d0 [ 375.910999][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 375.911014][ C1] __hrtimer_run_queues+0x5fb/0xae0 [ 375.911038][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 375.911053][ C1] ? read_tsc+0x9/0x20 [ 375.911077][ C1] hrtimer_interrupt+0x392/0x8e0 [ 375.911104][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 375.911135][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 375.911154][ C1] [ 375.911159][ C1] [ 375.911166][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.911189][ C1] RIP: 0010:write_comp_data+0x8b/0x90 [ 375.911210][ C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 375.911225][ C1] RSP: 0018:ffffc9000bdb7920 EFLAGS: 00000293 [ 375.911238][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add19a [ 375.911249][ C1] RDX: ffff888031242440 RSI: 0000000000000000 RDI: 0000000000000005 [ 375.911259][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 375.911269][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d41 [ 375.911280][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 375.911297][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 375.911318][ C1] smp_call_function_many_cond+0x4ea/0x12c0 [ 375.911344][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 375.911360][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 375.911378][ C1] text_poke_bp_batch+0x22b/0x760 [ 375.911399][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 375.911418][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 375.911436][ C1] ? text_poke_queue+0xef/0x180 [ 375.911461][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 375.911487][ C1] text_poke_finish+0x30/0x40 [ 375.911504][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 375.911523][ C1] jump_label_update+0x1d7/0x400 [ 375.911545][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 375.911566][ C1] static_key_enable+0x1a/0x20 [ 375.911584][ C1] toggle_allocation_gate+0xfc/0x260 [ 375.911602][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 375.911619][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 375.911637][ C1] ? process_one_work+0x921/0x1ba0 [ 375.911659][ C1] ? lock_acquire+0x2f/0xb0 [ 375.911678][ C1] ? process_one_work+0x921/0x1ba0 [ 375.911702][ C1] process_one_work+0x9c5/0x1ba0 [ 375.911731][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 375.911752][ C1] ? __pfx_process_one_work+0x10/0x10 [ 375.911780][ C1] ? assign_work+0x1a0/0x250 [ 375.911802][ C1] worker_thread+0x6c8/0xf00 [ 375.911830][ C1] ? __kthread_parkme+0x148/0x220 [ 375.911847][ C1] ? __pfx_worker_thread+0x10/0x10 [ 375.911869][ C1] kthread+0x3af/0x750 [ 375.911888][ C1] ? __pfx_kthread+0x10/0x10 [ 375.911907][ C1] ? lock_acquire+0x2f/0xb0 [ 375.911931][ C1] ? __pfx_kthread+0x10/0x10 [ 375.911951][ C1] ret_from_fork+0x45/0x80 [ 375.911971][ C1] ? __pfx_kthread+0x10/0x10 [ 375.911990][ C1] ret_from_fork_asm+0x1a/0x30 [ 375.912019][ C1] [ 376.992452][ C1] Shutting down cpus with NMI [ 376.992650][ C1] Kernel Offset: disabled